Title here
Summary here
We use ntpsec to handle our time sync needs across our infra.
Our current deployment is based around the ntp Puppetlabs module, which is built around Debian Bookworm still as of writing. Thus, it assumes the daemon is the classic NTP daemon, which is not true in Debian Trixie, which uses ntpsec instead.
Fortunately, we only need to change a few of the defaults for ntpsec support. We should monitor development of the module upstream in case these modifications are no longer needed in a future release.