ntpd-rs, a memory safe NTP time server and client written in Rust that keeps this machine in sync and serves accurate time to your network.
ntpd-rs is a modern, memory safe implementation of the Network Time Protocol from the Pendulum project. It is a full NTP client and server in one: it disciplines this machine's own clock against the public NTP pool, and it serves accurate time to the other machines on your network, so you can run your own internal time source instead of relying on external servers for every device. It is fully capable of Network Time Security for authenticated, tamper resistant time. There is no database and no web console; the daemon runs as an unprivileged systemd service and is administered with a command line tool over a local only observation socket.
The cloudimg image is hardened and fully patched with ntpd-rs preconfigured as a server and client and running as a systemd service. It ships secure by default with no known credentials: serving network time needs none, the observation and control interface is bound to a local unix socket so it is never network reachable, and the Prometheus metrics port is left disabled. Only the NTP service port and SSH are exposed, first boot records this instance's reachable address to a root only file, and every instance is backed by a paired deploy guide and 24/7 cloudimg support.