{
  services.chrony = {
    enable = true;

    extraConfig = ''
      allow 10.32.47.0/24
    '';
  };

  networking.firewall.allowedUDPPorts = [
    123
  ];
}