# Debian 13: Use Private NTP Server

### Status

For hosts in isolated VLANS, we provide access to a local NTP server, via firewall rules.

The local NTP server is at: 192.168.1.12.

See this page for the local NTP server: [Local GPS NTP Time Server](https://wiki.galaxydump.com/link/456)

The main router includes a floating firewall rule that forwards UDP port 123 requests to the local NTP server.  
It includes most of the VLANS. But can be updated to include other VLANs.

### Configuration

Here are steps to configure an isolated Debian 13 VM to use the local NTP server.

<p class="callout info">NOTE: Debian 13 uses a service called, timesyncd.  
Timesyncd is not as precise as true NTP.  
But, it is good enough.</p>

Timesyncd is installed by default.  
We will use it.

You can verify timesyncd is running with this:

```bash
timedatectl show-timesync --all
```

[![image.png](https://wiki.galaxydump.com/uploads/images/gallery/2026-04/scaled-1680-/SsHARVIk8L0aUT0v-image.png)](https://wiki.galaxydump.com/uploads/images/gallery/2026-04/SsHARVIk8L0aUT0v-image.png)

Edit the config file to listen to the local NTP server.  
Open it with:

```bash
sudo nano /etc/systemd/timesyncd.conf
```

It will be mostly commented out, by default.  
This is because the service is using config defaults, or compiled defaults.

Update it to point to the local ntp server, like this:

[![image.png](https://wiki.galaxydump.com/uploads/images/gallery/2026-04/scaled-1680-/niKhbMWl4lYwhx5g-image.png)](https://wiki.galaxydump.com/uploads/images/gallery/2026-04/niKhbMWl4lYwhx5g-image.png)

Close and save the config.

Once saved, restart the timesyncd service with:

```bash
sudo systemctl restart systemd-timesyncd
```

You can check the service status with this:

```bash
timedatectl show-timesync --all
```