{
  services.chrony = {
    enable = true;
    enableNTS = true;
    servers = [
      "ke.sectime.org" # https://sectime.org/use
      "time.cloudflare.com"
    ];
  };
}