diff --git a/templates/chrony.conf.j2 b/templates/chrony.conf.j2
index 1c8db31..a894323 100644
--- a/templates/chrony.conf.j2
+++ b/templates/chrony.conf.j2
@@ -32,7 +32,7 @@ rtcsync
 allow {{ client }}
 {% endfor %}
 {% else %}
-#allow 192.168/16
+#allow 192.168.0.0/16
 {% endif %}
 
 # Listen for commands only on localhost.
@@ -47,6 +47,9 @@ cmdallow ::1
 # Specify file containing keys for NTP authentication.
 keyfile /etc/chrony.keys
 
+# Get TAI-UTC offset and leap seconds from the system tz database.
+leapsectz right/UTC
+
 # Disable logging of client accesses.
 #noclientlog
 
@@ -55,5 +58,6 @@ logchange 0.5
 
 # Specify directory for log files.
 logdir /var/log/chrony
+
 # Select which information is logged.
 #log measurements statistics tracking