Add option to enable remote monitoring

README.md

@@ -140,6 +140,12 @@ chrony will be configured to:
 > be reported using the clients command in chronyc. This option also effectively disables server support
 > for the NTP interleaved mode.
 
+### Remote monitoring
+
+If you'd like to enable remote monitoring, you can pass the environment variable `ALLOW_REMOTE_MON` set to
+`true` to the container. This will let you run `chronyc` commands from another host.
+
+You can use this to check the status of the NTP server without the need to run docker commands.
 
 ## Logging
 

assets/startup.sh

@@ -65,6 +65,17 @@ for N in $NTP_SERVERS; do
   fi
 done
 
+# Remote access to the chrony server
+if [ "${ALLOW_REMOTE_MON:-false}" = true ]; then
+  {
+    echo
+    echo "# allow remote monitoring"
+    echo "cmdallow all"
+    echo "bindcmdaddress 0.0.0.0"
+    echo "bindcmdaddress ::"
+  } >> ${CHRONY_CONF_FILE}
+fi
+
 # final bits for the config file
 {
   echo

docker-compose.yml

@@ -14,3 +14,4 @@ services:
 #      - TZ=America/Vancouver
 #      - NOCLIENTLOG=true
 #      - ENABLE_NTS=true
+#      - ALLOW_REMOTE_MON=true

run.sh

@@ -20,6 +20,7 @@ function start_container() {
 	      --env=ENABLE_NTS=${ENABLE_NTS}       \
 	      --env=NOCLIENTLOG=${NOCLIENTLOG}     \
               --env=LOG_LEVEL=${LOG_LEVEL}         \
+              --env=ALLOW_REMOTE_MON=${ALLOW_REMOTE_MON}  \
               --read-only=true                     \
               --tmpfs=/etc/chrony:rw,mode=1750     \
               --tmpfs=/run/chrony:rw,mode=1750     \

vars

@@ -26,3 +26,6 @@ LOG_LEVEL=0
 
 # (optional) additional docker run options you may want
 DOCKER_OPTS=""
+
+# (optional) allow remote access to chronyd
+ALLOW_REMOTE_MON=false