fix: use client-only mode by default

defaults/main.yml

@@ -4,6 +4,11 @@ chrony_server: []
 
 chrony_allow: []
 
+# @var chrony_port:description: >
+# The port option can be set to 0 to make chrony daemon to never open any listening port
+# for server operation and to operate strictly in a client-only mode.
+# @end
+chrony_port: 0
 chrony_ntsdumpdir: /var/lib/chrony
 
 chrony_logdir: /var/log/chrony

templates/etc/chrony.conf.j2

@@ -7,6 +7,8 @@ pool {{ chrony_pool }}
 server {{ item }}
 {% endfor %}
 
+port {{ chrony_port }}
+
 sourcedir /run/chrony-dhcp
 driftfile /var/lib/chrony/drift
 makestep 1.0 3