diff --git a/ntp/files/ntp.conf b/ntp/files/ntp.conf
index 7b23f00..e19c49d 100644
--- a/ntp/files/ntp.conf
+++ b/ntp/files/ntp.conf
@@ -33,7 +33,7 @@
 
 # Allow restrict machines to synchronize with this ntp server
 {%- for r in server.get('restrict', {}) %}
-restrict {{ r.subnet }} mask {{ r.mask }} {{ r.options|default('nomodify notrap') }}
+restrict {{ r.subnet }} mask {{ r.mask }} {{ r.options|default('nomodify notrap nopeer') }}
 {%- endfor %}
 
 # Exchange time with everybody, but don't allow configuration.