enable NTP

install.sh

@@ -93,6 +93,7 @@ systemctl enable fail2ban
 # Allow web through the firewall
 systemctl enable firewalld
 systemctl start firewalld
+firewall-cmd --permanent --zone=public --add-service=ssh
 firewall-cmd --permanent --zone=public --add-service=http 
 firewall-cmd --permanent --zone=public --add-service=https
 firewall-cmd --permanent --zone=public --add-service=8080/tcp  # port 8080 for dev branch of site
@@ -101,6 +102,9 @@ firewall-cmd --reload
 # Set the system timezone to UTC
 timedatectl set-timezone UTC
 
+# And enable NTP, since for some reason it's not on by default..
+timedatectl set-ntp true
+
 # Install haveged to stop crypto stuff from hanging so much
 # when it depletes /dev/random..! (The bcrypt library on PHP
 # has a tendency to do this, which causes the occasional