refine timesyncd rule

common/tooling/opensnitch/default.nix

@@ -291,7 +291,18 @@ in
               {
                 type ="regexp";
                 operand = "dest.port";
-                data = "123|37";
+                data = "123|37|53";
+              }
+              {
+                type = "regexp";
+                sensitive = false;
+                operand = "dest.host";
+                data = ".*\.nixos\.pool\.ntp\.org";
+              }
+                            {
+                type = "simple";
+                operand = "user.id";
+                data = "154";
               }
             ];
           };