diff --git a/REFERENCE.md b/REFERENCE.md
index d8838ce..b6cea39 100644
--- a/REFERENCE.md
+++ b/REFERENCE.md
@@ -18,16 +18,13 @@
 
 ### Functions
 
-#### Public Functions
-
-
 #### Private Functions
 
 * `chrony::server_array_to_hash`: Function to normalise servers/pools/peers
 
 ### Data types
 
-* [`Chrony::Servers`](#chronyservers): Type for the `servers`, `pools` and `peers` parameters.
+* [`Chrony::Servers`](#Chrony--Servers): Type for the `servers`, `pools` and `peers` parameters.
 
 ## Classes
 
@@ -129,81 +126,81 @@ class { 'chrony':
 
 The following parameters are available in the `chrony` class:
 
-* [`bindaddress`](#bindaddress)
-* [`bindcmdaddress`](#bindcmdaddress)
-* [`initstepslew`](#initstepslew)
-* [`sourcedir`](#sourcedir)
-* [`confdir`](#confdir)
-* [`cmdacl`](#cmdacl)
-* [`cmdport`](#cmdport)
-* [`commandkey`](#commandkey)
-* [`chrony_password`](#chrony_password)
-* [`config`](#config)
-* [`config_template`](#config_template)
-* [`config_keys`](#config_keys)
-* [`config_keys_manage`](#config_keys_manage)
-* [`config_keys_template`](#config_keys_template)
-* [`config_keys_owner`](#config_keys_owner)
-* [`config_keys_group`](#config_keys_group)
-* [`config_keys_mode`](#config_keys_mode)
-* [`keys`](#keys)
-* [`driftfile`](#driftfile)
-* [`local_stratum`](#local_stratum)
-* [`ntpsigndsocket`](#ntpsigndsocket)
-* [`stratumweight`](#stratumweight)
-* [`log_options`](#log_options)
-* [`logbanner`](#logbanner)
-* [`logchange`](#logchange)
-* [`package_ensure`](#package_ensure)
-* [`package_name`](#package_name)
-* [`package_source`](#package_source)
-* [`package_provider`](#package_provider)
-* [`peers`](#peers)
-* [`servers`](#servers)
-* [`pools`](#pools)
-* [`minsources`](#minsources)
-* [`minsamples`](#minsamples)
-* [`refclocks`](#refclocks)
-* [`makestep_seconds`](#makestep_seconds)
-* [`makestep_updates`](#makestep_updates)
-* [`queryhosts`](#queryhosts)
-* [`denyqueryhosts`](#denyqueryhosts)
-* [`port`](#port)
-* [`service_enable`](#service_enable)
-* [`service_ensure`](#service_ensure)
-* [`service_manage`](#service_manage)
-* [`service_name`](#service_name)
-* [`wait_enable`](#wait_enable)
-* [`wait_ensure`](#wait_ensure)
-* [`wait_manage`](#wait_manage)
-* [`wait_name`](#wait_name)
-* [`smoothtime`](#smoothtime)
-* [`mailonchange`](#mailonchange)
-* [`threshold`](#threshold)
-* [`lock_all`](#lock_all)
-* [`sched_priority`](#sched_priority)
-* [`leapsecmode`](#leapsecmode)
-* [`leapsectz`](#leapsectz)
-* [`maxdistance`](#maxdistance)
-* [`maxslewrate`](#maxslewrate)
-* [`ntsserverkey`](#ntsserverkey)
-* [`ntsservercert`](#ntsservercert)
-* [`ntsport`](#ntsport)
-* [`maxntsconnections`](#maxntsconnections)
-* [`ntsprocesses`](#ntsprocesses)
-* [`ntsdumpdir`](#ntsdumpdir)
-* [`ntsntpserver`](#ntsntpserver)
-* [`ntsrotate`](#ntsrotate)
-* [`clientlog`](#clientlog)
-* [`clientloglimit`](#clientloglimit)
-* [`rtcsync`](#rtcsync)
-* [`rtconutc`](#rtconutc)
-* [`hwtimestamps`](#hwtimestamps)
-* [`dumpdir`](#dumpdir)
-* [`maxupdateskew`](#maxupdateskew)
-* [`acquisitionport`](#acquisitionport)
-
-##### <a name="bindaddress"></a>`bindaddress`
+* [`bindaddress`](#-chrony--bindaddress)
+* [`bindcmdaddress`](#-chrony--bindcmdaddress)
+* [`initstepslew`](#-chrony--initstepslew)
+* [`sourcedir`](#-chrony--sourcedir)
+* [`confdir`](#-chrony--confdir)
+* [`cmdacl`](#-chrony--cmdacl)
+* [`cmdport`](#-chrony--cmdport)
+* [`commandkey`](#-chrony--commandkey)
+* [`chrony_password`](#-chrony--chrony_password)
+* [`config`](#-chrony--config)
+* [`config_template`](#-chrony--config_template)
+* [`config_keys`](#-chrony--config_keys)
+* [`config_keys_manage`](#-chrony--config_keys_manage)
+* [`config_keys_template`](#-chrony--config_keys_template)
+* [`config_keys_owner`](#-chrony--config_keys_owner)
+* [`config_keys_group`](#-chrony--config_keys_group)
+* [`config_keys_mode`](#-chrony--config_keys_mode)
+* [`keys`](#-chrony--keys)
+* [`driftfile`](#-chrony--driftfile)
+* [`local_stratum`](#-chrony--local_stratum)
+* [`ntpsigndsocket`](#-chrony--ntpsigndsocket)
+* [`stratumweight`](#-chrony--stratumweight)
+* [`log_options`](#-chrony--log_options)
+* [`logbanner`](#-chrony--logbanner)
+* [`logchange`](#-chrony--logchange)
+* [`package_ensure`](#-chrony--package_ensure)
+* [`package_name`](#-chrony--package_name)
+* [`package_source`](#-chrony--package_source)
+* [`package_provider`](#-chrony--package_provider)
+* [`peers`](#-chrony--peers)
+* [`servers`](#-chrony--servers)
+* [`pools`](#-chrony--pools)
+* [`minsources`](#-chrony--minsources)
+* [`minsamples`](#-chrony--minsamples)
+* [`refclocks`](#-chrony--refclocks)
+* [`makestep_seconds`](#-chrony--makestep_seconds)
+* [`makestep_updates`](#-chrony--makestep_updates)
+* [`queryhosts`](#-chrony--queryhosts)
+* [`denyqueryhosts`](#-chrony--denyqueryhosts)
+* [`port`](#-chrony--port)
+* [`service_enable`](#-chrony--service_enable)
+* [`service_ensure`](#-chrony--service_ensure)
+* [`service_manage`](#-chrony--service_manage)
+* [`service_name`](#-chrony--service_name)
+* [`wait_enable`](#-chrony--wait_enable)
+* [`wait_ensure`](#-chrony--wait_ensure)
+* [`wait_manage`](#-chrony--wait_manage)
+* [`wait_name`](#-chrony--wait_name)
+* [`smoothtime`](#-chrony--smoothtime)
+* [`mailonchange`](#-chrony--mailonchange)
+* [`threshold`](#-chrony--threshold)
+* [`lock_all`](#-chrony--lock_all)
+* [`sched_priority`](#-chrony--sched_priority)
+* [`leapsecmode`](#-chrony--leapsecmode)
+* [`leapsectz`](#-chrony--leapsectz)
+* [`maxdistance`](#-chrony--maxdistance)
+* [`maxslewrate`](#-chrony--maxslewrate)
+* [`ntsserverkey`](#-chrony--ntsserverkey)
+* [`ntsservercert`](#-chrony--ntsservercert)
+* [`ntsport`](#-chrony--ntsport)
+* [`maxntsconnections`](#-chrony--maxntsconnections)
+* [`ntsprocesses`](#-chrony--ntsprocesses)
+* [`ntsdumpdir`](#-chrony--ntsdumpdir)
+* [`ntsntpserver`](#-chrony--ntsntpserver)
+* [`ntsrotate`](#-chrony--ntsrotate)
+* [`clientlog`](#-chrony--clientlog)
+* [`clientloglimit`](#-chrony--clientloglimit)
+* [`rtcsync`](#-chrony--rtcsync)
+* [`rtconutc`](#-chrony--rtconutc)
+* [`hwtimestamps`](#-chrony--hwtimestamps)
+* [`dumpdir`](#-chrony--dumpdir)
+* [`maxupdateskew`](#-chrony--maxupdateskew)
+* [`acquisitionport`](#-chrony--acquisitionport)
+
+##### <a name="-chrony--bindaddress"></a>`bindaddress`
 
 Data type: `Array[Stdlib::IP::Address]`
 
@@ -212,7 +209,7 @@ Listens on all addresses if left empty.
 
 Default value: `[]`
 
-##### <a name="bindcmdaddress"></a>`bindcmdaddress`
+##### <a name="-chrony--bindcmdaddress"></a>`bindcmdaddress`
 
 Data type: `Array[String]`
 
@@ -220,32 +217,32 @@ Array of addresses of interfaces on which chronyd will listen for monitoring com
 
 Default value: `['127.0.0.1', '::1']`
 
-##### <a name="initstepslew"></a>`initstepslew`
+##### <a name="-chrony--initstepslew"></a>`initstepslew`
 
 Data type: `Optional[String]`
 
 Allow chronyd to make a rapid measurement of the system clock error at boot time,
 and to correct the system clock by stepping before normal operation begins.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="sourcedir"></a>`sourcedir`
+##### <a name="-chrony--sourcedir"></a>`sourcedir`
 
 Data type: `Optional[Stdlib::Absolutepath]`
 
 The confdir directive includes configuration files with the .conf suffix from a directory.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="confdir"></a>`confdir`
+##### <a name="-chrony--confdir"></a>`confdir`
 
 Data type: `Optional[Stdlib::Absolutepath]`
 
 The sourcedir directive is identical to the confdir directive, except the configuration files have the .sources suffix, they can only specify NTP sources.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="cmdacl"></a>`cmdacl`
+##### <a name="-chrony--cmdacl"></a>`cmdacl`
 
 Data type: `Array[String]`
 
@@ -257,16 +254,16 @@ details).
 
 Default value: `[]`
 
-##### <a name="cmdport"></a>`cmdport`
+##### <a name="-chrony--cmdport"></a>`cmdport`
 
 Data type: `Optional[Stdlib::Port]`
 
 The cmdport directive allows the port that is used for run-time monitoring (via the chronyc program)
 to be altered from its default (323).
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="commandkey"></a>`commandkey`
+##### <a name="-chrony--commandkey"></a>`commandkey`
 
 Data type: `NotUndef`
 
@@ -274,7 +271,7 @@ This sets the key ID used by chronyc to authenticate to chronyd.
 
 Default value: `0`
 
-##### <a name="chrony_password"></a>`chrony_password`
+##### <a name="-chrony--chrony_password"></a>`chrony_password`
 
 Data type: `Variant[Sensitive[String[1]], String[1]]`
 
@@ -284,7 +281,7 @@ By default a short fixed string is used. If set explicitly to
 
 Default value: `'xyzzy'`
 
-##### <a name="config"></a>`config`
+##### <a name="-chrony--config"></a>`config`
 
 Data type: `Stdlib::Unixpath`
 
@@ -292,7 +289,7 @@ This sets the file to write chrony configuration into.
 
 Default value: `'/etc/chrony/chrony.conf'`
 
-##### <a name="config_template"></a>`config_template`
+##### <a name="-chrony--config_template"></a>`config_template`
 
 Data type: `String[1]`
 
@@ -300,7 +297,7 @@ This determines which template puppet should use for the chrony configuration.
 
 Default value: `'chrony/chrony.conf.epp'`
 
-##### <a name="config_keys"></a>`config_keys`
+##### <a name="-chrony--config_keys"></a>`config_keys`
 
 Data type: `Variant[Stdlib::Unixpath,String[0,0]]`
 
@@ -308,15 +305,15 @@ This sets the file to write chrony keys into. Set to '' to remove `keyfile` attr
 
 Default value: `'/etc/chrony/chrony.keys'`
 
-##### <a name="config_keys_manage"></a>`config_keys_manage`
+##### <a name="-chrony--config_keys_manage"></a>`config_keys_manage`
 
 Data type: `Boolean`
 
 Determines whether puppet will manage the content of the keys file after it has been created for the first time.
 
-Default value: ``true``
+Default value: `true`
 
-##### <a name="config_keys_template"></a>`config_keys_template`
+##### <a name="-chrony--config_keys_template"></a>`config_keys_template`
 
 Data type: `String[1]`
 
@@ -324,7 +321,7 @@ This determines which template puppet should use for the chrony key file.
 
 Default value: `'chrony/chrony.keys.epp'`
 
-##### <a name="config_keys_owner"></a>`config_keys_owner`
+##### <a name="-chrony--config_keys_owner"></a>`config_keys_owner`
 
 Data type: `Variant[Integer[0],String[1]]`
 
@@ -332,7 +329,7 @@ Specify unix owner of chrony keys file, defaults to 0.
 
 Default value: `0`
 
-##### <a name="config_keys_group"></a>`config_keys_group`
+##### <a name="-chrony--config_keys_group"></a>`config_keys_group`
 
 Data type: `Variant[Integer[0],String[1]]`
 
@@ -340,7 +337,7 @@ Specify unix group of chrony keys files, defaults to 0 on ArchLinux and chrony o
 
 Default value: `0`
 
-##### <a name="config_keys_mode"></a>`config_keys_mode`
+##### <a name="-chrony--config_keys_mode"></a>`config_keys_mode`
 
 Data type: `Stdlib::Filemode`
 
@@ -348,7 +345,7 @@ Specify unix mode of chrony keys files, defaults to 0644 on ArchLinux and 0640 o
 
 Default value: `'0640'`
 
-##### <a name="keys"></a>`keys`
+##### <a name="-chrony--keys"></a>`keys`
 
 Data type: `Array[String[1]]`
 
@@ -356,7 +353,7 @@ An array of key lines.  These are printed as-is into the chrony key file.
 
 Default value: `[]`
 
-##### <a name="driftfile"></a>`driftfile`
+##### <a name="-chrony--driftfile"></a>`driftfile`
 
 Data type: `Stdlib::Unixpath`
 
@@ -364,7 +361,7 @@ A file for chrony to record clock drift in.
 
 Default value: `'/var/lib/chrony/drift'`
 
-##### <a name="local_stratum"></a>`local_stratum`
+##### <a name="-chrony--local_stratum"></a>`local_stratum`
 
 Data type: `Variant[Boolean[false],Integer[1,15]]`
 
@@ -374,15 +371,15 @@ chrony configuration.
 
 Default value: `10`
 
-##### <a name="ntpsigndsocket"></a>`ntpsigndsocket`
+##### <a name="-chrony--ntpsigndsocket"></a>`ntpsigndsocket`
 
 Data type: `Optional[Stdlib::Unixpath]`
 
 This sets the location of the Samba ntp_signd socket when it is running as a Domain Controller (DC).
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="stratumweight"></a>`stratumweight`
+##### <a name="-chrony--stratumweight"></a>`stratumweight`
 
 Data type: `Optional[Numeric]`
 
@@ -390,25 +387,25 @@ Sets how much distance should be added per stratum to the synchronisation distan
 selects the synchronisation source from available sources.
 When not set, chronyd's default will be used, which since version 2.0 of chrony, is 0.001 seconds.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="log_options"></a>`log_options`
+##### <a name="-chrony--log_options"></a>`log_options`
 
 Data type: `Optional[String[1]]`
 
 Specify which information is to be logged.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="logbanner"></a>`logbanner`
+##### <a name="-chrony--logbanner"></a>`logbanner`
 
 Data type: `Optional[Integer[0]]`
 
 Specify how often the log banner is placed in the logfile.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="logchange"></a>`logchange`
+##### <a name="-chrony--logchange"></a>`logchange`
 
 Data type: `Float`
 
@@ -418,7 +415,7 @@ command of chronyc are logged.
 
 Default value: `0.5`
 
-##### <a name="package_ensure"></a>`package_ensure`
+##### <a name="-chrony--package_ensure"></a>`package_ensure`
 
 Data type: `String[1]`
 
@@ -427,7 +424,7 @@ chrony package to be installed.
 
 Default value: `'present'`
 
-##### <a name="package_name"></a>`package_name`
+##### <a name="-chrony--package_name"></a>`package_name`
 
 Data type: `String[1]`
 
@@ -435,25 +432,25 @@ This determines the name of the package to install.
 
 Default value: `'chrony'`
 
-##### <a name="package_source"></a>`package_source`
+##### <a name="-chrony--package_source"></a>`package_source`
 
 Data type: `Optional[String]`
 
 Source for the package when not wanting to install from a package repository.  This is required if
 [`package_provider`](#package_provider) is set to `rpm` or `dpkg`.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="package_provider"></a>`package_provider`
+##### <a name="-chrony--package_provider"></a>`package_provider`
 
 Data type: `Optional[String]`
 
 Override the default package provider with a specific backend to use when installing the chrony package.
 Also see [`package_source`](#package_source).
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="peers"></a>`peers`
+##### <a name="-chrony--peers"></a>`peers`
 
 Data type: `Chrony::Servers`
 
@@ -462,7 +459,7 @@ It can be an array of peers or a hash of peers with their respective options.
 
 Default value: `[]`
 
-##### <a name="servers"></a>`servers`
+##### <a name="-chrony--servers"></a>`servers`
 
 Data type: `Chrony::Servers`
 
@@ -470,14 +467,18 @@ This selects the servers to use for NTP servers.  It can be an array of servers
 or a hash of servers to their respective options. If an array is used, `iburst` will be configured for each server.
 If you don't want to use `iburst`, use a hash instead.
 
-Default value: `{
+Default value:
+
+```puppet
+{
     '0.pool.ntp.org' => ['iburst'],
     '1.pool.ntp.org' => ['iburst'],
     '2.pool.ntp.org' => ['iburst'],
     '3.pool.ntp.org' => ['iburst'],
-  }`
+  }
+```
 
-##### <a name="pools"></a>`pools`
+##### <a name="-chrony--pools"></a>`pools`
 
 Data type: `Chrony::Servers`
 
@@ -487,24 +488,24 @@ See [pool](https://chrony.tuxfamily.org/doc/3.4/chrony.conf.html#pool)
 
 Default value: `{}`
 
-##### <a name="minsources"></a>`minsources`
+##### <a name="-chrony--minsources"></a>`minsources`
 
 Data type: `Optional[Integer[1]]`
 
 Sets the minimum number of sources that need to be considered as selectable in the source selection algorithm
 before the local clock is updated.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="minsamples"></a>`minsamples`
+##### <a name="-chrony--minsamples"></a>`minsamples`
 
 Data type: `Optional[Integer[1]]`
 
 Specifies the minimum number of readings kept for tracking of the NIC clock.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="refclocks"></a>`refclocks`
+##### <a name="-chrony--refclocks"></a>`refclocks`
 
 Data type: `Array`
 
@@ -521,7 +522,7 @@ refclocks => { 'PPS' => [ '/dev/pps0 lock NMEA refid GPS',
 
 Default value: `[]`
 
-##### <a name="makestep_seconds"></a>`makestep_seconds`
+##### <a name="-chrony--makestep_seconds"></a>`makestep_seconds`
 
 Data type: `Numeric`
 
@@ -532,7 +533,7 @@ Also see [`makestep_updates`](#makestep_updates).
 
 Default value: `10`
 
-##### <a name="makestep_updates"></a>`makestep_updates`
+##### <a name="-chrony--makestep_updates"></a>`makestep_updates`
 
 Data type: `Integer`
 
@@ -543,24 +544,24 @@ Also see [`makestep_seconds`](#makestep_seconds).
 
 Default value: `3`
 
-##### <a name="queryhosts"></a>`queryhosts`
+##### <a name="-chrony--queryhosts"></a>`queryhosts`
 
-Data type: `Array[String[1]]`
+Data type: `Array[String[0]]`
 
 This adds the networks, hosts that are allowed to query the daemon.
 
 Default value: `[]`
 
-##### <a name="denyqueryhosts"></a>`denyqueryhosts`
+##### <a name="-chrony--denyqueryhosts"></a>`denyqueryhosts`
 
-Data type: `Array[String[1]]`
+Data type: `Array[String[0]]`
 
 Similar to queryhosts, except that it denies NTP client access to a particular subnet or host,
 rather than allowing it.
 
 Default value: `[]`
 
-##### <a name="port"></a>`port`
+##### <a name="-chrony--port"></a>`port`
 
 Data type: `Optional[Stdlib::Port]`
 
@@ -568,17 +569,17 @@ Port the service should listen on. Module default is `undef` which means that po
 isn't added to chrony.conf, and chrony listens to the default ntp port 123 if
 `queryhosts` is used.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="service_enable"></a>`service_enable`
+##### <a name="-chrony--service_enable"></a>`service_enable`
 
 Data type: `Boolean`
 
 This determines if the service should be enabled at boot.
 
-Default value: ``true``
+Default value: `true`
 
-##### <a name="service_ensure"></a>`service_ensure`
+##### <a name="-chrony--service_ensure"></a>`service_ensure`
 
 Data type: `Stdlib::Ensure::Service`
 
@@ -586,15 +587,15 @@ This determines if the service should be running or not.
 
 Default value: `'running'`
 
-##### <a name="service_manage"></a>`service_manage`
+##### <a name="-chrony--service_manage"></a>`service_manage`
 
 Data type: `Boolean`
 
 This selects if puppet should manage the service in the first place.
 
-Default value: ``true``
+Default value: `true`
 
-##### <a name="service_name"></a>`service_name`
+##### <a name="-chrony--service_name"></a>`service_name`
 
 Data type: `String[1]`
 
@@ -602,15 +603,15 @@ This selects the name of the chrony service for puppet to manage.
 
 Default value: `'chronyd'`
 
-##### <a name="wait_enable"></a>`wait_enable`
+##### <a name="-chrony--wait_enable"></a>`wait_enable`
 
 Data type: `Boolean`
 
 This determines if the chrony-wait service should be enabled at boot.
 
-Default value: ``false``
+Default value: `false`
 
-##### <a name="wait_ensure"></a>`wait_ensure`
+##### <a name="-chrony--wait_ensure"></a>`wait_ensure`
 
 Data type: `Stdlib::Ensure::Service`
 
@@ -618,15 +619,15 @@ This determines if the chrony-wait service should be running or not.
 
 Default value: `'stopped'`
 
-##### <a name="wait_manage"></a>`wait_manage`
+##### <a name="-chrony--wait_manage"></a>`wait_manage`
 
 Data type: `Boolean`
 
 This selects if puppet should manage the chrony-wait service in the first place.
 
-Default value: ``false``
+Default value: `false`
 
-##### <a name="wait_name"></a>`wait_name`
+##### <a name="-chrony--wait_name"></a>`wait_name`
 
 Data type: `String[1]`
 
@@ -634,23 +635,23 @@ This selects the name of the chrony-wait service for puppet to manage.
 
 Default value: `'chrony-wait.service'`
 
-##### <a name="smoothtime"></a>`smoothtime`
+##### <a name="-chrony--smoothtime"></a>`smoothtime`
 
 Data type: `Optional[String]`
 
 Specify the smoothing of the time parameter as a string, for example `smoothtime 50000 0.01`.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="mailonchange"></a>`mailonchange`
+##### <a name="-chrony--mailonchange"></a>`mailonchange`
 
 Data type: `Optional[String[1]]`
 
 Specify the mail you wanna alert when chronyd executes a sync grater than the `threshold`.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="threshold"></a>`threshold`
+##### <a name="-chrony--threshold"></a>`threshold`
 
 Data type: `Float`
 
@@ -658,129 +659,129 @@ Specify the time limit for triggering events.
 
 Default value: `0.5`
 
-##### <a name="lock_all"></a>`lock_all`
+##### <a name="-chrony--lock_all"></a>`lock_all`
 
 Data type: `Boolean`
 
 Force chrony to only use RAM & prevent swapping.
 
-Default value: ``false``
+Default value: `false`
 
-##### <a name="sched_priority"></a>`sched_priority`
+##### <a name="-chrony--sched_priority"></a>`sched_priority`
 
 Data type: `Optional[Integer[0,100]]`
 
 Set the CPU thread scheduler, this value is OS specific.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="leapsecmode"></a>`leapsecmode`
+##### <a name="-chrony--leapsecmode"></a>`leapsecmode`
 
 Data type: `Optional[Enum['system', 'step', 'slew', 'ignore']]`
 
 Configures how to insert the leap second mode.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="leapsectz"></a>`leapsectz`
+##### <a name="-chrony--leapsectz"></a>`leapsectz`
 
 Data type: `Optional[String]`
 
 Specifies a timezone that chronyd can use to determine the offset between UTC and TAI.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="maxdistance"></a>`maxdistance`
+##### <a name="-chrony--maxdistance"></a>`maxdistance`
 
 Data type: `Optional[Float]`
 
 Sets the maximum root distance of a source to be acceptable for synchronisation of the clock.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="maxslewrate"></a>`maxslewrate`
+##### <a name="-chrony--maxslewrate"></a>`maxslewrate`
 
 Data type: `Optional[Float]`
 
 Maximum rate for chronyd to slew the time. Only float type values possible, for example: `maxslewrate 1000.0`.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsserverkey"></a>`ntsserverkey`
+##### <a name="-chrony--ntsserverkey"></a>`ntsserverkey`
 
 Data type: `Optional[Stdlib::Absolutepath]`
 
 This directive specifies a file containing a private key in the PEM format for chronyd to operate as an NTS server.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsservercert"></a>`ntsservercert`
+##### <a name="-chrony--ntsservercert"></a>`ntsservercert`
 
 Data type: `Optional[Stdlib::Absolutepath]`
 
 This directive specifies a file containing a certificate in the PEM format for chronyd to operate as an NTS server.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsport"></a>`ntsport`
+##### <a name="-chrony--ntsport"></a>`ntsport`
 
 Data type: `Optional[Stdlib::Port]`
 
 This directive specifies the TCP port on which chronyd will provide the NTS Key Establishment (NTS-KE) service.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="maxntsconnections"></a>`maxntsconnections`
+##### <a name="-chrony--maxntsconnections"></a>`maxntsconnections`
 
 Data type: `Optional[Integer[0]]`
 
 This directive specifies the maximum number of concurrent NTS-KE connections per process that the NTS server will accept.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsprocesses"></a>`ntsprocesses`
+##### <a name="-chrony--ntsprocesses"></a>`ntsprocesses`
 
 Data type: `Optional[Integer[0]]`
 
 This directive specifies how many helper processes will chronyd operating as an NTS server start for handling client NTS-KE requests in order to improve
         performance with multi-core CPUs and multithreading.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsdumpdir"></a>`ntsdumpdir`
+##### <a name="-chrony--ntsdumpdir"></a>`ntsdumpdir`
 
 Data type: `Optional[Stdlib::Absolutepath]`
 
 This directive specifies a directory where chronyd operating as an NTS server can save the keys which encrypt NTS cookies provided to clients.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsntpserver"></a>`ntsntpserver`
+##### <a name="-chrony--ntsntpserver"></a>`ntsntpserver`
 
 Data type: `Optional[String]`
 
 This directive specifies the hostname (as a fully qualified domain name) or address of the NTP server(s) which is provided in the NTS-KE response to the
         clients.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="ntsrotate"></a>`ntsrotate`
+##### <a name="-chrony--ntsrotate"></a>`ntsrotate`
 
 Data type: `Optional[Integer[0]]`
 
 This directive specifies the rotation interval (in seconds) of the server key which encrypts the NTS cookies.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="clientlog"></a>`clientlog`
+##### <a name="-chrony--clientlog"></a>`clientlog`
 
 Data type: `Boolean`
 
 Determines whether to log client accesses.
 
-Default value: ``false``
+Default value: `false`
 
-##### <a name="clientloglimit"></a>`clientloglimit`
+##### <a name="-chrony--clientloglimit"></a>`clientloglimit`
 
 Data type: `Optional[Integer]`
 
@@ -788,17 +789,17 @@ When set, specifies the maximum amount of memory in bytes that chronyd is allowe
 If not set, chrony's, default will be used. In modern versions this is 524288 bytes.  Older versions defaulted to have no limit.
 See [clientloglimit](https://chrony.tuxfamily.org/doc/3.4/chrony.conf.html#clientloglimit)
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="rtcsync"></a>`rtcsync`
+##### <a name="-chrony--rtcsync"></a>`rtcsync`
 
 Data type: `Boolean`
 
 Sync system clock to RTC periodically
 
-Default value: ``true``
+Default value: `true`
 
-##### <a name="rtconutc"></a>`rtconutc`
+##### <a name="-chrony--rtconutc"></a>`rtconutc`
 
 Data type: `Boolean`
 
@@ -806,9 +807,9 @@ Keep RTC in UTC instead of local time.
 If not set, chrony's, default will be used. On Arch Linux the default is true instead.
 See [rtconutc](https://chrony.tuxfamily.org/doc/3.4/chrony.conf.html#rtconutc)
 
-Default value: ``false``
+Default value: `false`
 
-##### <a name="hwtimestamps"></a>`hwtimestamps`
+##### <a name="-chrony--hwtimestamps"></a>`hwtimestamps`
 
 Data type: `Variant[Hash,Array[String]]`
 
@@ -817,35 +818,33 @@ interfaces or a hash of interfaces to their respective options.
 
 Default value: `[]`
 
-##### <a name="dumpdir"></a>`dumpdir`
+##### <a name="-chrony--dumpdir"></a>`dumpdir`
 
 Data type: `Optional[Stdlib::Unixpath]`
 
 Directory to store measurement history in on exit.
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="maxupdateskew"></a>`maxupdateskew`
+##### <a name="-chrony--maxupdateskew"></a>`maxupdateskew`
 
 Data type: `Optional[Float]`
 
 Sets the threshold for determining whether an estimate might be so unreliable that it should not be used
 
-Default value: ``undef``
+Default value: `undef`
 
-##### <a name="acquisitionport"></a>`acquisitionport`
+##### <a name="-chrony--acquisitionport"></a>`acquisitionport`
 
 Data type: `Optional[Integer[1,65535]]`
 
 Sets the acquisitionport for client queries
 
-Default value: ``undef``
-
-## Functions
+Default value: `undef`
 
 ## Data types
 
-### <a name="chronyservers"></a>`Chrony::Servers`
+### <a name="Chrony--Servers"></a>`Chrony::Servers`
 
 This type is for the `servers`, `pools` and `peers` parameters.
 
@@ -876,9 +875,5 @@ This type is for the `servers`, `pools` and `peers` parameters.
 ]
 ```
 
-Alias of
-
-```puppet
-Variant[Hash[Stdlib::Host, Optional[Array[String]]], Array[Stdlib::Host]]
-```
+Alias of `Variant[Hash[Stdlib::Host, Optional[Array[String]]], Array[Stdlib::Host]]`
 
diff --git a/manifests/init.pp b/manifests/init.pp
index d644a07..d024d8d 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -288,8 +288,8 @@
   Optional[Integer[1]] $minsamples                                 = undef,
   Numeric $makestep_seconds                                        = 10,
   Integer $makestep_updates                                        = 3,
-  Array[String[1]] $queryhosts                                     = [],
-  Array[String[1]] $denyqueryhosts                                 = [],
+  Array[String[0]] $queryhosts                                     = [],
+  Array[String[0]] $denyqueryhosts                                 = [],
   Optional[String[1]] $mailonchange                                = undef,
   Float $threshold                                                 = 0.5,
   Boolean $lock_all                                                = false,
diff --git a/spec/classes/chrony_spec.rb b/spec/classes/chrony_spec.rb
index 48a7679..24a6b5d 100644
--- a/spec/classes/chrony_spec.rb
+++ b/spec/classes/chrony_spec.rb
@@ -501,6 +501,18 @@
         end
       end
 
+      context 'empty allow and deny' do
+        let(:params) do
+          {
+            queryhosts: [''],
+            denyqueryhosts: [''],
+          }
+        end
+
+        it { is_expected.to contain_file(config_file).with_content(%r{^\s*allow\s*}) }
+        it { is_expected.to contain_file(config_file).with_content(%r{^\s*deny\s*}) }
+      end
+
       context 'unmanaged chrony.keys file' do
         let(:params) do
           {