Remove clean_servers.yml

70debconf

-// Pre-configure all packages with debconf before they are installed.
-// If you don't like it, comment it out.
-DPkg::Pre-Install-Pkgs {"/usr/sbin/dpkg-preconfigure --apt || true";};

clean_servers.yml

-#!/usr/bin/env ansible-playbook
----
-# This is a special playbook to clean old stuff from BCFG2
-# it will disapear when BCFG2 will disapear
-# `apt-mark showmanual` is a good start
-- hosts: server
-  tasks:
-    - name: Clean up unused packages
-      apt:
-        state: absent
-        name:
-          - acpid
-          - apt-dater-host
-          - arpwatch  # old sniffing
-          - at
-          - bcfg2
-          - byobu  # we already have screen and tmux
-          - collectd
-          - collectd-utils  # old monitoring
-          - debian-faq  # graphical
-          - doc-debian  # graphical
-          - icinga2
-          - icinga2-bin
-          - icinga2-common
-          - icinga2-ido-pgsql
-          - icinga2-node  # old monitoring
-          - ipython  # go use ipython3!
-          - irqbalance  # removed in newer debian
-          - libmonitoring-plugin-perl
-          - monit
-          - monitoring-plugins
-          - monitoring-plugins-basic
-          - monitoring-plugins-common
-          - monitoring-plugins-standard
-          - munin-common
-          - munin-node  # old monitoring
-          - munin  # old monitoring
-          - munin-plugins-core
-          - munin-plugins-extra
-          - nagios-nrpe-server
-          - nagios-plugins-contrib
-          - openbsd-inetd
-          - os-prober  # makes grub-install lag
-          - popularity-contest
-          - python3-nagiosplugin
-          - python3-reportbug
-          - python-nagiosplugin
-          - ramond  # remplaced by ra-guard on switchs
-          - snmp
-          - sysstat  # very old monitoring
-          - xscreensaver  # was on owncloud
-      register: apt_result
-      retries: 3
-      until: apt_result is succeeded
-
-    - name: Clean unwanted olderstuff
-      apt:
-        autoremove: true
-        purge: true
-      register: apt_result
-      retries: 3
-      until: apt_result is succeeded
-
-    - name: Remove old conf
-      file:
-        path: "{{ item }}"
-        state: absent
-      loop:
-        - /etc/apt/apt.conf.d/01aptitude
-        - /etc/apt-dater-host.conf
-        - /etc/bcfg2.conf
-        - /etc/bcfg2.conf.ucf-dist
-        - /etc/crans
-        - /etc/cron.daily/bcfg2
-        - /etc/cron.daily/git_dirty_repo
-        - /etc/cron.d/autobcfg2
-        - /etc/cron.d/bcfg2-run
-        - /etc/cron.d/comptes_inactifs
-        - /etc/cron.d/letsencrypt_check_cert
-        - /etc/cron.d/monit
-        - /etc/cron.d/munin-crans
-        - /etc/cron.d/munin-node
-        - /etc/cron.d/munin-node.dpkg-dist
-        - /etc/cron.d/printer_watch
-        - /etc/cron.d/pull-repos-scripts
-        - /etc/cron.d/pxeboot
-        - /etc/cron.d/re2o-services
-        - /etc/cron.d/sshFingerprint
-        - /etc/cron.hourly/bcfg2
-        - /etc/cron.weekly/git_dirty_repo
-        - /etc/default/bcfg2
-        - /etc/default/bcfg2.ucf-dist
-        - /etc/icinga2
-        - /etc/init.d/bcfg2
-        - /etc/letsencrypt/conf.d/localhost.ini
-        - /etc/monit
-        - /etc/munin
-        - /etc/nagios
-        - /etc/nagios-plugins
-        #- /etc/nginx/sites-available/status
-        #- /etc/nginx/sites-enabled/status
-        - /etc/nss-ldapd.conf
-        - /etc/nut
-        - /etc/pnp4nagios
-        - /etc/sudoers.d/apt-dater-host
-        - /var/local/aptdater
-
-    - name: Copy Debian ldap.conf
-      template:
-        src: ldap.conf
-        dest: /etc/ldap/ldap.conf
-        mode: 0644
-
-    - name: Copy Debian 70debconf
-      template:
-        src: 70debconf
-        dest: /etc/apt/apt.conf.d/70debconf
-        mode: 0644
-
-#    - name: Upgrade
-#      apt:
-#        upgrade: dist
-#        update_cache: true
-#        cache_valid_time: 86400  # one day
-#      register: apt_result
-#      retries: 3
-#      until: apt_result is succeeded

ldap.conf

-#
-# LDAP Defaults
-#
-
-# See ldap.conf(5) for details
-# This file should be world readable but not world writable.
-
-#BASE	dc=example,dc=com
-#URI	ldap://ldap.example.com ldap://ldap-master.example.com:666
-
-#SIZELIMIT	12
-#TIMELIMIT	15
-#DEREF		never
-
-# TLS certificates (needed for GnuTLS)
-TLS_CACERT	/etc/ssl/certs/ca-certificates.crt
-