roles/common: remove old firewall cleanup

We set the fail2ban service as "PartOf" the nftables service, so it
receives stop and restart events already.

roles/common/tasks/nftables.yml

@@ -9,7 +9,6 @@
     mode: "0644"
   notify:
     - Restart nftables
-    - Restart fail2ban
 
 - name: Create /etc/nftables extra config directory
   ansible.builtin.file:
@@ -20,17 +19,14 @@
 
 - name: Copy extra nftables configuration files
   ansible.builtin.copy:
-    src: "{{ item.src }}"
-    dest: /etc/nftables/{{ item.src }}
+    src: firehol_level1-ipv4.nft
+    dest: /etc/nftables/firehol_level1-ipv4.nft
     owner: root
     group: root
     mode: "0644"
-    force: "{{ item.force }}"
-  loop:
-    - { src: firehol_level1-ipv4.nft, force: false }
+    force: false
   notify:
     - Restart nftables
-    - Restart fail2ban
 
 - name: Copy nftables update scripts
   ansible.builtin.template:
@@ -40,27 +36,6 @@
     owner: root
     group: root
 
-- name: Remove deprecated data and scripts
-  ansible.builtin.file:
-    path: "{{ item }}"
-    state: absent
-  loop:
-    - /etc/nftables/spamhaus-ipv4.nft
-    - /etc/nftables/spamhaus-ipv6.nft
-    - /etc/nftables/abuseipdb-ipv4.nft
-    - /etc/nftables/abuseipdb-ipv6.nft
-    - /etc/nftables/abusech-ipv4.nft
-    - /usr/local/bin/update-abusech-nftables.sh
-    - /usr/local/bin/update-spamhaus-nftables.sh
-    - /etc/systemd/system/update-abusech-nftables.service
-    - /etc/systemd/system/update-abusech-nftables.timer
-    - /etc/systemd/system/update-spamhaus-nftables.service
-    - /etc/systemd/system/update-spamhaus-nftables.timer
-    - /usr/local/bin/aggregate-cidr-addresses.pl
-  notify:
-    - Restart nftables
-    - Restart fail2ban
-
 - name: Copy nftables systemd units
   ansible.builtin.copy:
     src: "{{ item }}"
@@ -81,11 +56,9 @@
 
 - name: Start and enable nftables update timers
   ansible.builtin.systemd_service:
-    name: "{{ item }}"
+    name: update-firehol-nftables.timer
     state: started
     enabled: true
-  loop:
-    - update-firehol-nftables.timer
 
 - name: Start and enable nftables
   ansible.builtin.systemd_service: