decom nfs1

remove nfs1 from:
- dsh groups
- site.pp
- DHCP
- base module / rsyslog
- LDAP config (!??) <-- what is replacing it?

please somebody especially look at the LDAP config
part, the TODO and what replaces this here?

# TODO: kill this role at some point
class ldap::role::config::production

does this really mean eqiad uses pmtpa?

'eqiad' => [ 'nfs1.pmtpa.wmnet' ],

RT: 7295
Change-Id: I6989717f02afebffa6e01abf594eda3d0aaf0b34
Merge "decom nfs1" into production