xsrv VS xsrv

Yes, OpenLDAP installed from this ansible role

It's dead easy to use TCP/SSL instead of UDP to forward logs. Example rsyslog config

I use rsyslog for that since it's the default in Debian. Configuring forwarding is very simple, a single file in /etc/rsyslog.d/forwarding.conf [1]. Note that this setup uses TLS to encrypt messages so you need to create the relevant certificates (I use self-signed certs). Unencrypted TCP or UDP is simpler, but less secure.

preseed.cfg contains a few basic options needed to setup the OS [1]

I do this with https://github.com/nodiscc/xsrv/tree/master/roles/openldap + https://github.com/nodiscc/xsrv/tree/master/roles/samba. It's just a standalone samba server + LDAP auth for users, no DC or anything like that, so I'm not sure this is what you're looking for.

This ansible role (check the tasks/ directory) gives a good breakdown of what is needed to setup a basic LDAP server and authentication service

I use samba in standalone mode with or without LDAP auth https://github.com/nodiscc/xsrv/tree/master/roles/samba

If you decide to store your ansible config in a git repo, pay attention not to commit unencrypted passwords or secrets. I encrypt sensitive values with ansible-vault [1] [2] before storing them in git (there are other solutions, but it's the simplest/native one). Then I store the vault master password in a .ansible-vault-password file so that it don't have to enter it manually every time [3] [4]

I have been using it ~5 years on my personal infrastructure and more recently started adapting the roles for the needs of $JOB (and porting a few things back to my personal project). I manage the project from a self-hosted gitea instance that is mirrored to Gitlab/Github. The project's TODO.md is semi-automatically updated from Gitea issues.