diff --git a/apt/defaults/main.yml b/apt/defaults/main.yml
index 9e01a74e..4e1cee3d 100644
--- a/apt/defaults/main.yml
+++ b/apt/defaults/main.yml
@@ -6,3 +6,5 @@ apt_install_backports: False
 apt_backports_components: "main"
 
 apt_install_evolix_public: True
+
+apt_clean_gandi_sourceslist: False
diff --git a/apt/tasks/basics.yml b/apt/tasks/basics.yml
index 5fefbbfc..d68e6063 100644
--- a/apt/tasks/basics.yml
+++ b/apt/tasks/basics.yml
@@ -10,6 +10,16 @@
   tags:
   - apt
 
+- name: Clean GANDI sources.list.d/debian-security.list
+  file:
+    path: '{{ item }}'
+    state: absent
+  with_items:
+  - /etc/apt/sources.list.d/debian-security.list
+  - /etc/apt/sources.list.d/debian-stretch.list
+  - /etc/apt/sources.list.d/debian-update.list
+  when: apt_clean_gandi_sourceslist
+
 - name: Intermediate flush of handlers
   meta: flush_handlers
   tags: