- Add brand default recovery flow configuration to Authentik setup
- Update create_recovery_flow.py to set brand's recovery flow automatically
- All 17 servers now have brand recovery flow configured
Security improvements:
- Remove secrets/clients/*.sops.yaml from git tracking
- Remove ansible/host_vars/ from git tracking
- Update .gitignore to exclude sensitive config files
- Files remain encrypted and local, just not in repo
Note: Files still exist in git history. Consider using BFG Repo Cleaner
to remove them completely if needed.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| authentik | ||
| common | ||
| diun | ||
| docker | ||
| kuma | ||
| mailgun/tasks | ||
| nextcloud | ||
| traefik | ||