Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/files
Pieter dc14b12688 Remove automated recovery flow configuration
Automated recovery flow setup via blueprints was too complex and
unreliable. Recovery flows (password reset via email) must now be
configured manually in Authentik admin UI.

Changes:
- Removed recovery-flow.yaml blueprint
- Removed configure_recovery_flow.py script
- Removed update-recovery-flow.yml playbook
- Updated flows.yml to remove recovery references
- Updated custom-flows.yaml to remove brand recovery flow config
- Updated comments to reflect manual recovery flow requirement

Automated configuration still includes:
- Enrollment flow with invitation support
- 2FA/MFA enforcement
- OIDC provider for Nextcloud
- Email configuration via SMTP

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-17 09:57:07 +01:00
..
authentik_api.py feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
configure_2fa_enforcement.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
configure_invitation_flow.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
custom-flows.yaml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
enrollment-flow.yaml fix: Set invitation-only enrollment flow as default in brand 2026-01-15 13:08:27 +01:00
invitation-flow.yaml feat: Add automated invitation stage configuration for Authentik 2026-01-14 16:17:44 +01:00