Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/tasks
Pieter 2a107cbf14 fix: Pass API token as command-line arg to recovery script
The recovery flow automation was failing because the Ansible task
was piping the API token via stdin (echo -e), but the Python script
(create_recovery_flow.py) expects command-line arguments via sys.argv.

Changed from:
  echo -e "$TOKEN\n$DOMAIN" | docker exec -i python3 script.py

To:
  docker exec python3 script.py "$TOKEN" "$DOMAIN"

This matches how the Python script is designed (line 365-370).

Tested on valk deployment - recovery flow now creates successfully
with all features:
- Password complexity policy
- Email verification
- "Forgot password?" link on login page

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-20 18:13:10 +01:00
..
bootstrap.yml fix: Remove blocking HTTPS check from Authentik bootstrap 2026-01-12 07:07:55 +01:00
docker.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
email.yml feat: Add complete email configuration automation 2026-01-13 10:39:26 +01:00
flows.yml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
invitation.yml docs: Update enrollment flow task output with accurate information 2026-01-19 14:06:48 +01:00
main.yml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
mfa.yml feat: Add automated 2FA/MFA enforcement for Authentik 2026-01-14 16:11:08 +01:00
providers.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
recovery.yml fix: Pass API token as command-line arg to recovery script 2026-01-20 18:13:10 +01:00