Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik
Pieter f40acee0a3 feat: Add Python script for automated recovery flow creation
Add create_recovery_flow.py script that configures Authentik password
recovery flow via REST API. This script is called by recovery.yml
during deployment.

The script creates:
- Password complexity policy (12+ chars, mixed case, digit, symbol)
- Recovery identification stage (username/email input)
- Recovery email stage (sends recovery token with 30min expiry)
- Recovery flow with proper stage bindings
- Updates authentication flow to show "Forgot password?" link

Uses internal Authentik API (localhost:9000) to avoid SSL/DNS issues
during initial setup. Works entirely via API calls, replacing the
unreliable blueprint-based approach.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-20 19:05:22 +01:00
..
defaults Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
files feat: Add Python script for automated recovery flow creation 2026-01-20 19:05:22 +01:00
handlers Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
tasks feat: Enable automated password recovery flow configuration 2026-01-20 18:22:02 +01:00
templates fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00