Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik
Pieter 6cd6d7cc79 fix: Deploy all flow blueprints automatically (enrollment + recovery + 2FA)
CRITICAL FIX: Ensures all three flow blueprints are deployed during initial setup

The issue was that only custom-flows.yaml was being deployed, but
enrollment-flow.yaml and recovery-flow.yaml were created separately
and manually deployed later. This caused problems when servers were
rebuilt - the enrollment and recovery flows would disappear.

Changes:
- Updated flows.yml to deploy all three blueprints in a loop
- enrollment-flow.yaml: Invitation-only user registration
- recovery-flow.yaml: Password reset via email
- custom-flows.yaml: 2FA enforcement and brand settings

Now all flows will be available immediately after deployment:
✓ https://auth.dev.vrije.cloud/if/flow/default-enrollment-flow/https://auth.dev.vrije.cloud/if/flow/default-recovery-flow/

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-15 13:48:40 +01:00
..
defaults Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
files feat: Add password recovery flow with email notifications 2026-01-15 13:36:43 +01:00
handlers Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
tasks fix: Deploy all flow blueprints automatically (enrollment + recovery + 2FA) 2026-01-15 13:48:40 +01:00
templates fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00