Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/tasks
Pieter 6cd6d7cc79 fix: Deploy all flow blueprints automatically (enrollment + recovery + 2FA)
CRITICAL FIX: Ensures all three flow blueprints are deployed during initial setup

The issue was that only custom-flows.yaml was being deployed, but
enrollment-flow.yaml and recovery-flow.yaml were created separately
and manually deployed later. This caused problems when servers were
rebuilt - the enrollment and recovery flows would disappear.

Changes:
- Updated flows.yml to deploy all three blueprints in a loop
- enrollment-flow.yaml: Invitation-only user registration
- recovery-flow.yaml: Password reset via email
- custom-flows.yaml: 2FA enforcement and brand settings

Now all flows will be available immediately after deployment:
✓ https://auth.dev.vrije.cloud/if/flow/default-enrollment-flow/https://auth.dev.vrije.cloud/if/flow/default-recovery-flow/

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-15 13:48:40 +01:00
..
bootstrap.yml fix: Remove blocking HTTPS check from Authentik bootstrap 2026-01-12 07:07:55 +01:00
docker.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
email.yml feat: Add complete email configuration automation 2026-01-13 10:39:26 +01:00
flows.yml fix: Deploy all flow blueprints automatically (enrollment + recovery + 2FA) 2026-01-15 13:48:40 +01:00
invitation.yml feat: Add public enrollment flow with invitation support 2026-01-15 11:22:53 +01:00
main.yml feat: Add automated invitation stage configuration for Authentik 2026-01-14 16:17:44 +01:00
mfa.yml feat: Add automated 2FA/MFA enforcement for Authentik 2026-01-14 16:11:08 +01:00
providers.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00