Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/tasks
Pieter ecc09127ef feat: Enable automated password recovery flow configuration
Add recovery.yml task include to main.yml to enable automated
password recovery flow setup. This calls the recovery.yml tasks
which use create_recovery_flow.py to configure:

- Password complexity policy (12+ chars, mixed case, digit, symbol)
- Recovery identification stage (username/email)
- Recovery email stage (30-minute token expiry)
- Integration with default authentication flow
- "Forgot password?" link on login page

This restores automated recovery flow setup that was previously
removed when the blueprint-based approach was abandoned. The new
approach uses direct API calls via Python script which is more
reliable than blueprints.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-20 18:22:02 +01:00
..
bootstrap.yml fix: Remove blocking HTTPS check from Authentik bootstrap 2026-01-12 07:07:55 +01:00
docker.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
email.yml feat: Add complete email configuration automation 2026-01-13 10:39:26 +01:00
flows.yml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
invitation.yml docs: Update enrollment flow task output with accurate information 2026-01-19 14:06:48 +01:00
main.yml feat: Enable automated password recovery flow configuration 2026-01-20 18:22:02 +01:00
mfa.yml feat: Add automated 2FA/MFA enforcement for Authentik 2026-01-14 16:11:08 +01:00
providers.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
recovery.yml fix: Pass API token as command-line arg to recovery script 2026-01-20 18:13:10 +01:00