Post-Tyranny-Tech-Infrastru.../ansible/playbooks
Pieter 918a43e820 feat: Add playbook to update enrollment flow and fix brand default
ACHIEVEMENT: Invitation-only enrollment flow is now fully working! 🎉

This commit adds a utility playbook that was used to successfully deploy
the updated enrollment-flow.yaml blueprint to the running dev server.

The key fix was adding the tenant configuration to set the enrollment flow
as the default in the Authentik brand, ensuring invitations created in the
UI automatically use the correct flow.

Changes:
- Added update-enrollment-flow.yml playbook for deploying flow updates
- Successfully deployed and verified on dev server
- Invitation URLs now work correctly with the format:
  https://auth.dev.vrije.cloud/if/flow/default-enrollment-flow/?itoken=<token>

Features confirmed working:
✓ Invitation-only registration (no public signup)
✓ Correct flow is set as brand default
✓ Email notifications via Mailgun SMTP
✓ 2FA enforcement configured
✓ Password recovery flow configured

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-15 13:29:26 +01:00
..
cleanup.yml fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00
deploy.yml fix: Restore Mailgun SMTP and Nextcloud OIDC integration 2026-01-14 16:04:00 +01:00
setup.yml Complete Ansible base configuration (#2) 2025-12-27 14:13:15 +01:00
update-enrollment-flow.yml feat: Add playbook to update enrollment flow and fix brand default 2026-01-15 13:29:26 +01:00