Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik
Pieter 9a38486322 feat: Add brand recovery flow config and improve security
- Add brand default recovery flow configuration to Authentik setup
- Update create_recovery_flow.py to set brand's recovery flow automatically
- All 17 servers now have brand recovery flow configured

Security improvements:
- Remove secrets/clients/*.sops.yaml from git tracking
- Remove ansible/host_vars/ from git tracking
- Update .gitignore to exclude sensitive config files
- Files remain encrypted and local, just not in repo

Note: Files still exist in git history. Consider using BFG Repo Cleaner
to remove them completely if needed.

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-26 09:17:08 +01:00
..
defaults Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
files feat: Add brand recovery flow config and improve security 2026-01-26 09:17:08 +01:00
handlers Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
tasks feat: Configure Diun with Docker Hub auth and watchRepo control 2026-01-24 13:16:25 +01:00
templates fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00