Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/files
Pieter 9a38486322 feat: Add brand recovery flow config and improve security
- Add brand default recovery flow configuration to Authentik setup
- Update create_recovery_flow.py to set brand's recovery flow automatically
- All 17 servers now have brand recovery flow configured

Security improvements:
- Remove secrets/clients/*.sops.yaml from git tracking
- Remove ansible/host_vars/ from git tracking
- Update .gitignore to exclude sensitive config files
- Files remain encrypted and local, just not in repo

Note: Files still exist in git history. Consider using BFG Repo Cleaner
to remove them completely if needed.

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-26 09:17:08 +01:00
..
authentik_api.py feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
configure_2fa_enforcement.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
configure_invitation_flow.py Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
create_recovery_flow.py feat: Add brand recovery flow config and improve security 2026-01-26 09:17:08 +01:00
custom-flows.yaml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
enrollment-flow.yaml fix: Remove tenant modification from enrollment flow blueprint 2026-01-19 14:06:28 +01:00
invitation-flow.yaml feat: Add automated invitation stage configuration for Authentik 2026-01-14 16:17:44 +01:00