- Add brand default recovery flow configuration to Authentik setup
- Update create_recovery_flow.py to set brand's recovery flow automatically
- All 17 servers now have brand recovery flow configured
Security improvements:
- Remove secrets/clients/*.sops.yaml from git tracking
- Remove ansible/host_vars/ from git tracking
- Update .gitignore to exclude sensitive config files
- Files remain encrypted and local, just not in repo
Note: Files still exist in git history. Consider using BFG Repo Cleaner
to remove them completely if needed.
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| authentik_api.py | ||
| configure_2fa_enforcement.py | ||
| configure_invitation_flow.py | ||
| create_recovery_flow.py | ||
| custom-flows.yaml | ||
| enrollment-flow.yaml | ||
| invitation-flow.yaml | ||