Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik/tasks
Pieter dc14b12688 Remove automated recovery flow configuration
Automated recovery flow setup via blueprints was too complex and
unreliable. Recovery flows (password reset via email) must now be
configured manually in Authentik admin UI.

Changes:
- Removed recovery-flow.yaml blueprint
- Removed configure_recovery_flow.py script
- Removed update-recovery-flow.yml playbook
- Updated flows.yml to remove recovery references
- Updated custom-flows.yaml to remove brand recovery flow config
- Updated comments to reflect manual recovery flow requirement

Automated configuration still includes:
- Enrollment flow with invitation support
- 2FA/MFA enforcement
- OIDC provider for Nextcloud
- Email configuration via SMTP

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-17 09:57:07 +01:00
..
bootstrap.yml fix: Remove blocking HTTPS check from Authentik bootstrap 2026-01-12 07:07:55 +01:00
docker.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00
email.yml feat: Add complete email configuration automation 2026-01-13 10:39:26 +01:00
flows.yml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
invitation.yml feat: Add public enrollment flow with invitation support 2026-01-15 11:22:53 +01:00
main.yml Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
mfa.yml feat: Add automated 2FA/MFA enforcement for Authentik 2026-01-14 16:11:08 +01:00
providers.yml feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00