Post-Tyranny-Tech-Infrastru.../ansible/roles/authentik
Pieter dc14b12688 Remove automated recovery flow configuration
Automated recovery flow setup via blueprints was too complex and
unreliable. Recovery flows (password reset via email) must now be
configured manually in Authentik admin UI.

Changes:
- Removed recovery-flow.yaml blueprint
- Removed configure_recovery_flow.py script
- Removed update-recovery-flow.yml playbook
- Updated flows.yml to remove recovery references
- Updated custom-flows.yaml to remove brand recovery flow config
- Updated comments to reflect manual recovery flow requirement

Automated configuration still includes:
- Enrollment flow with invitation support
- 2FA/MFA enforcement
- OIDC provider for Nextcloud
- Email configuration via SMTP

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-17 09:57:07 +01:00
..
defaults Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
files Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
handlers Add Authentik identity provider to architecture 2026-01-07 11:23:13 +01:00
tasks Remove automated recovery flow configuration 2026-01-17 09:57:07 +01:00
templates fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00