Post-Tyranny-Tech-Infrastru.../ansible/roles
Pieter f40acee0a3 feat: Add Python script for automated recovery flow creation
Add create_recovery_flow.py script that configures Authentik password
recovery flow via REST API. This script is called by recovery.yml
during deployment.

The script creates:
- Password complexity policy (12+ chars, mixed case, digit, symbol)
- Recovery identification stage (username/email input)
- Recovery email stage (sends recovery token with 30min expiry)
- Recovery flow with proper stage bindings
- Updates authentication flow to show "Forgot password?" link

Uses internal Authentik API (localhost:9000) to avoid SSL/DNS issues
during initial setup. Works entirely via API calls, replacing the
unreliable blueprint-based approach.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-20 19:05:22 +01:00
..
authentik feat: Add Python script for automated recovery flow creation 2026-01-20 19:05:22 +01:00
common WIP: Ansible base configuration - common role (#2) 2025-12-27 14:00:22 +01:00
docker Complete Ansible base configuration (#2) 2025-12-27 14:13:15 +01:00
mailgun/tasks fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00
nextcloud 🔧 fix: Optimize Collabora Online performance for 2-core servers 2026-01-18 18:04:19 +01:00
traefik feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00