Post-Tyranny-Tech-Infrastru.../ansible/roles
Pieter fb945c8737 Implement Authentik flow configuration via REST API
Replaced placeholder stub scripts with functional implementations that
configure Authentik flows using the REST API.

Changes:
- Added configure_invitation_flow.py: Creates invitation stage and binds
  it to the default enrollment flow
- Added configure_recovery_flow.py: Verifies default recovery flow exists
- Added configure_2fa_enforcement.py: Configures default MFA validation
  stage to force TOTP setup on login
- Updated flows.yml to call new configuration scripts
- Removed placeholder create_invitation_flow.py and create_recovery_flow.py

The scripts properly configure Authentik via API to enable:
1. User invitations via email with enrollment flow
2. Password recovery via email
3. Enforced 2FA/TOTP setup on first login

These configurations will work automatically on all future deployments.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-14 08:40:00 +01:00
..
authentik Implement Authentik flow configuration via REST API 2026-01-14 08:40:00 +01:00
common WIP: Ansible base configuration - common role (#2) 2025-12-27 14:00:22 +01:00
docker Complete Ansible base configuration (#2) 2025-12-27 14:13:15 +01:00
mailgun/tasks fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00
nextcloud fix: Increase Nextcloud wait timeout to 300s and make invitation flow non-blocking 2026-01-13 13:14:47 +01:00
traefik feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00