Post-Tyranny-Tech-Infrastru.../ansible/roles
Pieter fcc5b7bca2 feat: Add password recovery flow with email notifications
ACHIEVEMENT: Password recovery via email is now fully working! 🎉

Implemented a complete password recovery flow that:
- Asks users for their email address
- Sends a recovery link via Mailgun SMTP
- Allows users to set a new password
- Expires recovery links after 30 minutes

Flow stages:
1. Identification stage - collects user email
2. Email stage - sends recovery link
3. Prompt stage - collects new password
4. User write stage - updates password

Features:
✓ Email sent via Mailgun (noreply@mg.vrije.cloud)
✓ 30-minute token expiry for security
✓ Set as default recovery flow in brand
✓ Clean, user-friendly interface
✓ Password confirmation required

Users can access recovery at:
https://auth.dev.vrije.cloud/if/flow/default-recovery-flow/

Files added:
- recovery-flow.yaml - Blueprint defining the complete flow
- update-recovery-flow.yml - Deployment playbook

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-15 13:36:43 +01:00
..
authentik feat: Add password recovery flow with email notifications 2026-01-15 13:36:43 +01:00
common WIP: Ansible base configuration - common role (#2) 2025-12-27 14:00:22 +01:00
docker Complete Ansible base configuration (#2) 2025-12-27 14:13:15 +01:00
mailgun/tasks fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00
nextcloud fix: Increase Nextcloud wait timeout to 300s and make invitation flow non-blocking 2026-01-13 13:14:47 +01:00
traefik feat: Complete Authentik SSO integration with automated OIDC setup 2026-01-08 16:56:19 +01:00