viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/stacks/authentik
History
Viktor Barzin e4512f3566
All checks were successful
ci/woodpecker/push/default Pipeline was successful
Details
fix(authentik): deliver tripit email-verify stages via blueprint (provider token_expiry too old) 
Pipeline 214 failed: the pinned goauthentik 2024.x provider models EmailStage.token_expiry as an integer, but the live 2026.2.x server requires a duration string ('hours=24') and 400s any number (even the provider default 30). Bumping the provider is a global terragrunt.hcl change re-applying every platform stack + breaking 3 other authentik-using stacks' lockfiles — disproportionate. Instead the two email-verification stages + their flow bindings move into an Authentik blueprint (tripit-email-stages.yaml) applied server-side via authentik_blueprint; the server parses token_expiry natively. Validated on the live server + terraform validate. Restores the ADR-0020 email-verification security gate.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-17 07:30:05 +00:00
..
modules/authentik fix(authentik): SMTP host = mail.viktorbarzin.me (svc name fails wildcard-cert verify) 2026-06-17 07:13:53 +00:00
admin-services-restriction.tf feat(authentik): TripIt external self-signup group + forward-auth fence (ADR-0020) 2026-06-15 21:48:04 +00:00
authentik_provider.tf authentik: incident hardening after the signin-speedup rollout storm 2026-06-11 00:26:52 +00:00
email-secret.tf feat(authentik): wire SMTP (noreply@) for TripIt signup verification + recovery email (ADR-0020) 2026-06-17 07:04:52 +00:00
guest.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
main.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
secrets fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
t3-users.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
terragrunt.hcl fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
tripit-email-blueprint.tf fix(authentik): deliver tripit email-verify stages via blueprint (provider token_expiry too old) 2026-06-17 07:30:05 +00:00
tripit-email-stages.yaml fix(authentik): deliver tripit email-verify stages via blueprint (provider token_expiry too old) 2026-06-17 07:30:05 +00:00
tripit-external.tf feat(authentik): tripit-enrollment + tripit-recovery flows (passwordless signup, ADR-0020) 2026-06-17 07:20:11 +00:00
tripit-flows.tf fix(authentik): deliver tripit email-verify stages via blueprint (provider token_expiry too old) 2026-06-17 07:30:05 +00:00
vault-authz-binding.tf fix(authentik): pin Vault binding UUIDs as literals (provider has no authentik_application data source) 2026-06-15 22:01:29 +00:00