version: 1
metadata:
  labels:
    blueprints.goauthentik.io/instantiate: "true"
  name: Custom System Tenant
entries:
### DEPENDENCIES
- model: authentik_blueprints.metaapplyblueprint
  attrs:
    identifiers:
      name: Default - Tenant
    required: true
- model: authentik_blueprints.metaapplyblueprint
  attrs:
    identifiers:
      name: Recovery with email verification
    required: true


### SYSTEM TENANT
# remove custom tenant from old recipe
- identifiers:
    domain: {{ env "DOMAIN" }}
  model: authentik_tenants.tenant
  state: absent

- attrs:
    attributes:
      settings:
        locale: {{ if eq (env "DEFAULT_LANGUAGE") "" }} en {{ else }} {{ env "DEFAULT_LANGUAGE" }} {{ end }}
    flow_recovery: !Find [authentik_flows.flow, [slug,  default-recovery-flow]]
  identifiers:
    default: true
    domain: authentik-default
  model: authentik_tenants.tenant