Post-generation recipes
Recipes make narrow, auditable changes to generated projects. List the built-in registry with:
npx create-authenik8-app@latest add --list
Current recipes:
| Recipe | Compatible presets | Purpose |
|---|---|---|
oauth-google | auth-oauth, fullstack | Enable Google OAuth |
oauth-github | auth-oauth, fullstack | Enable GitHub OAuth |
ci-github | All presets | Add the managed auth and upgrade policy workflow |
Preview before applying
npx create-authenik8-app@latest add oauth-github --dry-run
npx create-authenik8-app@latest add oauth-google ./my-app --diff
--diff is an alias for --dry-run. Previews redact .env values and perform no writes.
Guarded application
npx create-authenik8-app@latest add oauth-github
Recipes are shipped with the CLI and do not download or execute remote code. Application uses guarded writes, post-apply verification, and rollback. Sensitive .env edits are append-only. Generator-managed auth files are protected from silent overwrites after local modification.