feat: Add reset 2FA workflow

Author: adskyiproger

.github/reset-2fa.yml

@@ -0,0 +1,50 @@
+name: Reset 2FA
+run-name: Reset 2FA from user ${{ inputs.user }} in ${{ inputs.environment }}
+on:
+  workflow_dispatch:
+    inputs:
+      user:
+        description: User to remove 2FA from
+        type: string
+        required: true
+      environment:
+        type: choice
+        description: Infrastructure to provision
+        default: 
+        required: true
+        options:
+          - ""
+
+jobs:
+  reset:
+    environment: ${{ inputs.environment }}
+    runs-on: ubuntu-24.04
+    outputs:
+      outcome: ${{ steps.deploy.outcome }}
+    timeout-minutes: 60
+    steps:
+      - name: Clone country config resource package
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+          path: './${{ github.event.repository.name }}'
+      # FIXME: Reset should work on all servers
+      - name: Remove 2FA
+        run: "sudo rm /home/${{ inputs.user }}/.google_authenticator"
+      - name: checkout repository
+        uses: actions/checkout@v5
+      - name: Run Ansible Playbook
+        uses: dawidd6/action-ansible-playbook@v4
+        env:
+          ANSIBLE_PERSISTENT_COMMAND_TIMEOUT: 10
+          ANSIBLE_SSH_TIMEOUT: 10
+          ANSIBLE_SSH_RETRIES: 5
+        with:
+          requirements: galaxy-requirements.yml
+          playbook: reset-2fa.yml
+          directory: ./infrastructure/server-setup
+          # Add --verbose to get more output
+          options: |-
+            --inventory inventory/${{ inputs.environment }}.yml
+            ${{ inputs.tags != 'all' && format('--tags={0}', inputs.tags) || '' }}
+            --extra-vars user=${{ inputs.user }}

infrastructure/server-setup/reset-2fa.yml

@@ -0,0 +1,18 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+#
+# OpenCRVS is also distributed under the terms of the Civil Registration
+# & Healthcare Disclaimer located at http://opencrvs.org/license.
+#
+# Copyright (C) The OpenCRVS Authors located at https://github.com/opencrvs/opencrvs-core/blob/master/AUTHORS.
+---
+
+- hosts: all
+  become: yes
+  gather_facts: yes
+  ignore_unreachable: false
+  become_method: sudo
+  tasks:
+  - name: Remove /home/${{ inputs.user }}/.google_authenticator
+    shell: rm -f /home/${{ inputs.user }}/.google_authenticator