terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "~> 4.0"
    }
  }
}

provider "azurerm" {
  features {}
}

variable "simpl_resource_group" {
  type        = string
  description = "Name of the pre-existing Azure Resource Group"
}

variable "simpl_vm_size" {
  type = string
}

variable "simpl_image_urn" {
  type        = string
  description = "Format: Publisher:Offer:SKU:Version (e.g. Canonical:UbuntuServer:22_04-lts:latest)"
}

variable "simpl_admin_password" {
  type      = string
  sensitive = true
}

variable "simpl_cloud_init" {
  type = string
}

variable "simpl_app_ports" {
  type    = list(string)
  default = []
}

variable "simpl_nsg_count" {
  type = number
}

locals {
  image_parts = split(":", "Canonical:UbuntuServer:22_04-lts:latest")
}

data "azurerm_resource_group" "simpl_rg" {
  name = "espacios-de-datos-infraestructura"
}

resource "azurerm_virtual_network" "simpl_vnet" {
  name                = "simpl-vnet-5"
  address_space       = ["10.0.0.0/16"]
  location            = data.azurerm_resource_group.simpl_rg.location
  resource_group_name = data.azurerm_resource_group.simpl_rg.name
}

resource "azurerm_subnet" "simpl_subnet" {
  name                 = "simpl-subnet-5"
  resource_group_name  = data.azurerm_resource_group.simpl_rg.name
  virtual_network_name = azurerm_virtual_network.simpl_vnet.name
  address_prefixes     = ["10.0.1.0/24"]
}

resource "azurerm_public_ip" "simpl_pip" {
  name                = "simpl-pip-5"
  location            = data.azurerm_resource_group.simpl_rg.location
  resource_group_name = data.azurerm_resource_group.simpl_rg.name
  allocation_method   = "Static"
  sku                 = "Standard"
}

resource "azurerm_network_interface" "simpl_nic" {
  name                = "simpl-nic-5"
  location            = data.azurerm_resource_group.simpl_rg.location
  resource_group_name = data.azurerm_resource_group.simpl_rg.name

  ip_configuration {
    name                          = "internal"
    subnet_id                     = azurerm_subnet.simpl_subnet.id
    private_ip_address_allocation = "Dynamic"
    public_ip_address_id          = azurerm_public_ip.simpl_pip.id
  }
}

resource "azurerm_network_security_group" "simpl_nsg" {
  count               = 1
  name                = "simpl-nsg-5"
  location            = data.azurerm_resource_group.simpl_rg.location
  resource_group_name = data.azurerm_resource_group.simpl_rg.name

  security_rule {
    name                       = "allow-ssh"
    priority                   = 100
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "22"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                       = "allow-app"
    priority                   = 110
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_ranges    = ["8088"]
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }
}

resource "azurerm_network_interface_security_group_association" "simpl_nic_nsg" {
  count                     = 1
  network_interface_id      = azurerm_network_interface.simpl_nic.id
  network_security_group_id = azurerm_network_security_group.simpl_nsg[0].id
}

resource "azurerm_linux_virtual_machine" "simpl_vm" {
  name                = "offering-enterprise-server-5-terraform"
  resource_group_name = data.azurerm_resource_group.simpl_rg.name
  location            = data.azurerm_resource_group.simpl_rg.location
  size                            = "Standard_D2s_v3"
  admin_username                  = "simpluser"
  admin_password                  = "TwpT1zbNX87V96776E7Q"
  disable_password_authentication = false

  network_interface_ids = [azurerm_network_interface.simpl_nic.id]

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }

  source_image_reference {
    publisher = local.image_parts[0]
    offer     = local.image_parts[1]
    sku       = local.image_parts[2]
    version   = local.image_parts[3]
  }

  custom_data = "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"
}

output "vmIps" {
  depends_on = [azurerm_linux_virtual_machine.simpl_vm]
  value      = [azurerm_public_ip.simpl_pip.ip_address]
}