- Private network
- Protected by a Web Application Gateway
- Private DNS
- VPN for network access to inner parts
- SQL Server
- Setup (template) for every web application I make
- Credentials
- Nice and clean
- Every major step in it's own file
- Wize .gitignore file
Default .gitignore file for terraform. Avoid:
- Secrets (*.tfvars)
- tfstate (how to keep it is not covered)
- Backend-Logging
- Log Analytics
- Application Insights
- And anything releated to logging
- Backend-Network
- vNet
- DNS => Azure Provided DNS
tenant_id = "xx-x-x-x-xx"
subscription_id = "xx-x-x-x-xx"
client_id = "xx-x-x-x-xx"
client_secret = "xxx"
sql_administrator_login = "xxx"
sql_administrator_password = "xxx"
terraform init
terraform validate
terraform plan -var-file .\credentials.tfvars