lp-web-infra-azure

Deploy the Azure resources required to run the Learning Platform Web Project.

Architecture

This ARM template creates the following Azure Cloud resources:

1. Network Security Groups (for PAZ and Application subnets)
2. Virtual Network and Subnets (Bastion, PAZ and Application)
3. Application Gateway and its related public IP address
4. Virtual Machine (ubuntu 18.04)
5. Azure Database for MySQL server
6. Storage Account (for storing diagnostic info)
7. Bastion and its related public IP address

The Post Provisioning scripts configure the virtual machine as web server running NGINX and PHP 7.3 framework.

Pre-requisites

The following resources must exist prior to the deployment of the current ARM templates and scripts:

1. A Resource Group
2. A Key Vault with a valid certificate (will be used by the Application Gateway for SSL/TLS offload)
3. A User Assigned Managed Identity with "GET" permissions on both Secrets and Certificates stored in the Key Vault where the Application Gateway certificate is stored