database.json

{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "databaseServerName": {
      "type": "string"
    },
    "databaseName": {
      "type": "string"
    },
    "databaseUsername": {
      "type": "string"
    },
    "databasePassword": {
      "type": "securestring"
    },
    "alertEmailAddress": {
      "type": "string"
    },
    "postgresSku": {
      "type": "object",
      "defaultValue": {
        "name": "GP_Gen5_2",
        "tier": "GeneralPurpose",
        "size": 5120,
        "family": "Gen5",
        "capacity": 2
      }
    }
  },
  "variables": {
    "platformBuildingBlocksDeploymentUrlBase": "https://raw.githubusercontent.com/DFE-Digital/bat-platform-building-blocks/master/templates/",

    "databaseDeploymentName": "[concat(deployment().name, '-database')]",

    "securityAlertPolicyName": "[concat(parameters('databaseServerName'), '-DefaultSecurityAlert')]"
  },
  "resources": [
    {
      "name": "[parameters('databaseServerName')]",
      "type": "Microsoft.DBforPostgreSQL/servers",
      "apiVersion": "2017-12-01",
      "location": "[resourceGroup().location]",
      "tags": {},
      "sku": "[parameters('postgresSku')]",
      "properties": {
        "storageProfile": {
          "storageMB": "[parameters('postgresSku').size]",
          "backupRetentionDays": 35,
          "geoRedundantBackup": "disabled",
          "storageAutoGrow": "disabled"
        },
        "version": "9.6",
        "sslEnforcement": "Enabled",
        "administratorLogin": "[parameters('databaseUsername')]",
        "administratorLoginPassword": "[parameters('databasePassword')]"
      },
      "resources": [
        {
          "name": "[variables('securityAlertPolicyName')]",
          "type": "securityAlertPolicies",
          "apiVersion": "2017-12-01",
          "properties": {
            "state": "Enabled",
            "disabledAlerts": [],
            "emailAddresses": ["[parameters('alertEmailAddress')]"],
            "emailAccountAdmins": false,
            "retentionDays": 90
          },
          "dependsOn": ["[parameters('databaseServerName')]"]
        }
      ]
    },
    {
      "type": "Microsoft.Resources/deployments",
      "apiVersion": "2017-05-10",
      "name": "[variables('databaseDeploymentName')]",
      "dependsOn": ["[resourceId('Microsoft.DBforPostgreSQL/servers', parameters('databaseServerName'))]"],
      "properties": {
        "mode": "Incremental",
        "templateLink": {
          "uri": "[concat(variables('platformBuildingBlocksDeploymentUrlBase'), 'postgresql-database.json')]",
          "contentVersion": "1.0.0.0"
        },
        "parameters": {
          "serverName": {
            "value": "[parameters('databaseServerName')]"
          },
          "databaseName": {
            "value": "[parameters('databaseName')]"
          }
        }
      }
    },
    {
      "type": "Microsoft.DBforPostgreSQL/servers/configurations",
      "apiVersion": "2017-12-01",
      "name": "[concat(parameters('databaseServerName'), '/log_disconnections')]",
      "dependsOn": ["[resourceId('Microsoft.DBforPostgreSQL/servers', parameters('databaseServerName'))]"],
      "properties": {
        "value": "ON",
        "source": "user-override"
      }
    }
  ],
  "outputs": {
    "databaseServerId": {
      "type": "string",
      "value": "[resourceId('Microsoft.DBforPostgreSQL/servers', parameters('databaseServerName'))]"
    },
    "databaseServerFullyQualifiedDomainName": {
      "type": "string",
      "value": "[reference(resourceId('Microsoft.DBforPostgreSQL/servers', parameters('databaseServerName'))).fullyQualifiedDomainName]"
    }
  }
}