Add infrastructure as code to deploy database

README.md

@@ -13,6 +13,7 @@ Several extension need to be installed on our PostGre SQL database :
 * postgis
 * postgis_topology
 * pg_routing
+
 # Database description
 ## How to edit the database/tables/columns?
 Create a new git branch (never work directly on master)
@@ -200,3 +201,12 @@ Special thanks to all our [Contributors](https://github.com/orgs/surfriderfounda
 ## License
 
 We’re using the `MIT` License. For more details, check [`LICENSE`](https://github.com/surfriderfoundationeurope/plasticorigins-ops-db/blob/master/LICENSE) file.
+
+# Azure Deployment
+
+You can use [shell.azure.com](https://shell.azure.com) to execute the following commands: 
+
+```bash
+git clone https://github.com/surfriderfoundationeurope/plasticorigins-ops-db.git
+./plasticorigins-ops-db/infrastructure/deploy-prod.sh
+```

infrastructure/deploy-prod.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+# Declare a resource group variable
+export RESOURCE_GROUP_NAME=rg-plastico-database-fra-prod
+az group create --name $RESOURCE_GROUP_NAME --location francecentral
+
+# Generate a GUID and store it in a variable
+export PASSWORD=$(uuidgen)
+
+az deployment group create --resource-group $RESOURCE_GROUP_NAME --template-file postgres-db.bicep --parameters environment=prod administratorPassword=$PASSWORD
+
+# Echo the password to the console
+echo $PASSWORD
+
+az keyvault secret set --vault-name plastico-keyvault-prod --name "postgres-prod-admin-password" --value $PASSWORD

infrastructure/postgres-db.bicep

@@ -0,0 +1,57 @@
+param administratorLogin string = 'po_admin_prod'
+@secure()
+param administratorPassword string
+
+@allowed([
+  'dev'
+  'prod'
+])
+param environment string = 'dev'
+
+var serverName = 'pgdb-plastico-${environment}-fra'
+
+var location = 'francecentral'
+
+resource postGres 'Microsoft.DBforPostgreSQL/flexibleServers@2022-12-01' = {
+  name: serverName
+  location: location
+  tags: {
+    environment: environment
+  }
+  sku: {
+    name: 'Standard_B1ms'
+    tier: 'Burstable'
+  }
+  properties: {
+    administratorLogin: administratorLogin
+    administratorLoginPassword: administratorPassword
+    authConfig: {
+      activeDirectoryAuth: 'Enabled'
+      passwordAuth: 'Enabled'
+      tenantId: '1fb581f3-43ef-4dfd-b8f7-4ca7bc32ec24'
+    }
+    backup: {
+      backupRetentionDays: 7
+      geoRedundantBackup: 'Disabled'
+    }
+    createMode: 'string'
+    dataEncryption: {
+      type: 'SystemManaged'
+    }
+    highAvailability: {
+      mode: 'Disabled'
+    }
+    maintenanceWindow: {
+      customWindow: 'Disabled'
+      dayOfWeek: 0
+      startHour: 0
+      startMinute: 0
+    }
+    // replicaCapacity: int
+    // replicationRole: 'string'
+    storage: {
+      storageSizeGB: 32
+    }
+    version: '14'
+  }
+}