[WIP] Add infrastructure code for deploying application to Azure

[Copilot]

Azure Infrastructure Implementation Plan

• Create infra/ folder structure
• Create Terraform shared stack (infra/terraform-shared/)
  • Configure Terraform backend with Azure Storage Account
  • Create resource group for shared resources
  • Create Azure Container Registry (ACR)
  • Create Azure Key Vault for secrets
  • Create Storage Account for Terraform state
  • Create Azure AD App Registration for GitHub Actions OIDC
  • Configure federated credentials for GitHub Actions
  • Assign necessary RBAC roles
• Create Terraform app stack (infra/terraform-app/)
  • Create resource group for app resources
  • Create Azure App Service Plan
  • Create Azure App Service for backend
  • Configure App Service to pull from ACR
  • Create Azure PostgreSQL Flexible Server with private networking
  • Create Storage Account for frontend static website
  • Configure static website hosting
  • Create Key Vault access policies
  • Configure App Service to use Key Vault references
• Create helper scripts (infra/scripts/)
  • Script to initialize Terraform backend
  • Script to create and store initial secrets in Key Vault
  • Script for local deployment workflow
• Create GitHub Actions workflow (.github/workflows/deploy.yml)
  • Configure OIDC authentication with Azure
  • Build and push backend Docker image to ACR
  • Deploy backend to App Service
  • Build and deploy frontend to Azure Static Website
• Create documentation (infra/README.md)
  • Prerequisites and setup instructions
  • Local deployment guide
  • GitHub Actions configuration guide
  • Troubleshooting section
• Update root .gitignore for Terraform files

Original prompt

Create infrastructure code for deploying the application into Azure:

• keep everything under infra folder
• use terraform templates and keep the state in Azure Storage Account
• deploy the backend to Azure App Service
• deploy the frontend to Azure Static Website
• the app should be publically accessible
• use private networking whenever possible
• store the backend docker image in an ACR
• keep secrets in a Azure Key Vault
• authenticate github actions with azure federated identity
• use scripting for manual steps and minimize the number of manual steps
• make it possible to deploy the infra from local laptop

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.