Add Azure Terraform files

terraform/azure/main.tf

@@ -0,0 +1,223 @@
+resource "azurerm_resource_group" "rg" {
+  location = var.resource_group_location
+  name     = var.resource_group_name_enterprise
+}
+
+resource "azurerm_virtual_network" "antmedia" {
+  name                = "antmedia-network"
+  address_space       = ["10.0.0.0/16"]
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+}
+
+resource "azurerm_subnet" "antmedia" {
+  name                 = "internal"
+  resource_group_name  = azurerm_resource_group.rg.name
+  virtual_network_name = azurerm_virtual_network.antmedia.name
+  address_prefixes     = ["10.0.2.0/24"]
+}
+
+resource "azurerm_network_interface" "antmedia" {
+  name                = "antmedia-nic"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+
+  ip_configuration {
+    name                          = "internal"
+    subnet_id                     = azurerm_subnet.antmedia.id
+    private_ip_address_allocation = "Dynamic"
+    public_ip_address_id          = azurerm_public_ip.antmedia.id
+  }
+}
+
+resource "azurerm_linux_virtual_machine" "antmedia" {
+  name                = "antmedia-machine"
+  resource_group_name = azurerm_resource_group.rg.name
+  location            = azurerm_resource_group.rg.location
+  size                = "Standard_F2s_v2"
+  admin_username      = var.user
+  network_interface_ids = [
+    azurerm_network_interface.antmedia.id,
+  ]
+
+  admin_ssh_key {
+    username   = var.user
+    public_key = file(var.publickeypath)
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  source_image_reference {
+    publisher = "Canonical"
+    offer     = "ubuntu-24_04-lts"
+    sku       = "server"
+    version   = "latest"
+  }
+}
+
+
+resource "azurerm_public_ip" "antmedia" {
+  name                = "antmedia-public-ip"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  allocation_method   = "Static"
+}
+
+output "public_ip_address" {
+  value = azurerm_public_ip.antmedia.ip_address
+}
+
+output "ams_version_debug" {
+  value = var.ams_version
+}
+
+resource "azurerm_network_security_group" "antmedia" {
+  name                = "antmedia-nsg"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+
+  security_rule {
+    name                       = "allow-22"
+    priority                   = 100
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "22"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+
+  security_rule {
+    name                       = "allow-5080"
+    priority                   = 200
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "5080"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+
+  security_rule {
+    name                       = "allow-internet"
+    priority                   = 300
+    direction                  = "Outbound"
+    access                     = "Allow"
+    protocol                   = "*"
+    source_port_range          = "*"
+    destination_port_range     = "*"
+    source_address_prefix      = "*"
+    destination_address_prefix = "Internet"
+  }
+
+}
+
+resource "azurerm_network_interface_security_group_association" "antmedia" {
+  network_interface_id       = azurerm_network_interface.antmedia.id
+  network_security_group_id = azurerm_network_security_group.antmedia.id
+}
+
+
+resource "null_resource" "ams-marketplace-setup" {
+  depends_on = [azurerm_linux_virtual_machine.antmedia]
+  provisioner "remote-exec" {
+    connection {
+      type        = "ssh"
+      user        = var.user
+      host        = azurerm_public_ip.antmedia.ip_address
+      private_key = file(var.privatekeypath)
+    }
+    inline = [
+      "sudo sed -i 's/#\\$nrconf{kernelhints} = -1;/\\$nrconf{kernelhints} = -1;/g'  /etc/needrestart/needrestart.conf",
+      "echo 'NEEDRESTART_SUSPEND=1' >> /etc/environment",
+      "sudo source /etc/environment",
+      "sudo apt-get update",
+      "sudo apt-get dist-upgrade -y",
+      "wget https://raw.githubusercontent.com/ant-media/Scripts/master/install_ant-media-server.sh",
+      "curl -L 'https://drive.usercontent.google.com/download?id=${var.zip_file_id}&export=download&confirm=t' -o 'ams.zip'",
+      "sudo bash ./install_ant-media-server.sh -i ams.zip",
+      "sudo sed -i 's/server.marketplace=.*/server.marketplace=azure/g' /usr/local/antmedia/conf/red5.properties",
+      "sudo systemctl stop antmedia",
+      "sudo rm -rf /usr/local/antmedia/conf/instanceId",
+      "sudo rm -rf /usr/local/antmedia/*.db.* && sudo rm -rf /usr/local/antmedia/*.db",
+      "sudo rm -rf /root/*.zip && sudo rm -rf /root/install*",
+      "sudo rm -rf /root/.ssh",
+      "sudo waagent -deprovision+user -force",
+    ]
+  }
+}
+
+resource "null_resource" "stop_vm" {
+  provisioner "local-exec" {
+    command = "az vm deallocate --name ${azurerm_linux_virtual_machine.antmedia.name} --resource-group ${azurerm_resource_group.rg.name}"
+  }
+
+  depends_on = [
+    azurerm_linux_virtual_machine.antmedia,
+    azurerm_network_interface.antmedia,
+    azurerm_public_ip.antmedia,
+    null_resource.ams-marketplace-setup
+  ]
+}
+
+resource "null_resource" "generalize_vm" {
+  provisioner "local-exec" {
+    command = "az vm generalize --resource-group ${azurerm_resource_group.rg.name} --name ${azurerm_linux_virtual_machine.antmedia.name}"
+  }
+
+  depends_on = [
+    null_resource.stop_vm
+  ]
+}
+
+
+resource "azurerm_shared_image_gallery" "antmedia" {
+  name                = "antmedia_image_gallery"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  description         = "Shared images and things."
+
+  tags = {
+    Marketplace = "Ant Media Server"
+  }
+  depends_on = [null_resource.generalize_vm]
+}
+
+resource "azurerm_shared_image" "antmedia" {
+  name                = var.ams_version
+  gallery_name        = azurerm_shared_image_gallery.antmedia.name
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  os_type             = "Linux"
+  hyper_v_generation  = "V2"
+
+
+  identifier {
+    publisher = "AntMedia"
+    offer     = "Ubuntu"
+    sku       = "Ubuntu"
+  }
+  depends_on = [null_resource.generalize_vm]
+}
+
+resource "azurerm_shared_image_version" "antmedia" {
+  name                = var.ams_version
+  gallery_name        = azurerm_shared_image_gallery.antmedia.name
+  image_name          = azurerm_shared_image.antmedia.name
+  resource_group_name = azurerm_resource_group.rg.name
+  location            = azurerm_resource_group.rg.location
+  managed_image_id    = azurerm_linux_virtual_machine.antmedia.id
+
+
+  target_region {
+    name                   = azurerm_resource_group.rg.location
+    regional_replica_count = 5
+    storage_account_type   = "Standard_LRS"
+  }
+  depends_on = [null_resource.generalize_vm]
+}

terraform/azure/provider.tf

@@ -0,0 +1,13 @@
+terraform {
+  required_providers {
+    azurerm = {
+      source = "hashicorp/azurerm"
+      version = "4.14.0"
+    }
+  }
+}
+
+provider "azurerm" {
+  features {}
+  subscription_id = "ae718616-7308-4063-bc73-5a91f6cc83ed"
+}

terraform/azure/variables.tf

@@ -0,0 +1,43 @@
+variable "resource_group_location" {
+  default     = "North Europe"
+  description = "Location of the resource group."
+}
+
+variable "resource_group_name_enterprise" {
+  default     = "enterprise"
+  description = "Name"
+}
+
+
+variable "resource_group_name_community" {
+  default     = "community"
+  description = "Name"
+}
+
+variable "publickeypath" {
+  type    = string
+  default = "./ssh/id_rsa.pub"
+}
+
+variable "privatekeypath" {
+  type    = string
+  default = "./ssh/id_rsa"
+}
+
+variable "user" {
+  type    = string
+  default = "ubuntu"
+
+}
+
+variable "ams_version" {
+  type        = string
+  description = "AMS Version"
+  default = "2.12.0"
+}
+
+variable "zip_file_id" {
+  description = "Google drive ID"
+  type        = string
+  default = "" 
+}