1terraform {
2  required_providers {
3    azurerm = {
4      source  = "hashicorp/azurerm"
5      version = "~> 4.0"
6    }
7  }
8}
9 
10provider "azurerm" {
11  features {}
12  subscription_id = var.subscription_id
13}
14 
15resource "azurerm_resource_group" "main" {
16  name     = var.resource_group_name
17  location = var.location
18  tags     = var.tags
19}
20 
21resource "azurerm_network_security_group" "main" {
22  name                = "${var.vm_name}-nsg"
23  location            = azurerm_resource_group.main.location
24  resource_group_name = azurerm_resource_group.main.name
25  tags                = var.tags
26 
27  security_rule {
28    name                       = "AllowSSH"
29    priority                   = 1000
30    direction                  = "Inbound"
31    access                     = "Allow"
32    protocol                   = "Tcp"
33    source_port_range          = "*"
34    destination_port_range     = "22"
35    source_address_prefix      = var.ssh_source_address_prefix
36    destination_address_prefix = "*"
37  }
38}
39 
40resource "azurerm_virtual_network" "main" {
41  name                = "${var.vm_name}-vnet"
42  address_space       = ["10.0.0.0/16"]
43  location            = azurerm_resource_group.main.location
44  resource_group_name = azurerm_resource_group.main.name
45  tags                = var.tags
46}
47 
48resource "azurerm_subnet" "main" {
49  name                 = "default"
50  resource_group_name  = azurerm_resource_group.main.name
51  virtual_network_name = azurerm_virtual_network.main.name
52  address_prefixes     = ["10.0.0.0/24"]
53}
54 
55resource "azurerm_subnet_network_security_group_association" "main" {
56  subnet_id                 = azurerm_subnet.main.id
57  network_security_group_id = azurerm_network_security_group.main.id
58}
59 
60resource "azurerm_public_ip" "main" {
61  name                = "${var.vm_name}-ip"
62  location            = azurerm_resource_group.main.location
63  resource_group_name = azurerm_resource_group.main.name
64  allocation_method   = "Static"
65  sku                 = "Standard"
66  tags                = var.tags
67}
68 
69resource "azurerm_network_interface" "main" {
70  name                = "${var.vm_name}-nic"
71  location            = azurerm_resource_group.main.location
72  resource_group_name = azurerm_resource_group.main.name
73  tags                = var.tags
74 
75  ip_configuration {
76    name                          = "ipconfig1"
77    subnet_id                     = azurerm_subnet.main.id
78    private_ip_address_allocation = "Dynamic"
79    public_ip_address_id          = azurerm_public_ip.main.id
80  }
81}
82 
83resource "azurerm_linux_virtual_machine" "main" {
84  name                  = var.vm_name
85  location              = azurerm_resource_group.main.location
86  resource_group_name   = azurerm_resource_group.main.name
87  size                  = var.size
88  admin_username        = var.admin_username
89  network_interface_ids = [azurerm_network_interface.main.id]
90  zone                  = var.zone == "" ? null : var.zone
91  tags                  = var.tags
92 
93  admin_ssh_key {
94    username   = var.admin_username
95    public_key = var.admin_public_key
96  }
97 
98  os_disk {
99    caching              = "ReadWrite"
100    storage_account_type = var.os_disk_type
101    disk_size_gb         = var.os_disk_size_gb
102  }
103 
104  source_image_reference {
105    publisher = "Canonical"
106    offer     = "ubuntu-24_04-lts"
107    sku       = "server"
108    version   = "latest"
109  }
110}
111