Terraformリソース定義のパラメータ一覧

name = "myapp-db-server"

location = "japaneast"

resource_group_name = azurerm_resource_group.main.name

tags = {
  environment = "production"
  team        = "backend"
  project     = "myapp"
}

sku_name = "GP_Standard_D2s_v3"

storage_mb = 32768  # 32 GB

auto_grow_enabled = true

backup_retention_days = 14

geo_redundant_backup_enabled = true

administrator_login = "adminuser"

# 変数で受け取る場合
administrator_password = var.db_password

# 変数側で機密指定
variable "db_password" {
  type      = string
  sensitive = true
}

public_network_access_enabled = false

# PostgreSQL Flexible Server
version = "16"

# MySQL Flexible Server
version = "8.0.21"

high_availability {
  mode                      = "ZoneRedundant"
  standby_availability_zone = "2"
}

sku_name = "Standard"

family = "C"

capacity = 1

redis_version = "6"

enable_non_ssl_port = false

minimum_tls_version = "1.2"

redis_configuration {
  maxmemory_policy             = "allkeys-lru"
  maxmemory_reserved           = 50
  maxfragmentationmemory_reserved = 50
}

patch_schedule {
  day_of_week    = "Sunday"
  start_hour_utc = 18  # UTC 18:00 = JST 03:00
}

account_tier = "Standard"

account_replication_type = "ZRS"  # 本番推奨

account_kind = "StorageV2"

access_tier = "Hot"

enable_https_traffic_only = true

min_tls_version = "TLS1_2"

allow_nested_items_to_be_public = false

blob_properties {
  versioning_enabled  = true
  change_feed_enabled = true

  delete_retention_policy {
    days = 7
  }

  container_delete_retention_policy {
    days = 7
  }
}

network_rules {
  default_action             = "Deny"
  bypass                     = ["AzureServices"]
  ip_rules                   = ["203.0.113.0/24"]
  virtual_network_subnet_ids = [azurerm_subnet.app.id]
}

resource "azurerm_postgresql_flexible_server" "main" {
  # 基本情報
  name                = "myapp-db-${var.env}"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name

  # スペック
  sku_name   = var.env == "production" ? "GP_Standard_D4s_v3" : "B_Standard_B1ms"
  storage_mb = 65536
  version    = "16"

  # バックアップ
  backup_retention_days        = var.env == "production" ? 14 : 7
  geo_redundant_backup_enabled = var.env == "production"

  # 認証
  administrator_login    = "adminuser"
  administrator_password = var.db_password

  # ネットワーク
  public_network_access_enabled = false
  delegated_subnet_id           = azurerm_subnet.db.id
  private_dns_zone_id           = azurerm_private_dns_zone.db.id

  # 高可用性（本番のみ）
  dynamic "high_availability" {
    for_each = var.env == "production" ? [1] : []
    content {
      mode                      = "ZoneRedundant"
      standby_availability_zone = "2"
    }
  }

  tags = {
    environment = var.env
    managed_by  = "terraform"
  }
}

variable "env" {
  type    = string
  default = "development"
}

variable "db_password" {
  type      = string
  sensitive = true
}

resource "azurerm_redis_cache" "main" {
  name                = "myapp-redis-${var.env}"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name

  # スペック（3つセットで指定）
  sku_name  = var.env == "production" ? "Standard" : "Basic"
  family    = "C"
  capacity  = var.env == "production" ? 1 : 0  # 1 GB or 250 MB

  redis_version       = "6"
  enable_non_ssl_port = false
  minimum_tls_version = "1.2"

  redis_configuration {
    maxmemory_policy                = "allkeys-lru"
    maxmemory_reserved              = 50
    maxfragmentationmemory_reserved = 50
  }

  # メンテナンスウィンドウ（本番のみ）
  dynamic "patch_schedule" {
    for_each = var.env == "production" ? [1] : []
    content {
      day_of_week    = "Sunday"
      start_hour_utc = 18  # JST 03:00
    }
  }

  tags = {
    environment = var.env
    managed_by  = "terraform"
  }
}

resource "azurerm_storage_account" "main" {
  name                = "myapp${var.env}storage"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name

  # スペック
  account_tier             = "Standard"
  account_replication_type = var.env == "production" ? "ZRS" : "LRS"
  account_kind             = "StorageV2"
  access_tier              = "Hot"

  # セキュリティ
  enable_https_traffic_only       = true
  min_tls_version                 = "TLS1_2"
  allow_nested_items_to_be_public = false

  # Blob保護設定
  blob_properties {
    versioning_enabled  = var.env == "production"
    change_feed_enabled = var.env == "production"

    delete_retention_policy {
      days = var.env == "production" ? 14 : 7
    }

    container_delete_retention_policy {
      days = var.env == "production" ? 14 : 7
    }
  }

  # ネットワーク制限（本番のみ）
  dynamic "network_rules" {
    for_each = var.env == "production" ? [1] : []
    content {
      default_action             = "Deny"
      bypass                     = ["AzureServices"]
      virtual_network_subnet_ids = [azurerm_subnet.app.id]
    }
  }

  tags = {
    environment = var.env
    managed_by  = "terraform"
  }
}