# Airgapped Terraform Enterprise on Azure

> In progress and absolutely, totally **not** ready for use.

Stateless active/active.

## Table of contents <!-- omit in toc -->

1. [Requirements](#requirements)
1. [Sources](#sources)

## Requirements

| Requirement             | Description                                                                                                                                        |
| ----------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
| Docker Engine           | Required by Replicated.                                                                                                                            |
| Load balancer           | Azure Application Gateway; FIXME                                                                                                                   |
| Passwords               | All passwords must be stored as a Base64 encoded secret in Azure Key Vault and retrieved during the apply phase.                                   |
| PostgreSQL              | Azure Database For PostgreSQL; FIXME                                                                                                               |
| Redis                   | Azure Cache for Redis; FIXME                                                                                                                       |
| Replicated license file | A valid Replicated license file (`.rli`) must be stored as a Blob in an Azure Storage Account and retrieved during the apply phase.                |
| TFE airgap bundle       | The TFE airgap bundle for Replicated must be stored as a Blob in a Storage Account and retrieved by the VM after first boot.                       |
| TLS certificate         | The TLS certificate and private key files must be PEM-encoded. The TLS certificate file can contain a full chain of TLS certificates if necessary. |
| Tokens                  | All tokens must be stored as a Base64 encoded secret in Azure Key Vault and retrieved during the apply phase.                                      |
| Virtual machine         | Must be a Linux VM.                                                                                                                                |

![requirements diagram]

## Sources

- [Terraform Enterprise]
- [Automated installations] of Replicated
- Hashicorp's [Terraform Enterprise Azure Module][hashicorp/terraform-azurerm-terraform-enterprise] on GitHub
- Azure's [Terraform Enterprise Azure Instance Module][azure-terraform/terraform-azurerm-terraform-enterprise-instance] on GitHub

<!--
  References
  -->

<!-- Upstream -->
[automated installations]: https://help.replicated.com/docs/native/customer-installations/automating/
[azure-terraform/terraform-azurerm-terraform-enterprise-instance]: https://github.com/Azure-Terraform/terraform-azurerm-terraform-enterprise-instance
[hashicorp/terraform-azurerm-terraform-enterprise]: https://github.com/hashicorp/terraform-azurerm-terraform-enterprise
[terraform enterprise]: https://developer.hashicorp.com/terraform/enterprise

<!-- Knowledge base -->
[requirements diagram]: design/images/requirements.png
