zyh41/deploy-sourcegraph-azure

Deploy Sourcegraph on Azure Container Instance using Terraform

deploy-sourcegraph-azure

This Terraform plan creates a resource group and a container instance with the latest stable version of Sourcegraph in Azure.

Prerequisities

• Azure account

• Terraform

• Auth Terraform to Azure using Azure CLI or CloudShell in Azure and/or here

• openssl or mkcert to generate self signed certificates for HTTPS.

Commands

0. Clone this repository and generate a self signed cert using openssl

openssl req -new -newkey rsa:2048 -nodes -keyout sourcegraph.key -out sourcegraph.csr -config openssl.conf

This will created a private key and a certificate signing request using openssl.conf.

# generate and sign cert using private key and config file from above
openssl x509 -req -days 365 -in sourcegraph.csr -signkey sourcegraph.key -out sourcegraph.crt -extfile openssl.conf -extensions req_ext

1. Initialize Terraform:

terraform init

2. Review the Terraform execution plan:

terraform plan

Example output:

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the
following symbols:
  + create

Terraform will perform the following actions:

  # azurerm_container_group.this will be created
  + resource "azurerm_container_group" "this" {
      + dns_name_label      = "sourcegraph-in-aci"
      + fqdn                = (known after apply)
      + id                  = (known after apply)
      + ip_address          = (known after apply)
      + ip_address_type     = "public"
      + location            = "westus"
      + name                = "sourcegraph-in-aci"
      + os_type             = "Linux"
      + resource_group_name = "my-resource-group"
      + restart_policy      = "OnFailure"

      + container {
          + commands = (known after apply)
          + cpu      = 2
          + image    = "sourcegraph/server:3.31.0"
          + memory   = 4
          + name     = "sourcegraph"

          + ports {
              + port     = 443
              + protocol = "TCP"
            }
          + ports {
              + port     = 80
              + protocol = "TCP"
            }

          + volume {
              + empty_dir  = false
              + mount_path = "/etc/sourcegraph"
              + name       = "nginx-config"
              + read_only  = false
              + secret     = (sensitive value)
            }
        }

      + identity {
          + identity_ids = (known after apply)
          + principal_id = (known after apply)
          + type         = (known after apply)
        }
    }

  # azurerm_resource_group.this will be created
  + resource "azurerm_resource_group" "this" {
      + id       = (known after apply)
      + location = "westus"
      + name     = "my-resource-group"
    }

Plan: 2 to add, 0 to change, 0 to destroy.

Changes to Outputs:
  + fqdn      = (known after apply)
  + server_ip = (known after apply)

3. Deploy Sourcegraph using Terraform:

terraform apply

Answer 'yes' if asked Do you want to perform these actions?

Once its deployed, you can copy the output server_ip or fqdn to browser and use Sourcegraph.

4. To destroy the instance, run:

terraform destroy

Todos:

• Deploy to Azure compute
• HTTPS
• SSH