From 072e82fae1f7baba740f6efaf3a74bb1cd6cdbaf Mon Sep 17 00:00:00 2001
From: alex <alexpolo2850@gmail.com>
Date: Tue, 13 Jun 2023 15:28:45 +0200
Subject: [PATCH] tower2

---
 02_azure_tower.yml | 112 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 112 insertions(+)
 create mode 100644 02_azure_tower.yml

diff --git a/02_azure_tower.yml b/02_azure_tower.yml
new file mode 100644
index 0000000..1c43e52
--- /dev/null
+++ b/02_azure_tower.yml
@@ -0,0 +1,112 @@
+---
+- name: Azure Webserver
+  hosts: localhost
+  connection: local
+  vars:
+    user: alex
+    location: northeurope
+    virtual_network_name: "webserver_{{ user }}"
+    subnet: Webserver
+    resource_group: "webserver_{{ user }}"
+    domain_sub: "domain{{ user }}"
+
+
+  tasks:
+    - name: Create a virtual network
+      azure.azcollection.azure_rm_virtualnetwork:
+        resource_group: "{{ resource_group }}"
+        name: "{{ virtual_network_name }}"
+        address_prefixes_cidr: "10.99.0.0/16"
+        tags:
+            solution: "webserver_{{ user }}"
+            delete: ansibletraining
+
+    - name: Create a subnet
+      azure.azcollection.azure_rm_subnet:
+        resource_group: "{{ resource_group }}"
+        virtual_network_name: "{{ virtual_network_name }}"
+        name: "{{ subnet }}"
+        address_prefix_cidr: "10.99.0.0/24"
+
+
+    - name: Create a public ip address for webserver
+      azure_rm_publicipaddress:
+        resource_group: "{{ resource_group }}"
+        name: public_ip_webserver
+        allocation_method: static
+        domain_name: "webserver{{ domain_sub }}"
+        tags:
+            solution: "webserver_{{ user }}"
+            delete: ansibletraining
+      register: webserver_pub_ip
+
+    - name: Create Security Group for webserver
+      azure_rm_securitygroup:
+        resource_group: "{{ resource_group }}"
+        name: "webserver_securitygroup"
+        purge_rules: true
+        rules:
+            - name: Allow_SSH
+              protocol: Tcp
+              destination_port_range: 22
+              access: Allow
+              priority: 100
+              direction: Inbound
+            - name: Allow_HTTP
+              protocol: Tcp
+              destination_port_range: 80
+              access: Allow
+              priority: 101
+              direction: Inbound
+        tags:
+            solution: "webserver_{{ user }}"
+            delete: ansibletraining
+
+    - name: Create a network interface for webserver
+      azure_rm_networkinterface:
+        name: "webserver_nic01"
+        resource_group: "{{ resource_group }}"
+        virtual_network: "{{ virtual_network_name }}"
+        subnet_name: "{{ subnet }}"
+        security_group: "webserver_securitygroup"
+        ip_configurations:
+          - name: "webserver_nic01_ipconfig"
+            public_ip_address_name: "public_ip_webserver"
+            primary: True
+        tags:
+            solution: "webserver_{{ user }}"
+            delete: ansibletraining
+
+    - name: Create a VM webserver
+      azure_rm_virtualmachine:
+        resource_group: "{{ resource_group }}"
+        name: "webserver"
+        os_type: Linux
+        admin_username: "{{ user }}"
+        ssh_password_enabled: false
+        ssh_public_keys:
+          - path: "/home/{{ user }}/.ssh/authorized_keys"
+            key_data: "{{ ssh_public_key }}"
+        managed_disk_type: Standard_LRS
+        state: present
+        image:
+          offer: RHEL
+          publisher: RedHat
+          sku: "8_4"
+          version: latest
+        vm_size: Standard_A1_v2
+        network_interfaces: "webserver_nic01"
+        tags:
+            solution: "webserver_{{ user }}"
+            delete: ansibletraining
+
+    - name: Show webserver public ip
+      debug:
+        msg: "{{ webserver_pub_ip.state.ip_address }}"
+
+    - name: Wait for ssh on webserver
+      ansible.builtin.wait_for:
+        host: "{{ webserver_pub_ip.state.ip_address }}"
+        port: 22
+        delay: 10
+        timeout: 600