resource "random_password" "password" {
  length = 16
  special = true
  override_special = "_!@"
  upper = true
  lower = true
  min_lower = 2
  min_upper = 2
  min_special = 2
}


resource "azurerm_postgresql_server" "postgresql-server" {
  name = "qmi-postgresql-${var.provision_id}"
  location = var.location
  resource_group_name = var.resource_group_name
 
  administrator_login          = var.admin_login
  administrator_login_password = random_password.password.result
 
  sku_name = var.postgresql-sku-name
  version  = var.postgresql-version
 
  storage_mb        = var.postgresql-storage
  auto_grow_enabled = true
  
  backup_retention_days        = 7
  geo_redundant_backup_enabled = false
  public_network_access_enabled     = true
  ssl_enforcement_enabled           = false

    tags = {
    Deployment = "QMI PoC"
    "Cost Center" = "3100"
    QMI_user = var.user_id
  }


}

resource "azurerm_postgresql_database" "postgresql-db" {
  name                = "QlikPostgresqlDB"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  charset             = "utf8"
  collation           = "English_United States.1252"
}


resource "azurerm_postgresql_firewall_rule" "all-azure-services" {
  name                = "AllAzureServices"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "0.0.0.0"
  end_ip_address      = "0.0.0.0"
}

resource "azurerm_postgresql_firewall_rule" "postgresql-fw-ITG-rule1" {
  name                = "ITG"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "188.65.156.32"
  end_ip_address      = "188.65.156.47"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-ITG-rule2" {
  name                = "ITG1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "212.73.252.96"
  end_ip_address      = "212.73.252.103"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-kfar_saba-rule1" {
  name                = "Kfar_Saba"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "194.90.96.176"
  end_ip_address      = "194.90.96.183"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-kfar_saba-rule2" {
  name                = "Kfar_Saba1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "213.57.84.160"
  end_ip_address      = "213.57.84.167"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-Peak_10-rule1" {
  name                = "Peak_10"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "4.4.97.104"
  end_ip_address      = "4.4.97.111"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-Peak_10-rule2" {
  name                = "Peak_101"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "206.196.17.32"
  end_ip_address      = "206.196.17.63"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-Bangalore-rule1" {
  name                = "Bangalore"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "14.98.59.168"
  end_ip_address      = "14.98.59.175"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-Bangalore-rule2" {
  name                = "Bangalore1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "182.74.33.8"
  end_ip_address      = "182.74.33.15"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSUS1" {
  name                = "QCSUS1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "18.205.71.36"
  end_ip_address      = "18.205.71.36"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSUS2" {
  name                = "QCSUS2"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "18.232.32.199"
  end_ip_address      = "18.232.32.199"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSUS3" {
  name                = "QCSUS3"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "34.237.68.254"
  end_ip_address      = "34.237.68.254"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSEU1" {
  name                = "QCSEU1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "34.247.21.179"
  end_ip_address      = "34.247.21.179"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSEU2" {
  name                = "QCSEU2"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "52.31.212.214"
  end_ip_address      = "52.31.212.214"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCS3" {
  name                = "QCSEU3"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "54.154.95.18"
  end_ip_address      = "54.154.95.18"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSAPAC1" {
  name                = "QCSAPAC1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "13.210.43.241"
  end_ip_address      = "13.210.43.241"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSAPAC2" {
  name                = "QCSAPAC2"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "13.236.104.42"
  end_ip_address      = "13.236.104.42"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSAPAC3" {
  name                = "QCSAPAC3"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "13.236.206.172"
  end_ip_address      = "13.236.206.172"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSSingapore1" {
  name                = "QCSSingapore1"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "18.138.163.172"
  end_ip_address      = "18.138.163.172"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSSingapore2" {
  name                = "QCSSingapore2"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "18.142.157.182"
  end_ip_address      = "18.142.157.182"
}
resource "azurerm_postgresql_firewall_rule" "postgresql-fw-QCSSingapore3" {
  name                = "QCSSingapore3"
  resource_group_name = var.resource_group_name
  server_name         = azurerm_postgresql_server.postgresql-server.name
  start_ip_address    = "54.179.13.251"
  end_ip_address      = "54.179.13.251"
}