{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "vmSku": {
      "type": "string",
      "defaultValue": "Standard_D2s_v3",
      "metadata": {
        "description": "Size of VMs in the VM Scale Set."
      }
    },
    "clusterName": {
      "type": "string",
      "maxLength": 61,
      "metadata": {
        "description": "String used as a base for naming resources. Must be 3-61 characters in length and globally unique across Azure. A hash is prepended to this string for some resources, and resource-specific information is appended."
      }
    },
    "location": {
      "type": "string",
      "defaultValue": "[resourceGroup().location]",
      "metadata": {
        "description": "Location for the resources."
      }
    },
    "artifactoryVersion": {
      "type": "string",
      "defaultValue": "0.0.10",
      "allowedValues": [
        "7.2.1",
        "7.3.2",
        "7.4.3",
        "0.0.2",
        "0.0.3",
        "0.0.4",
        "0.0.5",
        "0.0.61",
	    "0.0.10"
      ],
      "metadata": {
        "description": "JFrog Container Registry-vm image version to deploy."
      }
    },
    "masterKey": {
      "type": "securestring",
      "maxLength": 64,
      "metadata": {
        "description": "Master key for JFrog Container Registry cluster. Generate master.key using command '$openssl rand -hex 16'"
      }
    },
    "adminUsername": {
      "type": "string",
      "metadata": {
        "description": "Admin username on all VMs. Follow conventions for azure VM admin user name."
      }
    },
    "adminPassword": {
      "type": "securestring",
      "metadata": {
        "description": "Admin password on all VMs. Follow conventions for azure VM admin password rules."
      }
    },
    "certificate": {
      "type": "securestring",
      "metadata": {
        "description": "To use Artifactory as docker registry you need to provide wild card valid Certificate. Provide your SSL Certificate."
      }
    },
    "certificateKey": {
      "type": "securestring",
      "metadata":  {
        "description": "Provide your SSL Certificate key"
      }
    },
    "certificateDomain": {
      "type": "string",
      "minLength": 1,
      "defaultValue": "artifactory",
      "metadata":  {
        "description": "Provide your Certificate Domain Name. For e.g jfrog.team for certificate with *.jfrog.team"
      }
    },
    "artifactoryServerName": {
      "type": "string",
      "minLength": 1,
      "defaultValue": "artifactory",
      "metadata":  {
        "description": "Provide artifactory server name to be used in Nginx. e.g artifactory for artifactory.jfrog.team"
      }
    },
    "extraJavaOptions": {
      "type": "string",
      "minLength": 1,
      "defaultValue": "-server -Xms2g -Xmx12g -Xss256k -XX:+UseG1GC -XX:OnOutOfMemoryError=\\\"kill -9 %p\\\"",
      "metadata":  {
        "description": "Setting Java Memory Parameters for Artifactory. Learn about system requirements for Artifactory https://www.jfrog.com/confluence/display/RTF/System+Requirements#SystemRequirements-RecommendedHardware."
      }
    },
    "DB_Admin_User": {
      "type": "string",
      "minLength": 1,
      "metadata": {
        "description": "Database Admin user name"
      }
    },
    "DB_Admin_Password": {
      "type": "securestring",
      "minLength": 1,
      "metadata": {
        "description": "Database Admin password"
      }
    },
    "DB_Name": {
      "type": "string",
      "minLength": 1,
      "metadata": {
        "description": "Database name"
      }
    },
    "DB_Edition": {
      "type": "string",
      "minLength": 1,
      "defaultValue": "Basic",
      "allowedValues": [
        "Basic",
        "Standard",
        "Premium"
      ],
      "metadata": {
        "description": "Database Edition"
      }
    },
    "storageAccountType": {
      "type": "string",
      "defaultValue": "Standard_LRS",
      "allowedValues": [
        "Standard_LRS",
        "Standard_GRS",
        "Standard_ZRS"
      ],
      "metadata": {
        "description": "Storage Account type"
      }
    },
    "_artifactsLocation": {
      "type": "string",
      "metadata": {
        "description": "The base URI where artifacts required by this template are located. When the template is deployed using the accompanying scripts, a private location in the subscription will be used and this value will be automatically generated."
      },
      "defaultValue": "[deployment().properties.templateLink.uri]"
    },
    "_artifactsLocationSasToken": {
      "type": "securestring",
      "metadata": {
        "description": "The sasToken required to access _artifactsLocation.  When the template is deployed using the accompanying scripts, a sasToken will be automatically generated."
      },
      "defaultValue": ""
    }
  },
  "variables": {
    "namingInfix": "[toLower(substring(concat(parameters('clusterName'), uniqueString(resourceGroup().id)), 0, 9))]",
    "addressPrefix": "10.0.0.0/16",
    "subnetPrimaryPrefix": "10.0.1.0/24",
    "virtualNetworkName": "[concat(variables('namingInfix'), 'vnet')]",
    "subnetPrimaryName": "[concat(variables('namingInfix'), 'primarySubnet')]",
    "scaleSetPrimaryName": "[concat(variables('namingInfix'), 'primaryScaleset')]",
    "lbName": "[concat(variables('namingInfix'), 'lb')]",
    "bepoolPrimaryName": "[concat(variables('lbName'), 'primaryBepool')]",
    "fepoolPrimaryName": "[concat(variables('lbName'), 'primaryFepool')]",
    "bepoolPrimaryID": "[resourceId('Microsoft.Network/loadBalancers/backendAddressPools', variables('lbName'), variables('bepoolPrimaryName'))]",
    "feIpConfigPrimaryName": "[concat(variables('fepoolPrimaryName'), 'primaryIpConfig')]",
    "feIpConfigPrimaryId": "[resourceId('Microsoft.Network/loadBalancers/frontendIpConfigurations', variables('lbName'), variables('feIpConfigPrimaryName'))]",
    "pipPrimaryName": "[concat(variables('namingInfix'), 'primaryPip')]",
    "nicPrimaryName": "[concat(variables('namingInfix'), 'primaryNic')]",
    "natPoolPrimaryName": "[concat(variables('lbName'), 'primaryNatpool')]",
    "ipConfigName": "[concat(variables('namingInfix'), 'ipconfig')]",
    "httpProbePrimaryName": "primaryHttpProbe",
    "httpsProbePrimaryName": "primaryHttpsProbe",
    "storageAccountName": "[concat(variables('namingInfix'), 'storage')]",
    "vmStorageAccountContainerName": "filestore",
    "azureSqlServerName": "[concat(variables('namingInfix'), 'sqlsrv')]",
    "DB_Name": "[parameters('DB_Name')]",
    "DB_Admin_User": "[parameters('DB_Admin_User')]",
    "DB_Admin_Password": "[parameters('DB_Admin_Password')]",
    "DB_Edition": "[parameters('DB_Edition')]",
    "DB_Location": "[parameters('location')]",
    "masterKey": "[parameters('masterKey')]",
    "certificate": "[parameters('certificate')]",
    "certificateKey": "[parameters('certificateKey')]",
    "certificateDomain": "[parameters('certificateDomain')]",
    "artifactoryServerName": "[parameters('artifactoryServerName')]",
    "extraJavaOptions": "[parameters('extraJavaOptions')]",
    "osType": {
      "publisher": "jfrog",
      "offer": "jfrogcontainerregistry-vm",
      "sku": "artifactory-jcr",
      "version": "[parameters('artifactoryVersion')]"
    },
    "imageReference": "[variables('osType')]",
    "dbTemplate": "azureDBDeploy.json",
    "dbTemplateLocation": "[uri(parameters('_artifactsLocation'), concat('nested/', variables('dbTemplate'), parameters('_artifactsLocationSasToken')))]",
    "nsgName": "[concat(variables('namingInfix'), 'nsg')]"
  },
  "resources": [
    {
      "type": "Microsoft.Network/networkSecurityGroups",
      "location": "[parameters('location')]",
      "name": "[variables('nsgName')]",
      "apiVersion": "2020-03-01",
      "properties": {
        "securityRules": [
          {
            "name": "ssh-rule",
            "properties": {
              "description": "Allow SSH",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "22",
              "sourceAddressPrefix": "Internet",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 100,
              "direction": "Inbound"
            }
          },
          {
            "name": "http-artifactory-rule",
            "properties": {
              "description": "Allow HTTP",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "8081",
              "sourceAddressPrefix": "Internet",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 101,
              "direction": "Inbound"
            }
          },
          {
            "name": "http-nginx-rule",
            "properties": {
              "description": "Allow HTTP",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "80",
              "sourceAddressPrefix": "Internet",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 102,
              "direction": "Inbound"
            }
          },
          {
            "name": "https-nginx-rule",
            "properties": {
              "description": "Allow HTTP",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "443",
              "sourceAddressPrefix": "Internet",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 103,
              "direction": "Inbound"
            }
          },
          {
            "name": "membership-rule",
            "properties": {
              "description": "Allow HTTP",
              "protocol": "Tcp",
              "sourcePortRange": "*",
              "destinationPortRange": "10001",
              "sourceAddressPrefix": "Internet",
              "destinationAddressPrefix": "*",
              "access": "Allow",
              "priority": 105,
              "direction": "Inbound"
            }
          }
        ]
      }
    },
    {
      "type": "Microsoft.Network/virtualNetworks",
      "name": "[variables('virtualNetworkName')]",
      "location": "[parameters('location')]",
      "apiVersion": "2020-03-01",
      "dependsOn": [
        "[resourceId('Microsoft.Network/networkSecurityGroups/', variables('nsgName'))]"
      ],
      "properties": {
        "addressSpace": {
          "addressPrefixes": [
            "[variables('addressPrefix')]"
          ]
        },
        "subnets": [
          {
            "name": "[variables('subnetPrimaryName')]",
            "properties": {
              "addressPrefix": "[variables('subnetPrimaryPrefix')]",
              "networkSecurityGroup": {
                "id": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]"
              }
            }
          }
        ]
      }
    },
    {
      "apiVersion": "2020-03-01",
      "type": "Microsoft.Network/networkInterfaces",
      "name": "[variables('nicPrimaryName')]",
      "location": "[parameters('location')]",
      "dependsOn": [
        "[resourceId('Microsoft.Network/publicIPAddresses/', variables('pipPrimaryName'))]",
        "[resourceId('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]",
        "[resourceId('Microsoft.Network/networkSecurityGroups/', variables('nsgName'))]"
      ],
      "properties": {
        "ipConfigurations": [
          {
            "name": "ipconfig1",
            "properties": {
              "privateIPAllocationMethod": "Dynamic",
              "subnet": {
                "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', variables('virtualNetworkName'), variables('subnetPrimaryName'))]"
              }
            }
          }
        ],
        "networkSecurityGroup": {
          "id": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]"
        }
      }
    },
    {
      "type": "Microsoft.Network/publicIPAddresses",
      "name": "[variables('pipPrimaryName')]",
      "location": "[parameters('location')]",
      "sku": {
        "name": "Standard"
      },
      "apiVersion": "2020-03-01",
      "properties": {
        "publicIPAllocationMethod": "Static",
        "dnsSettings": {
          "domainNameLabel": "[variables('namingInfix')]"
        }
      }
    },
    {
      "type": "Microsoft.Network/loadBalancers",
      "name": "[variables('lbName')]",
      "location": "[parameters('location')]",
      "apiVersion": "2020-03-01",
      "sku": {
        "name": "Standard"
      },
      "dependsOn": [
        "[resourceId('Microsoft.Network/publicIPAddresses/', variables('pipPrimaryName'))]"
      ],
      "tags":{
        "displayName": "Load Balancer"
      },
      "properties": {
        "frontendIPConfigurations": [
          {
            "name": "[variables('feIpConfigPrimaryName')]",
            "properties": {
              "publicIPAddress": {
                "id": "[resourceId('Microsoft.Network/publicIPAddresses', variables('pipPrimaryName'))]"
              }
            }
          }
        ],
        "backendAddressPools": [
          {
            "name": "[variables('bepoolPrimaryName')]"
          }
        ],
        "inboundNatPools": [
          {
            "name": "[variables('natPoolPrimaryName')]",
            "properties": {
              "frontendIPConfiguration": {
                "id": "[variables('feIpConfigPrimaryId')]"
              },
              "protocol": "tcp",
              "frontendPortRangeStart": 10022,
              "frontendPortRangeEnd": 11022,
              "backendPort": 22
            }
          }
        ],
        "loadBalancingRules": [
          {
            "name": "HTTPRulePrimary",
            "properties": {
              "loadDistribution": "Default",
              "frontendIPConfiguration": {
                "id": "[variables('feIpConfigPrimaryId')]"
              },
              "backendAddressPool": {
                "id": "[variables('bepoolPrimaryID')]"
              },
              "protocol": "Tcp",
              "frontendPort": 80,
              "backendPort": 80,
              "enableFloatingIP": false,
              "idleTimeoutInMinutes": 5,
              "probe": {
                "id": "[resourceId('Microsoft.Network/loadBalancers/probes', variables('lbName'), variables('httpProbePrimaryName'))]"
              }
            }
          },
          {
            "name": "HTTPSRulePrimary",
            "properties": {
              "loadDistribution": "Default",
              "frontendIPConfiguration": {
                "id": "[variables('feIpConfigPrimaryId')]"
              },
              "backendAddressPool": {
                "id": "[variables('bepoolPrimaryID')]"
              },
              "protocol": "Tcp",
              "frontendPort": 443,
              "backendPort": 443,
              "enableFloatingIP": false,
              "idleTimeoutInMinutes": 5,
              "probe": {
                "id": "[resourceId('Microsoft.Network/loadBalancers/probes', variables('lbName'), variables('httpsProbePrimaryName'))]"
              }
            }
          }
        ],
        "probes": [
          {
            "name": "[variables('httpProbePrimaryName')]",
            "properties": {
              "protocol": "Http",
              "requestPath": "/artifactory/api/system/ping",
              "port": 80,
              "intervalInSeconds": 60,
              "numberOfProbes": 5
            }
          },
          {
            "name": "[variables('httpsProbePrimaryName')]",
            "properties": {
              "protocol": "Tcp",
              "port": 443,
              "intervalInSeconds": 60,
              "numberOfProbes": 5
            }
          }
        ]
      }
    },
    {
      "apiVersion": "2019-06-01",
      "type": "Microsoft.Storage/storageAccounts",
      "name": "[variables('storageAccountName')]",
      "location": "[parameters('location')]",
      "sku": {
        "name": "[parameters('storageAccountType')]"
      },
      "tags":{
        "displayName": "Artifactory Storage Account"
      },
      "kind": "Storage",
      "properties": {}
    },
    {
      "type": "Microsoft.Resources/deployments",
      "name": "deploySQLDB",
      "apiVersion": "2019-09-01",
      "properties": {
        "mode": "Incremental",
        "templateLink": {
          "uri": "[variables('dbTemplateLocation')]",
          "contentVersion": "1.0.0.0"
        },
        "parameters": {
          "db_user": {
            "value": "[parameters('DB_Admin_User')]"
          },
          "db_password": {
            "value": "[parameters('DB_Admin_Password')]"
          },
          "db_server": {
            "value": "[variables('azureSqlServerName')]"
          },
          "db_name": {
            "value": "[parameters('DB_Name')]"
          },
          "db_edition": {
            "value": "[variables('DB_Edition')]"
          },
          "db_location": {
            "value": "[variables('DB_Location')]"
          }
        }
      }
    },
    {
      "type": "Microsoft.Compute/virtualMachineScaleSets",
      "name": "[variables('scaleSetPrimaryName')]",
      "location": "[parameters('location')]",
      "apiVersion": "2020-06-01",
      "dependsOn": [
        "[resourceId('Microsoft.Network/loadBalancers/', variables('lbName'))]",
        "[resourceId('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]",
        "[resourceId('Microsoft.Resources/deployments/', 'deploySQLDB')]",
        "[resourceId('Microsoft.Storage/storageAccounts/', variables('storageAccountName'))]"
      ],
      "plan": {
        "name": "artifactory-jcr",
        "publisher": "jfrog",
        "product": "jfrogcontainerregistry-vm"
      },
      "sku": {
        "name": "[parameters('vmSku')]",
        "tier": "Standard",
        "capacity": "1"
      },
      "properties": {
        "singlePlacementGroup": true,
        "overprovision": "false",
        "upgradePolicy": {
          "mode": "Manual"
        },
        "virtualMachineProfile": {
          "storageProfile": {
            "osDisk": {
              "caching": "ReadWrite",
              "diskSizeGB": "250",
              "createOption": "FromImage"
            },
            "imageReference": "[variables('imageReference')]"
          },
          "osProfile": {
            "computerNamePrefix": "[variables('namingInfix')]",
            "adminUsername": "[parameters('adminUsername')]",
            "adminPassword": "[parameters('adminPassword')]",
            "customData": "[base64(concat('#INSTALL SCRIPT INPUTS\nCERTIFICATE_KEY=',variables('certificateKey'),'\nCERTIFICATE=', variables('certificate'),'\nCERTIFICATE_DOMAIN=',variables('certificateDomain'),'\nARTIFACTORY_SERVER_NAME=',variables('artifactoryServerName'),'\nEXTRA_JAVA_OPTS=',variables('extraJavaOptions'),'\nJDBC_STR=',reference('Microsoft.Resources/deployments/deploySQLDB').outputs.jdbcConnString.value,'\nDB_NAME=',variables('DB_Name'),'\nDB_ADMIN_USER=',variables('DB_Admin_User'),'\nDB_ADMIN_PASSWD=',variables('DB_Admin_Password'),'\nSTO_ACT_NAME=',variables('storageAccountName'),'\nSTO_ACT_ENDPOINT=',reference(resourceId('Microsoft.Storage/storageAccounts/', variables('storageAccountName'))).primaryEndpoints.blob,'\nSTO_CTR_NAME=',variables('vmStorageAccountContainerName'),'\nSTO_ACT_KEY=',listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName')), '2018-07-01').keys[0].value,'\nMASTER_KEY=',variables('masterKey'),'\nIS_PRIMARY=','true','\n'))]"
          },
          "networkProfile": {
            "networkInterfaceConfigurations": [
              {
                "name": "[variables('nicPrimaryName')]",
                "properties": {
                  "primary": true,
                  "ipConfigurations": [
                    {
                      "name": "[concat(variables('ipConfigName'),'1')]",
                      "properties": {
                        "subnet": {
                          "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', variables('virtualNetworkName'), variables('subnetPrimaryName'))]"
                        },
                        "loadBalancerBackendAddressPools": [
                          {
                            "id": "[resourceId('Microsoft.Network/loadBalancers/backendAddressPools', variables('lbName'), variables('bePoolPrimaryName'))]"
                          }
                        ],
                        "loadBalancerInboundNatPools": [
                          {
                            "id": "[resourceId('Microsoft.Network/loadBalancers/inboundNatPools', variables('lbName'), variables('natPoolPrimaryName'))]"
                          }
                        ]
                      }
                    }
                  ]
                }
              }
            ]
          },
          "extensionProfile": {
            "extensions": [
              {
                "name": "extension1",
                "properties": {
                  "publisher": "Microsoft.Azure.Extensions",
                  "type": "CustomScript",
                  "typeHandlerVersion": "2.0",
                  "autoUpgradeMinorVersion": false,
                  "settings": {
                    "fileUris": [
                      "[uri(parameters('_artifactsLocation'), concat('scripts/install_artifactory7.sh', parameters('_artifactsLocationSasToken')))]"
                    ]
                  },
                  "protectedSettings": {
                    "commandToExecute": "sh install_artifactory7.sh"
                  }
                }
              }
            ]
          }
        }
      }
    }
  ],
  "outputs": {
    "fqdn": {
      "value": "[reference(resourceId('Microsoft.Network/publicIPAddresses',variables('pipPrimaryName')),'2018-07-01').dnsSettings.fqdn]",
      "type": "string"
    }
  }
}
