@polymorphism-tech/morph-spec 4.3.3 → 4.3.4

package/framework/templates/infrastructure/azure/README.md

@@ -0,0 +1,286 @@
+# MORPH-SPEC - Templates Bicep
+
+Templates de infraestrutura para Azure com suporte a App Service e Container Apps.
+
+---
+
+## 🚀 Quick Start
+
+### 1. App Service Free (Desenvolvimento - $0/mês)
+
+```bash
+# Deploy infraestrutura com App Service Free
+az deployment group create \
+  --resource-group rg-myapp-dev \
+  --template-file main.bicep \
+  --parameters @parameters.dev.json \
+  --parameters appName=myapp
+```
+
+### 2. Container Apps (Produção - $5-15/mês)
+
+```bash
+# Build e push imagem para ACR
+az acr build \
+  --registry acrXXXX \
+  --image myapp:v1.0.0 \
+  --file Dockerfile \
+  .
+
+# Deploy infraestrutura com Container Apps
+az deployment group create \
+  --resource-group rg-myapp-prod \
+  --template-file main.bicep \
+  --parameters @parameters.prod.json \
+  --parameters appName=myapp
+```
+
+---
+
+## 📁 Estrutura de Arquivos
+
+```
+infra/
+├── main.bicep                    # Entry point com lógica condicional
+├── parameters.dev.json           # Params dev (App Service Free)
+├── parameters.prod.json          # Params prod (Container Apps)
+├── app-service.bicep             # Template App Service
+├── container-app.bicep           # Template Container App
+├── container-app-env.bicep       # Container Apps Environment
+├── sql-database.bicep            # Azure SQL Database
+├── storage.bicep                 # Storage Account
+├── key-vault.bicep               # Key Vault
+└── app-insights.bicep            # Application Insights
+```
+
+---
+
+## ⚙️ Parâmetros Principais
+
+### main.bicep
+
+| Parâmetro | Tipo | Default | Descrição |
+|-----------|------|---------|-----------|
+| `environment` | string | `dev` | Ambiente (dev, staging, prod) |
+| `appName` | string | **required** | Nome da aplicação (3-15 chars) |
+| `location` | string | `resourceGroup().location` | Região Azure |
+| `hostingType` | string | `appservice` | Tipo de hosting (`appservice` ou `containerapp`) |
+| `appServiceSku` | string | `F1` | SKU do App Service (F1, B1, S1, P1v2) |
+| `containerImage` | string | `mcr.microsoft.com/hello-world:latest` | Imagem Docker (apenas Container Apps) |
+| `sqlAdminPassword` | securestring | **required** | Senha do SQL Server |
+
+---
+
+## 🌐 Escolhendo o Hosting Type
+
+### App Service (`hostingType: appservice`)
+
+**Usar quando:**
+- ✅ Orçamento zero (Free F1)
+- ✅ MVP ou protótipo
+- ✅ Tráfego baixo (<100 req/dia)
+- ✅ App tolerante a cold starts (20 min sleep)
+- ✅ Deploy simplificado (sem Docker)
+
+**SKUs disponíveis:**
+- `F1` (Free): $0/mês - 1GB RAM, 60 min CPU/dia, sleep após 20min
+- `B1` (Basic): $13/mês - 1.75GB RAM, always-on
+- `S1` (Standard): $70/mês - 1.75GB RAM, auto-scale, slots
+- `P1v2` (Premium): $85/mês - 3.5GB RAM, melhor performance
+
+### Container Apps (`hostingType: containerapp`)
+
+**Usar quando:**
+- ✅ Produção com SLA 24/7
+- ✅ Auto-scaling baseado em demanda
+- ✅ SSL customizado necessário
+- ✅ Background jobs (Hangfire)
+- ✅ Arquitetura microserviços
+
+**Custo:** $0-15/mês (scale-to-zero + consumo)
+
+---
+
+## 📝 Configuração por Ambiente
+
+### Development (parameters.dev.json)
+
+```json
+{
+  "environment": { "value": "dev" },
+  "hostingType": { "value": "appservice" },
+  "appServiceSku": { "value": "F1" }
+}
+```
+
+**Infraestrutura:**
+- App Service Free F1
+- Azure SQL Free (32GB)
+- App Insights Free (5GB)
+
+**Custo total:** $0/mês
+
+### Staging (parameters.staging.json)
+
+```json
+{
+  "environment": { "value": "staging" },
+  "hostingType": { "value": "containerapp" },
+  "minReplicas": { "value": 0 }  // scale-to-zero
+}
+```
+
+**Infraestrutura:**
+- Container Apps (scale-to-zero)
+- Azure SQL Free (32GB)
+- ACR Basic
+- App Insights Free
+
+**Custo total:** $5-10/mês
+
+### Production (parameters.prod.json)
+
+```json
+{
+  "environment": { "value": "prod" },
+  "hostingType": { "value": "containerapp" },
+  "minReplicas": { "value": 1 }  // always-on
+}
+```
+
+**Infraestrutura:**
+- Container Apps (min 1 replica)
+- Azure SQL Free (ou pago se necessário)
+- ACR Basic
+- App Insights (pode ultrapassar free tier)
+
+**Custo total:** $10-20/mês
+
+---
+
+## 🔧 Customização
+
+### Adicionar variáveis de ambiente
+
+**App Service:**
+```bicep
+module appService 'app-service.bicep' = {
+  params: {
+    envVars: {
+      MY_CUSTOM_VAR: 'value'
+      ANOTHER_VAR: 'another-value'
+    }
+  }
+}
+```
+
+**Container Apps:**
+```bicep
+module containerApp 'container-app.bicep' = {
+  params: {
+    envVars: [
+      {
+        name: 'MY_CUSTOM_VAR'
+        value: 'value'
+      }
+    ]
+  }
+}
+```
+
+### Usar secrets do Key Vault
+
+```bicep
+param sqlAdminPassword string {
+  reference: {
+    keyVault: {
+      id: '/subscriptions/.../providers/Microsoft.KeyVault/vaults/kv-myapp'
+    }
+    secretName: 'sql-admin-password'
+  }
+}
+```
+
+---
+
+## 🔄 Migração App Service → Container Apps
+
+Ver guia completo em: `../../standards/migration-guide.md`
+
+**Resumo:**
+1. Criar Dockerfile
+2. Implementar health checks
+3. Build e push para ACR
+4. Atualizar `parameters.json` → `hostingType: containerapp`
+5. Redeploy
+6. Testar
+7. Cutover DNS
+
+---
+
+## 📊 Outputs Gerados
+
+Após deploy, os seguintes outputs são gerados:
+
+```bash
+# Obter URL da aplicação
+az deployment group show \
+  -g rg-myapp-dev \
+  -n deployment-name \
+  --query properties.outputs.appUrl.value
+
+# Obter connection string SQL
+az deployment group show \
+  -g rg-myapp-dev \
+  -n deployment-name \
+  --query properties.outputs.sqlConnectionString.value
+
+# Obter App Insights connection string
+az deployment group show \
+  -g rg-myapp-dev \
+  -n deployment-name \
+  --query properties.outputs.appInsightsConnectionString.value
+```
+
+---
+
+## 🆘 Troubleshooting
+
+### Erro: "The template deployment 'X' is not valid"
+
+Validar template:
+```bash
+az deployment group validate \
+  --resource-group rg-myapp-dev \
+  --template-file main.bicep \
+  --parameters @parameters.dev.json
+```
+
+### Erro: "SKU not available in this location"
+
+Verificar SKUs disponíveis:
+```bash
+az appservice list-locations --sku F1
+```
+
+### Deploy muito lento
+
+Container Apps pode levar 5-10 minutos no primeiro deploy. Use `--no-wait` para não bloquear:
+```bash
+az deployment group create \
+  ... \
+  --no-wait
+```
+
+---
+
+## 📚 Referências
+
+- [Bicep Documentation](https://learn.microsoft.com/azure/azure-resource-manager/bicep/)
+- [App Service Bicep Reference](https://learn.microsoft.com/azure/templates/microsoft.web/sites)
+- [Container Apps Bicep Reference](https://learn.microsoft.com/azure/templates/microsoft.app/containerapps)
+- [Azure CLI Reference](https://learn.microsoft.com/cli/azure/)
+
+---
+
+*MORPH-SPEC by Polymorphism Tech*

package/framework/templates/infrastructure/azure/app-insights.bicep

@@ -0,0 +1,63 @@
+// ==============================================================================
+// MORPH-SPEC - Application Insights
+// Azure Application Insights for monitoring and telemetry
+// ==============================================================================
+
+@description('Application Insights name')
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('Log Analytics Workspace ID')
+param logAnalyticsWorkspaceId string
+
+@description('Application type')
+@allowed(['web', 'other'])
+param applicationType string = 'web'
+
+@description('Retention in days')
+@minValue(30)
+@maxValue(730)
+param retentionInDays int = 90
+
+// ==============================================================================
+// APPLICATION INSIGHTS
+// ==============================================================================
+
+resource appInsights 'Microsoft.Insights/components@2020-02-02' = {
+  name: name
+  location: location
+  tags: tags
+  kind: applicationType
+  properties: {
+    Application_Type: applicationType
+    WorkspaceResourceId: logAnalyticsWorkspaceId
+    IngestionMode: 'LogAnalytics'
+    publicNetworkAccessForIngestion: 'Enabled'
+    publicNetworkAccessForQuery: 'Enabled'
+    RetentionInDays: retentionInDays
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('Application Insights ID')
+output id string = appInsights.id
+
+@description('Application Insights name')
+output name string = appInsights.name
+
+@description('Instrumentation Key')
+output instrumentationKey string = appInsights.properties.InstrumentationKey
+
+@description('Connection String')
+output connectionString string = appInsights.properties.ConnectionString
+
+@description('App ID')
+output appId string = appInsights.properties.AppId

package/framework/templates/infrastructure/azure/app-service.bicep

@@ -0,0 +1,164 @@
+// ==============================================================================
+// MORPH-SPEC - App Service
+// Azure App Service with Free F1 tier support
+// ==============================================================================
+
+@description('App Service name')
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('App Service Plan SKU (F1, B1, S1, P1v2)')
+@allowed(['F1', 'B1', 'S1', 'P1v2', 'P2v2'])
+param sku string = 'F1'
+
+@description('App Insights connection string')
+param appInsightsConnectionString string = ''
+
+@description('.NET version')
+@allowed(['v6.0', 'v7.0', 'v8.0'])
+param dotnetVersion string = 'v8.0'
+
+@description('Always On (not available on Free tier)')
+param alwaysOn bool = false
+
+@description('Environment variables')
+param envVars object = {}
+
+// ==============================================================================
+// VARIABLES
+// ==============================================================================
+
+var skuTiers = {
+  F1: 'Free'
+  B1: 'Basic'
+  S1: 'Standard'
+  P1v2: 'PremiumV2'
+  P2v2: 'PremiumV2'
+}
+
+var planName = 'plan-${name}'
+
+// Merge default env vars with custom ones
+var defaultEnvVars = {
+  ASPNETCORE_ENVIRONMENT: 'Production'
+  APPLICATIONINSIGHTS_CONNECTION_STRING: appInsightsConnectionString
+}
+
+var mergedEnvVars = union(defaultEnvVars, envVars)
+
+// ==============================================================================
+// APP SERVICE PLAN
+// ==============================================================================
+
+resource appServicePlan 'Microsoft.Web/serverfarms@2022-09-01' = {
+  name: planName
+  location: location
+  tags: tags
+  sku: {
+    name: sku
+    tier: skuTiers[sku]
+  }
+  kind: 'linux'
+  properties: {
+    reserved: true // Required for Linux
+  }
+}
+
+// ==============================================================================
+// APP SERVICE
+// ==============================================================================
+
+resource appService 'Microsoft.Web/sites@2022-09-01' = {
+  name: name
+  location: location
+  tags: tags
+  kind: 'app,linux'
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    serverFarmId: appServicePlan.id
+    httpsOnly: true
+    siteConfig: {
+      linuxFxVersion: 'DOTNETCORE|${dotnetVersion}'
+      alwaysOn: alwaysOn
+      minTlsVersion: '1.2'
+      ftpsState: 'Disabled'
+      http20Enabled: true
+      healthCheckPath: '/health'
+      appSettings: [for key in objectKeys(mergedEnvVars): {
+        name: key
+        value: mergedEnvVars[key]
+      }]
+      cors: {
+        allowedOrigins: [
+          'https://portal.azure.com'
+        ]
+        supportCredentials: false
+      }
+    }
+    clientAffinityEnabled: false // Recommended for stateless apps
+  }
+}
+
+// ==============================================================================
+// DEPLOYMENT SLOT (Only for non-Free tiers)
+// ==============================================================================
+
+resource stagingSlot 'Microsoft.Web/sites/slots@2022-09-01' = if (sku != 'F1') {
+  name: 'staging'
+  parent: appService
+  location: location
+  tags: tags
+  kind: 'app,linux'
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    serverFarmId: appServicePlan.id
+    httpsOnly: true
+    siteConfig: {
+      linuxFxVersion: 'DOTNETCORE|${dotnetVersion}'
+      alwaysOn: alwaysOn
+      minTlsVersion: '1.2'
+      ftpsState: 'Disabled'
+      http20Enabled: true
+      healthCheckPath: '/health'
+      appSettings: [for key in objectKeys(mergedEnvVars): {
+        name: key
+        value: mergedEnvVars[key]
+      }]
+    }
+    clientAffinityEnabled: false
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('App Service ID')
+output id string = appService.id
+
+@description('App Service name')
+output name string = appService.name
+
+@description('App Service URL')
+output url string = 'https://${appService.properties.defaultHostName}'
+
+@description('App Service default hostname')
+output defaultHostName string = appService.properties.defaultHostName
+
+@description('App Service Plan ID')
+output planId string = appServicePlan.id
+
+@description('App Service Managed Identity Principal ID')
+output principalId string = appService.identity.principalId
+
+@description('Staging slot URL (if available)')
+output stagingUrl string = sku != 'F1' ? 'https://${stagingSlot.properties.defaultHostName}' : ''

package/framework/templates/infrastructure/azure/container-app-env.bicep

@@ -0,0 +1,49 @@
+// ==============================================================================
+// MORPH-SPEC - Container Apps Environment
+// Azure Container Apps managed environment
+// ==============================================================================
+
+@description('Environment name')
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('Log Analytics Workspace ID')
+param logAnalyticsWorkspaceId string
+
+// ==============================================================================
+// CONTAINER APPS ENVIRONMENT
+// ==============================================================================
+
+resource containerAppEnv 'Microsoft.App/managedEnvironments@2023-05-01' = {
+  name: name
+  location: location
+  tags: tags
+  properties: {
+    appLogsConfiguration: {
+      destination: 'log-analytics'
+      logAnalyticsConfiguration: {
+        customerId: reference(logAnalyticsWorkspaceId, '2022-10-01').customerId
+        sharedKey: listKeys(logAnalyticsWorkspaceId, '2022-10-01').primarySharedKey
+      }
+    }
+    zoneRedundant: false
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('Container Apps Environment ID')
+output id string = containerAppEnv.id
+
+@description('Container Apps Environment name')
+output name string = containerAppEnv.name
+
+@description('Default domain')
+output defaultDomain string = containerAppEnv.properties.defaultDomain

package/framework/templates/infrastructure/azure/container-app.bicep

@@ -0,0 +1,156 @@
+// ==============================================================================
+// MORPH-SPEC - Container App
+// Azure Container Apps with ingress and auto-scaling
+// ==============================================================================
+
+@description('App name')
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('Container App Environment ID')
+param environmentId string
+
+@description('Container image')
+param containerImage string
+
+@description('App Insights connection string')
+param appInsightsConnectionString string = ''
+
+@description('CPU cores (0.25, 0.5, 0.75, 1.0, 1.25, 1.5, 1.75, 2.0)')
+param cpu string = '0.25'
+
+@description('Memory (0.5Gi, 1Gi, 1.5Gi, 2Gi, 3Gi, 4Gi)')
+param memory string = '0.5Gi'
+
+@description('Minimum replicas (0 = scale to zero)')
+param minReplicas int = 0
+
+@description('Maximum replicas')
+param maxReplicas int = 3
+
+@description('Target port')
+param targetPort int = 8080
+
+@description('Environment variables')
+param envVars array = []
+
+// ==============================================================================
+// CONTAINER APP
+// ==============================================================================
+
+var secrets = appInsightsConnectionString != '' ? [
+  {
+    name: 'appinsights-connection-string'
+    value: appInsightsConnectionString
+  }
+] : []
+
+var defaultEnvVars = appInsightsConnectionString != '' ? [
+  {
+    name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
+    secretRef: 'appinsights-connection-string'
+  }
+  {
+    name: 'ASPNETCORE_ENVIRONMENT'
+    value: 'Production'
+  }
+] : [
+  {
+    name: 'ASPNETCORE_ENVIRONMENT'
+    value: 'Production'
+  }
+]
+
+resource containerApp 'Microsoft.App/containerApps@2023-05-01' = {
+  name: name
+  location: location
+  tags: tags
+  properties: {
+    managedEnvironmentId: environmentId
+    configuration: {
+      ingress: {
+        external: true
+        targetPort: targetPort
+        transport: 'http'
+        allowInsecure: false
+        traffic: [
+          {
+            latestRevision: true
+            weight: 100
+          }
+        ]
+      }
+      secrets: secrets
+    }
+    template: {
+      containers: [
+        {
+          name: name
+          image: containerImage
+          resources: {
+            cpu: json(cpu)
+            memory: memory
+          }
+          env: concat(defaultEnvVars, envVars)
+          probes: [
+            {
+              type: 'Liveness'
+              httpGet: {
+                path: '/health'
+                port: targetPort
+              }
+              initialDelaySeconds: 10
+              periodSeconds: 30
+              failureThreshold: 3
+            }
+            {
+              type: 'Readiness'
+              httpGet: {
+                path: '/health/ready'
+                port: targetPort
+              }
+              initialDelaySeconds: 5
+              periodSeconds: 10
+              failureThreshold: 3
+            }
+          ]
+        }
+      ]
+      scale: {
+        minReplicas: minReplicas
+        maxReplicas: maxReplicas
+        rules: [
+          {
+            name: 'http-scale'
+            http: {
+              metadata: {
+                concurrentRequests: '100'
+              }
+            }
+          }
+        ]
+      }
+    }
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('Container App ID')
+output id string = containerApp.id
+
+@description('Container App name')
+output name string = containerApp.name
+
+@description('Container App URL')
+output url string = 'https://${containerApp.properties.configuration.ingress.fqdn}'
+
+@description('Container App FQDN')
+output fqdn string = containerApp.properties.configuration.ingress.fqdn