---
constants:
  __name: "{{ name }}_{{ __guid }}"
variables:
  name:
    desc: "Name of the SQL Server. Must be globally unique."
    required: true
    group: SQL Server Details
  resource_group_name:
    desc: "Name of the resource group."
    required: true
    group: SQL Server Details
    links_to: resource.azurerm_resource_group.name
  location:
    desc: "Azure region where the SQL Server will be created."
    required: true
    group: SQL Server Details
    default: "eastus"
  version:
    desc: "Version of the SQL Server."
    required: false
    group: SQL Server Details
    default: "12.0"
  administrator_login:
    desc: "Administrator username for the SQL Server."
    required: true
    group: Authentication
    default: "sqladminuser"
  administrator_login_password:
    desc: "Administrator password for the SQL Server. Must comply with Azure's password policies."
    required: true
    group: Authentication
  identity_type:
    desc: "Type of managed identity to assign to the SQL Server."
    required: false
    group: Identity
    default: "SystemAssigned"
    suggested: "SystemAssigned"
    advanced: true
  tags:
    group: Tags
    required: false
groups:
  SQL Server Details:
    order: 1
    desc: "Basic settings for the SQL Server."
  Authentication:
    order: 2
    desc: "Administrator credentials for the SQL Server."
  Identity:
    order: 3
    desc: "Managed identity settings for the SQL Server."
  Tags:
    order: 4
    desc: "Tags to assign to the SQL Server."
---

resource "azurerm_sql_server" "__name" {
  name                         = {{ name }}
  resource_group_name          = {{ resource_group_name }}
  location                     = {{ location }}
  version                      = {{ version }}
  administrator_login          = {{ administrator_login }}
  administrator_login_password = {{ administrator_login_password }}

  {{# identity_type }}
  identity {
    type = {{ identity_type }}
  }
  {{/ identity_type }}

  tags = {
    Name = {{ name }}
    {{# tags }}
      {{ tags.key | required: false }} = {{ tags.value | required: false }}
    {{/ tags }}
  }
}

// Enforces secure administrator credentials and encourages the use of managed identities.
// Tags are included for better resource management and identification.
//