az group create --name hyplab-rg --location eastus

az aks create \
  --resource-group hyplab-rg \
  --name hyplab-cluster \
  --node-count 3 \
  --node-vm-size Standard_B2s \
  --enable-cluster-autoscaler \
  --min-count 2 \
  --max-count 5 \
  --enable-addons monitoring \
  --generate-ssh-keys

az aks get-credentials --resource-group hyplab-rg --name hyplab-cluster

# Create Redis cache
az redis create \
  --resource-group hyplab-rg \
  --name hyplab-redis \
  --location eastus \
  --sku Basic \
  --vm-size c0

az redis show --name hyplab-redis --resource-group hyplab-rg --query hostName
az redis list-keys --name hyplab-redis --resource-group hyplab-rg

# Create ACR
az acr create \
  --resource-group hyplab-rg \
  --name hyplabregistry \
  --sku Basic

# Login
az acr login --name hyplabregistry

# Build and push
az acr build --registry hyplabregistry --image api:latest api/
az acr build --registry hyplabregistry --image app:latest app/

az container create \
  --resource-group hyplab-rg \
  --name api \
  --image hyplabregistry.azurecr.io/api:latest \
  --registry-login-server hyplabregistry.azurecr.io \
  --registry-username $(az acr credential show --name hyplabregistry --query username -o tsv) \
  --registry-password $(az acr credential show --name hyplabregistry --query passwords[0].value -o tsv) \
  --dns-name-label api \
  --ports 4096 \
  --environment-variables NODE_ENV=production \
  --secure-environment-variables \
    MONGODB_URL="mongodb+srv://..." \
    REDIS_URL="redis://..." \
  --cpu 2 \
  --memory 4

az container show \
  --resource-group hyplab-rg \
  --name api \
  --query ipAddress.fqdn

# Create VM
az vm create \
  --resource-group hyplab-rg \
  --name hyplab-vm \
  --image Ubuntu2204 \
  --size Standard_B2s \
  --admin-username azureuser \
  --generate-ssh-keys \
  --public-ip-sku Standard

# Open ports
az vm open-port --port 80 --resource-group hyplab-rg --name hyplab-vm
az vm open-port --port 443 --resource-group hyplab-rg --name hyplab-vm

ssh azureuser@<public-ip>

curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo usermod -aG docker $USER

# Create Key Vault
az keyvault create \
  --name hyplab-vault \
  --resource-group hyplab-rg \
  --location eastus

# Store secrets
az keyvault secret set \
  --vault-name hyplab-vault \
  --name mongodb-url \
  --value "mongodb+srv://..."

az keyvault secret set \
  --vault-name hyplab-vault \
  --name redis-url \
  --value "redis://..."

az keyvault secret set \
  --vault-name hyplab-vault \
  --name jwt-secret \
  --value "your-jwt-secret"

az keyvault set-policy \
  --name hyplab-vault \
  --spn <service-principal-id> \
  --secret-permissions get list

# Create Application Insights
az monitor app-insights component create \
  --app hyplab-insights \
  --location eastus \
  --resource-group hyplab-rg

# Get instrumentation key
az monitor app-insights component show \
  --app hyplab-insights \
  --resource-group hyplab-rg \
  --query instrumentationKey

# Create public IP
az network public-ip create \
  --resource-group hyplab-rg \
  --name hyplab-pip \
  --allocation-method Static \
  --sku Standard

# Create Application Gateway
az network application-gateway create \
  --resource-group hyplab-rg \
  --name hyplab-agw \
  --location eastus \
  --sku Standard_v2 \
  --public-ip-address hyplab-pip \
  --subnet <subnet-id> \
  --capacity 2

# Create Key Vault certificate
az keyvault certificate create \
  --vault-name hyplab-vault \
  --name ssl-cert \
  --file certificate.pfx

# Configure Application Gateway with certificate
az network application-gateway ssl-cert create \
  --resource-group hyplab-rg \
  --gateway-name hyplab-agw \
  --name ssl-cert \
  --key-vault-secret-id <secret-id>

az monitor metrics alert create \
  --name "High Error Rate" \
  --resource-group hyplab-rg \
  --scopes <resource-id> \
  --condition "avg Percentage CPU > 80" \
  --window-size 5m \
  --evaluation-frequency 1m \
  --action email alerts@yourdomain.com

az aks nodepool add \
  --resource-group hyplab-rg \
  --cluster-name hyplab-cluster \
  --name spotpool \
  --node-count 2 \
  --node-vm-size Standard_B2s \
  --priority Spot \
  --eviction-policy Delete \
  --spot-max-price -1

az aks update \
  --resource-group hyplab-rg \
  --name hyplab-cluster \
  --enable-cluster-autoscaler \
  --min-count 2 \
  --max-count 5

# Create Recovery Services Vault
az backup vault create \
  --resource-group hyplab-rg \
  --name hyplab-backup-vault \
  --location eastus

# Enable backup for VM
az backup protection enable-for-vm \
  --resource-group hyplab-rg \
  --vault-name hyplab-backup-vault \
  --vm <vm-id> \
  --policy-name DefaultPolicy

# Create storage account
az storage account create \
  --name hyplabbackups \
  --resource-group hyplab-rg \
  --location eastus \
  --sku Standard_LRS

# Create container
az storage container create \
  --name backups \
  --account-name hyplabbackups

# Upload backup
az storage blob upload \
  --account-name hyplabbackups \
  --container-name backups \
  --name backup-$(date +%Y-%m-%d).tar.gz \
  --file backup.tar.gz