Azure Container Apps

# Create resource group (once)
az group create --name my-rg --location eastus
 
# Create Container Apps environment (once)
az containerapp env create \
  --name my-env \
  --resource-group my-rg \
  --location eastus
 
# Deploy (builds from Dockerfile automatically)
az containerapp up \
  --name my-app \
  --resource-group my-rg \
  --environment my-env \
  --source . \
  --target-port 3000 \
  --ingress external

az containerapp update \
  --name my-app \
  --resource-group my-rg \
  --set-env-vars "RUST_LOG=info" "APP_ENV=production"

# Create a secret
az containerapp secret set \
  --name my-app \
  --resource-group my-rg \
  --secrets "db-url=postgres://user:pass@host:5432/db"
 
# Reference in env var
az containerapp update \
  --name my-app \
  --resource-group my-rg \
  --set-env-vars "DATABASE_URL=secretref:db-url"

az containerapp update \
  --name my-app \
  --resource-group my-rg \
  --min-replicas 0 \
  --max-replicas 10 \
  --scale-rule-name http-rule \
  --scale-rule-type http \
  --scale-rule-http-concurrency 100

# Add custom domain
az containerapp hostname add \
  --name my-app \
  --resource-group my-rg \
  --hostname api.example.com
 
# Bind managed certificate
az containerapp hostname bind \
  --name my-app \
  --resource-group my-rg \
  --hostname api.example.com \
  --environment my-env \
  --validation-method CNAME

# Create Postgres (once)
az postgres flexible-server create \
  --name my-db \
  --resource-group my-rg \
  --location eastus \
  --admin-user dbadmin \
  --admin-password <password> \
  --sku-name Standard_B1ms
 
# Allow Container Apps to connect
az postgres flexible-server firewall-rule create \
  --name allow-azure \
  --resource-group my-rg \
  --server-name my-db \
  --start-ip-address 0.0.0.0 \
  --end-ip-address 0.0.0.0

name: Deploy to Azure Container Apps
 
on:
  push:
    branches: [main]
 
jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Azure Login
        uses: azure/login@v2
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}
 
      - name: Deploy
        uses: azure/container-apps-deploy-action@v2
        with:
          appSourcePath: ${{ github.workspace }}
          acrName: myregistry
          containerAppName: my-app
          resourceGroup: my-rg
          targetPort: 3000