Update production branch (#36)

Author: andreiio

app-service.tf

@@ -47,13 +47,6 @@ resource "azurerm_linux_web_app" "app_service" {
     "DB_DATABASE"             = azurerm_postgresql_flexible_server_database.db.name
     "DB_USERNAME"             = local.db_config.admin_db_user
     "DB_PASSWORD"             = local.db_config.admin_db_password
-    "MAIL_MAILER"             = "smtp"
-    "MAIL_HOST"               = var.mail_host
-    "MAIL_PORT"               = var.mail_port
-    "MAIL_USERNAME"           = var.mail_username
-    "MAIL_PASSWORD"           = var.mail_password
-    "MAIL_ENCRYPTION"         = var.mail_encryption
-    "MAIL_FROM_ADDRESS"       = var.mail_from_address
     "FILESYSTEM_DRIVER"       = "azure"
     "FILESYSTEM_CLOUD"        = "azure"
     "AZURE_STORAGE_NAME"      = azurerm_storage_account.storage_account.name
@@ -63,6 +56,19 @@ resource "azurerm_linux_web_app" "app_service" {
     "ADMIN_PASSWORD"          = random_password.admin_password.result
     "SENTRY_DSN"              = var.sentry_dsn
     "SENTRY_ENVIRONMENT"      = coalesce(var.sentry_environment, var.project_slug)
+
+    "MAIL_MAILER"       = local.mail.mailer
+    "MAIL_FROM_ADDRESS" = local.mail.from
+    # SMTP
+    "MAIL_HOST"       = local.mail.smtp.host
+    "MAIL_PORT"       = local.mail.smtp.port
+    "MAIL_USERNAME"   = local.mail.smtp.username
+    "MAIL_PASSWORD"   = local.mail.smtp.password
+    "MAIL_ENCRYPTION" = local.mail.smtp.encryption
+
+    # Azure Communication Services
+    "AZURE_MAIL_RESOURCE_NAME" = local.mail.azure.resource_name
+    "AZURE_MAIL_KEY"           = local.mail.azure.key
   }
 
   connection_string {

locals.tf

@@ -38,4 +38,22 @@ locals {
     public_network_access_enabled = true
     zone                          = var.database_az_enabled ? var.database_az : null
   }
+
+  mail = {
+    mailer = var.enable_acs ? "azure" : "smtp"
+    from   = var.enable_acs ? "${azurerm_email_communication_service_domain_sender_username.email[0].name}@${azurerm_email_communication_service_domain.email[0].from_sender_domain}" : var.mail_from_address
+
+    smtp = {
+      host       = var.enable_acs ? null : var.mail_host
+      port       = var.enable_acs ? null : var.mail_port
+      username   = var.enable_acs ? null : var.mail_username
+      password   = var.enable_acs ? null : var.mail_password
+      encryption = var.mail_encryption
+    }
+
+    azure = {
+      resource_name = var.enable_acs ? azurerm_communication_service.comms[0].name : null
+      key           = var.enable_acs ? azurerm_communication_service.comms[0].primary_key : null
+    }
+  }
 }

mail.tf

@@ -0,0 +1,32 @@
+resource "azurerm_communication_service" "comms" {
+  count               = var.enable_acs ? 1 : 0
+  name                = "acs-${local.namespace}"
+  resource_group_name = azurerm_resource_group.resource_group.name
+  data_location       = var.acs_data_location
+}
+
+resource "azurerm_email_communication_service" "email" {
+  count               = var.enable_acs ? 1 : 0
+  name                = "acs-email-${local.namespace}"
+  resource_group_name = azurerm_resource_group.resource_group.name
+  data_location       = var.acs_data_location
+}
+
+resource "azurerm_email_communication_service_domain" "email" {
+  count             = var.enable_acs ? 1 : 0
+  name              = "AzureManagedDomain"
+  email_service_id  = azurerm_email_communication_service.email[count.index].id
+  domain_management = "AzureManaged"
+}
+
+resource "azurerm_communication_service_email_domain_association" "association" {
+  count                    = var.enable_acs ? 1 : 0
+  email_service_domain_id  = azurerm_email_communication_service_domain.email[count.index].id
+  communication_service_id = azurerm_communication_service.comms[count.index].id
+}
+
+resource "azurerm_email_communication_service_domain_sender_username" "email" {
+  count                   = var.enable_acs ? 1 : 0
+  name                    = "no-reply"
+  email_service_domain_id = azurerm_email_communication_service_domain.email[count.index].id
+}

variables.tf

@@ -39,6 +39,18 @@ variable "region" {
   default     = "North Europe"
 }
 
+variable "enable_acs" {
+  description = "Enable Azure Communication Service for email sending"
+  type        = bool
+  default     = false
+}
+
+variable "acs_data_location" {
+  description = "Azure Communication Service data location"
+  type        = string
+  default     = "Europe"
+}
+
 variable "mail_host" {
   description = "SMTP host"
   type        = string