Déployer une application : Azure App Service et Container Apps

{
  "name": "app-parc",
  "version": "1.0.0",
  "type": "module",
  "scripts": {
    "start": "node server.js"
  },
  "engines": {
    "node": ">=24"
  },
  "dependencies": {
    "express": "^5.1.0",
    "mysql2": "^3.14.0"
  }
}

// server.js
import express from 'express';
import mysql from 'mysql2/promise';

const pool = mysql.createPool({
  host: process.env.DB_HOST,
  user: process.env.DB_USER,
  password: process.env.DB_PASSWORD,
  database: process.env.DB_NAME ?? 'parc',
  ssl: { rejectUnauthorized: true }, // Azure impose TLS : on vérifie le certificat du serveur
  connectionLimit: 5,
});

const app = express();

// Sonde de santé : la plateforme l'appelle pour savoir si l'application répond.
app.get('/sante', (req, res) => {
  res.json({ statut: 'ok' });
});

app.get('/api/postes', async (req, res) => {
  try {
    const [lignes] = await pool.query(
      `SELECT p.num_inventaire, p.type_poste, p.marque, p.modele,
              CONCAT(e.prenom, ' ', e.nom) AS utilisateur
       FROM poste p
       LEFT JOIN employe e ON e.id_employe = p.id_employe
       ORDER BY p.num_inventaire`,
    );
    res.json(lignes);
  } catch (err) {
    console.error('Base injoignable :', err.code ?? err.message);
    res.status(503).json({ erreur: 'base de données indisponible' });
  }
});

const port = process.env.PORT ?? 3000; // App Service fournit le port dans PORT
app.listen(port, () => console.log(`app-parc écoute sur le port ${port}`));

APPLI=app-parc-jc42   # unique dans tout Azure : <nom>.azurewebsites.net

az appservice plan create --name asp-parc-lab --resource-group rg-cloud-lab --sku F1 --is-linux

az webapp create \
  --name "$APPLI" \
  --resource-group rg-cloud-lab \
  --plan asp-parc-lab \
  --runtime "NODE:24-lts"

az webapp update --name "$APPLI" --resource-group rg-cloud-lab --https-only true

read -rs -p "Mot de passe de app_parc : " MDP_APP; echo

az webapp config appsettings set --name "$APPLI" --resource-group rg-cloud-lab --settings \
  DB_HOST=mysql-parc-jc42.mysql.database.azure.com \
  DB_USER=app_parc \
  DB_NAME=parc \
  DB_PASSWORD="$MDP_APP" \
  SCM_DO_BUILD_DURING_DEPLOYMENT=true

for ip in $(az webapp show --name "$APPLI" --resource-group rg-cloud-lab \
            --query possibleOutboundIpAddresses --output tsv | tr ',' ' '); do
  az mysql flexible-server firewall-rule create \
    --resource-group rg-cloud-lab \
    --name mysql-parc-jc42 \
    --rule-name "app-${ip//./-}" \
    --start-ip-address "$ip" \
    --output none
done

zip -r app.zip server.js package.json package-lock.json

az webapp deploy --resource-group rg-cloud-lab --name "$APPLI" --src-path app.zip --type zip

HOTE=$(az webapp show --name "$APPLI" --resource-group rg-cloud-lab --query defaultHostName --output tsv)
curl "https://$HOTE/sante"
curl "https://$HOTE/api/postes"

[{"num_inventaire":"PC-0001","type_poste":"fixe","marque":"Dell","modele":"OptiPlex 7010","utilisateur":"Julie Lefèvre"},
 {"num_inventaire":"PC-0002","type_poste":"portable","marque":"Lenovo","modele":"ThinkPad T14","utilisateur":"Hélène Garnier"},
 ...
 {"num_inventaire":"PC-0013","type_poste":"fixe","marque":"Dell","modele":"OptiPlex 7010","utilisateur":null},
 ...]

az webapp log config --name "$APPLI" --resource-group rg-cloud-lab --docker-container-logging filesystem
az webapp log tail --name "$APPLI" --resource-group rg-cloud-lab

az extension add --name containerapp --upgrade
az provider register --namespace Microsoft.App
az provider register --namespace Microsoft.OperationalInsights

az containerapp up \
  --name ca-parc \
  --resource-group rg-cloud-lab \
  --location francecentral \
  --environment cae-cloud-lab \
  --image mcr.microsoft.com/k8se/quickstart:latest \
  --target-port 80 \
  --ingress external \
  --query properties.configuration.ingress.fqdn

FROM node:24-alpine
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev
COPY server.js ./
ENV NODE_ENV=production
USER node
EXPOSE 3000
CMD ["node", "server.js"]

# Construire pour l'architecture d'Azure (obligatoire sur un Mac à puce Apple)
docker build --platform linux/amd64 -t ghcr.io/<ton-compte>/app-parc:1.0.0 .

# Publier sur GitHub Container Registry
read -rs -p "Jeton GitHub : " JETON_GITHUB; echo
echo "$JETON_GITHUB" | docker login ghcr.io -u <ton-compte> --password-stdin
docker push ghcr.io/<ton-compte>/app-parc:1.0.0

az mysql flexible-server firewall-rule create --resource-group rg-cloud-lab --name mysql-parc-jc42 \
  --rule-name autoriser-services-azure --start-ip-address 0.0.0.0 --end-ip-address 0.0.0.0

az containerapp secret set --name ca-parc --resource-group rg-cloud-lab \
  --secrets db-password="$MDP_APP"

az containerapp update --name ca-parc --resource-group rg-cloud-lab \
  --image ghcr.io/<ton-compte>/app-parc:1.0.0 \
  --set-env-vars DB_HOST=mysql-parc-jc42.mysql.database.azure.com DB_USER=app_parc \
                 DB_NAME=parc DB_PASSWORD=secretref:db-password \
  --min-replicas 0 --max-replicas 3

az containerapp ingress update --name ca-parc --resource-group rg-cloud-lab --target-port 3000

az containerapp revision list --name ca-parc --resource-group rg-cloud-lab --output table
az containerapp logs show --name ca-parc --resource-group rg-cloud-lab --follow

az group delete --name rg-cloud-lab --yes --no-wait