Azure Files & File Sync

# Tạo Resource Group
az group create \
  --name rg-az104-m19 \
  --location southeastasia \
  --tags Module=19 Course=AZ-104 Lab=FileSync

# Tạo Storage Account (General Purpose v2)
# Tên storage account phải unique toàn cầu, viết thường, 3-24 ký tự
STORAGE_NAME="staz104m19$(date +%s | tail -c 6)"
echo "Storage Account name: $STORAGE_NAME"

az storage account create \
  --name $STORAGE_NAME \
  --resource-group rg-az104-m19 \
  --location southeastasia \
  --sku Standard_LRS \
  --kind StorageV2 \
  --https-only true \
  --min-tls-version TLS1_2 \
  --allow-blob-public-access false

# Lấy connection string
CONN_STR=$(az storage account show-connection-string \
  --name $STORAGE_NAME \
  --resource-group rg-az104-m19 \
  --query connectionString -o tsv)

# Tạo Azure File Share với quota 50 GiB
az storage share create \
  --name "hoatranlab-fileshare" \
  --quota 50 \
  --connection-string "$CONN_STR"

# Tạo thư mục con trong file share
az storage directory create \
  --name "documents" \
  --share-name "hoatranlab-fileshare" \
  --connection-string "$CONN_STR"

az storage directory create \
  --name "projects" \
  --share-name "hoatranlab-fileshare" \
  --connection-string "$CONN_STR"

# Upload file test
echo "Azure Files Lab Test - $(date)" > /tmp/test-upload.txt
az storage file upload \
  --source /tmp/test-upload.txt \
  --share-name "hoatranlab-fileshare" \
  --path "documents/test-upload.txt" \
  --connection-string "$CONN_STR"

echo "File share created successfully!"
az storage share show --name "hoatranlab-fileshare" \
  --connection-string "$CONN_STR" \
  --query "{name:name, quota:properties.quota, usage:properties.shareUsageBytes}" -o table

# === Chạy trên Linux VM hoặc lấy script từ Portal ===
# Portal → Storage Account → File shares → hoatranlab-fileshare → Connect → Linux

# Thay các biến sau bằng giá trị thực của bạn
STORAGE_ACCOUNT_NAME="staz104m19XXXXXX"  # thay bằng tên thực
SHARE_NAME="hoatranlab-fileshare"
STORAGE_KEY=$(az storage account keys list \
  --account-name $STORAGE_ACCOUNT_NAME \
  --resource-group rg-az104-m19 \
  --query "[0].value" -o tsv)

# Cài cifs-utils (Ubuntu/Debian)
sudo apt-get update && sudo apt-get install -y cifs-utils

# Tạo mount point
sudo mkdir -p /mnt/hoatranlab-share

# Tạo credentials file (bảo mật hơn dùng trực tiếp trên command line)
sudo bash -c "cat > /etc/smbcredentials/${STORAGE_ACCOUNT_NAME}.cred << EOF
username=${STORAGE_ACCOUNT_NAME}
password=${STORAGE_KEY}
EOF"
sudo chmod 600 /etc/smbcredentials/${STORAGE_ACCOUNT_NAME}.cred

# Mount file share
sudo mount -t cifs \
  //${STORAGE_ACCOUNT_NAME}.file.core.windows.net/${SHARE_NAME} \
  /mnt/hoatranlab-share \
  -o credentials=/etc/smbcredentials/${STORAGE_ACCOUNT_NAME}.cred,\
serverino,nosharesock,actimeo=30,vers=3.0,file_mode=0777,dir_mode=0777

# Kiểm tra mount thành công
df -h /mnt/hoatranlab-share
ls -la /mnt/hoatranlab-share/

# Ghi file test để xác nhận read/write
echo "Written from Linux VM at $(date)" | sudo tee /mnt/hoatranlab-share/documents/linux-test.txt

# Thêm vào /etc/fstab để auto-mount khi reboot
echo "//${STORAGE_ACCOUNT_NAME}.file.core.windows.net/${SHARE_NAME} /mnt/hoatranlab-share cifs credentials=/etc/smbcredentials/${STORAGE_ACCOUNT_NAME}.cred,serverino,nosharesock,actimeo=30,vers=3.0,file_mode=0777,dir_mode=0777,_netdev 0 0" | sudo tee -a /etc/fstab

STORAGE_NAME="staz104m19XXXXXX"  # thay bằng tên thực
CONN_STR=$(az storage account show-connection-string \
  --name $STORAGE_NAME \
  --resource-group rg-az104-m19 \
  --query connectionString -o tsv)

# Upload file "quan trọng" trước khi tạo snapshot
echo "Dữ liệu quan trọng - Version 1.0 - $(date)" > /tmp/important.txt
az storage file upload \
  --source /tmp/important.txt \
  --share-name "hoatranlab-fileshare" \
  --path "documents/important.txt" \
  --connection-string "$CONN_STR"

# TẠO SNAPSHOT (point-in-time backup)
SNAPSHOT_TIME=$(az storage share snapshot \
  --name "hoatranlab-fileshare" \
  --connection-string "$CONN_STR" \
  --query snapshot -o tsv)
echo "Snapshot created at: $SNAPSHOT_TIME"

# Mô phỏng tai nạn: xóa file quan trọng
az storage file delete \
  --share-name "hoatranlab-fileshare" \
  --path "documents/important.txt" \
  --connection-string "$CONN_STR"
echo "File deleted (simulating accident)!"

# Xác nhận file đã bị xóa
az storage file exists \
  --share-name "hoatranlab-fileshare" \
  --path "documents/important.txt" \
  --connection-string "$CONN_STR"

# PHỤC HỒI file từ snapshot
az storage file copy start \
  --source-share "hoatranlab-fileshare" \
  --source-path "documents/important.txt" \
  --source-snapshot "$SNAPSHOT_TIME" \
  --destination-share "hoatranlab-fileshare" \
  --destination-path "documents/important.txt" \
  --connection-string "$CONN_STR"

echo "File restored from snapshot!"

# Liệt kê tất cả snapshots của share
az storage share list \
  --connection-string "$CONN_STR" \
  --include-snapshots \
  --query "[?name=='hoatranlab-fileshare'].[name,snapshot]" \
  --output table

# Tạo Storage Sync Service
az storagesync create \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --location southeastasia

# Tạo Sync Group
az storagesync sync-group create \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --sync-group-name "sg-hoatranlab-prod"

# Tạo file share riêng cho File Sync (nên dùng share khác với share thông thường)
STORAGE_NAME="staz104m19XXXXXX"  # thay bằng tên thực
CONN_STR=$(az storage account show-connection-string \
  --name $STORAGE_NAME \
  --resource-group rg-az104-m19 \
  --query connectionString -o tsv)

az storage share create \
  --name "filesync-cloud-endpoint" \
  --quota 100 \
  --connection-string "$CONN_STR"

# Lấy Resource ID của storage account
STORAGE_ID=$(az storage account show \
  --name $STORAGE_NAME \
  --resource-group rg-az104-m19 \
  --query id -o tsv)

# Tạo Cloud Endpoint
az storagesync sync-group cloud-endpoint create \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --sync-group-name "sg-hoatranlab-prod" \
  --name "cloud-ep-01" \
  --storage-account-resource-id "$STORAGE_ID" \
  --azure-file-share-name "filesync-cloud-endpoint"

echo "=== Cloud Endpoint created ==="
echo "Next: Install Azure File Sync agent on Windows Server,"
echo "then register server and create Server Endpoint via Portal."
echo ""
echo "Agent download: https://aka.ms/afs/agent"
echo ""
echo "PowerShell commands to run ON THE WINDOWS SERVER after agent install:"
echo "Register-AzStorageSyncServer -ResourceGroupName rg-az104-m19 -StorageSyncServiceName sss-hoatranlab-m19"

# Nếu đã có server endpoint và cloud endpoint, xóa theo thứ tự:
# 1. Xóa server endpoint trước (qua Portal hoặc CLI)
# az storagesync sync-group server-endpoint delete ...

# 2. Xóa cloud endpoint
az storagesync sync-group cloud-endpoint delete \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --sync-group-name "sg-hoatranlab-prod" \
  --name "cloud-ep-01" \
  --yes

# 3. Xóa sync group
az storagesync sync-group delete \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --name "sg-hoatranlab-prod" \
  --yes

# 4. Xóa Storage Sync Service
az storagesync delete \
  --resource-group rg-az104-m19 \
  --storage-sync-service-name "sss-hoatranlab-m19" \
  --yes

# 5. Xóa toàn bộ Resource Group (xóa storage account + file shares + snapshots)
az group delete --name rg-az104-m19 --yes --no-wait
echo "Cleanup initiated. Resources will be deleted in background."