chore(docs): list manual infrastructure setup steps

Author: afeld

docs/configuration/environment-variables.md

@@ -2,9 +2,9 @@
 
 The first steps of the Getting Started guide mention [creating an `.env` file][getting-started_create-env].
 
-The sections below outline in more detail the application environment variables that you may want to override, and their purpose.
+The sections below outline in more detail the application environment variables that you may want to override, and their purpose. In App Service, this is more generally called the ["configuration"][app-service-config].
 
-See other topic pages in this section for more specific environment variable configurations.
+See other topic pages in this section for more specific environment variable configurations. See [benefits-secrets][benefits-secrets] for values.
 
 ## Docker
 
@@ -147,9 +147,6 @@ The base URL for the (running) application, against which all Cypress `.visit()`
 When Cypress is running inside the devcontainer, this should be `http://localhost:8000`. When Cypress is running outside the
 devcontainer, check the [`DJANGO_LOCAL_PORT`](#django_local_port).
 
-[deployment]: ../deployment/README.md
-[getting-started_create-env]: ../getting-started/README.md#create-an-environment-file
-
 ## Azure
 
 ### `APPLICATIONINSIGHTS_CONNECTION_STRING`
@@ -159,3 +156,8 @@ devcontainer, check the [`DJANGO_LOCAL_PORT`](#django_local_port).
     [Azure Monitor connection strings](https://docs.microsoft.com/en-us/azure/azure-monitor/app/sdk-connection-string)
 
 Enables [log collection](../../deployment/infrastructure/#logs). Set the value in quotes, e.g. `APPLICATIONINSIGHTS_CONNECTION_STRING="InstrumentationKey=…"`.
+
+[app-service-config]: https://docs.microsoft.com/en-us/azure/app-service/configure-common?tabs=portal
+[benefits-secrets]: https://github.com/cal-itp/benefits-secrets
+[deployment]: ../deployment/README.md
+[getting-started_create-env]: ../getting-started/README.md#create-an-environment-file

docs/deployment/infrastructure.md

@@ -159,3 +159,13 @@ lifecycle {
   ignore_changes = [tags]
 }
 ```
+
+## Azure environment setup
+
+The following steps are required to set up the environment, with linked issues to automate them:
+
+- `terraform apply`
+- Set required [App Service configuration](../configuration/environment-variables.md)
+- Bind the certificates to the slots - [#704](https://github.com/cal-itp/benefits/issues/704)
+
+This is not a complete step-by-step guide; more a list of things to remember. This may be useful as part of incident response.

terraform/app_service.tf

@@ -1,9 +1,9 @@
 resource "azurerm_service_plan" "main" {
-  name                       = "ASP-CDT-PUB-VIP-CALITP-P-001"
-  location                   = data.azurerm_resource_group.prod.location
-  resource_group_name        = data.azurerm_resource_group.prod.name
-  os_type                    = "Linux"
-  sku_name                   = "P2v2"
+  name                = "ASP-CDT-PUB-VIP-CALITP-P-001"
+  location            = data.azurerm_resource_group.prod.location
+  resource_group_name = data.azurerm_resource_group.prod.name
+  os_type             = "Linux"
+  sku_name            = "P2v2"
 
   lifecycle {
     ignore_changes = [tags]
@@ -115,6 +115,7 @@ resource "azurerm_linux_web_app_slot" "dev" {
     ignore_changes = [app_settings, tags]
   }
 
+  # setup files
   storage_account {
     access_key   = azurerm_storage_account.main.primary_access_key
     account_name = azurerm_storage_account.main.name
@@ -167,6 +168,7 @@ resource "azurerm_linux_web_app_slot" "test" {
     ignore_changes = [app_settings, tags]
   }
 
+  # setup files
   storage_account {
     access_key   = azurerm_storage_account.main.primary_access_key
     account_name = azurerm_storage_account.main.name