{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
  "contentVersion": "1.0.0.0",
  "_comment_resources": "For a healthy one-pass deployment, point acrName and existingManagedIdentityResourceId at pre-created resources. Bicep can create them when omitted, but image push and RBAC bootstrap must then be completed separately.",
  "parameters": {
    "appName": {
      "value": "pyrit-gui"
    },
    "containerImage": {
      "value": "YOUR_ACR.azurecr.io/pyrit:COMMIT_SHA_OR_DIGEST"
    },
    "entraTenantId": {
      "value": "YOUR_TENANT_ID"
    },
    "entraClientId": {
      "value": "YOUR_APP_REGISTRATION_CLIENT_ID"
    },
    "allowedGroupObjectIds": {
      "value": "YOUR_ENTRA_GROUP_OBJECT_IDS"
    },
    "adminGroupObjectId": {
      "value": "YOUR_ADMIN_ENTRA_GROUP_OBJECT_ID"
    },
    "allowedCidr": {
      "value": ""
    },
    "sqlServerFqdn": {
      "value": "YOUR_SQL_SERVER.database.windows.net"
    },
    "sqlDatabaseName": {
      "value": "YOUR_DATABASE_NAME"
    },
    "pyritInitializer": {
      "value": "target,technique"
    },
    "pyritConfigFileUri": {
      "value": ""
    },
    "envSecretName": {
      "value": "env-global"
    },
    "envFileContents": {
      "value": ""
    },
    "logRetentionDays": {
      "value": 90
    },
    "enableOtel": {
      "value": false
    },
    "enableFrontDoor": {
      "value": false
    },
    "enableFrontDoorPrivateLink": {
      "value": false
    },
    "frontDoorPrivateLinkRequestMessage": {
      "value": "Azure Front Door private access to pyrit-gui"
    },
    "disableContainerAppsPublicAccess": {
      "value": false
    },
    "vnetAddressPrefix": {
      "value": "10.0.0.0/16"
    },
    "infrastructureSubnetAddressPrefix": {
      "value": "10.0.1.0/26"
    },
    "protectEgressPublicIp": {
      "value": false
    },
    "tags": {
      "value": {
        "Service": "pyrit-gui",
        "Owner": "<your-team>",
        "DataClass": "<your-data-classification>"
      }
    },

    "acrName": {
      "value": "YOUR_ACR_NAME"
    },
    "acrResourceId": {
      "value": ""
    },
    "existingManagedIdentityResourceId": {
      "value": "/subscriptions/YOUR_SUB/resourceGroups/YOUR_IDENTITY_RG/providers/Microsoft.ManagedIdentity/userAssignedIdentities/YOUR_IDENTITY"
    },
    "keyVaultResourceId": {
      "value": "/subscriptions/YOUR_SUB/resourceGroups/YOUR_RG/providers/Microsoft.KeyVault/vaults/YOUR_VAULT"
    },
    "logAnalyticsWorkspaceId": {
      "value": ""
    },
    "logAnalyticsCustomerId": {
      "value": ""
    },
    "logAnalyticsSharedKey": {
      "value": ""
    }
  }
}