diff --git a/azure/terraform/graph.tf b/azure/terraform/graph.tf
new file mode 100644
--- /dev/null
+++ b/azure/terraform/graph.tf
@@ -0,0 +1,73 @@
+variable "region" {
+    type = "string"
+    default = "westus"
+}
+
+resource "azurerm_resource_group" "euwest-graph" {
+  name     = "euwest-graph"
+  location = "westeurope"  # this one is indeed in westeurope now
+
+  tags {
+      environment = "SWH Graph"
+  }
+}
+
+resource "azurerm_network_interface" "graph-interface" {
+  name                = "graph"
+  location            = "${var.region}"
+  resource_group_name = "${azurerm_resource_group.euwest-graph.name}"
+  network_security_group_id = "${data.azurerm_network_security_group.worker-nsg.id}"
+
+  ip_configuration {
+    name                          = "graphNicConfiguration"
+    subnet_id                     = "${data.azurerm_subnet.default.id}"
+    public_ip_address_id          = ""
+    private_ip_address_allocation = "Dynamic"
+  }
+  tags {
+      environment = "SWH Graph"
+  }
+}
+
+resource "azurerm_virtual_machine" "graph-server" {
+  name                  = "graph0"
+  location              = "${var.region}"
+  resource_group_name   = "${azurerm_resource_group.euwest-graph.name}"
+  network_interface_ids = ["${azurerm_network_interface.graph-interface.id}"]
+    # multiple issues with this vm
+    # 1. we have only 8 vcpus left
+    # 2. this is location dependent, "west us" seems ok, the others not (I did
+    # not check all regions but europe/uk in general seems a nogo)
+    vm_size               = "Standard_H16m_Promo"
+    # vm_size               = "Standard_B2ms"
+
+  storage_image_reference {
+    publisher = "credativ"
+    offer     = "Debian"
+    sku       = "9"
+    version   = "latest"
+  }
+
+  storage_os_disk {
+    name              = "graph0-osdisk"
+    caching           = "ReadWrite"
+    create_option     = "FromImage"
+  }
+
+  os_profile {
+    computer_name  = "graph0"
+    admin_username = "${var.user_admin}"
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = true
+    ssh_keys {
+      path = "/home/${var.user_admin}/.ssh/authorized_keys"
+      key_data = "${var.ssh_key_data}"
+    }
+  }
+
+  tags {
+      environment = "SWH Graph"
+  }
+}