DOKI-Backend/.github/workflows/dev-deploy.yml at 6217e3b5b588a5428af0ed9ebe653410721e8f54 · Team-DOKI/DOKI-Backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
name: CI/CD - Dev (NCP)

on:
  workflow_dispatch:
    inputs:
      branch:
        description: 'Branch'
        required: true
        default: 'develop'

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          ref: ${{ github.event.inputs.branch }}

      - uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: '17'

      - uses: gradle/actions/setup-gradle@v3
        with:
          gradle-version: '8.14.2'

      - name: Generate Development Configs
        shell: bash
        run: |
          mkdir -p ./src/main/resources
          # 🔥 'EOF'를 사용해 내부 ${VAR} 문법 보존
          cat <<'EOF' > ./src/main/resources/application.yml
          ${{ secrets.CD_APPLICATION_DEV }}
          EOF
          cat <<'EOF' > ./src/main/resources/application-aws.yml
          ${{ secrets.CD_APPLICATION_AWS }}
          EOF
          cat <<'EOF' > ./src/main/resources/application-oauth.yml
          ${{ secrets.CD_APPLICATION_OAUTH_DEV }}
          EOF

      - name: Build & Push
        run: |
          chmod +x ./gradlew
          ./gradlew clean build -x test
          echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
          docker build --no-cache -t "${{ secrets.DOCKER_USERNAME }}/doki-dev:latest" .
          docker push "${{ secrets.DOCKER_USERNAME }}/doki-dev:latest"

  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Deploy to NCP via SSH
        uses: appleboy/[email protected]
        with:
          host: ${{ secrets.DEV_NCP_PUBLIC_IP }}
          username: root
          password: ${{ secrets.DEV_NCP_PASSWORD }}
          script: |
            echo "📦 Pulling latest doki-dev image..."
            docker pull ${{ secrets.DOCKER_USERNAME }}/doki-dev:latest

            echo "🗑 Cleaning up old container..."
            docker rm -f doki-dev-container || true

            echo "🚀 Running new development container..."
            docker run -d --name doki-dev-container \
              --network host \
              -m 512m \
              -e JAVA_TOOL_OPTIONS="-Xms256m -Xmx384m" \
              -e SPRING_PROFILES_ACTIVE=dev \
              -e DB_PASSWORD_DEV="${{ secrets.DB_PASSWORD_DEV }}" \
              -e DOKI_JWT_SECRET_VALUE="${{ secrets.DOKI_JWT_SECRET_VALUE }}" \
              -e DOKI_GOOGLE_CLIENT_ID="${{ secrets.DOKI_GOOGLE_CLIENT_ID }}" \
              -e DOKI_APPLE_CLIENT_ID="${{ secrets.DOKI_APPLE_CLIENT_ID }}" \
              -e DOKI_APPLE_TEAM_ID="${{ secrets.DOKI_APPLE_TEAM_ID }}" \
              -e DOKI_APPLE_KEY_ID="${{ secrets.DOKI_APPLE_KEY_ID }}" \
              -e DOKI_DEV_APPLE_REDIRECT_URI="${{ secrets.DOKI_DEV_APPLE_REDIRECT_URI }}" \
              -e APPLE_REFRESH_TOKEN_SECRET="${{ secrets.APPLE_REFRESH_TOKEN_SECRET }}" \
              -e DOKI_APPLE_PRIVATE_KEY='${{ secrets.DOKI_APPLE_PRIVATE_KEY }}' \
              -e DOKI_KAKAO_CLIENT_ID="${{ secrets.DOKI_KAKAO_CLIENT_ID }}" \
              -e DOKI_KAKAO_CLIENT_SECRET="${{ secrets.DOKI_KAKAO_CLIENT_SECRET }}" \
              -e DOKI_DEV_KAKAO_REDIRECT_URI="${{ secrets.DOKI_DEV_KAKAO_REDIRECT_URI }}" \
              -e WEATHER_URL="${{ secrets.WEATHER_URL }}" \
              -e WEATHER_API_KEY="${{ secrets.WEATHER_API_KEY }}" \
              -e AWS_ACCESS_KEY_ID="${{ secrets.AWS_ACCESS_KEY_ID }}" \
              -e AWS_SECRET_ACCESS_KEY="${{ secrets.AWS_SECRET_ACCESS_KEY }}" \
              ${{ secrets.DOCKER_USERNAME }}/doki-dev:latest

            sudo nginx -t && sudo systemctl reload nginx
            echo "✅ NCP Dev Deployment Complete!"