cd.yml

name: EAT-SSU Server 개발 & 운영 서버 배포 파이프라인

on:
  push:
    branches: [ "main", "develop" ]

permissions:
  contents: read

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    services:
      mysql:
        image: mysql:8.0
        env:
          MYSQL_DATABASE: eatssu_test
          MYSQL_ROOT_PASSWORD: test
        ports:
          - 3306:3306
        options: >-
          --health-cmd="mysqladmin ping -h localhost"
          --health-interval=10s
          --health-timeout=5s
          --health-retries=10
    env:
      EATSSU_DB_URL_TEST: jdbc:mysql://localhost:3306/eatssu_test
      EATSSU_DB_USERNAME: root
      EATSSU_DB_PASSWORD: test
      EATSSU_AWS_ACCESS_KEY_DEV: dummy-access-key
      EATSSU_AWS_SECRET_KEY_DEV: dummy-secret-key
      EATSSU_SLACK_TOKEN: dummy-slack-token
      EATSSU_DEEPL_API_KEY: dummy-deepl-key
    steps:
      - uses: actions/checkout@v3

      - name: JDK 17 설치
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Gradle 캐싱
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: dev 프로필 설정
        if: github.ref_name == 'develop'
        run: |
          echo "spring:
            profiles:
              include: dev" > ./src/main/resources/application.yml
        shell: bash

      - name: prod 프로필 설정
        if: github.ref_name == 'main'
        run: |
          echo "spring:
            profiles:
              include: prod" > ./src/main/resources/application.yml
        shell: bash

      - name: gradlew 실행 권한 부여
        run: chmod +x gradlew

      - name: 테스트용 JWT 시크릿 생성
        run: echo "EATSSU_JWT_SECRET_TEST=$(openssl rand -base64 64 | tr -d '\n')" >> "$GITHUB_ENV"

      - name: Gradle로 빌드
        run: ./gradlew build --no-daemon

      - name: 빌드 산출물 확인
        run: ls -lh build/libs/*.jar

      - name: 빌드 산출물 업로드
        uses: actions/upload-artifact@v4
        with:
          name: app-jar
          path: build/libs/eat-ssu.jar

  deploy:
    name: Deploy
    needs: build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - name: 빌드 산출물 다운로드
        uses: actions/download-artifact@v4
        with:
          name: app-jar
          path: build/libs

      - name: Docker Hub 로그인
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: prod 용 Docker 빌드 및 푸시
        if: github.ref_name == 'main'
        run: |
          docker build -f Dockerfile -t ${{ secrets.DOCKER_REPO }}/eatssu-prod .
          docker push ${{ secrets.DOCKER_REPO }}/eatssu-prod

      - name: dev 서버 용 Docker 빌드 및 푸시
        if: github.ref_name == 'develop'
        run: |
          docker build -f Dockerfile -t ${{ secrets.DOCKER_REPO }}/eatssu-dev .
          docker push ${{ secrets.DOCKER_REPO }}/eatssu-dev

      - name: prod에 배포
        uses: appleboy/ssh-action@master
        id: deploy-prod
        if: github.ref_name == 'main'
        with:
          host: ${{ secrets.HOST_PROD }}
          username: ${{ secrets.USERNAME }}
          key: ${{ secrets.PROD_PRIVATE_KEY }}
          port: 22
          script: |
            sudo docker ps
            sudo docker rm -f eatssu-prod || true
            PUBLISHED_CONTAINERS=$(sudo docker ps -q --filter publish=9000)
            if [ -n "$PUBLISHED_CONTAINERS" ]; then sudo docker rm -f $PUBLISHED_CONTAINERS; fi
            sudo docker pull ${{ secrets.DOCKER_REPO }}/eatssu-prod
            sudo docker run -d --name eatssu-prod --restart unless-stopped -p 9000:9000 -p 127.0.0.1:9001:9001 \
            --log-driver=awslogs \
            --log-opt awslogs-region=ap-northeast-2 \
            --log-opt awslogs-group=prod-ec2-group \
            --log-opt awslogs-stream=prod-$(date +%Y%m%d-%H%M%S) \
            -e EATSSU_DB_URL_PROD="${{ secrets.EATSSU_DB_URL_PROD }}" \
            -e EATSSU_DB_USERNAME="${{ secrets.EATSSU_DB_USERNAME }}" \
            -e EATSSU_DB_PASSWORD="${{ secrets.EATSSU_DB_PASSWORD }}" \
            -e EATSSU_JWT_SECRET_PROD="${{ secrets.EATSSU_JWT_SECRET_PROD }}" \
            -e EATSSU_AWS_ACCESS_KEY_PROD="${{ secrets.EATSSU_AWS_ACCESS_KEY_PROD }}" \
            -e EATSSU_AWS_SECRET_KEY_PROD="${{ secrets.EATSSU_AWS_SECRET_KEY_PROD }}" \
            -e EATSSU_SLACK_TOKEN="${{ secrets.EATSSU_SLACK_TOKEN }}" \
            -e EATSSU_PROD_DOMAIN="${{ secrets.EATSSU_PROD_DOMAIN }}" \
            -e EATSSU_DEEPL_API_KEY="${{ secrets.EATSSU_DEEPL_API_KEY }}" \
            ${{ secrets.DOCKER_REPO }}/eatssu-prod
            sudo docker image prune -f

      - name: dev 서버에 배포
        uses: appleboy/ssh-action@master
        id: deploy-dev
        if: github.ref_name == 'develop'
        with:
          host: ${{ secrets.HOST_DEV }}
          username: ${{ secrets.USERNAME }}
          port: 22
          key: ${{ secrets.DEV_PRIVATE_KEY }}
          script: |
            sudo docker ps
            sudo docker rm -f eatssu-dev || true
            PUBLISHED_CONTAINERS=$(sudo docker ps -q --filter publish=9000)
            if [ -n "$PUBLISHED_CONTAINERS" ]; then sudo docker rm -f $PUBLISHED_CONTAINERS; fi
            sudo docker pull ${{ secrets.DOCKER_REPO }}/eatssu-dev
            sudo docker run -d --name eatssu-dev --restart unless-stopped -p 9000:9000 -p 127.0.0.1:9001:9001 \
            --log-driver=awslogs \
            --log-opt awslogs-region=ap-northeast-2 \
            --log-opt awslogs-group=dev-ec2-group \
            --log-opt awslogs-stream=dev-$(date +%Y%m%d-%H%M%S) \
            -e EATSSU_DB_URL_DEV="${{ secrets.EATSSU_DB_URL_DEV }}" \
            -e EATSSU_DB_USERNAME="${{ secrets.EATSSU_DB_USERNAME }}" \
            -e EATSSU_DB_PASSWORD="${{ secrets.EATSSU_DB_PASSWORD }}" \
            -e EATSSU_JWT_SECRET_DEV="${{ secrets.EATSSU_JWT_SECRET_DEV }}" \
            -e EATSSU_AWS_ACCESS_KEY_DEV="${{ secrets.EATSSU_AWS_ACCESS_KEY_DEV }}" \
            -e EATSSU_AWS_SECRET_KEY_DEV="${{ secrets.EATSSU_AWS_SECRET_KEY_DEV }}" \
            -e EATSSU_SLACK_TOKEN="${{ secrets.EATSSU_SLACK_TOKEN }}" \
            -e EATSSU_DEV_DOMAIN="${{ secrets.EATSSU_DEV_DOMAIN }}" \
            -e EATSSU_DEEPL_API_KEY="${{ secrets.EATSSU_DEEPL_API_KEY }}" \
            ${{ secrets.DOCKER_REPO }}/eatssu-dev
            sudo docker image prune -f