Merge pull request #72 from cloudcomputinginha/chore/CCI-80

[CCI-80] Sentry 모니터링 시스템 구축 & 환경변수 비밀값 방식 적용 & 프론트엔드 CORS 설정

Author: zjhj0814

.github/workflows/github-actions.yml

@@ -34,16 +34,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-gradle-
 
-      # 환경별 yml 파일 생성(1) - application.yml
-      - name: make application.yml
-        if: |
-          contains(github.ref, 'dev')
-        run: |
-          cd ./src/main/resources # resources 폴더로 이동
-          touch ./application.yml # application.yml 생성
-          echo "${{ secrets.YML }}" > ./application.yml # github actions에서 설정한 값을 application.yml 파일에 쓰기
-        shell: bash
-
       # gradle build
       - name: Build with Gradle
         run: ./gradlew build -x test
@@ -67,9 +57,18 @@ jobs:
           key: ${{ secrets.PRIVATE_KEY }}
           envs: GITHUB_SHA
           script: |
+            # 서버에 .env 파일 덮어쓰기
+            mkdir -p /home/ubuntu/interview-be
+            cd /home/ubuntu/interview-be
+            cat > .env <<'EOF' # 멀티라인 환경변수 입력으로 사용
+            ${{ secrets.ENV_FILE }}
+            EOF
+            chmod 600 .env
+            
             docker stop interview-be-app || true # 컨테이너가 실행 중이면 중지
             docker rm interview-be-app || true # 기존 컨테이너 삭제
             docker rmi ${{ secrets.DOCKER_USERNAME }}/interview-be-service || true # 기존 이미지 삭제
+            
             sudo docker pull ${{ secrets.DOCKER_USERNAME }}/interview-be-service # 최신 이미지 pull
-            sudo docker run -d --name interview-be-app -p 8080:8080 ${{ secrets.DOCKER_USERNAME }}/interview-be-service # 컨테이너 실행
+            sudo docker run -d --name interview-be-app -p 8080:8080 --env-file /home/ubuntu/interview-be/.env ${{ secrets.DOCKER_USERNAME }}/interview-be-service # 환경변수 주입하여 컨테이너 실행
             sudo docker image prune -f

.gitignore

@@ -37,10 +37,8 @@ out/
 .vscode/
 
 ### 팀 노션 스페이스 참고 ###
-/src/main/resources/application.yml
+.env
 /src/main/resources/keystore.p12
-/src/main/resources/application-test.yml
-
 /src/main/resources/data.sql
 /src/main/resources/schema.sql
 

Dockerfile

@@ -1,7 +1,6 @@
 FROM openjdk:17-jdk-alpine
+RUN apk add tzdata && ln -snf /usr/share/zoneinfo/Asia/Seoul /etc/localtime
 ARG JAR_FILE=build/libs/*.jar
 COPY ${JAR_FILE} app.jar
 EXPOSE 8080
-ENTRYPOINT ["java", "-jar", "/app.jar"]
-
-RUN apk add tzdata && ln -snf /usr/share/zoneinfo/Asia/Seoul /etc/localtime
+ENTRYPOINT ["java", "-jar", "/app.jar"]

build.gradle

@@ -2,6 +2,7 @@ plugins {
     id 'java'
     id 'org.springframework.boot' version '3.4.5'
     id 'io.spring.dependency-management' version '1.1.7'
+    id "io.sentry.jvm.gradle" version "5.9.0"
 }
 
 ext {
@@ -79,6 +80,21 @@ dependencies {
 
     // OpenFeign AI 서버와 통신을 위한 의존성
     implementation 'org.springframework.cloud:spring-cloud-starter-openfeign:4.2.1'
+
+    // Sentry 모니터링 시스템
+    implementation "io.sentry:sentry-spring-boot-starter-jakarta:8.19.0"
+
+    // 환경변수(.env) 파일 관리
+    implementation 'me.paulschwarz:spring-dotenv:4.0.0'
+}
+
+// Sentry 모니터링 시스템 - @Slf4j 로그 전송
+sentry {
+    includeSourceContext = true
+
+    org = "inha-university-6n"
+    projectName = "injob"
+    authToken = System.getenv("SENTRY_AUTH_TOKEN")
 }
 
 tasks.named('test') {

src/main/java/cloudcomputinginha/demo/apiPayload/exception/GeneralException.java

@@ -2,19 +2,22 @@
 
 import cloudcomputinginha.demo.apiPayload.code.BaseErrorCode;
 import cloudcomputinginha.demo.apiPayload.code.ErrorReasonDTO;
-import lombok.AllArgsConstructor;
 import lombok.Getter;
 
 @Getter
-@AllArgsConstructor
 public class GeneralException extends RuntimeException {
     private BaseErrorCode code;
 
+    public GeneralException(BaseErrorCode code) {
+        super("[" + code.getReason().getCode() + "] " + code.getReason().getMessage());  // 에러 메시지 전달
+        this.code = code;
+    }
+
     public ErrorReasonDTO getErrorReason() {
         return this.code.getReason();
     }
 
-    public ErrorReasonDTO getErrorReasonHttpStatus(){
+    public ErrorReasonDTO getErrorReasonHttpStatus() {
         return this.code.getReasonHttpStatus();
     }
 }

src/main/java/cloudcomputinginha/demo/config/auth/SecurityConfig.java

@@ -35,8 +35,8 @@ public CorsConfiguration getCorsConfiguration(HttpServletRequest request) {
                                 configuration.setAllowedOrigins(List.of(
                                         "http://localhost:8080",
                                         "http://localhost:3000",
-                                        "https://cloud-computing-fe-two.vercel.app",
                                         "http://127.0.0.1:5500",
+                                        "https://www.injob.store",
                                         domainProperties.getAi(),
                                         domainProperties.getBackend()
                                 ));

src/main/resources/application-aws.yml

@@ -0,0 +1,6 @@
+cloud:
+  aws:
+    auth: ${AWS_AUTH} # 자격 증명 방식
+    s3:
+      bucket: ${S3_BUCKET_NAME}
+      region: ${S3_REGION}

src/main/resources/application-domain.yml

@@ -0,0 +1,3 @@
+domain: #도메인 정보 URL 생성, CORS 설정, FeignClient 등에 사용할 예정
+  backend: ${BACKEND_URL}
+  ai: ${AI_URL}

src/main/resources/application-jwt.yml

@@ -0,0 +1,2 @@
+jwt:
+  secret: ${JWT_SECRET_KEY}

src/main/resources/application-oauth2.yml

@@ -0,0 +1,14 @@
+sns:
+  google:
+    url: ${GOOGLE_URL}
+    client:
+      id: ${GOOGLE_CLIENT_ID}
+      secret: ${GOOGLE_CLIENT_SECRET}
+    token:
+      url: ${GOOGLE_TOKEN_URL}
+    callback:
+      url: ${BACKEND_URL}/${GOOGLE_CALLBACK_ENDPOINT}
+
+frontend:
+  default-redirect-uri: ${DEFAULT_REDIRECT_URI}
+  allowed-redirect-uris: ${ALLOWED_REDIRECT_URIS}