[IDLE-518] 인프라 재구축 및 CI/CD 재가동

.github/workflows/dev-server-deployer.yaml

@@ -86,9 +86,9 @@ jobs:
           key: ${{ secrets.INSTANCE_PEM_KEY }}
           envs: VARS_CONTEXT,SECRETS_CONTEXT
           script: |
-            cd ~/app/docker
+            cd ~/app/docker/idle-presentation
             jq -s '.[0] * .[1]' <(echo "$VARS_CONTEXT") <(echo "$SECRETS_CONTEXT") \
-              | jq -r 'to_entries | map("\(.key)=\(.value)") | .[]' > .env
+              | jq -r 'to_entries | map(select(.key != "INSTANCE_PEM_KEY")) | map("\(.key)=\(.value)") | .[]' > .env
 
       - name: Run Docker Compose up
         uses: appleboy/ssh-action@master

.github/workflows/prod-server-deployer.yaml

@@ -1,6 +1,9 @@
 name: Production Server Deployer (CD)
 
-on: workflow_dispatch
+on:
+  push:
+    branches:
+      - main
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -50,7 +53,13 @@ jobs:
           username: ${{ vars.BASTION_USERNAME }}
           key: ${{ secrets.INSTANCE_PEM_KEY }}
           script: |
-            ssh -o "ProxyJump=${{ vars.BASTION_HOST }}" -i ${{ secrets.INSTANCE_PEM_KEY }} ${{ vars.INSTANCE_USERNAME }}@${{ vars.INSTANCE_HOST }} << 'EOF'
+            if [ ! -f private_key.pem ]; then
+              echo "${{ secrets.INSTANCE_PEM_KEY }}" > private_key.pem
+              chmod 600 private_key.pem
+            fi
+            ssh -f -N -M -S my-cicd-socket -o StrictHostKeyChecking=no -i private_key.pem -L 2222:${{ vars.INSTANCE_HOST }}:22 ec2-user@${{ vars.BASTION_HOST }}
+            ssh -o StrictHostKeyChecking=no -i private_key.pem -p 2222 ubuntu@localhost << 'EOF'
+              echo "Connected to Private Subnet productionServer via SSH Tunneling"
               if ! command -v docker >/dev/null 2>&1; then
                 echo "Installing Docker..."
                 sudo apt-get update
@@ -66,23 +75,42 @@ jobs:
                 echo "Docker Compose already installed."
               fi
             EOF
+            ssh -S my-cicd-socket -O exit ec2-user@${{ vars.BASTION_HOST }}
+            rm -f private_key.pem
 
       - name: Configuration Env file
         uses: appleboy/ssh-action@master
-        env:
-          VARS_CONTEXT: ${{ toJson(vars) }}
-          SECRETS_CONTEXT: ${{ toJson(secrets) }}
         with:
           host: ${{ vars.BASTION_HOST }}
           username: ${{ vars.BASTION_USERNAME }}
           key: ${{ secrets.INSTANCE_PEM_KEY }}
-          envs: VARS_CONTEXT,SECRETS_CONTEXT
           script: |
-            ssh -o "ProxyJump=${{ vars.BASTION_HOST }}" -i ${{ secrets.INSTANCE_PEM_KEY }} ${{ vars.INSTANCE_USERNAME }}@${{ vars.INSTANCE_HOST }} << 'EOF'
-            cd ~/app/docker
-            jq -s '.[0] * .[1] | del(.INSTANCE_PEM_KEY)' <(echo "$VARS_CONTEXT") <(echo "$SECRETS_CONTEXT") \
-              | jq -r 'to_entries | map("\(.key)=\(.value)") | .[]' > .env
+            if [ ! -f private_key.pem ]; then
+              echo "${{ secrets.INSTANCE_PEM_KEY }}" > private_key.pem
+              chmod 600 private_key.pem
+            fi
+            ssh -f -N -M -S my-cicd-socket -o StrictHostKeyChecking=no -i private_key.pem -L 2222:${{ vars.INSTANCE_HOST }}:22 ec2-user@${{ vars.BASTION_HOST }}
+            ssh -o StrictHostKeyChecking=no -i private_key.pem -p 2222 ubuntu@localhost << 'EOF'
+              echo "Connected to Private Subnet productionServer via SSH Tunneling"
+              cd ~/app/docker
+
+              echo "VARS_CONTEXT: ${{ toJson(vars) }}"
+              echo "SECRETS_CONTEXT: ${{ toJson(secrets) }}"
+
+              VARS_CONTEXT_JSON='${{ toJson(vars) }}'
+              SECRETS_CONTEXT_JSON='${{ toJson(secrets) }}'
+
+              echo "$VARS_CONTEXT_JSON" > vars_context.json
+              echo "$SECRETS_CONTEXT_JSON" > secrets_context.json
+
+              jq -s '.[0] * .[1]' vars_context.json secrets_context.json \
+                | jq -r 'to_entries | map(select(.key != "INSTANCE_PEM_KEY")) | map("\(.key)=\(.value)") | .[]' > .env
+
+              echo ".env file generated:"
+              cat .env
             EOF
+            ssh -S my-cicd-socket -O exit ec2-user@${{ vars.BASTION_HOST }}
+            rm -f private_key.pem
 
       - name: SSH to Bastion and deploy to Production server
         uses: appleboy/ssh-action@master
@@ -91,17 +119,25 @@ jobs:
           username: ${{ vars.BASTION_USERNAME }}
           key: ${{ secrets.INSTANCE_PEM_KEY }}
           script: |
-            ssh -o "ProxyJump=${{ vars.BASTION_HOST }}" -i ${{ secrets.INSTANCE_PEM_KEY }} ${{ vars.INSTANCE_USERNAME }}@${{ vars.INSTANCE_HOST }} << 'EOF'
-            sudo docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
-            sudo docker pull public.ecr.aws/f5q3r6m5/caremeet:latest
-            if [ $(sudo docker ps -q -f name=caremeet_server_prod) ]; then
-              sudo docker stop caremeet_server_prod
-              sudo docker rm caremeet_server_prod
+            if [ ! -f private_key.pem ]; then
+              echo "${{ secrets.INSTANCE_PEM_KEY }}" > private_key.pem
+              chmod 600 private_key.pem
             fi
-            sudo docker run --name caremeet_server_prod --env-file ./app/docker/.env \
-            -e SPRING_PROFILES_ACTIVE=prod \
-            -d -p 8080:8080 public.ecr.aws/f5q3r6m5/caremeet:latest
+            ssh -f -N -M -S my-cicd-socket -o StrictHostKeyChecking=no -i private_key.pem -L 2222:${{ vars.INSTANCE_HOST }}:22 ec2-user@${{ vars.BASTION_HOST }}
+            ssh -o StrictHostKeyChecking=no -i private_key.pem -p 2222 ubuntu@localhost << 'EOF'
+              echo "Connected to Private Subnet productionServer via SSH Tunneling"
+              sudo docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
+              sudo docker pull public.ecr.aws/e4z1s9l7/caremeet:latest
+              if [ $(sudo docker ps -q -f name=caremeet_server_prod) ]; then
+                sudo docker stop caremeet_server_prod
+                sudo docker rm caremeet_server_prod
+              fi
+              sudo docker run --name caremeet_server_prod --env-file ./app/docker/.env \
+              -e SPRING_PROFILES_ACTIVE=prod \
+              -d -p 8080:8080 public.ecr.aws/e4z1s9l7/caremeet:latest
             EOF
+            ssh -S my-cicd-socket -O exit ec2-user@${{ vars.BASTION_HOST }}
+            rm -f private_key.pem
 
       - name: Remove GitHub Actions IP
         run: |

idle-domain/src/main/resources/application-domain.yml

@@ -1,14 +1,17 @@
+
 spring:
   datasource:
     driver-class-name: com.mysql.cj.jdbc.Driver
-    url: ${DB_URL:jdbc:mysql://localhost:3306/idle?serverTimezone=Asia/Seoul&characterEncoding=UTF-8}
+    url: ${DB_URL:jdbc:mysql://localhost:3306/caremeet?serverTimezone=Asia/Seoul&characterEncoding=UTF-8}
     username: ${DB_USERNAME:root}
     password: ${DB_PASSWORD:mysql}
   jpa:
     open-in-view: false
     properties:
       hibernate.format_sql: true
       dialect: org.hibernate.dialect.MySQLDialect
+    hibernate:
+      ddl-auto: validate
   data:
     redis:
       host: ${REDIS_HOST:localhost}

idle-presentation/compose-dev.yaml

@@ -10,19 +10,26 @@ services:
     pull_policy: always
     env_file:
       - .env
-    depends_on:
-      - mysql
     ports:
       - "8080:8080"
+    depends_on:
+      - mysql
+      - redis
+    networks:
+      - redis-caremeet-net
+      - mysql-caremeet-net
 
   mysql:
     image: mysql:8.0.33
+    container_name: mysql_dev
     environment:
-      MYSQL_DATABASE: idle
+      MYSQL_DATABASE: caremeet
       MYSQL_ROOT_PASSWORD: ${DB_PASSWORD}
       TZ: Asia/Seoul
     ports:
       - "3306:3306"
+    networks:
+      - mysql-caremeet-net
 
   redis:
     image: redis:7.2.5
@@ -35,6 +42,14 @@ services:
     volumes:
       - redis-volume:/data
     restart: unless-stopped
+    networks:
+      - redis-caremeet-net
+
+networks:
+  mysql-caremeet-net:
+    driver: bridge
+  redis-caremeet-net:
+    driver: bridge
 
 volumes:
   mysql-volume: