Qup-backend/.github/workflows/github-actions.yml at main · Database-QL-team/Qup-backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
name: CI/CD Pipeline

on:
  push:
    branches:
      - main

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    steps:
      # 1. 코드 체크아웃
      - name: Checkout code
        uses: actions/checkout@v2

      # 2. JDK 설치 (Gradle 빌드 필요 시)
      - name: Set up JDK
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      # 3. Gradle 빌드
      - name: Build with Gradle
        run: ./gradlew build

      # 4. Docker 로그인
      - name: Log in to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      # 5. Docker 이미지 빌드
      - name: Build Docker Image
        run: docker build -t backend:latest .

      # 6. Docker 이미지 푸시
      - name: Push Docker Image
        run: |
          docker tag backend:latest ${{ secrets.DOCKER_USERNAME }}/backend:latest
          docker push ${{ secrets.DOCKER_USERNAME }}/backend:latest

  deploy-on-ec2:
    runs-on: ubuntu-latest
    needs: build-and-deploy
    steps:
      - name: Set up SSH
        uses: webfactory/[email protected]
        with:
          ssh-private-key: ${{ secrets.EC2_SSH_KEY }}

      # 7. EC2에서 Docker 컨테이너 실행 (로그 로테이션 포함)
      - name: Deploy on EC2
        run: |
          ssh -o StrictHostKeyChecking=no [email protected] << 'EOF'
            sudo su -

            docker stop $(docker ps -q) || true
            docker rm $(docker ps -a -q) || true
            docker system prune -af || true

            docker pull ${{ secrets.DOCKER_USERNAME }}/backend:latest

            docker run --name backend \
              --restart unless-stopped \
              -e AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} \
              -e AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }} \
              -d -p 8080:8080 \
              --log-driver json-file \
              --log-opt max-size=10m \
              --log-opt max-file=3 \
              ${{ secrets.DOCKER_USERNAME }}/backend:latest
          EOF