TechFork-server/.github/workflows/cd.yml at develop · TechForkTeam/TechFork-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
name: CD - Deploy to Server

on:
  workflow_run:
    workflows: ["CI - Build and Test"]
    types: [completed]
    branches: [ develop, main ]

env:
  DOCKER_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/tech-fork

jobs:
  docker-build:
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' }}

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Download JAR from CI
        uses: actions/download-artifact@v8
        with:
          name: tech-fork-jar
          path: build/libs/
          github-token: ${{ secrets.GITHUB_TOKEN }}
          run-id: ${{ github.event.workflow_run.id }}

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Login to DockerHub
        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v7
        with:
          context: .
          platforms: linux/arm64
          push: true
          tags: |
            ${{ env.DOCKER_IMAGE }}:${{ github.event.workflow_run.head_branch }}
            ${{ env.DOCKER_IMAGE }}:${{ github.event.workflow_run.head_branch }}-${{ github.event.workflow_run.head_sha }}

  deploy:
    needs: [docker-build]
    runs-on: ubuntu-latest
    env:
      BRANCH: ${{ github.event.workflow_run.head_branch }}
      SPRING_PROFILES_ACTIVE: dev
      DB_URL: ${{ secrets.DB_URL }}
      DB_USERNAME: ${{ secrets.DB_USERNAME }}
      DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
      REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
      DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
      KAKAO_REST_API_KEY: ${{ secrets.KAKAO_REST_API_KEY }}
      KAKAO_CLIENT_SECRET: ${{ secrets.KAKAO_CLIENT_SECRET }}
      APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
      APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }}
      APPLE_CLIENT_ID: ${{ secrets.APPLE_CLIENT_ID }}
      JWT_SECRET: ${{ secrets.JWT_SECRET }}
      JWT_REDIRECT_URI: ${{ secrets.JWT_REDIRECT_URI }}
      JWT_REDIRECT_URI_DEV: ${{ secrets.JWT_REDIRECT_URI_DEV }}
      JWT_LOGIN_FAILURE_REDIRECT_URI: ${{ secrets.JWT_LOGIN_FAILURE_REDIRECT_URI }}
      JWT_LOGIN_FAILURE_REDIRECT_URI_DEV: ${{ secrets.JWT_LOGIN_FAILURE_REDIRECT_URI_DEV }}
      SERVER_DOMAIN: ${{ secrets.SERVER_DOMAIN }}
      CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED }}
      CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED_DEV: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED }}
      CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL }}
      CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV }}

    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Copy deployment files to server
        uses: appleboy/scp-action@v1
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ${{ secrets.EC2_USERNAME }}
          key: ${{ secrets.EC2_SSH_KEY }}
          source: "docker/,scripts/deploy.sh"
          target: "~/deploy/"

      - name: Place Apple private key on server
        uses: appleboy/ssh-action@v1
        env:
          APPLE_PRIVATE_KEY: ${{ secrets.APPLE_PRIVATE_KEY }}
          APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }}
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ${{ secrets.EC2_USERNAME }}
          key: ${{ secrets.EC2_SSH_KEY }}
          envs: APPLE_PRIVATE_KEY,APPLE_KEY_ID
          script: |
            mkdir -p ~/keys
            chmod 700 ~/keys
            printf '%s' "$APPLE_PRIVATE_KEY" > ~/keys/AuthKey_${APPLE_KEY_ID}.p8
            chmod 600 ~/keys/AuthKey_${APPLE_KEY_ID}.p8

      - name: Deploy with blue-green strategy
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ${{ secrets.EC2_USERNAME }}
          key: ${{ secrets.EC2_SSH_KEY }}
          command_timeout: 10m
          envs: >-
            DOCKER_IMAGE,BRANCH,SPRING_PROFILES_ACTIVE,DB_URL,DB_PASSWORD,REDIS_PASSWORD,
            DISCORD_WEBHOOK_URL,ANTHROPIC_API_KEY,OPENAI_API_KEY,
            KAKAO_REST_API_KEY,KAKAO_CLIENT_SECRET,
            APPLE_TEAM_ID,APPLE_KEY_ID,APPLE_CLIENT_ID,
            JWT_SECRET,JWT_REDIRECT_URI,JWT_REDIRECT_URI_DEV,JWT_LOGIN_FAILURE_REDIRECT_URI,JWT_LOGIN_FAILURE_REDIRECT_URI_DEV,SERVER_DOMAIN,
            CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED,CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL,
            CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED_DEV,CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV
          script: |
            cd ~/deploy
            chmod +x scripts/deploy.sh
            ./scripts/deploy.sh