nadab-BE/.github/workflows/deploy-to-dev-ec2.yml at develop · DevKor-github/nadab-BE · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
name: Deploy to Dev EC2

on:
  push:
    branches: [ develop ]
  workflow_dispatch:

jobs:
  deploy:
    name: Build & Deploy to EC2 (Dev)
    runs-on: ubuntu-latest
    environment: dev

    steps:
      - name: 📥 Checkout Repository
        uses: actions/checkout@v4

      - name: ☕ Install JDK 21 (Amazon Corretto)
        uses: actions/setup-java@v4
        with:
          distribution: 'corretto'
          java-version: '21'

      - name: 🔧 Make Gradle Executable
        run: chmod +x gradlew

      - name: 🏗️ Build Project with Gradle
        run: ./gradlew bootJar

      - name: 📤 Upload JAR to EC2 via SCP
        uses: appleboy/scp-action@v0.1.7
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ec2-user
          key: ${{ secrets.EC2_SSH_PRIVATE_KEY }}
          source: ./build/libs/*.jar
          target: ~/nadab/
          overwrite: true

      - name: 🚀 Restart App on EC2
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.EC2_HOST }}
          username: ec2-user
          key: ${{ secrets.EC2_SSH_PRIVATE_KEY }}
          script: |
            set -euxo pipefail

            cd ~/nadab
            echo "🔎 현재 서버 디렉토리: $(pwd)"

            echo "📄 현재 파일 목록"
            ls -al

            # 최근 JAR 선택 (build/libs 아래에서 찾기)
            JAR_PATH=$(ls -1t build/libs/*.jar | head -n1 || true)
            [ -n "$JAR_PATH" ] || { echo "❌ JAR 파일이 존재하지 않습니다"; exit 1; }

            JAR_NAME=$(basename "$JAR_PATH")

            echo "📌 배포할 JAR 선택됨: $JAR_PATH"

            # 실행중인 프로세스 종료
            echo "🛑 기존 애플리케이션 종료 중..."
            pkill -f "$JAR_NAME" || true

            echo "🚀 새 버전 실행..."

            # ✅ base64로 인코딩된 프롬프트를 환경 변수에 디코딩해서 넣기
            INSIGHT_PROMPT_B64="${{ secrets.INSIGHT_PROMPT_B64 }}"
            INSIGHT_PROMPT="$(printf '%s' "$INSIGHT_PROMPT_B64" | base64 -d | tr -d '\r')"
            export INSIGHT_PROMPT

            INSIGHT_WITH_IMAGE_PROMPT_B64="${{ secrets.INSIGHT_WITH_IMAGE_PROMPT_B64 }}"
            INSIGHT_WITH_IMAGE_PROMPT="$(printf '%s' "$INSIGHT_WITH_IMAGE_PROMPT_B64" | base64 -d | tr -d '\r')"
            export INSIGHT_WITH_IMAGE_PROMPT

            WEEKLY_PROMPT_B64="${{ secrets.WEEKLY_PROMPT_B64 }}"
            WEEKLY_PROMPT="$(printf '%s' "$WEEKLY_PROMPT_B64" | base64 -d | tr -d '\r')"
            export WEEKLY_PROMPT

            MONTHLY_V1_PROMPT_B64="${{ secrets.MONTHLY_V1_PROMPT_B64 }}"
            MONTHLY_V1_PROMPT="$(printf '%s' "$MONTHLY_V1_PROMPT_B64" | base64 -d | tr -d '\r')"
            export MONTHLY_V1_PROMPT

            MONTHLY_V2_BASELINE_PROMPT_B64="${{ secrets.MONTHLY_V2_BASELINE_PROMPT_B64 }}"
            MONTHLY_V2_BASELINE_PROMPT="$(printf '%s' "$MONTHLY_V2_BASELINE_PROMPT_B64" | base64 -d | tr -d '\r')"
            export MONTHLY_V2_BASELINE_PROMPT

            MONTHLY_V2_COMPARISON_PROMPT_B64="${{ secrets.MONTHLY_V2_COMPARISON_PROMPT_B64 }}"
            MONTHLY_V2_COMPARISON_PROMPT="$(printf '%s' "$MONTHLY_V2_COMPARISON_PROMPT_B64" | base64 -d | tr -d '\r')"
            export MONTHLY_V2_COMPARISON_PROMPT

            EVIDENCE_CARD_PROMPT_B64="${{ secrets.EVIDENCE_CARD_PROMPT_B64 }}"
            EVIDENCE_CARD_PROMPT="$(printf '%s' "$EVIDENCE_CARD_PROMPT_B64" | base64 -d | tr -d '\r')"
            export EVIDENCE_CARD_PROMPT

            PATTERN_EXTRACT_PROMPT_B64="${{ secrets.PATTERN_EXTRACT_PROMPT_B64 }}"
            PATTERN_EXTRACT_PROMPT="$(printf '%s' "$PATTERN_EXTRACT_PROMPT_B64" | base64 -d | tr -d '\r')"
            export PATTERN_EXTRACT_PROMPT

            TYPE_SELECT_PROMPT_B64="${{ secrets.TYPE_SELECT_PROMPT_B64 }}"
            TYPE_SELECT_PROMPT="$(printf '%s' "$TYPE_SELECT_PROMPT_B64" | base64 -d | tr -d '\r')"
            export TYPE_SELECT_PROMPT

            TYPE_PROMPT_B64="${{ secrets.TYPE_PROMPT_B64 }}"
            TYPE_PROMPT="$(printf '%s' "$TYPE_PROMPT_B64" | base64 -d | tr -d '\r')"
            export TYPE_PROMPT

            REPAIR_TYPE_PROMPT_B64="${{ secrets.REPAIR_TYPE_PROMPT_B64 }}"
            REPAIR_TYPE_PROMPT="$(printf '%s' "$REPAIR_TYPE_PROMPT_B64" | base64 -d | tr -d '\r')"
            export REPAIR_TYPE_PROMPT

            NOTIFICATION_MESSAGES_B64="${{ secrets.NOTIFICATION_MESSAGES_B64 }}"
            NOTIFICATION_MESSAGES="$(printf '%s' "$NOTIFICATION_MESSAGES_B64" | base64 -d | tr -d '\r')"
            export NOTIFICATION_MESSAGES

            DB_URL="${{ secrets.DB_URL }}" \
            DB_USERNAME="${{ secrets.DB_USERNAME }}" \
            DB_PASSWORD="${{ secrets.DB_PASSWORD }}" \
            JWT_SECRET="${{ secrets.JWT_SECRET }}" \
            FRONTEND_DEV_URL="${{ secrets.FRONTEND_DEV_URL }}" \
            FRONTEND_DEV_URL_2="${{ secrets.FRONTEND_DEV_URL_2 }}" \
            FRONTEND_DEV_URL_3="${{ secrets.FRONTEND_DEV_URL_3 }}" \
            SWAGGER_SERVER_URL="${{ secrets.SWAGGER_SERVER_URL }}" \
            SWAGGER_ORIGIN_PUBLIC_IP="${{ secrets.SWAGGER_ORIGIN_PUBLIC_IP }}" \
            SWAGGER_ORIGIN_DOMAIN="${{ secrets.SWAGGER_ORIGIN_DOMAIN }}" \
            NAVER_CLIENT_ID="${{ secrets.NAVER_CLIENT_ID }}" \
            NAVER_CLIENT_SECRET="${{ secrets.NAVER_CLIENT_SECRET }}" \
            NAVER_REDIRECT_URI="${{ secrets.NAVER_REDIRECT_URI }}" \
            GOOGLE_CLIENT_ID="${{ secrets.GOOGLE_CLIENT_ID }}" \
            GOOGLE_ANDROID_CLIENT_ID="${{ secrets.GOOGLE_ANDROID_CLIENT_ID }}" \
            GOOGLE_IOS_CLIENT_ID="${{ secrets.GOOGLE_IOS_CLIENT_ID }}" \
            GOOGLE_CLIENT_SECRET="${{ secrets.GOOGLE_CLIENT_SECRET }}" \
            GOOGLE_REDIRECT_URI="${{ secrets.GOOGLE_REDIRECT_URI }}" \
            KAKAO_CLIENT_ID="${{ secrets.KAKAO_CLIENT_ID }}" \
            KAKAO_CLIENT_SECRET="${{ secrets.KAKAO_CLIENT_SECRET }}" \
            KAKAO_REDIRECT_URI="${{ secrets.KAKAO_REDIRECT_URI }}" \
            KAKAO_APP_ID="${{ secrets.KAKAO_APP_ID }}" \
            APPLE_CLIENT_ID="${{ secrets.APPLE_CLIENT_ID }}" \
            APPLE_TEAM_ID="${{ secrets.APPLE_TEAM_ID }}" \
            APPLE_KEY_ID="${{ secrets.APPLE_KEY_ID }}" \
            APPLE_PRIVATE_KEY="${{ secrets.APPLE_PRIVATE_KEY }}" \
            IAM_ACCESS_KEY="${{ secrets.IAM_ACCESS_KEY }}" \
            IAM_SECRET_KEY="${{ secrets.IAM_SECRET_KEY }}" \
            BUCKET_NAME="${{ secrets.BUCKET_NAME }}" \
            PROFILE_IMAGE_BASE_URL="${{ secrets.PROFILE_IMAGE_BASE_URL }}" \
            KMS_KEY_ID="${{ secrets.KMS_KEY_ID }}" \
            MAIL_ADDRESS="${{ secrets.MAIL_ADDRESS }}" \
            MAIL_PASSWORD="${{ secrets.MAIL_PASSWORD }}" \
            OPENAI_API_KEY="${{ secrets.OPENAI_API_KEY }}" \
            ANTHROPIC_API_KEY="${{ secrets.ANTHROPIC_API_KEY }}" \
            GOOGLE_GENAI_API_KEY="${{ secrets.GOOGLE_GENAI_API_KEY }}" \
            FIREBASE_ADMIN_KEY="${{ secrets.FIREBASE_ADMIN_KEY }}" \
            ADMIN_PAGE_PASSWORD='${{ secrets.ADMIN_PAGE_PASSWORD }}' \
            DEV_TEST_ACCOUNT_PASSWORD="${{ secrets.DEV_TEST_ACCOUNT_PASSWORD }}" \
            nohup java -jar "$JAR_PATH" \
              --spring.profiles.active=dev > app.log 2>&1 &

            echo "✅ 배포 완료!"