feat: dev 환경 설정 및 배포 스크립트 개선 (#179)

dev 환경에서 RAM 기반 env 파일 주입 기능 추가.
docker-compose 파일 구조 단순화 및 배포 스크립트 보완.

Author: soonduck-dreams

.github/workflows/deploy-to-dev-ec2-docker.yml

@@ -65,6 +65,9 @@ jobs:
           host: ${{ secrets.EC2_HOST }}
           username: ubuntu
           key: ${{ secrets.EC2_SSH_PRIVATE_KEY }}
+          # ------------------------------
+          # 원격에서 실행될 스크립트
+          # ------------------------------
           script: |
             set -euo pipefail
 
@@ -78,14 +81,17 @@ jobs:
             echo "${{ secrets.GHCR_TOKEN }}" | docker login ghcr.io -u "${{ secrets.GHCR_USERNAME }}" --password-stdin
 
             # 2) Create ephemeral env file in RAM (no disk residue)
-            #    - make /run/saerok owned by current user to avoid Permission denied
             sudo install -d -m 0700 -o "$(id -un)" -g "$(id -gn)" /run/saerok
             ENV_FILE="/run/saerok/env.dev"
             umask 177
             : > "$ENV_FILE"
+            # 어떤 경우에도 마지막에 지우도록 보장
+            cleanup() { shred -u "$ENV_FILE" || rm -f "$ENV_FILE"; }
+            trap cleanup EXIT
 
             # 2-1) Write secrets safely (single-line values assumed)
             add_kv() { printf '%s\n' "$1=$2" >> "$ENV_FILE"; }
+            add_kv SPRING_PROFILES_ACTIVE "dev"
             add_kv DB_URL "${{ secrets.DB_URL }}"
             add_kv DB_USERNAME "${{ secrets.DB_USERNAME }}"
             add_kv DB_PASSWORD "${{ secrets.DB_PASSWORD }}"
@@ -122,14 +128,11 @@ jobs:
               -f docker-compose.dev.yml \
               up -d --force-recreate --quiet-pull
 
-            # 4) Clean up env (memory file)
-            shred -u "$ENV_FILE" || rm -f "$ENV_FILE"
-
-            # 5) Show minimal status (no secrets)
+            # 4) Status & recent logs (env 파일은 trap으로 종료 시 삭제)
             docker compose -p saerok -f docker-compose.yml -f docker-compose.dev.yml ps
             docker logs --tail=120 saerok-dev || true
 
-            # 6) Healthcheck
+            # 5) Healthcheck
             echo "Waiting for health endpoint..."
             for i in {1..30}; do
               if curl -fsS http://localhost:8080/health > /dev/null; then
@@ -140,4 +143,5 @@ jobs:
               sleep 5
             done
             echo "❌ Healthcheck failed after retries"
+            docker logs --tail=200 saerok-dev || true
             exit 1

deploy/docker-compose.dev.yml

@@ -10,7 +10,12 @@ services:
     cpus: "0.75"
     mem_limit: "700m"
 
+    # 런타임에 생성한 RAM env 파일을 컨테이너로 그대로 주입
+    env_file:
+      - /run/saerok/env.dev
+
     environment:
+      # dev 오버레이에서 명시적으로 고정하고 싶은 값만 남김
       SPRING_PROFILES_ACTIVE: "dev"
       JAVA_OPTS: >-
         -Duser.timezone=Asia/Seoul

deploy/docker-compose.yml

@@ -1,8 +1,2 @@
-version: "3.9"
-
 services:
-  app:
-    environment:
-      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE}
-      DB_URL: ${DB_URL}
-    depends_on: []
+  app: {}