develop <- main

.github/workflows/deploy.yml

@@ -0,0 +1,73 @@
+# 워크플로우의 전체 이름
+name: 픽픽 CI/CD 배포
+
+# 워크플로우가 언제 실행될지 정의하는 트리거
+on:
+  # main 브랜치에 push 이벤트가 발생했을 때 실행
+  push:
+    branches: [ "main" ]
+
+# 실행될 작업(Job)들을 정의
+jobs:
+  # '빌드와 배포' 작업
+  build-and-deploy:
+    # 이 작업이 실행될 가상 머신의 종류 (최신 우분투)
+    runs-on: ubuntu-latest
+
+    # 작업 내에서 순서대로 실행될 단계(Step)들
+    steps:
+      # 1. 소스 코드 체크아웃
+      - name: 소스 코드 체크아웃
+        uses: actions/checkout@v4
+
+      # 2. JDK 17 설치
+      - name: JDK 17 설치
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      # 3. Gradle 캐시 설정
+      # 매번 Gradle 의존성 받을 필요 없어 빌드 속도 빨라짐
+      - name: Gradle 캐시 설정
+        uses: actions/cache@v4
+        with:
+          path: ~/.gradle/caches
+          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*') }}
+          restore-keys: |
+            ${{ runner.os }}-gradle-
+
+      # 4. gradlew 실행 권한 부여
+      - name: gradlew 실행 권한 부여
+        run: chmod +x ./gradlew
+
+      # 5. Gradle로 빌드하기
+      - name: Gradle로 빌드하기
+        run: ./gradlew bootJar
+
+      # 6. EC2에 배포 스크립트와 JAR 파일 업로드
+      - name: EC2에 파일 업로드
+        uses: appleboy/scp-action@master
+        with:
+          host: 3.39.139.208
+          username: ubuntu
+          key: ${{ secrets.EC2_SSH_KEY }}
+          source: "build/libs/*.jar,deploy.sh" # .jar 파일과 deploy.sh 파일을 함께 업로드
+          target: "/home/ubuntu/app"
+
+      # 7. EC2에서 배포 스크립트 실행
+      - name: EC2에서 배포 스크립트 실행
+        uses: appleboy/ssh-action@master
+        with:
+          host: 3.39.139.208 # EC2 퍼블릿 IP
+          username: ubuntu
+          key: ${{ secrets.EC2_SSH_KEY }}
+          envs: |
+            SPRING_PROFILES_ACTIVE=prod
+            SPRING_DATASOURCE_PASSWORD=${{ secrets.SPRING_DATASOURCE_PASSWORD }}
+            JWT_SECRET=${{ secrets.JWT_SECRET }}
+            KAKAO_CLIENT_ID=${{ secrets.KAKAO_CLIENT_ID }}
+          script: |
+            cd /home/ubuntu/app
+            chmod +x deploy.sh    # 스크립트 실행 권한 부여
+            ./deploy.sh           # 스크립트 실행

.gitignore

@@ -0,0 +1,40 @@
+HELP.md
+.gradle
+.idea
+build/
+!gradle/wrapper/gradle-wrapper.jar
+!**/src/main/**/build/
+!**/src/test/**/build/
+src/main/generated/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+out/
+!**/src/main/**/out/
+!**/src/test/**/out/
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+
+### VS Code ###
+.vscode/
+.DS_Store

build.gradle

@@ -1,6 +1,6 @@
 plugins {
 	id 'java'
-	id 'org.springframework.boot' version '3.5.7'
+	id 'org.springframework.boot' version '3.3.13'
 	id 'io.spring.dependency-management' version '1.1.7'
 }
 
@@ -22,15 +22,46 @@ configurations {
 
 repositories {
 	mavenCentral()
+	maven { url 'https://repo.spring.io/milestone' }
 }
 
 dependencies {
+	// Spring Web MVC
 	implementation 'org.springframework.boot:spring-boot-starter-web'
+
+	// Spring Data JPA
+	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+
+	// Spring Security
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+
+	// Lombok
 	compileOnly 'org.projectlombok:lombok'
-	runtimeOnly 'com.mysql:mysql-connector-j'
 	annotationProcessor 'org.projectlombok:lombok'
+
+	// Validation
+	implementation 'org.springframework.boot:spring-boot-starter-validation'
+
+	// MySQL
+	runtimeOnly 'com.mysql:mysql-connector-j'
+
+	// Test
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+
+	// Swagger
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.3.0'
+
+	// Spring Security
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+
+	// JTokkit
+	implementation 'com.knuddels:jtokkit:1.1.0'
+
+	// JWT
+	implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
+	runtimeOnly 'io.jsonwebtoken:jjwt-impl:0.11.5'
+	runtimeOnly('io.jsonwebtoken:jjwt-jackson:0.11.5') // JSON parsing
 }
 
 tasks.named('test') {

deploy.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+  BUILD_JAR=$(ls /home/ubuntu/app/build/libs/*.jar)
+  JAR_NAME=$(basename $BUILD_JAR)
+echo ">>> build file name: $JAR_NAME" >> /home/ubuntu/app/deploy.log
+
+  echo ">>> kill existing process" >> /home/ubuntu/app/deploy.log
+  PID=$(pgrep -f .jar)
+  if [ -n "$PID" ]; then
+  sudo kill -15 $PID
+  sleep 5
+  fi
+
+  echo ">>> execute new jar file" >> /home/ubuntu/app/deploy.log
+  cd /home/ubuntu/app
+  nohup sudo java -jar -Dspring.profiles.active=prod $BUILD_JAR > /home/ubuntu/app/application.log 2>&1 &

nginx.conf

@@ -0,0 +1,26 @@
+server {
+    listen 443 ssl;
+    server_name api.fitfit.site;
+
+    # SSL 인증서 경로도 api.fitfit.site에 맞게 새로 발급
+    # (예: sudo certbot --nginx -d api.fitfit.site)
+    ssl_certificate /etc/letsencrypt/live/api.fitfit.site/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/api.fitfit.site/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    location / {
+         # 요청을 내부 스프링 앱(8080 포트)으로 전달하는 것은 동일합니다.
+         proxy_pass http://127.0.0.1:8080;
+         proxy_set_header Host $host;
+         proxy_set_header X-Real-IP $remote_addr;
+         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+         proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+server {
+    listen 80;
+    server_name api.fitfit.site;
+    return 301 https://$host$request_uri;
+}

src/main/java/fitfit/FitfitApplication.java

@@ -2,8 +2,10 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.data.jpa.repository.config.EnableJpaAuditing;
 
 @SpringBootApplication
+@EnableJpaAuditing
 public class FitfitApplication {
 
 	public static void main(String[] args) {

src/main/java/fitfit/HelloController.java

@@ -0,0 +1,16 @@
+package fitfit;
+
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@CrossOrigin(origins = "https://fitfit.site")
+public class HelloController {
+
+    @GetMapping("/hello") // 1. HTTP GET 요청을 '/hello' 경로와 매핑
+    public String getHelloMessage() {
+        // 2. "환영합니다!" 라는 문자열을 반환
+        return "환영합니다!";
+    }
+}

src/main/java/fitfit/domain/kakao/converter/KakaoConverter.java

@@ -0,0 +1,27 @@
+package fitfit.domain.kakao.converter;
+
+import fitfit.domain.member.dto.MemberDataDTO;
+import fitfit.domain.member.dto.MemberResponseDTO;
+import fitfit.domain.member.entity.Member;
+import io.jsonwebtoken.Claims;
+
+import java.time.LocalDateTime;
+
+public class KakaoConverter {
+
+    public static MemberDataDTO.MemberData toKakaoMemberData(Claims claims) {
+        return MemberDataDTO.MemberData.builder()
+                .sub(claims.getSubject())
+                .email(claims.get("email", String.class))
+                .build();
+    }
+
+    public static MemberResponseDTO.KkoOAuth2LoginResponse toKkoOAuth2LoginResponse(Member member, String accessToken, String refreshToken, LocalDateTime accessTokenExpireAt) {
+        return MemberResponseDTO.KkoOAuth2LoginResponse.builder()
+                .accessToken(accessToken)
+                .refreshToken(refreshToken)
+                .accessTokenExpireAt(accessTokenExpireAt)
+                .memberStatus(member.getStatus())
+                .build();
+    }
+}