CD - Deploy to Server #228
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CD - Deploy to Server | |
| on: | |
| workflow_run: | |
| workflows: ["CI - Build and Test"] | |
| types: [completed] | |
| branches: [ develop, main ] | |
| env: | |
| DOCKER_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/tech-fork | |
| jobs: | |
| docker-build: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event.workflow_run.conclusion == 'success' }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v6 | |
| - name: Download JAR from CI | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: tech-fork-jar | |
| path: build/libs/ | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| run-id: ${{ github.event.workflow_run.id }} | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v4 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v4 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v4 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v7 | |
| with: | |
| context: . | |
| platforms: linux/arm64 | |
| push: true | |
| tags: | | |
| ${{ env.DOCKER_IMAGE }}:${{ github.event.workflow_run.head_branch }} | |
| ${{ env.DOCKER_IMAGE }}:${{ github.event.workflow_run.head_branch }}-${{ github.event.workflow_run.head_sha }} | |
| deploy: | |
| needs: [docker-build] | |
| runs-on: ubuntu-latest | |
| env: | |
| BRANCH: ${{ github.event.workflow_run.head_branch }} | |
| SPRING_PROFILES_ACTIVE: dev | |
| DB_URL: ${{ secrets.DB_URL }} | |
| DB_USERNAME: ${{ secrets.DB_USERNAME }} | |
| DB_PASSWORD: ${{ secrets.DB_PASSWORD }} | |
| REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }} | |
| DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }} | |
| ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} | |
| OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} | |
| KAKAO_REST_API_KEY: ${{ secrets.KAKAO_REST_API_KEY }} | |
| KAKAO_CLIENT_SECRET: ${{ secrets.KAKAO_CLIENT_SECRET }} | |
| APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} | |
| APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }} | |
| APPLE_CLIENT_ID: ${{ secrets.APPLE_CLIENT_ID }} | |
| JWT_SECRET: ${{ secrets.JWT_SECRET }} | |
| JWT_REDIRECT_URI: ${{ secrets.JWT_REDIRECT_URI }} | |
| JWT_REDIRECT_URI_DEV: ${{ secrets.JWT_REDIRECT_URI_DEV }} | |
| JWT_LOGIN_FAILURE_REDIRECT_URI: ${{ secrets.JWT_LOGIN_FAILURE_REDIRECT_URI }} | |
| JWT_LOGIN_FAILURE_REDIRECT_URI_DEV: ${{ secrets.JWT_LOGIN_FAILURE_REDIRECT_URI_DEV }} | |
| SERVER_DOMAIN: ${{ secrets.SERVER_DOMAIN }} | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED }} | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED_DEV: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED }} | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL }} | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV: ${{ secrets.CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v6 | |
| - name: Copy deployment files to server | |
| uses: appleboy/scp-action@v1 | |
| with: | |
| host: ${{ secrets.EC2_HOST }} | |
| username: ${{ secrets.EC2_USERNAME }} | |
| key: ${{ secrets.EC2_SSH_KEY }} | |
| source: "docker/,scripts/deploy.sh" | |
| target: "~/deploy/" | |
| - name: Place Apple private key on server | |
| uses: appleboy/ssh-action@v1 | |
| env: | |
| APPLE_PRIVATE_KEY: ${{ secrets.APPLE_PRIVATE_KEY }} | |
| APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }} | |
| with: | |
| host: ${{ secrets.EC2_HOST }} | |
| username: ${{ secrets.EC2_USERNAME }} | |
| key: ${{ secrets.EC2_SSH_KEY }} | |
| envs: APPLE_PRIVATE_KEY,APPLE_KEY_ID | |
| script: | | |
| mkdir -p ~/keys | |
| chmod 700 ~/keys | |
| printf '%s' "$APPLE_PRIVATE_KEY" > ~/keys/AuthKey_${APPLE_KEY_ID}.p8 | |
| chmod 600 ~/keys/AuthKey_${APPLE_KEY_ID}.p8 | |
| - name: Deploy with blue-green strategy | |
| uses: appleboy/ssh-action@v1 | |
| with: | |
| host: ${{ secrets.EC2_HOST }} | |
| username: ${{ secrets.EC2_USERNAME }} | |
| key: ${{ secrets.EC2_SSH_KEY }} | |
| command_timeout: 10m | |
| envs: >- | |
| DOCKER_IMAGE,BRANCH,SPRING_PROFILES_ACTIVE,DB_URL,DB_PASSWORD,REDIS_PASSWORD, | |
| DISCORD_WEBHOOK_URL,ANTHROPIC_API_KEY,OPENAI_API_KEY, | |
| KAKAO_REST_API_KEY,KAKAO_CLIENT_SECRET, | |
| APPLE_TEAM_ID,APPLE_KEY_ID,APPLE_CLIENT_ID, | |
| JWT_SECRET,JWT_REDIRECT_URI,JWT_REDIRECT_URI_DEV,JWT_LOGIN_FAILURE_REDIRECT_URI,JWT_LOGIN_FAILURE_REDIRECT_URI_DEV,SERVER_DOMAIN, | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED,CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL, | |
| CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_ENABLED_DEV,CLOUDFLARE_THIRD_PARTY_THUMBNAIL_OPTIMIZATION_DELIVERY_BASE_URL_DEV | |
| script: | | |
| cd ~/deploy | |
| chmod +x scripts/deploy.sh | |
| ./scripts/deploy.sh |