deploy-prod.yml

name: Deploy to EC2

# 배포 대상 EC2 서버가 종료되어 자동 배포를 중단하고 수동 실행으로 전환
# (서버 복구 시: 트리거를 push로 되돌리고 EC2_HOST 등 secrets를 새 서버 정보로 갱신)
on:
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2

      - name: Set up JDK 17
        uses: actions/setup-java@v2
        with:
          java-version: '17'
          distribution: 'adopt'

      - name: Create .env file for Docker Compose
        run: |
          echo "JWT_SECRET=${{ secrets.JWT_SECRET }}" >> .env
          echo "GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }}" >> .env
          echo "GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }}" >> .env
          echo "NAVER_CLIENT_ID=${{ secrets.NAVER_CLIENT_ID }}" >> .env
          echo "NAVER_CLIENT_SECRET=${{ secrets.NAVER_CLIENT_SECRET }}" >> .env
          echo "KAKAO_CLIENT_ID=${{ secrets.KAKAO_CLIENT_ID }}" >> .env
          echo "KAKAO_CLIENT_SECRET=${{ secrets.KAKAO_CLIENT_SECRET }}" >> .env
          echo "REDIS_HOST=${{ secrets.REDIS_HOST }}" >> .env
          echo "REDIS_PORT=${{ secrets.REDIS_PORT }}" >> .env
          echo "REDIS_PASSWORD=${{ secrets.REDIS_PASSWORD }}" >> .env
          echo "DOCKER_HUB_USERNAME=${{ secrets.DOCKER_HUB_USERNAME }}" >> .env
          echo "AWS_ACCESS_KEY=${{ secrets.AWS_ACCESS_KEY }}" >> .env
          echo "AWS_SECRET_KEY=${{ secrets.AWS_SECRET_KEY }}" >> .env
          echo "AWS_BUCKET_NAME=${{ secrets.AWS_BUCKET_NAME }}" >> .env
          echo "TOSS_SECRET_KEY=${{ secrets.TOSS_SECRET_KEY }}" >> .env
          echo "DATASOURCE_URL=${{ secrets.DATASOURCE_URL }}" >> .env
          echo "DATASOURCE_USERNAME=${{ secrets.DATASOURCE_USERNAME }}" >> .env
          echo "DATASOURCE_PASSWORD=${{ secrets.DATASOURCE_PASSWORD }}" >> .env
          echo "ALADIN_SECRET_PROD=${{ secrets.ALADIN_SECRET_PROD }}" >> .env
          echo "SPRING_PROFILES_ACTIVE=prod" >> .env

      - name: Grant execute permission for gradlew
        run: |
          cd roome
          chmod +x gradlew

      - name: Build with Gradle
        run: |
          cd roome
          ./gradlew bootJar -x test 

      - name: Login to Docker Hub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v2
        with:
          context: ./roome
          push: true
          tags: ${{ secrets.DOCKER_HUB_USERNAME }}/roome-prod:latest

      - name: Copy files to EC2
        uses: appleboy/scp-action@master
        with:
          host: ${{ secrets.EC2_HOST_PROD }}
          username: ${{ secrets.EC2_USERNAME_PROD }}
          key: ${{ secrets.EC2_SSH_KEY }}
          source: "docker-compose-prod.yml,.env"
          target: "~/"

      - name: Deploy to EC2
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.EC2_HOST_PROD}}
          username: ${{ secrets.EC2_USERNAME_PROD }}
          key: ${{ secrets.EC2_SSH_KEY }}
          script: |
            docker system prune -af --volumes
            docker-compose -f docker-compose-prod.yml -p roome-prod down
            docker pull ${{ secrets.DOCKER_HUB_USERNAME }}/roome-prod:latest
            docker-compose -f docker-compose-prod.yml -p roome-prod up -d