deploy.yml

name: Deploy to EC2

env:
  IMAGE_REPOSITORY: fivelogic
  CONTAINER_NAME: spring-boot
  EC2_INSTANCE_TAG_NAME: devcos-team10-main
  DOCKER_NETWORK: app-network
  BACKEND_DIR: back

on:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: write
  packages: write

defaults:
  run:
    shell: bash

jobs:
  test:
    runs-on: ubuntu-latest

    steps:
      - name: 코드 체크아웃
        uses: actions/checkout@v4

      - name: Java 21 설정
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '21'
          cache: 'gradle'

      - name: 테스트 실행
        run: |
          cd back
          chmod +x gradlew
          ./gradlew test

      - name: 테스트 결과 업로드
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: test-results
          path: back/build/reports/tests/test/

  makeTagAndRelease:
    needs: test
    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
    runs-on: ubuntu-latest
    outputs:
      tag_name: ${{ steps.create_tag.outputs.new_tag }}

    steps:
      - name: 코드 체크아웃
        uses: actions/checkout@v4

      - name: Create Tag
        id: create_tag
        uses: mathieudutour/github-tag-action@v6.2
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Create Release
        uses: actions/create-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ steps.create_tag.outputs.new_tag }}
          release_name: Release ${{ steps.create_tag.outputs.new_tag }}
          body: ${{ steps.create_tag.outputs.changelog }}
          draft: false
          prerelease: false

  buildImageAndPush:
    name: 도커 이미지 빌드와 푸시
    needs: makeTagAndRelease
    runs-on: ubuntu-latest

    steps:
      - name: 코드 체크아웃
        uses: actions/checkout@v4

      - name: .env 파일 생성
        env:
          DOT_ENV: ${{ secrets.DOT_ENV }}
          AI_API_KEY: ${{ secrets.AI_API_KEY }}
          AI_BASE_URL: ${{ secrets.AI_BASE_URL }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          MAIL_USERNAME: ${{ secrets.MAIL_USERNAME }}
          MAIL_PASSWORD: ${{ secrets.MAIL_PASSWORD }}
        run: |
          mkdir -p "${{ env.BACKEND_DIR }}"
          printf "%s" "${DOT_ENV}" > "${{ env.BACKEND_DIR }}/.env"
          echo "" >> "${{ env.BACKEND_DIR }}/.env"
          echo "AI_API_KEY=${AI_API_KEY}" >> "${{ env.BACKEND_DIR }}/.env"
          echo "AI_BASE_URL=${AI_BASE_URL}" >> "${{ env.BACKEND_DIR }}/.env"
          echo "AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}" >> "${{ env.BACKEND_DIR }}/.env"
          echo "AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}" >> "${{ env.BACKEND_DIR }}/.env"
          echo "MAIL_USERNAME=${MAIL_USERNAME}" >> "${{ env.BACKEND_DIR }}/.env"
          echo "MAIL_PASSWORD=${MAIL_PASSWORD}" >> "${{ env.BACKEND_DIR }}/.env"

      - name: Docker Buildx 설치
        uses: docker/setup-buildx-action@v3

      - name: 레지스트리 로그인
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: set lower case owner name
        run: |
          echo "OWNER_LC=${OWNER,,}" >> "${GITHUB_ENV}"
        env:
          OWNER: "${{ github.repository_owner }}"

      - name: 빌드 앤 푸시
        uses: docker/build-push-action@v6
        with:
          context: ${{ env.BACKEND_DIR }}
          push: true
          cache-from: type=gha
          cache-to: type=gha,mode=max
          tags: |
            ghcr.io/${{ env.OWNER_LC }}/${{ env.IMAGE_REPOSITORY }}:${{ needs.makeTagAndRelease.outputs.tag_name }}
            ghcr.io/${{ env.OWNER_LC }}/${{ env.IMAGE_REPOSITORY }}:latest

  deploy:
    name: 배포
    needs: [makeTagAndRelease, buildImageAndPush]
    runs-on: ubuntu-latest

    steps:
      - name: AWS 자격 구성
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ secrets.AWS_REGION }}
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

      - name: 인스턴스 ID 가져오기
        run: |
          INSTANCE_ID=$(aws ec2 describe-instances \
            --filters "Name=tag:Name,Values=${{ env.EC2_INSTANCE_TAG_NAME }}" "Name=instance-state-name,Values=running" \
            --query "Reservations[].Instances[].InstanceId" --output text)
          
          if [[ -z "${INSTANCE_ID}" || "${INSTANCE_ID}" == "None" ]]; then
            echo "❌ 실행 중인 EC2 인스턴스를 찾을 수 없습니다."
            exit 1
          fi
          
          echo "✅ EC2 인스턴스 발견: ${INSTANCE_ID}"
          echo "INSTANCE_ID=${INSTANCE_ID}" >> "${GITHUB_ENV}"

      - name: AWS SSM Send-Command로 배포
        uses: peterkimzz/aws-ssm-send-command@master
        with:
          aws-region: ${{ secrets.AWS_REGION }}
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          instance-ids: ${{ env.INSTANCE_ID }}
          working-directory: /home/ssm-user
          comment: Deploy Spring Boot Application
          command: |
            set -Eeuo pipefail

            LOG="/tmp/deploy-$(date +%Y%m%d_%H%M%S).log"
            exec > >(awk '{ fflush(); print strftime("[%Y-%m-%d %H:%M:%S]"), $0 }' | tee -a "$LOG")
            exec 2> >(awk '{ fflush(); print strftime("[%Y-%m-%d %H:%M:%S]"), $0 }' | tee -a "$LOG" >&2)

            echo "🚀 배포 시작..."
            source /etc/environment || true

            OWNER_LC="${{ github.repository_owner }}"
            IMAGE_TAG='${{ needs.makeTagAndRelease.outputs.tag_name }}'
            IMAGE_REPOSITORY='${{ env.IMAGE_REPOSITORY }}'

            cd /home/ssm-user/WEB6_8_FiveLogic_BE || exit 1

            git pull origin main

            echo "📥 Docker 이미지 다운로드 중..."
            docker pull ghcr.io/${OWNER_LC}/${IMAGE_REPOSITORY}:latest

            echo "🛑 기존 컨테이너 중지 및 제거 중..."
            docker-compose down || true

            echo "🚀 모든 컨테이너 시작 중..."
            docker-compose up -d

            echo "🏥 spring-boot 헬스체크 중..."
            for i in {1..30}; do
              if docker exec spring-boot curl -f http://localhost:8080/health > /dev/null 2>&1; then
                echo "✅ spring-boot 서버 정상 구동!"
                break
              fi
              echo "대기 중... ($i/30)"
              sleep 2
            done

            echo "📊 컨테이너 상태:"
            docker-compose ps

            echo "📋 최근 로그:"
            docker-compose logs --tail=50

            echo "🧹 오래된 이미지 정리 중..."
            {
              docker images --format '{{.Repository}}:{{.Tag}}' \
                | grep -F "ghcr.io/${OWNER_LC}/${IMAGE_REPOSITORY}:" \
                | grep -v -F ":${IMAGE_TAG}" \
                | grep -v -F ":latest" \
                | xargs -r docker rmi
            } || true

            echo "✅ 배포 완료!"