chore: nginx 도입에 따른 CI/CD 워크플로우 수정 #267
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: develop Build And Deploy | |
| on: | |
| push: | |
| branches: [ "develop" ] | |
| pull_request: | |
| branches: [ "develop" ] | |
| env: | |
| DOCKERHUB_USERNAME: tenminutes | |
| DOCKERHUB_IMAGE_NAME: 10mm-server | |
| jobs: | |
| build-deploy: | |
| runs-on: ubuntu-latest | |
| environment: DEV | |
| strategy: | |
| matrix: | |
| java-version: [ 17 ] | |
| distribution: [ 'temurin' ] | |
| steps: | |
| # 기본 체크아웃 | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| # JDK를 17 버전으로 세팅 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: ${{ matrix.java-version }} | |
| distribution: ${{ matrix.distribution }} | |
| # test 돌릴때 레디스 필요 | |
| - name: Start containers | |
| run: docker-compose -f ./docker-compose-test.yaml up -d | |
| # Gradlew 실행 허용 | |
| - name: Run chmod to make gradlew executable | |
| run: chmod +x ./gradlew | |
| # Gradle 빌드 | |
| - name: Build with Gradle | |
| id: gradle | |
| uses: gradle/gradle-build-action@v2 | |
| with: | |
| arguments: | | |
| build | |
| --scan | |
| cache-read-only: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/develop' }} | |
| # Dockerhub 로그인 | |
| - name: Login to Dockerhub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ env.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }} | |
| # Docker 메타데이터 추출 | |
| - name: Extract Docker metadata | |
| id: metadata | |
| uses: docker/[email protected] | |
| env: | |
| DOCKERHUB_IMAGE_FULL_NAME: ${{ env.DOCKERHUB_USERNAME }}/${{ env.DOCKERHUB_IMAGE_NAME }} | |
| with: | |
| images: ${{ env.DOCKERHUB_IMAGE_FULL_NAME }} | |
| tags: | | |
| type=sha,prefix= | |
| # Docker 이미지 빌드 및 도커허브로 푸시 | |
| - name: Docker Build and Push | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| push: true | |
| tags: ${{ steps.metadata.outputs.tags }} | |
| # 서버로 docker-compose 파일 전송 | |
| - name: Copy docker-compose file to EC2 | |
| uses: burnett01/[email protected] | |
| with: | |
| switches: -avzr --delete | |
| remote_host: ${{ secrets.EC2_HOST }} | |
| remote_user: ${{ secrets.EC2_USERNAME }} | |
| remote_key: ${{ secrets.EC2_PRIVATE_KEY }} | |
| path: docker-compose.yaml | |
| remote_path: /home/ec2-user/ | |
| - name: Copy default.conf to EC2 | |
| uses: burnett01/[email protected] | |
| with: | |
| switches: -avzr --delete | |
| remote_host: ${{ secrets.EC2_HOST }} | |
| remote_user: ${{ secrets.EC2_USERNAME }} | |
| remote_key: ${{ secrets.EC2_PRIVATE_KEY }} | |
| path: ./nginx | |
| remote_path: /home/ec2-user/ | |
| # 슬랙으로 빌드 스캔 결과 전송 | |
| - name: Send to slack | |
| uses: slackapi/[email protected] | |
| with: | |
| payload: | | |
| { | |
| "text": "Gradle Build Scan Report of ${{ github.workflow }}: ${{ steps.gradle.outputs.build-scan-url }}" | |
| } | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| # EC2로 배포 | |
| - name: Deploy to EC2 Server | |
| uses: appleboy/[email protected] | |
| env: | |
| IMAGE_FULL_URL: ${{ steps.metadata.outputs.tags }} | |
| DOCKERHUB_IMAGE_NAME: ${{ env.DOCKERHUB_IMAGE_NAME }} | |
| with: | |
| host: ${{ secrets.EC2_HOST }} | |
| username: ${{ secrets.EC2_USERNAME }} | |
| key: ${{ secrets.EC2_PRIVATE_KEY }} | |
| envs: IMAGE_FULL_URL, DOCKERHUB_IMAGE_NAME # docker-compose.yml 에서 사용할 환경 변수 | |
| debug: true | |
| script: | | |
| echo "${{ secrets.DOCKERHUB_ACCESS_TOKEN }}" | docker login -u "${{ env.DOCKERHUB_USERNAME }}" --password-stdin | |
| docker compose up -d | |
| docker exec -d nginx nginx -s reload | |
| docker image prune -a -f |