prod-ci.yml

name: MASTER CI

on:
  push:
    branches:
      - Master
    tags:
      - 'production-**'

jobs:
  Deploy:
    runs-on: ubuntu-latest

    env:
      VITE_APP_BASE_URL: ${{ secrets.VITE_APP_BASE_URL }}
      VITE_APP_BASE_URL_CHAT: ${{ secrets.VITE_APP_BASE_URL_CHAT }}
      VITE_APP_NTS_BUSINESSMAN_API_KEY: ${{ secrets.VITE_APP_NTS_BUSINESSMAN_API_KEY }}
      VITE_APP_UNIVCERT_API_KEY: ${{ secrets.VITE_APP_UNIVCERT_API_KEY }}

    steps:
      - name: Checkout source code
        uses: actions/checkout@v3

      - name: Setup PNPM
        uses: pnpm/action-setup@v2
        with:
          version: latest

      - name: Setup Node
        uses: actions/setup-node@v3
        with:
          node-version: '18'
          cache: 'pnpm'

      - name: Cache dependencies
        uses: actions/cache@v3
        with:
          path: |
            **/node_modules
            ~/.pnpm-store
          key: ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-

      - name: Install Dependencies
        run: pnpm install

      - name: Build
        run: pnpm build

      # 추가: 개행 문자 제거
      - name: Sanitize UNIVCERT API key
        run: echo "${{ secrets.VITE_APP_UNIVCERT_API_KEY }}" | tr -d '\n' > sanitized_key.txt

      - name: Export sanitized API key
        run: echo "VITE_APP_UNIVCERT_API_KEY=$(cat sanitized_key.txt)" >> $GITHUB_ENV

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-access-key-id: ${{ secrets.AWS_S3_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_S3_SECRET_ACCESS_KEY_ID }}
          aws-region: ap-northeast-2

      - name: Deploy to S3
        run: aws s3 sync ./dist s3://${{ secrets.AWS_S3_BUCKET_NAME }} --delete

      - name: Invalidate CloudFront Cache
        run: aws cloudfront create-invalidation --distribution-id ${{ secrets.AWS_CLOUDFRONT_ID }} --paths "/*"