Deploy / Merge to Main(#131) #9
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Deploy to Production | |
| on: | |
| push: | |
| branches: [ main ] | |
| workflow_dispatch: | |
| permissions: | |
| contents: write | |
| jobs: | |
| build-and-push: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout source | |
| uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: '21' | |
| - name: Inject application-prod.yml safely | |
| env: | |
| SPRING_APPLICATION_PROD_YML: ${{ secrets.SPRING_APPLICATION_PROD_YML }} | |
| run: | | |
| mkdir -p src/main/resources | |
| printf '%s' "$SPRING_APPLICATION_PROD_YML" > src/main/resources/application-prod.yml | |
| - name: Build with Gradle | |
| run: ./gradlew clean build -x test | |
| - name: Log in to Docker Hub (prod) | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.PROD_SERVER_DOCKER_HUB_USERNAME }} | |
| password: ${{ secrets.PROD_SERVER_DOCKER_HUB_ACCESS_TOKEN }} | |
| - name: Build & push prod image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| file: ./Dockerfile | |
| push: true | |
| tags: | | |
| teamredot/redotlabs:latest | |
| teamredot/redotlabs:${{ github.sha }} | |
| - name: Upload docker-compose.prod.yml to EC2 | |
| uses: appleboy/scp-action@v0.1.7 | |
| with: | |
| host: ${{ secrets.PROD_SERVER_HOST }} | |
| username: ${{ secrets.PROD_SERVER_USER }} | |
| key: ${{ secrets.PROD_SERVER_SSH_KEY }} | |
| source: docker-compose.prod.yml | |
| target: ${{ secrets.PROD_SERVER_DEPLOY_PATH }}/ | |
| - name: Deploy on EC2 | |
| uses: appleboy/ssh-action@v0.1.7 | |
| with: | |
| host: ${{ secrets.PROD_SERVER_HOST }} | |
| username: ${{ secrets.PROD_SERVER_USER }} | |
| key: ${{ secrets.PROD_SERVER_SSH_KEY }} | |
| script: | | |
| cd ${{ secrets.PROD_SERVER_DEPLOY_PATH }} | |
| # 최신 이미지 pull (spring만) | |
| docker compose -f docker-compose.prod.yml pull redot-server | |
| # spring만 재시작 | |
| docker compose -f docker-compose.prod.yml stop redot-server | |
| docker compose -f docker-compose.prod.yml rm -f redot-server | |
| docker compose -f docker-compose.prod.yml --env-file .env up -d redot-server |