feat : 초대장 상세 정보 #26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI-CD | |
| on: | |
| push: | |
| branches: | |
| - server | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| environment: CI/CD | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v3 | |
| - name: setup docker | |
| uses: docker/setup-buildx-action@v2 | |
| - name: login contianer registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: setup yarn | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 20 | |
| cache: 'yarn' | |
| - name: install packages | |
| run: yarn install --immutable | |
| - name: create .env | |
| run: | | |
| echo "NODE_ENV=${{ vars.NODE_ENV }}" >> .env | |
| echo "PORT=${{ vars.PORT }}" >> .env | |
| echo "WASABI_ACCESS_KEY=${{ secrets.WASABI_ACCESS_KEY }}" >> .env | |
| echo "WASABI_SECRET_KEY=${{ secrets.WASABI_SECRET_KEY }}" >> .env | |
| echo "WASABI_REGION=${{ vars.WASABI_REGION }}" >> .env | |
| echo "WASABI_ENDPOINT=${{ vars.WASABI_ENDPOINT }}" >> .env | |
| echo "THUMB_BUCKET=${{ vars.THUMB_BUCKET }}" >> .env | |
| echo "BACKGROUND_BUCKET=${{ vars.BACKGROUND_BUCKET }}" >> .env | |
| echo "COMPONENT_BUCKET=${{ vars.COMPONENT_BUCKET }}" >> .env | |
| echo "LETTER_BUCKET=${{ vars.LETTER_BUCKET }}" >> .env | |
| echo "DB_TYPE=${{ vars.DB_TYPE }}" >> .env | |
| echo "DB_HOST=${{ secrets.DB_HOST }}" >> .env | |
| echo "DB_NAME=${{ secrets.DB_NAME }}" >> .env | |
| echo "DB_PORT=${{ secrets.DB_PORT }}" >> .env | |
| echo "DB_PWD=${{ secrets.DB_PWD }}" >> .env | |
| echo "DB_USER=${{ secrets.DB_USER }}" >> .env | |
| echo "JWT_SECRET=${{ secrets.JWT_SECRET }}" >> .env | |
| echo "JWT_EXPIRES=${{ vars.JWT_EXPIRES }}" >> .env | |
| echo "JWT_REFRESH_EXPIRES=${{ vars.JWT_REFRESH_EXPIRES }}" >> .env | |
| echo "REDIS_HOST=${{ secrets.REDIS_HOST }}" >> .env | |
| echo "REDIS_PORT=${{ secrets.REDIS_PORT }}" >> .env | |
| echo "REDIS_PWD=${{ secrets.REDIS_PWD }}" >> .env | |
| echo "GOOGLE_CLIENT_ID=${{ vars.GOOGLE_CLIENT_ID }}" >> .env | |
| echo "GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }}" >> .env | |
| echo "GOOGLE_CALLBACK_URL=${{ vars.GOOGLE_CALLBACK_URL }}" >> .env | |
| - name: docker build & push | |
| run: docker buildx build -f ./packages/server/Dockerfile --platform linux/amd64,linux/arm64 -t ghcr.io/${{ github.repository }}/service:latest --push . | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| steps: | |
| - name: install ssh | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y sshpass | |
| - name: deploy | |
| env: | |
| ORACLE_IP: ${{ secrets.ORACLE_INSTANCE_IP }} | |
| SSH_PRIVATE_KEY: ${{ secrets.ORACLE_SSH_PRIVATE_KEY }} | |
| run: | | |
| echo "$SSH_PRIVATE_KEY" > private_key | |
| chmod 600 private_key | |
| ssh -o StrictHostKeyChecking=no -i private_key ubuntu@$ORACLE_IP << 'EOF' | |
| docker login ghcr.io -u $GITHUB_ACTOR -p $GITHUB_TOKEN | |
| docker pull ghcr.io/${{ github.repository }}/service:latest | |
| docker stop invite-api || true | |
| docker rm invite-api || true | |
| docker run -d \ | |
| -p 3003:3003 \ | |
| --network my-network \ | |
| --name invite-api \ | |
| --mount type=bind,source=/home/ubuntu/projects/logs,target=/usr/src/app/logs \ | |
| ghcr.io/${{ github.repository }}/service:latest | |
| EOF |