-
Notifications
You must be signed in to change notification settings - Fork 0
109 lines (98 loc) · 5.71 KB
/
Copy pathcd.yml
File metadata and controls
109 lines (98 loc) · 5.71 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
name: CD
on:
push:
branches: [main]
jobs:
build-and-push:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- uses: actions/checkout@v4
- uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- uses: docker/build-push-action@v5
with:
context: .
push: true
tags: ghcr.io/cominggg/coming-be:latest
deploy:
needs: build-and-push
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Copy deploy script to server
uses: appleboy/scp-action@v0.1.7
with:
host: ${{ secrets.SERVER_HOST }}
username: ${{ secrets.SERVER_USER }}
key: ${{ secrets.SSH_PRIVATE_KEY }}
port: 2222
source: scripts/deploy.sh
target: ${{ secrets.SERVER_HOME }}/scripts/
strip_components: 1
- name: Update be.env and deploy
uses: appleboy/ssh-action@v1
env:
V_GHCR_TOKEN: ${{ secrets.GHCR_PAT }}
V_GHCR_USER: ${{ secrets.GHCR_USERNAME }}
V_DB_URL: ${{ secrets.DB_URL }}
V_DB_USERNAME: ${{ secrets.DB_USERNAME }}
V_DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
V_JWT_SECRET: ${{ secrets.JWT_SECRET }}
V_GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
V_GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
V_KAKAO_CLIENT_ID: ${{ secrets.KAKAO_CLIENT_ID }}
V_KAKAO_CLIENT_SECRET: ${{ secrets.KAKAO_CLIENT_SECRET }}
V_CORS_ALLOWED_ORIGINS: ${{ secrets.CORS_ALLOWED_ORIGINS }}
V_OAUTH2_REDIRECT_BASE_URI: ${{ secrets.OAUTH2_REDIRECT_BASE_URI }}
V_GOOGLE_REDIRECT_URI: ${{ secrets.GOOGLE_REDIRECT_URI }}
V_KAKAO_REDIRECT_URI: ${{ secrets.KAKAO_REDIRECT_URI }}
V_DATA_PIPELINE_SECRET: ${{ secrets.DATA_PIPELINE_SECRET }}
V_DATA_PIPELINE_BASE_URL: ${{ secrets.DATA_PIPELINE_BASE_URL }}
V_REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
V_DISCORD_WEBHOOK_5XX_URL: ${{ secrets.DISCORD_WEBHOOK_5XX_URL }}
V_DISCORD_WEBHOOK_4XX_URL: ${{ secrets.DISCORD_WEBHOOK_4XX_URL }}
V_DISCORD_WEBHOOK_INQUIRY_URL: ${{ secrets.DISCORD_WEBHOOK_INQUIRY_URL }}
V_DISCORD_WEBHOOK_REPORT_URL: ${{ secrets.DISCORD_WEBHOOK_REPORT_URL }}
V_MAIL_USERNAME: ${{ secrets.MAIL_USERNAME }}
V_MAIL_PASSWORD: ${{ secrets.MAIL_PASSWORD }}
with:
host: ${{ secrets.SERVER_HOST }}
username: ${{ secrets.SERVER_USER }}
key: ${{ secrets.SSH_PRIVATE_KEY }}
port: 2222
envs: V_GHCR_TOKEN,V_GHCR_USER,V_DB_URL,V_DB_USERNAME,V_DB_PASSWORD,V_JWT_SECRET,V_GOOGLE_CLIENT_ID,V_GOOGLE_CLIENT_SECRET,V_KAKAO_CLIENT_ID,V_KAKAO_CLIENT_SECRET,V_CORS_ALLOWED_ORIGINS,V_OAUTH2_REDIRECT_BASE_URI,V_GOOGLE_REDIRECT_URI,V_KAKAO_REDIRECT_URI,V_DATA_PIPELINE_SECRET,V_DATA_PIPELINE_BASE_URL,V_REDIS_PASSWORD,V_DISCORD_WEBHOOK_5XX_URL,V_DISCORD_WEBHOOK_4XX_URL,V_DISCORD_WEBHOOK_INQUIRY_URL,V_DISCORD_WEBHOOK_REPORT_URL,V_MAIL_USERNAME,V_MAIL_PASSWORD
script: |
echo "$V_GHCR_TOKEN" | docker login ghcr.io -u "$V_GHCR_USER" --password-stdin
printf 'DB_URL=%s\n' "$V_DB_URL" > ~/compose/be.env
printf 'DB_USERNAME=%s\n' "$V_DB_USERNAME" >> ~/compose/be.env
printf 'DB_PASSWORD=%s\n' "$V_DB_PASSWORD" >> ~/compose/be.env
printf 'JWT_SECRET=%s\n' "$V_JWT_SECRET" >> ~/compose/be.env
printf 'TZ=Asia/Seoul\n' >> ~/compose/be.env
printf 'REDIS_HOST=redis\n' >> ~/compose/be.env
printf 'REDIS_PORT=6379\n' >> ~/compose/be.env
printf 'REDIS_PASSWORD=%s\n' "$V_REDIS_PASSWORD" >> ~/compose/be.env
printf 'GOOGLE_CLIENT_ID=%s\n' "$V_GOOGLE_CLIENT_ID" >> ~/compose/be.env
printf 'GOOGLE_CLIENT_SECRET=%s\n' "$V_GOOGLE_CLIENT_SECRET" >> ~/compose/be.env
printf 'KAKAO_CLIENT_ID=%s\n' "$V_KAKAO_CLIENT_ID" >> ~/compose/be.env
printf 'KAKAO_CLIENT_SECRET=%s\n' "$V_KAKAO_CLIENT_SECRET" >> ~/compose/be.env
printf 'CORS_ALLOWED_ORIGINS=%s\n' "$V_CORS_ALLOWED_ORIGINS" >> ~/compose/be.env
printf 'OAUTH2_REDIRECT_BASE_URI=%s\n' "$V_OAUTH2_REDIRECT_BASE_URI" >> ~/compose/be.env
printf 'GOOGLE_REDIRECT_URI=%s\n' "$V_GOOGLE_REDIRECT_URI" >> ~/compose/be.env
printf 'KAKAO_REDIRECT_URI=%s\n' "$V_KAKAO_REDIRECT_URI" >> ~/compose/be.env
printf 'DATA_PIPELINE_SECRET=%s\n' "$V_DATA_PIPELINE_SECRET" >> ~/compose/be.env
printf 'DATA_PIPELINE_BASE_URL=%s\n' "$V_DATA_PIPELINE_BASE_URL" >> ~/compose/be.env
printf 'SPRING_PROFILES_ACTIVE=prod\n' >> ~/compose/be.env
printf 'DISCORD_WEBHOOK_5XX_URL=%s\n' "$V_DISCORD_WEBHOOK_5XX_URL" >> ~/compose/be.env
printf 'DISCORD_WEBHOOK_4XX_URL=%s\n' "$V_DISCORD_WEBHOOK_4XX_URL" >> ~/compose/be.env
printf 'DISCORD_WEBHOOK_INQUIRY_URL=%s\n' "$V_DISCORD_WEBHOOK_INQUIRY_URL" >> ~/compose/be.env
printf 'DISCORD_WEBHOOK_REPORT_URL=%s\n' "$V_DISCORD_WEBHOOK_REPORT_URL" >> ~/compose/be.env
printf 'MAIL_USERNAME=%s\n' "$V_MAIL_USERNAME" >> ~/compose/be.env
printf 'MAIL_PASSWORD=%s\n' "$V_MAIL_PASSWORD" >> ~/compose/be.env
chmod +x ~/scripts/deploy.sh
bash ~/scripts/deploy.sh