didit-backend/.github/workflows/develop.yaml at develop · ddiddit/didit-backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
name: develop

on:
  pull_request:
    branches:
      - develop
  push:
    branches:
      - develop

concurrency:
  group: deploy-develop
  cancel-in-progress: false

env:
  IMAGE_NAME: ghcr.io/ddiddit/didit-backend:latest
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "21"

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      - name: Build with Gradle
        run: ./gradlew build

      - name: Upload JAR
        if: github.event_name == 'push'
        uses: actions/upload-artifact@v4
        with:
          name: app-jar
          path: build/libs/*.jar
          retention-days: 1

  docker-build:
    needs: build
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Download JAR
        uses: actions/download-artifact@v4
        with:
          name: app-jar
          path: build/libs/

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and Push Docker Image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: ${{ env.IMAGE_NAME }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

  deploy:
    needs: docker-build
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      deployments: write

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Copy deploy scripts to NCP dev server
        uses: appleboy/scp-action@v0.1.4
        with:
          host: ${{ secrets.DEV_HOST }}
          username: ${{ secrets.DEV_USER }}
          key: ${{ secrets.DEV_SSH_KEY }}
          source: "deploy"
          target: "/home/didit-dev/didit"

      - name: Deploy to dev server
        uses: appleboy/ssh-action@v0.1.6
        env:
          COMMIT_MSG: ${{ github.event.head_commit.message }}
        with:
          host: ${{ secrets.DEV_HOST }}
          username: ${{ secrets.DEV_USER }}
          key: ${{ secrets.DEV_SSH_KEY }}
          envs: COMMIT_MSG
          script: |
            cd /home/didit-dev/didit

            chmod +x deploy/dev/scripts/*.sh
            chmod +x deploy/shared/*.sh

            cat > deploy/dev/.env << 'ENVEOF'
            DB_USER=${{ secrets.DEV_DB_USER }}
            DB_PASSWORD=${{ secrets.DEV_DB_PASSWORD }}
            DB_ROOT_PASSWORD=${{ secrets.DEV_DB_ROOT_PASSWORD }}
            DISCORD_WEBHOOK_URL=${{ secrets.DEV_DISCORD_WEBHOOK_URL }}
            JWT_SECRET=${{ secrets.DEV_JWT_SECRET }}
            GMAIL_USERNAME=${{ secrets.GMAIL_USERNAME }}
            GMAIL_APP_PASSWORD=${{ secrets.GMAIL_APP_PASSWORD }}
            ADMIN_INITIAL_USERNAME=${{ secrets.ADMIN_INITIAL_USERNAME }}
            ADMIN_INITIAL_PASSWORD=${{ secrets.ADMIN_INITIAL_PASSWORD }}
            ADMIN_INVITE_BASE_URL=${{ secrets.DEV_ADMIN_INVITE_BASE_URL }}
            ADMIN_CORS_ALLOWED_ORIGINS=${{ secrets.DEV_CORS_ALLOWED_ORIGINS }}
            OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }}
            CLOVA_API_KEY=${{ secrets.CLOVA_API_KEY }}
            CLOVA_SPEECH_INVOKE_URL=${{ secrets.CLOVA_SPEECH_INVOKE_URL }}
            CLOVA_SPEECH_SECRET_KEY=${{ secrets.CLOVA_SPEECH_SECRET_KEY }}
            RETROSPECTIVE_WHITELIST_EMAILS=${{secrets.RETROSPECTIVE_WHITELIST_EMAILS}}
            ENVEOF

            echo "DEPLOYER=${{ github.actor }}" >> deploy/dev/.env
            printf 'COMMIT_MESSAGE=%s\n' "$(echo "$COMMIT_MSG" | head -1)" >> deploy/dev/.env

            chmod 600 deploy/dev/.env

            mkdir -p /home/didit-dev/didit/firebase
            cat > /home/didit-dev/didit/firebase/firebase-service-account.json << 'FBEOF'
            ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}
            FBEOF

            ./deploy/dev/scripts/deploy.sh

      - name: Create Deployment
        uses: chrnorm/deployment-action@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: development
          ref: ${{ github.sha }}