-
Notifications
You must be signed in to change notification settings - Fork 1
128 lines (114 loc) · 4.39 KB
/
deploy.yml
File metadata and controls
128 lines (114 loc) · 4.39 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
name: deploy-main
on:
push:
branches:
- dev
workflow_dispatch:
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v4
with:
fetch-depth: 2 # 이전 커밋도 가져오기 위해 설정
- name: Setup Node.js
uses: actions/setup-node@v3
with:
node-version: '18'
cache: 'npm' # npm 캐시 활성화
- name: Configure SSH
run: |
mkdir -p ~/.ssh
echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa
cat > ~/.ssh/config << EOF
Host playground-umc-7th
HostName ${{ secrets.EC2_HOST }}
User ubuntu
IdentityFile ~/.ssh/id_rsa
StrictHostKeyChecking no
UserKnownHostsFile /dev/null
LogLevel ERROR
EOF
- name: Test SSH Connection
run: |
ssh -vvv playground-umc-7th "echo '✅ SSH Connection Successful'"
- name: Check for package.json changes
id: check-package
run: |
CHANGED=$(git diff HEAD^1 --name-only | grep "package.json" || echo "")
echo "::set-output name=changed::${CHANGED}"
- name: Get package-lock.json hash
id: package-lock-hash
run: |
if ssh playground-umc-7th "test -f /home/ubuntu/UMCIGNAL-server/package-lock.json"; then
REMOTE_HASH=$(ssh playground-umc-7th "md5sum /home/ubuntu/UMCIGNAL-server/package-lock.json | cut -d' ' -f1")
LOCAL_HASH=$(md5sum package-lock.json | cut -d' ' -f1)
if [ "$REMOTE_HASH" != "$LOCAL_HASH" ]; then
echo "::set-output name=changed::true"
else
echo "::set-output name=changed::false"
fi
else
echo "::set-output name=changed::true"
fi
- name: Sync Changed Files
run: |
ssh playground-umc-7th 'mkdir -p /home/ubuntu/UMCIGNAL-server'
git diff --name-only HEAD^1 HEAD | while read file; do
if [ -f "$file" ]; then
rsync -avz --relative "$file" playground-umc-7th:/home/ubuntu/UMCIGNAL-server/
fi
done
- name: Install Dependencies if needed
if: steps.check-package.outputs.changed != '' || steps.package-lock-hash.outputs.changed == 'true'
run: |
ssh playground-umc-7th '
cd /home/ubuntu/UMCIGNAL-server
npm install
'
- name: Create or Update .env file
run: |
ssh playground-umc-7th 'cat > /home/ubuntu/UMCIGNAL-server/.env << EOF
DATABASE_HOST=${{ secrets.DATABASE_HOST }}
DATABASE_USERNAME=${{ secrets.DATABASE_USERNAME }}
DATABASE_PASSWORD=${{ secrets.DATABASE_PASSWORD }}
DATABASE_NAME=${{ secrets.DATABASE_NAME }}
DATABASE_PORT=${{ secrets.DATABASE_PORT }}
SSH_HOST=${{ secrets.SSH_HOST }}
SSH_USER=${{ secrets.SSH_USER }}
SSH_KEY_PATH=${{ secrets.SSH_KEY_PATH }}
SSH_DATABASE_HOST=${{ secrets.SSH_DATABASE_HOST }}
SSH_DATABASE_PORT=${{ secrets.SSH_DATABASE_PORT }}
PORT=${{ secrets.PORT }}
EMAIL_SECURITY=${{ secrets.EMAIL_SECURITY }}
EMAIL_ADDRESS=${{ secrets.EMAIL_ADDRESS }}
JWT_SECRET=${{ secrets.JWT_SECRET }}
EOF'
- name: Restart Application
run: |
ssh playground-umc-7th '
cd /home/ubuntu/UMCIGNAL-server
if pgrep node; then
pkill node
sleep 5
fi
nohup npm run dev > /home/ubuntu/UMCIGNAL-server/app.log 2> /home/ubuntu/UMCIGNAL-server/app.error.log &
'
- name: Check if Application is Running
run: |
ssh playground-umc-7th '
sleep 10
if pgrep -x "node" > /dev/null; then
echo "✅ Application is running."
else
echo "❌ Application failed to start."
if [ -f /home/ubuntu/UMCIGNAL-server/app.error.log ]; then
cat /home/ubuntu/UMCIGNAL-server/app.error.log
else
echo "No error log found."
fi
exit 1
fi
'