feat: develop -> prod 머지

.github/ISSUE_TEMPLATE/기능-이슈.md

@@ -0,0 +1,18 @@
+---
+name: 기능 이슈
+about: 기능 관련 이슈
+title: 'feat:'
+labels: 'feat'
+assignees: ''
+---
+
+## 💡 이슈
+<!--어떤 작업을 하는지 작성해주세요.-->
+
+## 📝 투두
+<!-- 상세한 작업으로 구분하여 나누어주세요. -->
+- [ ] 
+- [ ]
+
+## 🎸 기타
+<!--추가로 하고싶은 말을 작성해주세요.-->

.github/ISSUE_TEMPLATE/버그-이슈.md

@@ -0,0 +1,24 @@
+---
+name: 버그 이슈
+about: 버그 관련 이슈
+title: 'fix:' 
+labels: 'fix'
+assignees: ''
+---
+
+# 어떤 버그인가요?
+
+-
+
+## 예상 결과
+
+-
+
+## 실제 결과
+
+-
+
+## 스크린샷
+
+![]()
+

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,14 @@
+## 😋 작업한 내용
+
+-
+
+## 🙏 PR Point
+
+-
+
+## 👍 관련 이슈
+
+- Resolved : #
+
+
+---

.github/workflows/showpot-dev-cd.yml

@@ -0,0 +1,113 @@
+name: ShowPot-Dev-CD
+
+on:
+  push:
+    branches:
+      - develop
+      - hotfix/**
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'liberica'
+          cache: gradle
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: Copy Secrets
+        uses: microsoft/variable-substitution@v1
+        with:
+          files: |
+            ./app/src/main/resources/application-dev.yml, 
+            ./app/src/main/resources/application-cloud-dev.yml, 
+            ./app/domain/common-domain/src/main/resources/application-domain-dev.yml
+        env:
+          token.secret-key: ${{ secrets.TOKEN_SECRET_KEY }}
+          cloud.aws.credentials.accessKey: ${{ secrets.AWS_ACCESS_KEY }}
+          cloud.aws.credentials.secretKey: ${{ secrets.AWS_SECRET_KEY }}
+          cloud.aws.region: ${{ secrets.AWS_REGION }}
+          cloud.aws.s3.bucket: ${{ secrets.AWS_BUCKET }}
+          spring.datasource.url: ${{ secrets.APPLICATION_DATASOURCE_URL_DEV }}
+          spring.datasource.username: ${{ secrets.APPLICATION_DATASOURCE_USERNAME }}
+          spring.datasource.password: ${{ secrets.APPLICATION_DATASOURCE_PASSWORD }}
+
+      - name: Build with Gradle Wrapper
+        run: ./gradlew clean build -Dspring.profiles.active=dev
+
+      - name: Prepare File for Deployment
+        run: |
+          mkdir -p deployment/app/build/libs
+          cp dockerfile-dev docker-compose-dev.yml deployment/
+          cp -r ./app/build/libs deployment/app/build
+
+      - name: Get Github Actions IP
+        id: ip
+        uses: candidob/[email protected]
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
+          aws-region: ap-northeast-2
+
+      - name: Add Github Actions IP on Security Group
+        run: |
+          aws ec2 authorize-security-group-ingress --group-id ${{ secrets.AWS_DEV_SECURITY_GROUP_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32
+
+      - name: Upload files to EC2
+        uses: appleboy/[email protected]
+        with:
+          host: ${{ secrets.EC2_DEV_HOST }}
+          username: ec2-user
+          key: ${{ secrets.EC2_DEV_SSH_PRIVATE_KEY }}
+          source: "deployment/*"
+          target: "/home/ec2-user/"
+
+      - name: Deploy using Docker Compose
+        uses: appleboy/[email protected]
+        with:
+          host: ${{ secrets.EC2_DEV_HOST }}
+          username: ec2-user
+          key: ${{ secrets.EC2_DEV_SSH_PRIVATE_KEY }}
+          script: |
+            cd /home/ec2-user/deployment/
+            docker-compose -f docker-compose-dev.yml down
+            docker system prune -f
+            docker-compose -f docker-compose-dev.yml up -d --build
+
+      - name: Remove Github Actions IP from Security Group
+        if: always()
+        run: |
+          aws ec2 revoke-security-group-ingress --group-id ${{ secrets.AWS_DEV_SECURITY_GROUP_ID }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32
+
+      - name: Backend CD for Dev Server Discord Notification
+        uses: sarisia/actions-status-discord@v1
+        if: success()
+        with:
+          title: ✅ 개발 서버 배포 프로세스가 완료되었습니다! ✅
+          webhook: ${{ secrets.DISCORD_WEBHOOK_URL }}
+          content: "<@1084774841460215839> <@281597829636423682> 배포가 정상적으로 이뤄졌는지 확인해주세요!"
+          color: 00FF00
+          username: showPot-Bot
+          avatar_url: ${{ secrets.DISCORD_NOTIFICATION_SUCCESS_AVATAR_URL }}
+
+      - name: Backend CD for Dev Server Discord Notification
+        uses: sarisia/actions-status-discord@v1
+        if: failure()
+        with:
+          title: ❗️개발 서버 배포 프로세스가 실패했습니다! ❗️
+          webhook: ${{ secrets.DISCORD_WEBHOOK_URL }}
+          color: FF0000
+          username: showPot-Bot
+          avatar_url: ${{ secrets.DISCORD_NOTIFICATION_FAILED_AVATAR_URL }}

.github/workflows/showpot-dev-ci.yml

@@ -0,0 +1,65 @@
+name: ShowPot-Dev-CI
+
+on:
+  pull_request:
+    branches:
+      - develop
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'liberica'
+          cache: gradle
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: Copy Secrets
+        uses: microsoft/variable-substitution@v1
+        with:
+          files:
+            ./app/src/main/resources/application-dev.yml, 
+            ./app/src/main/resources/application-cloud-dev.yml, 
+            ./app/domain/common-domain/src/main/resources/application-domain-dev.yml
+        env:
+          token.secret-key: ${{ secrets.TOKEN_SECRET_KEY }}
+          cloud.aws.credentials.accessKey: ${{ secrets.AWS_ACCESS_KEY }}
+          cloud.aws.credentials.secretKey: ${{ secrets.AWS_SECRET_KEY }}
+          cloud.aws.region: ${{ secrets.AWS_REGION }}
+          cloud.aws.s3.bucket: ${{ secrets.AWS_BUCKET }}
+          spring.datasource.url: ${{ secrets.APPLICATION_DATASOURCE_URL_DEV }}
+          spring.datasource.username: ${{ secrets.APPLICATION_DATASOURCE_USERNAME }}
+          spring.datasource.password: ${{ secrets.APPLICATION_DATASOURCE_PASSWORD }}
+
+      - name: Build with Gradle Wrapper
+        run: ./gradlew clean build -Dspring.profiles.active=dev
+
+      - name: Backend CI Discord Notification
+        uses: sarisia/actions-status-discord@v1
+        if: success()
+        with:
+          title: ✅ Backend CI success ✅
+          webhook: ${{ secrets.DISCORD_WEBHOOK_URL }}
+          content: "<@1084774841460215839> <@281597829636423682> ShoPot 이슈 혹은 PR을 확인해주세요!"
+          color: 00FF00
+          username: showPot-Bot
+          avatar_url: ${{ secrets.DISCORD_NOTIFICATION_SUCCESS_AVATAR_URL }}
+
+      - name: Backend CI Discord Notification
+        uses: sarisia/actions-status-discord@v1
+        if: failure()
+        with:
+          title: ❗️Backend CI failed ❗️
+          webhook: ${{ secrets.DISCORD_WEBHOOK_URL }}
+          color: FF0000
+          username: showPot-Bot
+          avatar_url: ${{ secrets.DISCORD_NOTIFICATION_FAILED_AVATAR_URL }}

.github/workflows/showpot-prod-cd.yml

@@ -0,0 +1,98 @@
+name: prod-cd
+
+on:
+  push:
+    branches:
+      - prod
+
+env:
+  AWS_REGION: ap-northeast-2
+  ECR_REPOSITORY: showpot-application
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'liberica'
+          cache: gradle
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v3
+
+      - name: Copy Secrets
+        uses: microsoft/variable-substitution@v1
+        with:
+          files: | 
+            ./app/src/main/resources/application-prod.yml, 
+            ./app/src/main/resources/application-cloud-prod.yml, 
+            ./app/domain/common-domain/src/main/resources/application-domain-prod.yml
+        env:
+          token.secret-key: ${{ secrets.TOKEN_SECRET_KEY }}
+          cloud.aws.credentials.accessKey: ${{ secrets.AWS_ACCESS_KEY }}
+          cloud.aws.credentials.secretKey: ${{ secrets.AWS_SECRET_KEY }}
+          cloud.aws.region: ${{ secrets.AWS_REGION }}
+          cloud.aws.s3.bucket: ${{ secrets.AWS_BUCKET }}
+          spring.datasource.url: ${{ secrets.APPLICATION_DATASOURCE_URL_PROD }}
+          spring.datasource.username: ${{ secrets.APPLICATION_DATASOURCE_USERNAME }}
+          spring.datasource.password: ${{ secrets.APPLICATION_DATASOURCE_PASSWORD }}
+          spring.data.redis.host: ${{ secrets.REDIS_HOST_PROD }}
+          spring.data.redis.port: ${{ secrets.REDIS_PORT_PROD }}
+
+      - name: Build with Gradle Wrapper
+        run: ./gradlew clean build -Dspring.profiles.active=prod
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Set image tag
+        id: set-tag
+        run: |
+          DATE_TAG=$(TZ='Asia/Seoul' date +'%Y%m%d_%H%M')
+          SHORT_SHA=$(echo $GITHUB_SHA | cut -c1-8)
+          echo "IMAGE_TAG=${DATE_TAG}_${SHORT_SHA}" >> $GITHUB_ENV
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v1
+
+      - name: Build and Push image to Amazon ECR
+        id: build-image
+        env:
+          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+          IMAGE_TAG: ${{ env.IMAGE_TAG }}
+        run: |
+          docker build --no-cache -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG -f dockerfile-prod .
+          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+          IMAGE_URI=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+          echo "IMAGE_URI=$IMAGE_URI" >> $GITHUB_ENV
+
+      - name: Update ECS task definition
+        id: update-task
+        run: |
+          TASK_DEFINITION=$(aws ecs describe-task-definition --task-definition showpot-core --region $AWS_REGION)
+          NEW_TASK_DEFINITION=$(echo $TASK_DEFINITION | jq --arg IMAGE_URI "$IMAGE_URI" '
+            .taskDefinition | 
+            .containerDefinitions[0].image=$IMAGE_URI | 
+            del(.taskDefinitionArn, .revision, .status, .requiresAttributes, .compatibilities, .registeredAt, .registeredBy)')
+          echo $NEW_TASK_DEFINITION > new-task-def.json
+          REGISTERED_TASK_DEFINITION=$(aws ecs register-task-definition --cli-input-json file://new-task-def.json)
+          TASK_REVISION=$(echo $REGISTERED_TASK_DEFINITION | jq -r '.taskDefinition.taskDefinitionArn')
+
+          echo "Registered new task definition revision: $TASK_REVISION"
+          echo "TASK_REVISION=$TASK_REVISION" >> $GITHUB_ENV
+
+      - name: Deploy to ECS service
+        run: |
+          aws ecs update-service --cluster showpot-cluster --service showpot-core-service --task-definition $TASK_REVISION --force-new-deployment --region $AWS_REGION