cd-dev.yml

name: Continuous Deployment for SOPT makers Authentication Development Server

on:
  workflow_dispatch:
  push:
    branches: [ dev ]

jobs:

  build-and-push-image:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: ✅ Set up JDK 21
        uses: actions/setup-java@v3
        with:
          java-version: 21
          distribution: 'corretto'
          cache: gradle

      - name: 🔒 Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: ⚙️ Create Property File
        run: |
          touch ./gradle.properties
          echo "${{ secrets.PROPERTY_GRADLE }}" >> ./gradle.properties

      - name: 🧱 Build Image and Push to ECR
        env:
          AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
          AWS_ECR_REPO: ${{ secrets.AWS_ECR_REPO_DEV }}
        run: |
          aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws
          docker build --build-arg PROFILE=dev -t $AWS_ECR_REPO .
          docker tag $AWS_ECR_REPO:latest public.ecr.aws/$AWS_ACCOUNT_ID/$AWS_ECR_REPO:latest
          docker push public.ecr.aws/$AWS_ACCOUNT_ID/$AWS_ECR_REPO:latest

  deploy:
    needs: build-and-push-image
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: 🔒 Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: 🔑 Copy Key File
        env:
          REGION: ${{ secrets.AWS_REGION }}
          APPLE_KEY: ${{ secrets.APPLE_KEY }}
          JWT_PUBLIC_KEY: ${{ secrets.JWT_PUBLIC_KEY }}
          JWT_PRIVATE_KEY: ${{ secrets.JWT_PRIVATE_KEY }}
          S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
        run: |
          aws s3 cp --region $REGION \
            s3://$S3_BUCKET/dev/static/$JWT_PUBLIC_KEY ./$JWT_PUBLIC_KEY
          aws s3 cp --region $REGION \
            s3://$S3_BUCKET/dev/static/$JWT_PRIVATE_KEY ./$JWT_PRIVATE_KEY
          aws s3 cp --region $REGION \
            s3://$S3_BUCKET/dev/static/$APPLE_KEY ./$APPLE_KEY

      - name: 📝 Copy Script and Property File
        env:
          REGION: ${{ secrets.AWS_REGION }}
          S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
          S3_ENV_FILE_NAME: ${{ secrets.ENV_FILE_NAME_DEV }}
        run: |      
          aws s3 cp --region $REGION \
            s3://$S3_BUCKET/dev/$S3_ENV_FILE_NAME ./application.env

      - name: 🔄 Transfer Files(KEY) to Server
        uses: appleboy/scp-action@master
        with:
          host: ${{ secrets.HOST_DEV }}
          username: ec2-user
          key: ${{ secrets.PEM_KEY_DEV }}
          port: 22
          source: "${{ secrets.APPLE_KEY }},${{ secrets.JWT_PUBLIC_KEY }},${{ secrets.JWT_PRIVATE_KEY }}"
          target: /home/ec2-user/authentication/key
          overwrite: true

      - name: 🔄 Transfer Files(ENV) to Server
        uses: appleboy/scp-action@master
        with:
          host: ${{ secrets.HOST_DEV }}
          username: ec2-user
          key: ${{ secrets.PEM_KEY_DEV }}
          port: 22
          source: "application.env"
          target: /home/ec2-user/authentication/env
          overwrite: true

      - name: 🚀SSH command deploy
        uses: appleboy/ssh-action@master
        with:
          host: ${{ secrets.HOST_DEV }}
          username: ec2-user
          key: ${{ secrets.PEM_KEY_DEV }}
          port: 22
          script: |
            /home/ec2-user/authentication/scripts/deploy.sh