infra: CI/CD 파이프라인 구축

* feat: Dockerfile 작성
- 경량화 된 베이스 이미지 사용으로 이미지 용량 최적화
- 멀티 스테이지 빌드 수행

* chore: datasource 연결 정보 분리
- 환경 변수로 값 주입되도록 구현

* chore: 테스트 환경 h2 DB 의존성 추가

* infra: CI/CD workflow 작성

* infra: CI workflow 작성
- 코드 통합 이전에 오류 검출을 위함

Author: ysw789

.github/workflows/ci.yml

@@ -0,0 +1,25 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [ "dev" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/[email protected]
+
+      - name: Set up JDK 21
+        uses: actions/[email protected]
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+          cache: gradle
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Build with Gradle
+        run: ./gradlew clean build

.github/workflows/cicd.yml

@@ -0,0 +1,47 @@
+name: CI/CD
+
+on:
+  push:
+    branches: [ "dev" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/[email protected]
+
+      - name: Log in to Docker Hub
+        uses: docker/[email protected]
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Build and Push Docker image
+        if: github.ref == 'refs/heads/dev'
+        uses: docker/[email protected]
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ secrets.DOCKER_USERNAME }}/${{ secrets.PROD_IMAGE_NAME }}:latest
+          platforms: linux/amd64
+
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+
+    steps:
+      - name: SSH to Server and Deploy
+        if: github.ref == 'refs/heads/dev'
+        uses: appleboy/[email protected]
+        with:
+          host: ${{ secrets.PROD_SERVER_HOST }}
+          port: ${{ secrets.PROD_SERVER_PORT }}
+          username: ${{ secrets.PROD_SERVER_USERNAME }}
+          key: ${{ secrets.PROD_SERVER_KEY }}
+          script: |
+            cd /home/ubuntu/dasom
+            mkdir -p ./env
+            echo "${{ secrets.ENV }}" > ./env/prodEnv
+            ./deploy.sh

Dockerfile

@@ -0,0 +1,16 @@
+FROM gradle:8.12.1-jdk21-alpine AS build
+WORKDIR /home/gradle/project
+
+COPY build.gradle settings.gradle ./
+COPY gradle gradle/
+
+COPY src src
+
+RUN gradle clean build
+
+FROM eclipse-temurin:21-jre-alpine
+WORKDIR /app
+
+COPY --from=build /home/gradle/project/build/libs/dmu-dasom-api.jar api.jar
+
+ENTRYPOINT ["java", "-Dspring.profiles.active=default,credentials", "-jar", "api.jar"]

build.gradle

@@ -44,6 +44,7 @@ dependencies {
 	developmentOnly 'org.springframework.boot:spring-boot-devtools'
 	runtimeOnly 'com.oracle.database.jdbc:ojdbc11'
 	annotationProcessor 'org.projectlombok:lombok'
+	testImplementation 'com.h2database:h2'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testImplementation 'org.springframework.security:spring-security-test'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'

src/main/resources/application-credentials.yml

@@ -0,0 +1,13 @@
+spring:
+  datasource:
+    url: ${DB_URL}
+    driver-class-name: oracle.jdbc.OracleDriver
+    username: ${DB_USERNAME}
+    password: ${DB_PASSWORD}
+  jpa:
+    hibernate:
+      ddl-auto: ${DDL_AUTO}
+    show-sql: ${SHOW_SQL}
+    properties:
+      hibernate:
+        dialect: org.hibernate.dialect.OracleDialect

src/main/resources/application.yml

@@ -3,12 +3,3 @@ server:
 spring:
   application:
     name: dasom-api
-  datasource:
-    url: ${DB_URL}
-    driver-class-name: oracle.jdbc.OracleDriver
-    username: ${DB_USERNAME}
-    password: ${DB_PASSWORD}
-  jpa:
-    hibernate:
-      ddl-auto: update
-    show-sql: true