Merge pull request #281 from Pseudo-Lab/deploy/cert-develop

feat(cert): 수료증 개발 1차 완료

Author: soohyunme

.github/workflows/certificate-system.yml

@@ -0,0 +1,91 @@
+name: cert-system deploy (Production/Development, self-hosted)
+
+on:
+  push:
+    branches:
+      - main
+      - deploy/cert-develop
+    paths:
+      - 'cert/**'
+      - '.github/workflows/certificate-system.yml'
+  workflow_dispatch:
+
+# 같은 브랜치 동시 실행 시 이전 잡 취소(경쟁 배포 방지)
+concurrency:
+  group: cert-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy-prod:
+    if: github.ref_name == 'main'
+    name: 🚀 Deploy cert-system (Production)
+    runs-on: oracle
+    environment: cert_prod_deploy
+    defaults:
+      run:
+        working-directory: ./cert
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Write .env (prod)
+        run: |
+          cat > .env <<'EOF'
+          APP_HOST=${{ vars.APP_HOST }}
+          ENVIRONMENT=${{ vars.ENVIRONMENT }}
+          NODE_ENV=${{ vars.NODE_ENV }}
+          CERT_TEMPLATE_ARCHIVE_PASSWORD=${{ secrets.CERT_TEMPLATE_ARCHIVE_PASSWORD }}
+          NOTION_API_KEY=${{ secrets.NOTION_API_KEY }}
+          NOTION_CERT_DB_ID=${{ secrets.NOTION_CERT_DB_ID }}
+          NOTION_PROJ_DB_ID=${{ secrets.NOTION_PROJ_DB_ID }}
+          SMTP_HOST=${{ vars.SMTP_HOST }}
+          SMTP_PORT=${{ vars.SMTP_PORT }}
+          SMTP_USERNAME=${{ secrets.SMTP_USERNAME }}
+          SMTP_PASSWORD=${{ secrets.SMTP_PASSWORD }}
+          CORS_ORIGINS=${{ vars.CORS_ORIGINS }}
+          FRONTEND_EXTERNAL_API_URL=${{ vars.FRONTEND_EXTERNAL_API_URL }}
+          EOF
+
+      - name: Build & up (prod)
+        run: |
+          set -euxo pipefail
+          docker compose -p cert-main config -q
+          docker compose -p cert-main down --remove-orphans
+          docker compose -p cert-main up -d --build --remove-orphans
+          docker image prune -f --filter "label=org.pseudolab.project=cert"
+
+  deploy-dev:
+    if: github.ref_name == 'deploy/cert-develop'
+    name: 🚀 Deploy cert-system (Development)
+    runs-on: oracle
+    environment: cert_dev_deploy
+    defaults:
+      run:
+        working-directory: ./cert
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Write .env (dev)
+        run: |
+          cat > .env <<'EOF'
+          APP_HOST=${{ vars.APP_HOST }}
+          ENVIRONMENT=${{ vars.ENVIRONMENT }}
+          NODE_ENV=${{ vars.NODE_ENV }}
+          CERT_TEMPLATE_ARCHIVE_PASSWORD=${{ secrets.CERT_TEMPLATE_ARCHIVE_PASSWORD }}
+          NOTION_API_KEY=${{ secrets.NOTION_API_KEY }}
+          NOTION_CERT_DB_ID=${{ secrets.NOTION_CERT_DB_ID }}
+          NOTION_PROJ_DB_ID=${{ secrets.NOTION_PROJ_DB_ID }}
+          SMTP_HOST=${{ vars.SMTP_HOST }}
+          SMTP_PORT=${{ vars.SMTP_PORT }}
+          SMTP_USERNAME=${{ secrets.SMTP_USERNAME }}
+          SMTP_PASSWORD=${{ secrets.SMTP_PASSWORD }}
+          CORS_ORIGINS=${{ vars.CORS_ORIGINS }}
+          FRONTEND_EXTERNAL_API_URL=${{ vars.FRONTEND_EXTERNAL_API_URL }}
+          EOF
+
+      - name: Build & up (dev)
+        run: |
+          set -euxo pipefail
+          docker compose -p cert-dev config -q
+          docker compose -p cert-dev down --remove-orphans
+          docker compose -p cert-dev up -d --build --remove-orphans
+          docker image prune -f --filter "label=org.pseudolab.project=cert"

cert/.env.example

@@ -0,0 +1,19 @@
+NOTION_API_KEY=api_key_here
+NOTION_CERT_DB_ID=notion_cert_db_id_here
+NOTION_PROJ_DB_ID=notion_proj_db_id_here
+
+SMTP_HOST=example_smtp_host
+SMTP_PORT=port_number
+SMTP_USERNAME=example_username
+SMTP_PASSWORD=example_password
+
+CORS_ORIGINS="https://example.com"
+
+FRONTEND_EXTERNAL_API_URL=https://example.com
+
+APP_HOST=example.com
+
+ENVIRONMENT=dev
+NODE_ENV=development
+
+CERT_TEMPLATE_ARCHIVE_PASSWORD=your_secure_password

cert/backend/Dockerfile

@@ -0,0 +1,28 @@
+# Use an official Python runtime as a parent image
+FROM python:3.11-slim
+
+# Set the working directory in the container
+WORKDIR /app
+
+# Install tzdata and set timezone to Asia/Seoul
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends tzdata && \
+    ln -snf /usr/share/zoneinfo/Asia/Seoul /etc/localtime && \
+    echo "Asia/Seoul" > /etc/timezone && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
+
+ENV TZ=Asia/Seoul
+
+# Copy the dependency files
+COPY requirements.txt .
+COPY uv.lock .
+
+# Install any needed packages specified in requirements.txt
+# Using uv pip install for faster and more reliable dependency management
+RUN pip install uv && uv pip install --system -r requirements.txt
+
+# Copy the rest of the application code
+COPY . .
+
+# Run the application
+CMD ["gunicorn", "-w", "4", "-k", "uvicorn.workers.UvicornWorker", "-b", "0.0.0.0:8000", "src.main:app"]

cert/backend/run.py

@@ -1,13 +1,26 @@
+import logging
+import os
+
+from dotenv import load_dotenv
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
-from dotenv import load_dotenv
-import os
 
 from .routers import certificate
 
 
-# .env 파일 로드
+def configure_logging() -> None:
+    """기본 로깅 설정을 구성한다."""
+    log_level = os.getenv("LOG_LEVEL", "INFO").upper()
+    logging.basicConfig(
+        level=log_level,
+        format="%(asctime)s [%(levelname)s] %(name)s - %(message)s",
+    )
+
+
+# .env 파일 로드 및 로깅 설정
 load_dotenv()
+configure_logging()
+logger = logging.getLogger(__name__)
 
 # FastAPI 앱 생성
 app = FastAPI(
@@ -22,23 +35,27 @@
 origins = os.getenv("CORS_ORIGINS", "").split(",")
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=origins,
+    allow_origins=["*"],
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
 )
 
-app.include_router(certificate.certificate_router)
+# 모든 환경에서 /api 프리픽스 사용 (개발/프로덕션 통일)
+app.include_router(certificate.certificate_router, prefix="/api")
+logger.info("FastAPI app initialized", extra={"environment": os.getenv("ENVIRONMENT")})
+
 
 @app.get("/")
 async def read_root():
     """루트 엔드포인트"""
     return {
         "message": "PseudoLab 수료증 발급 시스템 API 서버",
         "version": "1.0.0",
-        "status": "running"
+        "status": "running",
     }
 
+
 @app.get("/health")
 async def health_check():
     """헬스 체크 엔드포인트"""

cert/backend/src/assets/templates/default.png

@@ -1,3 +1,5 @@
+from typing import Optional
+
 from pydantic import BaseModel, Field
 from enum import Enum
 
@@ -36,11 +38,11 @@ class CertificateResponse(BaseModel):
     """수료증 응답 모델"""
     status: str = Field(..., example="success", description="응답 상태")
     message: str = Field(..., example="수료증이 성공적으로 생성되었습니다.", description="응답 메시지")
-    data: CertificateData = Field(..., description="수료증 데이터")
+    data: Optional[CertificateData] = Field(None, description="수료증 데이터")
 
 
 class ErrorResponse(BaseModel):
     """에러 응답 모델"""
     status: str = Field(..., example="fail", description="응답 상태")
     error_code: str = Field(..., example="CS0002", description="에러 코드")
-    message: str = Field(..., example="수료이력이 확인되지 않습니다.", description="에러 메시지")
+    message: str = Field(..., example="수료이력이 확인되지 않습니다.", description="에러 메시지")