[#47] Railway 배포 자동화 설정

.github/workflows/deploy-dev.yml

@@ -1,16 +1,18 @@
 name: Deploy to Development
 
 on:
-  push:
-    branches:
-      - develop
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-weski-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   deploy-dev:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Check out code
+      - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Set up JDK 17
@@ -19,28 +21,18 @@ jobs:
           java-version: '17'
           distribution: 'temurin'
 
-      - name: Cache Gradle dependencies
-        uses: actions/cache@v3
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-
-      - name: Grant execute permission for gradlew
-        run: chmod +x gradlew
+      - name: Setup Gradle (cache)
+        uses: gradle/actions/setup-gradle@v4
 
       - name: Run tests
         run: ./gradlew test
 
-      - name: Build application
-        run: ./gradlew clean build -x test
+      - name: Install Railway CLI
+        run: npm install -g @railway/cli
 
       - name: Deploy to Railway Dev
-        uses: railwayapp/cli@v3
-        with:
-          command: up --service WeSki-server-dev
         env:
-          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN }}
+          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN_DEV }}
+          SPRING_PROFILES_ACTIVE: dev
+          SWAGGER_SERVER_URL_DEV: ${{ secrets.SWAGGER_SERVER_URL_DEV }}
+        run: railway up --detach --service ${{ secrets.RAILWAY_SERVICE_ID_DEV }}

.github/workflows/deploy-frontend-dev.yml

@@ -0,0 +1,52 @@
+name: Deploy Frontend to Development
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-frontend-dev-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy-frontend-dev:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+          cache: 'npm'
+          cache-dependency-path: 'weski-admin/package-lock.json'
+
+      - name: Install dependencies
+        working-directory: weski-admin
+        run: npm ci
+
+      - name: Type check
+        working-directory: weski-admin
+        run: npm run type-check
+
+      - name: Lint
+        working-directory: weski-admin
+        run: npm run lint
+
+      - name: Build application
+        working-directory: weski-admin
+        run: npm run build
+        env:
+          NEXT_PUBLIC_API_URL: ${{ secrets.BACKEND_URL_DEV }}
+          RAILWAY_ENVIRONMENT: development
+          NODE_ENV: production
+
+      - name: Install Railway CLI
+        run: npm install -g @railway/cli
+
+      - name: Deploy to Railway Dev
+        working-directory: weski-admin
+        env:
+          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN_DEV }}
+        run: railway up --detach --service ${{ secrets.RAILWAY_SERVICE_ID_FRONTEND_DEV }}

.github/workflows/deploy-frontend-prod.yml

@@ -0,0 +1,52 @@
+name: Deploy Frontend to Production
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-frontend-prod-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy-frontend-prod:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+          cache: 'npm'
+          cache-dependency-path: 'weski-admin/package-lock.json'
+
+      - name: Install dependencies
+        working-directory: weski-admin
+        run: npm ci
+
+      - name: Type check
+        working-directory: weski-admin
+        run: npm run type-check
+
+      - name: Lint
+        working-directory: weski-admin
+        run: npm run lint
+
+      - name: Build application
+        working-directory: weski-admin
+        run: npm run build
+        env:
+          NEXT_PUBLIC_API_URL: ${{ secrets.BACKEND_URL_PROD }}
+          RAILWAY_ENVIRONMENT: production
+          NODE_ENV: production
+
+      - name: Install Railway CLI
+        run: npm install -g @railway/cli
+
+      - name: Deploy to Railway Prod
+        working-directory: weski-admin
+        env:
+          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN_PROD }}
+        run: railway up --detach --service ${{ secrets.RAILWAY_SERVICE_ID_FRONTEND_PROD }}

.github/workflows/deploy-prod.yml

@@ -1,16 +1,18 @@
 name: Deploy to Production
 
 on:
-  push:
-    branches:
-      - main
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-weski-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   deploy-prod:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Check out code
+      - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Set up JDK 17
@@ -19,28 +21,18 @@ jobs:
           java-version: '17'
           distribution: 'temurin'
 
-      - name: Cache Gradle dependencies
-        uses: actions/cache@v3
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-
-      - name: Grant execute permission for gradlew
-        run: chmod +x gradlew
+      - name: Setup Gradle (cache)
+        uses: gradle/actions/setup-gradle@v4
 
       - name: Run tests
         run: ./gradlew test
 
-      - name: Build application
-        run: ./gradlew clean build -x test
+      - name: Install Railway CLI
+        run: npm install -g @railway/cli
 
       - name: Deploy to Railway Prod
-        uses: railwayapp/cli@v3
-        with:
-          command: up --service WeSki-server
         env:
-          RAILWAY_TOKEN: ${{ secrets.RAILWAY_PROD_TOKEN }}
+          RAILWAY_TOKEN: ${{ secrets.RAILWAY_TOKEN_PROD }}
+          SPRING_PROFILES_ACTIVE: prod
+          SWAGGER_SERVER_URL_PROD: ${{ secrets.SWAGGER_SERVER_URL_PROD }}
+        run: railway up --detach --service ${{ secrets.RAILWAY_SERVICE_ID_PROD }}

Dockerfile

@@ -1,15 +1,32 @@
-FROM openjdk:17-jdk-slim
+## ===== Build stage =====
+FROM gradle:8.9-jdk17-alpine AS build
+WORKDIR /workspace
 
-# tzdata 패키지 설치 및 시간대 설정
-RUN apt-get update && apt-get install -y tzdata && \
-    ln -sf /usr/share/zoneinfo/Asia/Seoul /etc/localtime && \
-    echo "Asia/Seoul" > /etc/timezone
+# Gradle 캐시 최적화를 위해 래퍼/설정 먼저 복사
+COPY gradle gradle
+COPY gradlew settings.gradle.kts build.gradle.kts ./
+RUN chmod +x gradlew
 
-EXPOSE 8080
+# 소스 복사 후 빌드 (테스트는 CI에서 돌리므로 -x test)
+COPY src ./src
+RUN ./gradlew --no-daemon clean bootJar -x test
+
+## ===== Runtime stage =====
+FROM eclipse-temurin:17-jre-alpine
+
+RUN addgroup -S spring && adduser -S spring -G spring
+USER spring
 
-ARG JAR_FILE=build/libs/*.jar
-COPY ${JAR_FILE} weski-app.jar
+WORKDIR /app
+COPY --from=build /workspace/build/libs/*.jar /app/app.jar
+
+# 런타임 환경
+ENV TZ=Asia/Seoul \
+    JAVA_OPTS="-XX:MaxRAMPercentage=75.0 -XX:+UseG1GC" \
+    SPRING_PROFILES_ACTIVE=dev
+
+# 실제 개방 포트는 Railway가 PORT로 지정할 수 있음
+EXPOSE 8080
 
-CMD java -Dserver.port=${PORT:-8080} \
-        -Dspring.profiles.active=${SPRING_PROFILES_ACTIVE:-prod} \
-        -jar /weski-app.jar
+# 별도 스크립트 없이 바로 실행
+ENTRYPOINT [ "sh", "-c", "exec java $JAVA_OPTS -jar /app/app.jar" ]

build.gradle.kts

@@ -29,6 +29,8 @@ dependencies {
     implementation("org.springframework.boot:spring-boot-starter-data-jpa")
     implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.2.0")
     implementation("org.springframework.boot:spring-boot-starter-quartz")
+    implementation("org.springframework.boot:spring-boot-starter-batch")
+    implementation("org.jsoup:jsoup:1.17.2")
     runtimeOnly("com.mysql:mysql-connector-j")
 
     testImplementation("org.mockito:mockito-core:4.11.0")

src/main/kotlin/nexters/weski/app/version/AppVersionCheckService.kt

@@ -5,8 +5,8 @@ import org.springframework.stereotype.Service
 @Service
 class AppVersionCheckService {
     companion object {
-        const val IOS_MIN_VERSION = "3.0.2"
-        const val ANDROID_MIN_VERSION = "3.0.1"
+        const val IOS_MIN_VERSION = "3.1.2"
+        const val ANDROID_MIN_VERSION = "3.1.2"
     }
 
     fun getAppVersion(

src/main/kotlin/nexters/weski/common/config/SwaggerConfig.kt

@@ -3,15 +3,33 @@ package nexters.weski.common.config
 import io.swagger.v3.oas.models.OpenAPI
 import io.swagger.v3.oas.models.info.Info
 import org.springdoc.core.models.GroupedOpenApi
+import org.springframework.beans.factory.annotation.Value
 import org.springframework.context.annotation.Bean
 import org.springframework.context.annotation.Configuration
 import org.springframework.web.filter.ForwardedHeaderFilter
 
 @Configuration
 class SwaggerConfig {
+    @Value("\${spring.profiles.active:local}")
+    private lateinit var activeProfile: String
+
+    @Value("\${server.port:8080}")
+    private var serverPort: Int = 8080
+
+    @Value("\${app.swagger.server-url.dev:}")
+    private var devServerUrl: String = ""
+
+    @Value("\${app.swagger.server-url.prod:}")
+    private var prodServerUrl: String = ""
+
+    @Value("\${app.swagger.server-url.local:}")
+    private var localServerUrl: String = ""
+
     @Bean
-    fun openAPI(): OpenAPI =
-        OpenAPI()
+    fun openAPI(): OpenAPI {
+        val serverUrl = getServerUrl()
+
+        return OpenAPI()
             .info(
                 Info()
                     .title("We SKI API")
@@ -21,9 +39,19 @@ class SwaggerConfig {
                 listOf(
                     io.swagger.v3.oas.models.servers
                         .Server()
-                        .url("http://223.130.154.51:8080"),
+                        .url(serverUrl)
+                        .description("${activeProfile.uppercase()} Environment"),
                 ),
             )
+    }
+
+    private fun getServerUrl(): String =
+        when (activeProfile.lowercase()) {
+            "dev", "development" -> devServerUrl
+            "prod", "production" -> prodServerUrl
+            "local" -> localServerUrl.ifBlank { "http://localhost:$serverPort" }
+            else -> "http://localhost:$serverPort"
+        }
 
     @Bean
     fun userApi(): GroupedOpenApi =

src/main/kotlin/nexters/weski/common/config/WebConfig.kt

@@ -1,20 +1,22 @@
 package nexters.weski.common.config
 
+import org.springframework.beans.factory.annotation.Value
 import org.springframework.context.annotation.Configuration
 import org.springframework.web.servlet.config.annotation.CorsRegistry
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer
 
 @Configuration
-class WebConfig : WebMvcConfigurer {
+class WebConfig(
+    @Value("\${app.cors.allowed-origins}")
+    private val allowedOrigins: String,
+) : WebMvcConfigurer {
     override fun addCorsMappings(registry: CorsRegistry) {
+        val origins = allowedOrigins.split(",").map { it.trim() }.toTypedArray()
+
         registry
             .addMapping("/**")
-            .allowedOrigins(
-                "http://localhost:3000",
-                "http://localhost:5173",
-                "http://127.0.0.1:3000",
-                "http://127.0.0.1:5173",
-            ).allowedMethods("GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS")
+            .allowedOrigins(*origins)
+            .allowedMethods("GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS")
             .allowedHeaders("*")
             .allowCredentials(true)
     }