feat: jib 적용 및 docker-compose 배포 세팅

Author: songyi00

.github/workflows/cd.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - feat/cd-pipeline
 
 jobs:
   build-and-push:
@@ -28,21 +29,19 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-gradle-
 
-      - name: Build with Gradle
+      - name: Build and Push with Jib (API)
         uses: gradle/gradle-build-action@67421db6bd0bf253fb4bd25b31ebb98943c375e1
         with:
-          arguments: clean bootJar
+          arguments: clean :tuk-api:jib -Djib.to.image=${{ secrets.NCP_CONTAINER_REGISTRY_API }}/tuk-api -Djib.to.auth.username=${{ secrets.NCP_ACCESS_KEY }} -Djib.to.auth.password=${{ secrets.NCP_SECRET_KEY }}
+        env:
+          JIB_TO_IMAGE: ${{ secrets.NCP_CONTAINER_REGISTRY_API }}/tuk-api
+          JIB_TO_AUTH_USERNAME: ${{ secrets.NCP_ACCESS_KEY }}
+          JIB_TO_AUTH_PASSWORD: ${{ secrets.NCP_SECRET_KEY }}
 
-      - name: Set up Docker Build
-        uses: docker/setup-buildx-action@v2
-
-      - name: Docker build and push to NCP container registry
+      - name: Copy docker files to server
         run: |
-          sudo docker build --build-arg DEPENDENCY=build/dependency -t ${{ secrets.NCP_CONTAINER_REGISTRY_API }}/goalpanzi-api --platform linux/amd64 .
-          sudo docker login ${{ secrets.NCP_CONTAINER_REGISTRY_API }} -u ${{ secrets.NCP_ACCESS_KEY }} -p ${{ secrets.NCP_SECRET_KEY }}
-          sudo docker push ${{ secrets.NCP_CONTAINER_REGISTRY_API }}/goalpanzi-api
-
-          sshpass -p ${{ secrets.API_SERVER_PASSWORD }} scp -P ${{ secrets.SSH_PORT }} -o StrictHostKeyChecking=no ./docker-compose.yml ${{ secrets.API_SERVER_USERNAME }}@${{ secrets.API_SERVER_HOST }}:${{ secrets.DOCKER_COMPOSE_PATH }}
+          sshpass -p ${{ secrets.API_SERVER_PASSWORD }} scp -P ${{ secrets.SSH_PORT }} -o StrictHostKeyChecking=no ./docker/docker-compose.prod.yml ${{ secrets.API_SERVER_USERNAME }}@${{ secrets.API_SERVER_HOST }}:${{ secrets.DOCKER_COMPOSE_PATH }}/docker-compose.yml
+          sshpass -p ${{ secrets.API_SERVER_PASSWORD }} scp -P ${{ secrets.SSH_PORT }} -o StrictHostKeyChecking=no ./docker/init.sql ${{ secrets.API_SERVER_USERNAME }}@${{ secrets.API_SERVER_HOST }}:${{ secrets.DOCKER_COMPOSE_PATH }}
         shell: bash
 
   deploy-to-server:
@@ -73,9 +72,5 @@ jobs:
             export REDIS_HOST=${{ secrets.REDIS_HOST }}
 
             sudo docker rm -f $(docker ps -qa)
-
-            sudo docker login ${{ secrets.NCP_CONTAINER_REGISTRY_API }} -u ${{ secrets.NCP_ACCESS_KEY }} -p ${{ secrets.NCP_SECRET_KEY }}
-            sudo docker pull ${{ secrets.NCP_CONTAINER_REGISTRY_API }}/goalpanzi-api
-
             docker-compose -f ${{ secrets.DOCKER_COMPOSE_PATH }}/docker-compose.yml up -d
             docker image prune -f

build.gradle.kts

@@ -4,6 +4,7 @@ plugins {
     kotlin("plugin.jpa") version "1.9.25" apply false
     id("org.springframework.boot") version "3.5.3" apply false
     id("io.spring.dependency-management") version "1.1.7" apply false
+    id("com.google.cloud.tools.jib") version "3.4.0" apply false
 }
 
 java {

docker/docker-compose.prod.yml

@@ -0,0 +1,68 @@
+version: '3.8'
+
+services:
+  api:
+    container_name: tuk-api
+    image: ${NCP_CONTAINER_REGISTRY_API}/tuk-api:latest
+    restart: always
+    ports:
+      - "8080:8080"
+    environment:
+      SPRING_PROFILES_ACTIVE: prod
+      MYSQL_USERNAME: ${MYSQL_USERNAME}
+      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
+      MYSQL_HOST: mysql
+      MYSQL_PORT: 3306
+      JWT_SECRET: ${JWT_SECRET}
+      REDIS_HOST: redis
+      REDIS_PORT: 6379
+      APPLE_CLIENT_ID: ${APPLE_CLIENT_ID}
+      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID}
+      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET}
+    depends_on:
+      - mysql
+      - redis
+    networks:
+      - tuk-network
+  mysql:
+    image: mysql:8.0.39
+    container_name: tuk-mysql
+    restart: always
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_PASSWORD}
+      MYSQL_DATABASE: tuk_db
+      MYSQL_USER: ${MYSQL_USERNAME}
+      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
+    ports:
+      - "3306:3306"
+    volumes:
+      - mysql_data:/var/lib/mysql
+      - ./init.sql:/docker-entrypoint-initdb.d/init.sql
+    command:
+      - --character-set-server=utf8mb4
+      - --collation-server=utf8mb4_unicode_ci
+      - --skip-character-set-client-handshake
+    networks:
+      - tuk-network
+
+  redis:
+    image: redis:7.2-alpine
+    container_name: tuk-redis
+    restart: always
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_data:/data
+    command: redis-server --appendonly yes
+    networks:
+      - tuk-network
+
+volumes:
+  mysql_data:
+    driver: local
+  redis_data:
+    driver: local
+
+networks:
+  tuk-network:
+    driver: bridge

docker-compose.yml docker/docker-compose.ymldocker-compose.yml renamed to docker/docker-compose.yml

@@ -0,0 +1 @@
+CREATE DATABASE IF NOT EXISTS tuk_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

docker/init.sql

@@ -1,3 +1,32 @@
+plugins {
+    id("com.google.cloud.tools.jib")
+}
+
+jib {
+    from {
+        image = "eclipse-temurin:21-jre"
+    }
+    to {
+        image = System.getProperty("jib.to.image") ?: System.getenv("JIB_TO_IMAGE") ?: "tuk-api"
+        tags = setOf("latest", project.version.toString())
+        auth {
+            username = System.getProperty("jib.to.auth.username") ?: System.getenv("JIB_TO_AUTH_USERNAME")
+            password = System.getProperty("jib.to.auth.password") ?: System.getenv("JIB_TO_AUTH_PASSWORD")
+        }
+    }
+    container {
+        ports = listOf("8080")
+        mainClass = "nexters.tuk.TukServerApplicationKt"
+        jvmFlags = listOf(
+            "-XX:InitialRAMPercentage=25.0",
+            "-XX:MinRAMPercentage=25.0",
+            "-XX:MaxRAMPercentage=50.0",
+            "-XX:+UseG1GC",
+            "-Dspring.profiles.active=prod"
+        )
+    }
+}
+
 dependencies {
     implementation("org.springframework.boot:spring-boot-starter-web")
     implementation("org.springframework.boot:spring-boot-starter-actuator")
@@ -21,7 +50,7 @@ dependencies {
     implementation("io.jsonwebtoken:jjwt-jackson:${properties["jjwtVersion"]}")
 
     implementation("com.nimbusds:nimbus-jose-jwt:${properties["nimbusJwtVersion"]}")
-    
+
     // test
     testImplementation("org.springframework.boot:spring-boot-starter-test")
     testImplementation("org.jetbrains.kotlin:kotlin-test-junit5")
@@ -41,4 +70,8 @@ dependencies {
 tasks.withType<Test> {
     useJUnitPlatform()
     systemProperty("spring.profiles.active", "test")
+}
+
+tasks.withType<Jar> {
+    archiveBaseName.set("tuk-api")
 }