dev-deploy.yml

name: 변경사항을 개발 서버에 배포한다

on:
  push:
    branches: [ dev ]
  workflow_dispatch:

permissions:
  contents: read
  packages: write

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - name: Get token from Submodule Reader
        uses: actions/create-github-app-token@v1
        id: app_token
        with:
          app-id: ${{ secrets.SUBMODULE_APP_ID }}
          private-key: ${{ secrets.SUBMODULE_APP_PEM }}
          owner: ${{ github.repository_owner }}

      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: true
          token: ${{ steps.app_token.outputs.token }}

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: corretto

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v3

      - name: SHA 앞 7자리 추출
        id: sha
        run: echo "short-sha=${GITHUB_SHA::7}" >> $GITHUB_OUTPUT

      - name: Jib으로 이미지 빌드 및 GHCR Push
        env:
          GHCR_USERNAME: ${{ github.actor }}
          GHCR_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew jib -Djib.to.tags=dev,${{ steps.sha.outputs.short-sha }}

  deploy:
    needs: build-and-push
    runs-on: ubuntu-latest
    environment: dev
    steps:
      - name: snackgame-02 dev 배포
        uses: appleboy/ssh-action@v1
        env:
          ACCESS_TOKEN_SECRET_KEY: ${{ secrets.ACCESS_TOKEN_SECRET_KEY }}
          REFRESH_TOKEN_SECRET_KEY: ${{ secrets.REFRESH_TOKEN_SECRET_KEY }}
          DB_URL: ${{ secrets.DB_URL }}
          DB_USERNAME: ${{ secrets.DB_USERNAME }}
          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
        with:
          host: ${{ secrets.SSH_HOST_02 }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script_stop: true
          envs: ACCESS_TOKEN_SECRET_KEY,REFRESH_TOKEN_SECRET_KEY,DB_URL,DB_USERNAME,DB_PASSWORD
          script: |
            cd ~/snackgame-server/repo
            git fetch origin dev
            git checkout dev
            git pull origin dev --no-recurse-submodules

            chmod +x scripts/deploy-dev.sh
            scripts/deploy-dev.sh