waggle-service-deploy.yml

name: Buiid and Push Docker Image
on:
    push:
        branches:
        - develop
jobs:
    bulid:
        runs-on: ubuntu-latest
        steps:
        - name: Checkout
          uses: actions/checkout@v3


        - name: Get Github action IP
          id: ip
          uses: haythem/public-ip@v1.2

        - name: Setting environment variables
          run: |
           echo "AWS_DEFAULT_REGION=${{ secrets.AWS_REGION }}" >> $GITHUB_ENV
           echo "AWS_SG_NAME=${{ secrets.AWS_SG_NAME }}" >> $GITHUB_ENV
        - name: Configure AWS credentials
          uses: aws-actions/configure-aws-credentials@v1
          with:
            aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
            aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            aws-region: ${{ secrets.AWS_REGION }}
        - name: Add Github Actions IP to Security group
          run: |
            aws ec2 authorize-security-group-ingress --group-name ${{ secrets.AWS_SG_NAME }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32
          env:
            AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
            AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION }}


        - name: Create ./packages/waggle-service/.env file
          run: |
            touch .env
            echo "VITE_BASE_URL=${{ secrets.VITE_BASE_URL }}" >> ./packages/waggle-service/.env
            echo "VITE_GOOGLE_CLIENT_ID=${{ secrets.VITE_GOOGLE_CLIENT_ID }}" >> ./packages/waggle-service/.env
            echo "VITE_GOOGLE_CLIENT_SECRET=${{ secrets.VITE_GOOGLE_CLIENT_SECRET }}" >> ./packages/waggle-service/.env
            echo "VITE_GOOGLE_REDIRECT_URI=${{ secrets.VITE_GOOGLE_REDIRECT_URI }}" >> ./packages/waggle-service/.env
            echo "VITE_KAKAO_API_KEY=${{ secrets.VITE_KAKAO_API_KEY }}" >> ./packages/waggle-service/.env
            echo "VITE_KAKAO_REDIRECT_URI=${{ secrets.VITE_KAKAO_REDIRECT_URI }}" >> ./packages/waggle-service/.env
            echo "VITE_NAVER_CLIENT_ID=${{ secrets.VITE_NAVER_CLIENT_ID }}" >> ./packages/waggle-service/.env
            echo "VITE_NAVER_CLIENT_SECRET=${{ secrets.VITE_NAVER_CLIENT_SECRET }}" >> ./packages/waggle-service/.env
            echo "VITE_NAVER_REDIRECT_URI=${{ secrets.VITE_NAVER_REDIRECT_URI }}" >> ./packages/waggle-service/.env
        # - name: Get the version
        #   id: get_version
        #   run: |
        #         RELEASE_VERSION_WITHOUT_V="$(cut -d'v' -f2 <<< ${GITHUB_REF#refs/*/})"
        #         echo ::set-output name=version::$(echo $GITHUB_SHA | cut -c1-7)
        - name: Set up docker buildx
          uses: docker/setup-buildx-action@v3

        - name: Login to DockerHub
          uses: docker/login-action@v2
          with:
            username: ${{ secrets.DOCKER_USERNAME }}
            password: ${{ secrets.DOCKER_PASSWORD }}
        - name: Build and push
          uses: docker/build-push-action@v5
          with:
            context: .
            file: ./Dockerfile
            push: true
            tags: ${{ secrets.DOCKER_USERNAME }}/waggle-front-waggle-service

        - name: Deploy EC2
          uses: appleboy/ssh-action@master
          with:
            host: ${{ secrets.HOST_IP }}
            username: ${{ secrets.USERNAME }}
            key: ${{ secrets.AWS_KEY }}
            port: ${{ secrets.SSH_PORT }}
            script: |
              docker stop ${{secrets.DOCKER_CONTAINER_NAME}}
              docker rm ${{secrets.DOCKER_CONTAINER_NAME}}
              docker pull ${{ secrets.DOCKER_USERNAME }}/waggle-front-waggle-service
              docker run -d -p 80:80 -p 443:443 --name "${{ secrets.DOCKER_CONTAINER_NAME }}" -v /etc/letsencrypt:/etc/letsencrypt ${{ secrets.DOCKER_USERNAME }}/waggle-front-waggle-service

        - name: Remove Github Actions IP from security group
          run: |
            aws ec2 revoke-security-group-ingress --group-name ${{ secrets.AWS_SG_NAME }} --protocol tcp --port 22 --cidr ${{ steps.ip.outputs.ipv4 }}/32
          env:
            AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
            AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
            AWS_DEFAULT_REGION: ${{ secrets.AWS_REGION }}