ci: 개발용/운영용 서버 분리 작업

.coderabbit.yaml

@@ -0,0 +1,14 @@
+language: "ko-KR"
+early_access: false
+reviews:
+  profile: "chill"
+  request_changes_workflow: false
+  high_level_summary: true
+  poem: true
+  review_status: true
+  collapse_walkthrough: false
+  auto_review:
+    enabled: true
+    drafts: false
+chat:
+  auto_reply: true

.github/ISSUE_TEMPLATE/feature-template.md

@@ -10,6 +10,8 @@ assignees: ''
 ## 📌 어떤 기능인가요?
 <!-- 추가하려는 기능에 대해 간결하게 설명해주세요 -->
 
+- 
+
 
 ## 📝 작업 상세 내용
 - [ ] TODO

.github/ISSUE_TEMPLATE/refactor-template.md

@@ -7,9 +7,18 @@ assignees: ''
 
 ---
 
-## 📌 어떤 기능인가요?
-<!-- 추가하려는 기능에 대해 간결하게 설명해주세요 -->
+## 📌 리팩토링 대상
+<!-- 어떤 기능/모듈을 리팩토링했는지 명확히 작성해주세요 -->
+
+- 
+
+
+## 🛠️ 리팩토링 사유
+<!-- 리팩토링을 하게 된 배경이나 필요성을 간단히 설명해주세요 -->
+
+- 
 
 
 ## 📝 작업 상세 내용
-- [ ] TODO
+<!-- 주요 변경 사항을 정리해주세요 -->
+- [ ] TODO

.github/workflows/dev_deploy.yml

@@ -0,0 +1,86 @@
+name: dev CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - develop
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Make application.yml for dev
+        run: |
+          mkdir -p src/main/resources
+          echo "${{ secrets.APPLICATION_YML_DEV }}" > src/main/resources/application.yml
+        shell: bash
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Build with Gradle
+        uses: gradle/gradle-build-action@v2
+        with:
+          arguments: build
+
+      - name: Upload deployment files
+        uses: actions/upload-artifact@v4
+        with:
+          name: deployment-files
+          path: |
+            build/libs/server-0.0.1-SNAPSHOT.jar
+            Dockerfile
+            docker-compose-dev.yml
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: deployment-files
+          path: deployment
+
+      - name: Debug Check downloaded files
+        run: ls -R deployment
+
+      - name: Deploy to EC2 (dev) using Docker
+        env:
+          EC2_SSH_KEY: ${{ secrets.EC2_DEV_SSH_KEY }}
+          EC2_USERNAME: ${{ secrets.EC2_DEV_USERNAME }}
+          EC2_HOST: ${{ secrets.EC2_DEV_HOST }}
+        run: |
+          echo "$EC2_SSH_KEY" > private_key.pem
+          chmod 600 private_key.pem
+
+          function sync_file() {
+            local source_file=$1
+            local target_path="/home/$EC2_USERNAME/"
+            rsync -avz -e "ssh -i private_key.pem -o StrictHostKeyChecking=no" \
+              "$source_file" "$EC2_USERNAME@$EC2_HOST:$target_path"
+          }
+
+          sync_file deployment/build/libs/server-0.0.1-SNAPSHOT.jar
+          sync_file deployment/Dockerfile
+          sync_file deployment/docker-compose-dev.yml
+
+          ssh -i private_key.pem -o StrictHostKeyChecking=no $EC2_USERNAME@$EC2_HOST "
+            cd /home/$EC2_USERNAME/
+            docker-compose -f docker-compose-dev.yml down
+            docker-compose -f docker-compose-dev.yml up --build -d
+          "
+
+          rm -f private_key.pem

.github/workflows/prod_deploy.yml

@@ -0,0 +1,86 @@
+name: prod CI/CD Pipeline
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+
+      - name: Make application.yml
+        run: |
+          mkdir -p src/main/resources
+          echo "${{ secrets.APPLICATION_YML }}" > src/main/resources/application.yml
+        shell: bash
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Build with Gradle
+        uses: gradle/gradle-build-action@v2
+        with:
+          arguments: build
+
+      - name: Upload deployment files
+        uses: actions/upload-artifact@v4
+        with:
+          name: deployment-files
+          path: |
+            build/libs/server-0.0.1-SNAPSHOT.jar
+            Dockerfile
+            docker-compose.yml
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: deployment-files
+          path: deployment
+
+      - name: Debug Check downloaded files
+        run: ls -R deployment
+
+      - name: Deploy to EC2 using Docker (rsync)
+        env:
+          EC2_SSH_KEY: ${{ secrets.EC2_SSH_KEY }}
+          EC2_USERNAME: ${{ secrets.EC2_USERNAME }}
+          EC2_HOST: ${{ secrets.EC2_HOST }}
+        run: |
+          echo "$EC2_SSH_KEY" > private_key.pem
+          chmod 600 private_key.pem
+
+          function sync_file() {
+            local source_file=$1
+            local target_path="/home/$EC2_USERNAME/"
+            rsync -avz -e "ssh -i private_key.pem -o StrictHostKeyChecking=no" \
+              "$source_file" "$EC2_USERNAME@$EC2_HOST:$target_path"
+          }
+
+          sync_file deployment/build/libs/server-0.0.1-SNAPSHOT.jar
+          sync_file deployment/Dockerfile
+          sync_file deployment/docker-compose.yml
+
+          ssh -i private_key.pem -o StrictHostKeyChecking=no $EC2_USERNAME@$EC2_HOST "
+            cd /home/$EC2_USERNAME/
+            docker-compose down
+            docker-compose up --build -d
+          "
+
+          rm -f private_key.pem

.gitignore

@@ -5,6 +5,12 @@ build/
 !**/src/main/**/build/
 !**/src/test/**/build/
 
+### application.yml ###
+application.yml
+application-local.yml
+application-dev.yml
+application-prod.yml
+
 ### STS ###
 .apt_generated
 .classpath
@@ -35,3 +41,6 @@ out/
 
 ### VS Code ###
 .vscode/
+
+### DS_Store ###
+*.DS_Store

Dockerfile

@@ -0,0 +1,17 @@
+# Java 17을 사용하는 Spring Boot 애플리케이션 빌드
+FROM openjdk:17-jdk-slim
+
+# 필요한 패키지 설치 (wget for wait-for-it.sh)
+RUN apt-get update && apt-get install -y wget
+
+# wait-for-it.sh 스크립트 다운로드 및 실행 권한 부여
+RUN wget -O /usr/local/bin/wait-for-it.sh https://raw.githubusercontent.com/vishnubob/wait-for-it/master/wait-for-it.sh && \
+    chmod +x /usr/local/bin/wait-for-it.sh
+
+
+COPY server-0.0.1-SNAPSHOT.jar app.jar
+
+EXPOSE 8080
+
+# Redis 준비 완료 후 앱 실행
+ENTRYPOINT ["/usr/local/bin/wait-for-it.sh", "redis:6379", "--", "java", "-jar", "/app.jar"]

build.gradle

@@ -23,14 +23,53 @@ repositories {
 	mavenCentral()
 }
 
+dependencyManagement {
+	imports {
+		mavenBom "org.springframework.ai:spring-ai-bom:1.0.0"
+	}
+}
+
 dependencies {
-	// implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
 	implementation 'org.springframework.boot:spring-boot-starter-web'
+	implementation 'org.springframework.boot:spring-boot-starter-validation'
 	compileOnly 'org.projectlombok:lombok'
 	runtimeOnly 'com.mysql:mysql-connector-j'
 	annotationProcessor 'org.projectlombok:lombok'
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+
+	// swagger
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.6'
+
+	// security
+	testImplementation 'org.springframework.security:spring-security-test'
+
+	// jwt
+	implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
+	implementation 'io.jsonwebtoken:jjwt-impl:0.11.5'
+	implementation 'io.jsonwebtoken:jjwt-jackson:0.11.5'
+
+	// oauth
+	implementation 'org.springframework.boot:spring-boot-starter-oauth2-client'
+
+	// redis
+	implementation 'org.springframework.boot:spring-boot-starter-data-redis'
+
+	// s3
+	implementation platform("software.amazon.awssdk:bom:2.25.12")
+	implementation 'software.amazon.awssdk:s3'
+	implementation 'software.amazon.awssdk:auth'
+	implementation 'org.springframework.cloud:spring-cloud-starter-aws:2.2.6.RELEASE'
+
+	// open ai
+	implementation 'org.springframework.ai:spring-ai-starter-model-openai'
+
+	// pdfbox
+	implementation 'org.apache.pdfbox:pdfbox:2.0.28'
+
+	// smtp
+	implementation 'org.springframework.boot:spring-boot-starter-mail'
 }
 
 tasks.named('test') {

docker-compose-dev.yml

@@ -0,0 +1,26 @@
+version: '3.8'
+
+services:
+  app:
+    build: .
+    container_name: susanghanguys-dev-app
+    depends_on:
+      - redis
+    ports:
+      - "8080:8080"
+    environment:
+      SPRING_DATA_REDIS_HOST: redis
+      SPRING_DATA_REDIS_PORT: 6379
+    restart: always
+
+  redis:
+    image: redis:7.2
+    container_name: susanghanguys-redis
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis-data:/data
+    restart: always
+
+volumes:
+  redis-data:

docker-compose.yml

@@ -0,0 +1,26 @@
+version: '3.8'
+
+services:
+  app:
+    build: .
+    container_name: susanghanguys-app
+    depends_on:
+      - redis
+    ports:
+      - "8080:8080"
+    environment:
+      SPRING_DATA_REDIS_HOST: redis
+      SPRING_DATA_REDIS_PORT: 6379
+    restart: always
+
+  redis:
+    image: redis:7.2
+    container_name: susanghanguys-redis
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis-data:/data
+    restart: always
+
+volumes:
+  redis-data:

src/main/java/com/susanghan_guys/server/ServerApplication.java

@@ -2,8 +2,12 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.data.jpa.repository.config.EnableJpaAuditing;
+import org.springframework.data.redis.repository.configuration.EnableRedisRepositories;
 
 @SpringBootApplication
+@EnableJpaAuditing
+@EnableRedisRepositories(basePackages = "com.susanghan_guys.server.oauth2.infrastructure.persistence")
 public class ServerApplication {
 
 	public static void main(String[] args) {