[1팀] 백엔드 코드리뷰용 PR

.env.template

@@ -0,0 +1,27 @@
+# Database Configuration
+DB_HOST=localhost
+DB_PORT=5432
+DB_NAME=bugi
+DB_USERNAME=postgres
+DB_PASSWORD=postgres
+DB_SCHEMA=public
+
+# Redis Configuration
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_PASSWORD=
+REDIS_SSL_ENABLED=false
+
+# Frontend Configuration
+ALLOWED_ORIGINS=http://localhost:3000
+
+# Mail Configuration
+MAIL_HOST=smtp.gmail.com
+MAIL_PORT=587
+[email protected]
+MAIL_PASSWORD=your-app-password
+
+# JWT Configuration
+JWT_SECRET=your-secret-key-min-256-bits-change-this-in-production
+JWT_ACCESS_TOKEN_VALIDITY=1h
+JWT_REFRESH_TOKEN_VALIDITY=30d

.github/workflows/deploy.yml

@@ -0,0 +1,59 @@
+name: Deploy
+
+on:
+  push:
+    branches: main
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
+jobs:
+  image-build:
+    name: Image Build and Push to NCP Registry
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to NCP Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ secrets.CONTAINER_REGISTRY }}
+          username: ${{ secrets.NCP_ACCESS_KEY }}
+          password: ${{ secrets.NCP_SECRET_KEY }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          tags: ${{ secrets.CONTAINER_REGISTRY }}/server:${{ github.sha }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  deploy:
+    name: Deploy to Server
+    runs-on: ubuntu-latest
+    needs: image-build
+    steps:
+      - name: Execute
+        uses: appleboy/[email protected]
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_KEY }}
+          port: ${{ secrets.SSH_PORT }}
+          script: |
+            echo ${{ secrets.NCP_SECRET_KEY }} | docker login --username ${{ secrets.NCP_ACCESS_KEY }} --password-stdin ${{ secrets.CONTAINER_REGISTRY }}
+
+            if [ $(docker ps -q -f name=server) ]; then
+              docker stop server
+              docker rm server
+            fi
+
+            docker pull ${{ secrets.CONTAINER_REGISTRY }}/server:${{ github.sha }}
+            docker run --name server --restart unless-stopped --env-file ${{ secrets.ENV_FILE }} --network bugi -p 8080:8080 -d ${{ secrets.CONTAINER_REGISTRY }}/server:${{ github.sha }}
+            docker image prune -f

.gitignore

@@ -0,0 +1,44 @@
+HELP.md
+.gradle
+build/
+!gradle/wrapper/gradle-wrapper.jar
+!**/src/main/**/build/
+!**/src/test/**/build/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+out/
+!**/src/main/**/out/
+!**/src/test/**/out/
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+
+### VS Code ###
+.vscode/
+
+### Kotlin ###
+.kotlin
+
+### Environment ###
+.env*
+!.env.template

Dockerfile

@@ -0,0 +1,30 @@
+########################
+# 1) Build stage
+########################
+FROM gradle:8.14.3-jdk21-alpine AS builder
+
+WORKDIR /application
+
+COPY build.gradle.kts ./
+RUN gradle dependencies --no-daemon --quiet
+
+COPY src src
+RUN gradle bootJar -x test --no-daemon --quiet \
+    && java -Djarmode=layertools -jar build/libs/*.jar extract
+
+########################
+# 2) Runtime stage
+########################
+FROM gcr.io/distroless/java21-debian12:nonroot AS runtime
+
+USER nonroot
+WORKDIR /application
+
+COPY --from=builder --chown=nonroot:nonroot /application/dependencies/ ./
+COPY --from=builder --chown=nonroot:nonroot /application/snapshot-dependencies/ ./
+COPY --from=builder --chown=nonroot:nonroot /application/spring-boot-loader/ ./
+COPY --from=builder --chown=nonroot:nonroot /application/application/ ./
+
+EXPOSE 8080
+
+ENTRYPOINT ["java", "-XX:+UseG1GC", "-XX:+UseContainerSupport", "-XX:MaxRAMPercentage=75.0", "-Duser.timezone=Asia/Seoul", "-Dspring.profiles.active=production", "org.springframework.boot.loader.launch.JarLauncher"]

build.gradle.kts

@@ -0,0 +1,81 @@
+plugins {
+    kotlin("jvm") version "1.9.25"
+    kotlin("plugin.jpa") version "1.9.25"
+    kotlin("plugin.spring") version "1.9.25"
+    id("org.springframework.boot") version "3.4.11"
+    id("io.spring.dependency-management") version "1.1.7"
+}
+
+group = "com.github.kusitms_bugi"
+version = "0.0.1-SNAPSHOT"
+
+java {
+    toolchain {
+        languageVersion = JavaLanguageVersion.of(21)
+    }
+}
+
+kotlin {
+    compilerOptions {
+        freeCompilerArgs.addAll("-Xjsr305=strict")
+    }
+}
+
+springBoot {
+    buildInfo()
+}
+
+repositories {
+    mavenCentral()
+}
+
+dependencies {
+    kotlin()
+    web()
+    database()
+    security()
+    documentation()
+    other()
+    testing()
+}
+
+fun DependencyHandlerScope.kotlin() {
+    implementation("com.fasterxml.jackson.module:jackson-module-kotlin")
+    implementation("org.jetbrains.kotlin:kotlin-reflect")
+}
+
+fun DependencyHandlerScope.web() {
+    implementation("org.springframework.boot:spring-boot-starter-web")
+    implementation("org.springframework.boot:spring-boot-starter-thymeleaf")
+    implementation("org.springframework.boot:spring-boot-starter-validation")
+}
+
+fun DependencyHandlerScope.database() {
+    implementation("org.springframework.boot:spring-boot-starter-data-jpa")
+    implementation("org.springframework.boot:spring-boot-starter-data-redis")
+    implementation("org.flywaydb:flyway-core")
+    implementation("org.flywaydb:flyway-database-postgresql")
+    runtimeOnly("org.postgresql:postgresql")
+}
+
+fun DependencyHandlerScope.security() {
+    implementation("org.springframework.boot:spring-boot-starter-security")
+    implementation("io.jsonwebtoken:jjwt-api:0.12.6")
+    runtimeOnly("io.jsonwebtoken:jjwt-impl:0.12.6")
+    runtimeOnly("io.jsonwebtoken:jjwt-jackson:0.12.6")
+}
+
+fun DependencyHandlerScope.documentation() {
+    implementation("org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.13")
+}
+
+fun DependencyHandlerScope.other() {
+    implementation("org.springframework.boot:spring-boot-starter-actuator")
+    implementation("org.springframework.boot:spring-boot-starter-mail")
+}
+
+fun DependencyHandlerScope.testing() {
+    testImplementation("org.springframework.boot:spring-boot-starter-test")
+    testImplementation("org.jetbrains.kotlin:kotlin-test-junit5")
+    testRuntimeOnly("org.junit.platform:junit-platform-launcher")
+}

gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,7 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
+networkTimeout=10000
+validateDistributionUrl=true
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists