feat: nginx renuseport #50
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: backend-push | |
| on: | |
| push: | |
| branches: [ "main", "feature/#745" ] | |
| paths: | |
| - 'server/**' | |
| - '.github/workflows/**' | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| shell: bash | |
| working-directory: ./server | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: CheckOut | |
| uses: actions/checkout@v4 | |
| with: | |
| token: ${{secrets.CONFIG_SUBMODULE_TOKEN}} | |
| submodules: true | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Test with Gradle Wrapper | |
| run: ./gradlew clean build | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Set up Docker BuildX | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push | |
| run: | | |
| docker buildx build --platform linux/arm64 -t \ | |
| ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE_BE_PROD }} --push . | |
| deploy: | |
| needs: build | |
| strategy: | |
| matrix: | |
| runner: [ prod-1 , prod-2 ] | |
| runs-on: [ self-hosted, '${{ matrix.runner }}' ] | |
| steps: | |
| - name: Create Docker network if not exists | |
| run: | | |
| NETWORK_NAME="haengdong_network" | |
| if ! sudo docker network ls --format '{{.Name}}' | grep -w "$NETWORK_NAME" > /dev/null 2>&1; then | |
| echo "Creating Docker network $NETWORK_NAME..." | |
| sudo docker network create $NETWORK_NAME | |
| else | |
| echo "Docker network $NETWORK_NAME already exists." | |
| fi | |
| - name: Docker Image pull | |
| run: sudo docker pull ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE_BE_PROD }} | |
| - name: Check running container and determine the next port | |
| id: check-port | |
| run: | | |
| echo "Checking if any container is running on ports 8080 or 8081..." | |
| CURRENT_PORT=$(sudo docker ps --format "{{.Names}}" | grep "haengdong-backend" | grep -o '8080\|8081' || echo "") | |
| echo "CURRENT_PORT on port $CURRENT_PORT." | |
| # CURRENT_PORTκ° λΉ λ¬Έμμ΄μ΄κ±°λ 8081μΈ κ²½μ° | |
| if [ "$CURRENT_PORT" == "8081" ]; then | |
| echo "IF CURRENT_PORT : null or 8081" | |
| NEXT_PORT=8080 | |
| else | |
| echo "IF CURRENT_PORT : 8080" | |
| NEXT_PORT=8081 | |
| fi | |
| echo "Next container will run on port $NEXT_PORT." | |
| echo "NEXT_PORT=$NEXT_PORT" >> $GITHUB_ENV | |
| echo "CURRENT_PORT=$CURRENT_PORT" >> $GITHUB_ENV | |
| - name: Run new container on the alternate port | |
| run: | | |
| NETWORK_NAME="haengdong_network" | |
| echo "Running new container on port $NEXT_PORT..." | |
| sudo docker run -d \ | |
| --name haengdong-backend-$NEXT_PORT \ | |
| --network $NETWORK_NAME \ | |
| -p $NEXT_PORT:8080 \ | |
| -e SPRING_PROFILES_ACTIVE=prod \ | |
| -v log-volume:/app/logs \ | |
| ${{ secrets.DOCKER_USERNAME }}/${{ secrets.DOCKER_IMAGE_BE_PROD }} | |
| - name: Health check the new container | |
| run: | | |
| echo "Performing health check for the new container on port $NEXT_PORT..." | |
| MAX_ATTEMPTS=30 | |
| SLEEP_INTERVAL=2 | |
| ATTEMPT=1 | |
| while [ $ATTEMPT -le $MAX_ATTEMPTS ]; do | |
| HEALTH_STATUS=$(curl -s http://localhost:$NEXT_PORT/actuator/health | sed -n 's/.*"status":"\([^"]*\)".*/\1/p') | |
| if [ "$HEALTH_STATUS" = "UP" ]; then | |
| echo "Health check passed on attempt $ATTEMPT." | |
| break | |
| else | |
| echo "Attempt $ATTEMPT: Health check status: $HEALTH_STATUS. Retrying in $SLEEP_INTERVAL seconds..." | |
| ATTEMPT=$((ATTEMPT+1)) | |
| sleep $SLEEP_INTERVAL | |
| fi | |
| if [ $ATTEMPT -gt $MAX_ATTEMPTS ]; then | |
| echo "Health check failed after $MAX_ATTEMPTS attempts. Rolling back..." | |
| sudo docker rm -f haengdong-backend-$NEXT_PORT | |
| exit 1 | |
| fi | |
| done | |
| - name: Update or create Nginx container to point to new container port | |
| run: | | |
| NGINX_CONTAINER_NAME="nginx-proxy" | |
| NETWORK_NAME="haengdong_network" | |
| NEXT_PORT=$NEXT_PORT | |
| echo "Next port is $NEXT_PORT" | |
| echo "Checking if Nginx container exists..." | |
| if sudo docker ps -a --filter "name=$NGINX_CONTAINER_NAME" --format "{{.Names}}" | grep -w $NGINX_CONTAINER_NAME; then | |
| # Nginx 컨ν μ΄λκ° μ€ν μ€μΈμ§ νμΈ | |
| if sudo docker ps --filter "name=$NGINX_CONTAINER_NAME" --format "{{.Names}}" | grep -w $NGINX_CONTAINER_NAME; then | |
| echo "Nginx container is running." | |
| else | |
| echo "Nginx container exists but is not running. Starting Nginx container..." | |
| sudo docker start $NGINX_CONTAINER_NAME | |
| echo "Nginx container started." | |
| fi | |
| # nginx-conf λλ ν 리 μμ± | |
| mkdir -p ./nginx-conf | |
| # default.conf νμΌ μμ± λλ μ λ°μ΄νΈ | |
| echo "Creating or updating default.conf..." | |
| echo "worker_shutdown_timeout 10s; | |
| server { | |
| listen 80 reuseport; | |
| location / { | |
| proxy_pass http://haengdong-backend-$NEXT_PORT:8080; | |
| proxy_set_header Host \$host; | |
| proxy_set_header X-Real-IP \$remote_addr; | |
| proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; | |
| proxy_set_header X-Forwarded-Proto \$scheme; | |
| client_max_body_size 300M; | |
| } | |
| }" > ./nginx-conf/default.conf | |
| # Nginx 컨ν μ΄λ λ΄λΆμμ μ€μ 리λ‘λ | |
| echo "Reloading Nginx configuration..." | |
| sudo docker cp ./nginx-conf/default.conf $NGINX_CONTAINER_NAME:/etc/nginx/conf.d/default.conf | |
| sudo docker exec $NGINX_CONTAINER_NAME nginx -s reload | |
| echo "Nginx configuration reloaded." | |
| else | |
| echo "Nginx container not found. Creating a new Nginx container..." | |
| # nginx-conf λλ ν 리 μμ± | |
| mkdir -p ./nginx-conf | |
| # default.conf νμΌ μμ± | |
| echo "Creating default.conf..." | |
| echo "worker_shutdown_timeout 10s; | |
| server { | |
| listen 80 reuseport; | |
| location / { | |
| proxy_pass http://haengdong-backend-$NEXT_PORT:8080; | |
| proxy_set_header Host \$host; | |
| proxy_set_header X-Real-IP \$remote_addr; | |
| proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; | |
| proxy_set_header X-Forwarded-Proto \$scheme; | |
| client_max_body_size 300M; | |
| } | |
| }" > ./nginx-conf/default.conf | |
| # μλ‘μ΄ Nginx 컨ν μ΄λ μ€ν | |
| sudo docker run -d \ | |
| --name $NGINX_CONTAINER_NAME \ | |
| --network $NETWORK_NAME \ | |
| -p 80:80 \ | |
| -v $(pwd)/nginx-conf:/etc/nginx/conf.d \ | |
| nginx | |
| echo "New Nginx container created and running." | |
| fi | |
| - name: Stop and remove the old container | |
| run: | | |
| CURRENT_PORT=$CURRENT_PORT | |
| if [ -n "$CURRENT_PORT" ]; then | |
| echo "Stopping on port $CURRENT_PORT..." | |
| sudo docker ps --filter "publish=$CURRENT_PORT" --format "{{.ID}}" | xargs sudo docker stop | |
| echo "Sleeping on port $CURRENT_PORT..." | |
| sleep 15 | |
| echo "Removing on port $CURRENT_PORT..." | |
| sudo docker ps -a --format "{{.Names}}" | grep "haengdong-backend-$CURRENT_PORT" | xargs sudo docker rm | |
| else | |
| echo "No container to stop and remove." | |
| fi | |
| - name: Remove unused Docker images | |
| run: | | |
| echo "Removing unused Docker images..." | |
| sudo docker image prune -af --filter "until=24h" | |
| echo "Unused Docker images older than 24 hours have been removed." |