[SOU-421] 프로덕션 서버 무중단 배포 구현

.github/workflows/prod-cicd.yaml

@@ -1,7 +1,12 @@
 name: prod
 
 on:
-  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
 
 env:
   IMAGE_NAME: asia-northeast3-docker.pkg.dev/souzip-488211/souzip-prod-repo/souzip-api:latest
@@ -119,6 +124,11 @@ jobs:
             PROD_API_DOCS_URL=${{ secrets.PROD_API_DOCS_URL }}
             ADMIN_INITIAL_USERNAME=${{ secrets.ADMIN_INITIAL_USERNAME }}
             ADMIN_INITIAL_PASSWORD=${{ secrets.ADMIN_INITIAL_PASSWORD }}
+            NCP_ENDPOINT=${{ secrets.NCP_ENDPOINT }}
+            NCP_REGION=${{ secrets.NCP_REGION }}
+            NCP_BUCKET=${{ secrets.NCP_BUCKET }}
+            NCP_ACCESS_KEY=${{ secrets.NCP_ACCESS_KEY }}
+            NCP_SECRET_KEY=${{ secrets.NCP_SECRET_KEY }}
             EOF
 
             echo "DEPLOYER=${{ github.actor }}" >> deploy/prod/.env

deploy/prod/scripts/deploy.sh

@@ -0,0 +1,131 @@
+#!/bin/bash
+set -e
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+REGISTRY="asia-northeast3-docker.pkg.dev/souzip-488211/souzip-prod-repo/souzip-api"
+
+WORK_DIR="/home/souzip-prod/souzip"
+DEPLOY_DIR="$WORK_DIR/deploy/prod"
+
+BLUE_COMPOSE="docker-compose.blue.yaml"
+GREEN_COMPOSE="docker-compose.green.yaml"
+
+BLUE_PROJECT="souzip-blue"
+GREEN_PROJECT="souzip-green"
+
+NGINX_UPSTREAM_FILE="/etc/nginx/conf.d/upstream-souzip.conf"
+
+BLUE_PORT=8081
+GREEN_PORT=8082
+
+MAX_RETRY=6
+RETRY_INTERVAL=10
+
+cd "$WORK_DIR" || exit 1
+
+echo -e "${YELLOW}[1/7] 최신 이미지 다운로드${NC}"
+
+docker pull ${REGISTRY}:latest
+
+NEW_IMAGE=$(docker images ${REGISTRY}:latest -q)
+
+if [ -z "${NEW_IMAGE:-}" ]; then
+  echo -e "${RED}[ERROR] 이미지 다운로드 실패${NC}"
+  exit 1
+fi
+
+echo -e "${GREEN}[SUCCESS] 새 이미지: ${NEW_IMAGE}${NC}"
+
+cd "$DEPLOY_DIR" || exit 1
+
+[ -f "$NGINX_UPSTREAM_FILE" ] || {
+  echo -e "${RED}[ERROR] upstream 파일 없음${NC}"
+  exit 1
+}
+
+echo -e "${YELLOW}[2/7] 현재 active 포트 확인${NC}"
+
+CURRENT_PORT=$(grep -oE '127\.0\.0\.1:[0-9]+' "$NGINX_UPSTREAM_FILE" | cut -d: -f2 | head -n 1 || true)
+
+if [ -z "$CURRENT_PORT" ]; then
+  echo -e "${YELLOW}[WARN] upstream 없음 → 최초 배포 (blue=8081)${NC}"
+  CURRENT_PORT="none"
+fi
+
+if [ "$CURRENT_PORT" == "$BLUE_PORT" ]; then
+  TARGET="green"
+  TARGET_PORT=$GREEN_PORT
+  TARGET_PROJECT=$GREEN_PROJECT
+  TARGET_COMPOSE=$GREEN_COMPOSE
+
+  STOP_PROJECT=$BLUE_PROJECT
+  STOP_COMPOSE=$BLUE_COMPOSE
+
+else
+  TARGET="blue"
+  TARGET_PORT=$BLUE_PORT
+  TARGET_PROJECT=$BLUE_PROJECT
+  TARGET_COMPOSE=$BLUE_COMPOSE
+
+  STOP_PROJECT=$GREEN_PROJECT
+  STOP_COMPOSE=$GREEN_COMPOSE
+fi
+
+echo -e "${GREEN}[INFO] 현재:$CURRENT_PORT → 배포:$TARGET($TARGET_PORT)${NC}"
+
+echo -e "${YELLOW}[3/7] $TARGET 컨테이너 실행${NC}"
+
+docker compose -p "$TARGET_PROJECT" -f "$TARGET_COMPOSE" pull
+docker compose -p "$TARGET_PROJECT" -f "$TARGET_COMPOSE" up -d
+
+echo -e "${YELLOW}[4/7] 헬스체크 시작${NC}"
+
+RETRY_COUNT=0
+HEALTH_OK=false
+
+while [ $RETRY_COUNT -lt $MAX_RETRY ]; do
+
+  if curl -f -s --max-time 5 "http://localhost:${TARGET_PORT}/actuator/health" > /dev/null; then
+    echo -e "${GREEN}[SUCCESS] 헬스체크 성공${NC}"
+    HEALTH_OK=true
+    break
+  else
+    RETRY_COUNT=$((RETRY_COUNT + 1))
+    echo -e "${YELLOW}[RETRY] ${RETRY_COUNT}/${MAX_RETRY}${NC}"
+    sleep $RETRY_INTERVAL
+  fi
+
+done
+
+if [ "$HEALTH_OK" = false ]; then
+  echo -e "${RED}[ERROR] 헬스체크 실패${NC}"
+  docker compose -p "$TARGET_PROJECT" -f "$TARGET_COMPOSE" down
+  exit 1
+fi
+
+echo -e "${YELLOW}[5/7] nginx upstream 전환${NC}"
+
+sudo tee "$NGINX_UPSTREAM_FILE" > /dev/null <<EOF
+upstream souzip {
+    server 127.0.0.1:${TARGET_PORT};
+}
+EOF
+
+sudo nginx -t
+sudo nginx -s reload
+
+echo -e "${GREEN}[SUCCESS] nginx 전환 완료${NC}"
+
+echo -e "${YELLOW}[6/7] 이전 컨테이너 종료${NC}"
+
+docker compose -p "$STOP_PROJECT" -f "$STOP_COMPOSE" down || true
+
+echo -e "${YELLOW}[7/7] 이미지 정리${NC}"
+
+docker image prune -f || true
+
+echo -e "${GREEN}[DEPLOY SUCCESS] 완료${NC}"

src/main/resources/application-prod.yaml

@@ -1,4 +1,8 @@
 spring:
+  docker:
+    compose:
+      enabled: false
+
   datasource:
     url: ${PROD_DB_URL}
     username: ${PROD_POSTGRES_USER}

src/main/resources/db/migration/V1__init_schema.sql

@@ -11,10 +11,10 @@
 -- Name: cdb_admin; Type: SCHEMA; Schema: -; Owner: postgres
 --
 
-CREATE SCHEMA cdb_admin;
+CREATE SCHEMA IF NOT EXISTS cdb_admin;
 
 
-ALTER SCHEMA cdb_admin OWNER TO postgres;
+-- ALTER SCHEMA cdb_admin OWNER TO postgres;
 
 --
 -- Name: public; Type: SCHEMA; Schema: -; Owner: postgres
@@ -23,20 +23,20 @@ ALTER SCHEMA cdb_admin OWNER TO postgres;
 -- *not* creating schema, since initdb creates it
 
 
-ALTER SCHEMA public OWNER TO postgres;
+-- ALTER SCHEMA public OWNER TO postgres;
 
 --
 -- Name: postgis; Type: EXTENSION; Schema: -; Owner: -
 --
 
-CREATE EXTENSION IF NOT EXISTS postgis WITH SCHEMA cdb_admin;
+-- CREATE EXTENSION IF NOT EXISTS postgis WITH SCHEMA cdb_admin;
 
 
 --
 -- Name: EXTENSION postgis; Type: COMMENT; Schema: -; Owner: 
 --
 
-COMMENT ON EXTENSION postgis IS 'PostGIS geometry and geography spatial types and functions';
+-- COMMENT ON EXTENSION postgis IS 'PostGIS geometry and geography spatial types and functions';