[Deploy] 1차 배포

.dockerignore

@@ -0,0 +1,9 @@
+.git
+.gitignore
+.gradle
+build
+out
+**/node_modules
+**/.idea
+**/*.iml
+**/.DS_Store

.github/ISSUE_TEMPLATE/bug-issue.md

@@ -0,0 +1,25 @@
+---
+name: BUG ISSUE
+about: 버그 관련 이슈
+title: "[BUG] "
+labels: "\U0001F41E Bug"
+assignees: ''
+
+---
+
+## 🐛 Description
+> 버그에 대해 간단하게 설명해주세요.
+
+
+
+## ✏️ Bug Occur
+> Given-When-Then 형식으로 서술해주세요.
+
+
+
+## 👀 Expected Result
+> 예상했던 정상 결과에 대해 설명해주세요.
+
+
+
+## 📢 Notes

.github/ISSUE_TEMPLATE/feature-issue.md

@@ -0,0 +1,20 @@
+---
+name: FEATURE ISSUE
+about: 기능 관련 이슈
+title: "[FEATURE]"
+labels: "✨ Feature"
+assignees: ''
+
+---
+
+## 🚀 Description
+> 작업 내용에 대해 간단하게 설명해주세요.
+
+
+
+## ✅ TODO
+- [ ] todo
+- [ ] todo
+
+
+## 📢 Notes

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,13 @@
+## 📌 Related Issue
+> #이슈번호
+
+
+## 🚀 Description
+> 작업 내용에 대해 간단하게 설명해주세요.
+
+
+## 📸 Screenshot
+
+
+## 📢 Notes
+> 리뷰어가 특별히 봐주었으면 하는 부분이 있다면 작성해주세요.

.github/workflows/release-deploy.yml

@@ -0,0 +1,87 @@
+name: Release Deploy
+
+on:
+  push:
+    branches: ["release"]
+  workflow_dispatch: {}
+
+env:
+  AWS_REGION: us-west-2
+  ACCOUNT_ID: 590184104064
+  ECR_REPOSITORY: popcong-server
+  REGISTRY: ${{ env.ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com
+  IMAGE_TAG: ${{ github.sha }}
+
+concurrency:
+  group: release-deploy
+  cancel-in-progress: true
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Login to Amazon ECR
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build & Push (linux/amd64)
+        uses: docker/build-push-action@v6
+        with:
+          platforms: linux/amd64
+          push: true
+          context: .
+          file: ./Dockerfile
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }}
+            ${{ env.REGISTRY }}/${{ env.ECR_REPOSITORY }}:latest
+
+  deploy:
+    needs: build-and-push
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    steps:
+      - name: Connect & Deploy on EC2
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.EC2_HOST }}
+          username: ${{ secrets.EC2_USER }}
+          key: ${{ secrets.EC2_SSH_KEY }}
+          script: |
+            set -euo pipefail
+
+            AWS_REGION="${{ env.AWS_REGION }}"
+            ACCOUNT_ID="${{ env.ACCOUNT_ID }}"
+            REGISTRY="${ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com"
+
+            echo "[EC2] ECR 로그인"
+            aws ecr get-login-password --region "$AWS_REGION" | docker login --username AWS --password-stdin "$REGISTRY"
+
+            echo "[EC2] 디렉토리 이동"
+            cd ~/popcong
+
+            echo "[EC2] 최신 이미지 Pull"
+            docker compose pull
+
+            echo "[EC2] 재기동"
+            docker compose up -d --remove-orphans
+
+            echo "[EC2] 상태 확인"
+            docker compose ps
+            docker ps

.gitignore

@@ -0,0 +1,53 @@
+HELP.md
+.gradle
+build/
+!gradle/wrapper/gradle-wrapper.jar
+!**/src/main/**/build/
+!**/src/test/**/build/
+src/main/generated/
+build/generated/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+out/
+!**/src/main/**/out/
+!**/src/test/**/out/
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+
+### VS Code ###
+.vscode/
+
+### apple ###
+.DS_Store
+._.DS_Store
+**/.DS_Store
+**/._.DS_Store
+
+### yml ###
+src/main/resources/application-local.yml
+src/main/resources/application-prod.yml
+src/main/resources/application-secret.yml
+
+### GCP ###
+src/main/resources/popcong-c9addd5f509d.json

Dockerfile

@@ -0,0 +1,57 @@
+# amazoncorretto:21-alpine 이미지를 베이스로 사용 / 컨테이너 내부 작업 디렉토리는 app으로 함
+FROM amazoncorretto:21-alpine AS builder
+WORKDIR /app
+
+# Gradle 캐시 최적화를 위한 복사
+COPY gradlew gradle.properties* settings.gradle* build.gradle* /app/
+COPY gradle /app/gradle
+
+# Gradle Wrapper 실행 권한 부여 및 버전 확인
+RUN chmod +x gradlew && ./gradlew --version
+
+# 실제 소스코드 복사
+COPY . /app
+
+# 이미지 빌드
+RUN ./gradlew clean bootJar -x test
+
+# Spring Boot layertools로 레이어 추출
+RUN java -Djarmode=layertools -jar $(find build/libs -name "*.jar" | head -n 1) extract --destination /app/layers
+
+# Runtime
+# 런타임에서도 같은 openjdk 이미지 사용
+FROM amazoncorretto:21-alpine
+
+# 일반 사용자로 실행
+RUN addgroup -S popcong && adduser -S popcong -G popcong -u 1001
+
+# 런타임 작업 디렉토리 지정
+WORKDIR /app
+
+# Spring Boot layertools 사용한 경우 설정하는 부분
+# 의존성 레이어
+COPY --from=builder /app/layers/dependencies/ ./
+# Spring Boot 런처 레이어
+COPY --from=builder /app/layers/spring-boot-loader/ ./
+# 스냅샷 의존성 레이어
+COPY --from=builder /app/layers/snapshot-dependencies/ ./
+# 애플리케이션 코드 레이어: 가장 자주 바뀌는 부분
+COPY --from=builder /app/layers/application/ ./
+
+# 한국 환경 기본 환경변수 설정
+ENV TZ=Asia/Seoul \
+    LANG=ko_KR.UTF-8 \
+    LANGUAGE=ko_KR:ko:en \
+    LC_ALL=ko_KR.UTF-8 \
+    SPRING_PROFILES_ACTIVE=prod \
+    SERVER_PORT=8080 \
+    JAVA_OPTS="-XX:MaxRAMPercentage=75 -XX:InitialRAMPercentage=50 -Dfile.encoding=UTF-8 -Duser.timezone=Asia/Seoul"
+
+# 컨테이너에서 노출할 포트
+EXPOSE 8080
+
+# root가 아닌 spring 사용자로 실행
+USER popcong
+
+# JarLauncher로 레이어 디렉토리 구조에 맞춰 앱 부팅 (Spring Boot layertools 사용한 경우)
+ENTRYPOINT ["sh","-c","java $JAVA_OPTS -cp /app org.springframework.boot.loader.launch.JarLauncher"]

build.gradle

@@ -0,0 +1,109 @@
+plugins {
+	id 'java'
+	id 'org.springframework.boot' version '3.5.4'
+	id 'io.spring.dependency-management' version '1.1.7'
+}
+
+group = 'popcong'
+version = '0.0.1-SNAPSHOT'
+
+java {
+	toolchain {
+		languageVersion = JavaLanguageVersion.of(21)
+	}
+}
+
+configurations {
+	compileOnly {
+		extendsFrom annotationProcessor
+	}
+}
+
+repositories {
+	mavenCentral()
+}
+
+dependencies {
+	// Dev
+	developmentOnly 'org.springframework.boot:spring-boot-devtools'
+	annotationProcessor 'org.projectlombok:lombok'
+	compileOnly 'org.projectlombok:lombok'
+	annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'
+
+	// Web
+	implementation 'org.springframework.boot:spring-boot-starter-web'
+
+	// Security
+	implementation 'org.springframework.boot:spring-boot-starter-security'
+	testImplementation 'org.springframework.security:spring-security-test'
+
+	// JWT
+	implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
+	implementation 'io.jsonwebtoken:jjwt-impl:0.11.5'
+	implementation 'io.jsonwebtoken:jjwt-jackson:0.11.5'
+
+	// OAuth2
+	implementation 'org.springframework.boot:spring-boot-starter-oauth2-resource-server'
+	implementation 'org.springframework.boot:spring-boot-starter-oauth2-client'
+
+	// Database
+	implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
+	runtimeOnly 'com.mysql:mysql-connector-j'
+
+	// QueryDSL
+	implementation 'com.querydsl:querydsl-jpa:5.0.0:jakarta'
+	annotationProcessor 'com.querydsl:querydsl-apt:5.0.0:jakarta'
+	annotationProcessor 'jakarta.annotation:jakarta.annotation-api:2.1.1'
+	annotationProcessor 'jakarta.persistence:jakarta.persistence-api:3.1.0'
+
+	// Test
+	testImplementation 'org.springframework.boot:spring-boot-starter-test'
+	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+
+	// HealthCheck
+	implementation 'org.springframework.boot:spring-boot-starter-actuator'
+
+	// Springdoc
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.7.0'
+
+	// ModelMapper
+	implementation 'org.modelmapper:modelmapper:2.4.2'
+
+	// Validation
+	implementation 'jakarta.validation:jakarta.validation-api:3.1.0'
+
+	//AWS
+	implementation platform('com.amazonaws:aws-java-sdk-bom:1.12.700')
+	implementation 'com.amazonaws:aws-java-sdk-s3'   // S3
+	implementation 'com.amazonaws:aws-java-sdk-sts'
+
+	// GCP (Google Drive)
+	implementation 'com.google.guava:guava:32.1.0-jre'
+	implementation 'com.google.http-client:google-http-client:1.41.8'
+	implementation 'com.google.http-client:google-http-client-jackson2:1.41.8'
+	implementation 'com.google.api-client:google-api-client:2.7.2' // Google API Client
+	implementation 'com.google.apis:google-api-services-drive:v3-rev20250511-2.0.0' // Google Drive
+	implementation 'com.google.auth:google-auth-library-oauth2-http:1.20.0' // Google Auth
+}
+
+// Q타입 엔티티가 생성될 경로
+def generated = 'src/main/generated'
+
+
+// compile시 Q타입 경로에 파일 생성
+tasks.withType(JavaCompile).configureEach {
+	options.generatedSourceOutputDirectory.set(file(generated))
+}
+
+sourceSets {
+	main.java.srcDirs += [ generated ]
+}
+
+// clean 시 Q타입 삭제
+clean {
+	delete file(generated)
+}
+
+tasks.named('test') {
+	useJUnitPlatform()
+}

gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,7 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
+networkTimeout=10000
+validateDistributionUrl=true
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists