Deploy

.github/workflows/deploy.yml

@@ -0,0 +1,93 @@
+name: Scoopadive Deploy to Lightsail
+
+on:
+  push:
+    branches:
+      - deploy
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with: 
+          submodules: false
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Log in to DockerHub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          push: true
+          tags: ${{ secrets.DOCKERHUB_USERNAME }}/scoopadive:latest
+          build-args: |
+            BUILDKIT_INLINE_CACHE=1
+          no-cache: true
+
+      - name: SSH and deploy using docker-compose
+        uses: appleboy/ssh-action@v1.0.0
+        with:
+          host: ${{ secrets.LIGHTSAIL_HOST }}
+          username: ubuntu
+          key: ${{ secrets.LIGHTSAIL_SSH_KEY }}
+
+          script: |
+            echo "==> 이동: /home/ubuntu/Backend"
+            cd /home/ubuntu/Backend
+
+            echo "==> 환경변수 파일 생성 (.env)"
+            cat <<EOF > .env
+            GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }}
+            GOOGLE_REDIRECT=${{ secrets.GOOGLE_REDIRECT }}
+            GOOGLE_CALLBACK_URI=${{ secrets.GOOGLE_CALLBACK_URI }}
+            GOOGLE_SECRET=${{ secrets.GOOGLE_SECRET }}
+
+            AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}
+            AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}
+            AWS_STORAGE_BUCKET_NAME=${{ secrets.AWS_STORAGE_BUCKET_NAME }}
+            AWS_S3_REGION_NAME=${{ secrets.AWS_S3_REGION_NAME }}
+            AWS_S3_SIGNATURE_VERSION=${{ secrets.AWS_S3_SIGNATURE_VERSION }}
+
+            WP_CLIENT_ID=${{ secrets.WP_CLIENT_ID }}
+            WP_CLIENT_SECRET=${{ secrets.WP_CLIENT_SECRET }}
+            WP_REDIRECT_URI=${{ secrets.WP_REDIRECT_URI }}
+            WP_REDIRECT_URI_SWAGGER=${{ secrets.WP_REDIRECT_URI_SWAGGER }}
+
+            DB_NAME=${{ secrets.DB_NAME }}
+            DB_USER=${{ secrets.DB_USER }}
+            DB_PASSWORD=${{ secrets.DB_PASSWORD }}
+            DB_HOST=${{ secrets.DB_HOST }}
+            DB_PORT=${{ secrets.DB_PORT }}
+
+            SECRET_KEY=${{ secrets.SECRET_KEY }}
+
+            OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }}
+
+            FISHIAL_CLIENT_ID=${{ secrets.FISHIAL_CLIENT_ID }}
+            FISHIAL_CLIENT_SECRET=${{ secrets.FISHIAL_CLIENT_SECRET }}
+
+            EOF
+
+            echo "==> 최신 이미지 Pull"
+            sudo docker-compose pull web
+
+            echo "==> 기존 컨테이너 중지 및 제거"
+            sudo docker-compose down
+
+            echo "==> 최신 이미지 기반 컨테이너 다시 실행"
+            sudo docker-compose up -d
+
+            echo "==> 마이그레이션 실행"
+            sudo docker-compose exec -T web python manage.py migrate
+
+            echo "✅ 배포 완료!"

.gitignore

@@ -0,0 +1,19 @@
+db.sqlite3
+.env
+secrets.json
+
+# Python 관련 캐시 파일들
+__pycache__/
+*.pyc
+*.pyo
+
+# Django Migrations — init 파일은 포함하고, 나머지만 제외
+**/migrations/*.pyc
+**/migrations/*.pyo
+**/migrations/__pycache__/
+!**/migrations/__init__.py
+
+# Visualized Graphviz Files
+*.dot
+*.png
+swagger.html

Dockerfile

@@ -0,0 +1,35 @@
+FROM python:3.11-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /scoopadive
+
+# -----------------------------
+# 시스템 패키지 설치
+# -----------------------------
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    libpq-dev \
+    locales \
+ && rm -rf /var/lib/apt/lists/*
+
+# -----------------------------
+# UTF-8 locale 설정
+# -----------------------------
+RUN sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen \
+ && locale-gen
+
+ENV LANG=en_US.UTF-8
+ENV LANGUAGE=en_US:en
+ENV LC_ALL=en_US.UTF-8
+
+# -----------------------------
+COPY requirements.txt /scoopadive/
+RUN pip install --upgrade pip && pip install -r requirements.txt
+
+COPY . /scoopadive/
+
+EXPOSE 8000
+
+CMD ["gunicorn", "scoopadive.wsgi:application", "-k","uvicorn.workers.UvicornWorker", "--workers", "1","--bind", "0.0.0.0:8000"]

README.md

@@ -1 +1,3 @@
-# Backend
+# System Architecture
+
+<img width="4865" height="1971" alt="scoopadive_stack_readme" src="https://github.com/user-attachments/assets/1d763476-7b90-4879-b021-7438478ffcad" />

accounts/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

accounts/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class AccountsConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "accounts"

accounts/models.py

@@ -0,0 +1,3 @@
+from django.db import models
+
+# Create your models here.

accounts/tests.py

@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.

accounts/urls.py

@@ -0,0 +1,10 @@
+
+from django.urls import path, include
+from .views import GoogleLoginView, GoogleCallbackView
+
+app_name = "accounts"
+
+urlpatterns = [
+    path('google/login/', GoogleLoginView.as_view(), name='google_login'),
+    path('google/callback/', GoogleCallbackView.as_view(), name='google_callback'),
+]

accounts/views.py

@@ -0,0 +1,116 @@
+import requests
+from django.http import JsonResponse
+from django.shortcuts import redirect
+from rest_framework.views import APIView
+from rest_framework import permissions
+from rest_framework_simplejwt.tokens import RefreshToken
+from allauth.socialaccount.models import SocialAccount
+from auths.models import User
+from scoopadive.settings import GOOGLE_REDIRECT, GOOGLE_CLIENT_ID, GOOGLE_CALLBACK_URI, GOOGLE_SECRET
+
+FRONTEND_URL = "https://scoopadive.com"  # 메인 페이지 URL
+
+
+# --------------------------
+# 1. 구글 로그인 시작
+# --------------------------
+class GoogleLoginView(APIView):
+    permission_classes = [permissions.AllowAny]
+
+    def get(self, request):
+        state = "swagger" if request.GET.get("swagger") == "1" else ""
+
+        auth_url = (
+            f"{GOOGLE_REDIRECT}?response_type=code"
+            f"&client_id={GOOGLE_CLIENT_ID}"
+            f"&redirect_uri={GOOGLE_CALLBACK_URI}"
+            f"&scope=email%20profile%20openid"
+            f"&access_type=offline"
+            f"&prompt=consent"
+        )
+        if state:
+            auth_url += f"&state={state}"   # 👈 여기 추가
+        return redirect(auth_url)
+
+
+
+# --------------------------
+# 2. 구글 OAuth 콜백
+# --------------------------
+class GoogleCallbackView(APIView):
+    permission_classes = [permissions.AllowAny]
+
+    def get(self, request):
+        code = request.GET.get("code")
+        state = request.GET.get("state")
+
+        if not code:
+            return redirect(f"{FRONTEND_URL}/login?error=auth_code_missing")
+
+        # 1️⃣ 구글 토큰 요청
+        token_data = {
+            "code": code,
+            "client_id": GOOGLE_CLIENT_ID,
+            "client_secret": GOOGLE_SECRET,
+            "redirect_uri": GOOGLE_CALLBACK_URI,
+            "grant_type": "authorization_code",
+        }
+        token_req = requests.post("https://oauth2.googleapis.com/token", data=token_data)
+        if token_req.status_code != 200:
+            return redirect(f"{FRONTEND_URL}/login?error=token_request_failed")
+
+        access_token = token_req.json().get("access_token")
+        if not access_token:
+            return redirect(f"{FRONTEND_URL}/login?error=no_access_token")
+
+        # 2️⃣ 구글 유저 정보 가져오기
+        user_info_req = requests.get(
+            "https://www.googleapis.com/oauth2/v1/userinfo",
+            params={"access_token": access_token},
+        )
+        if user_info_req.status_code != 200:
+            return redirect(f"{FRONTEND_URL}/login?error=userinfo_request_failed")
+
+        user_info = user_info_req.json()
+        email = user_info.get("email")
+        username = user_info.get("name") or email.split("@")[0]
+        uid = user_info.get("id")
+        if not email:
+            return redirect(f"{FRONTEND_URL}/login?error=no_email")
+
+        # 3️⃣ User 생성 or 가져오기
+        user, _ = User.objects.get_or_create(
+            email=email,
+            defaults={"username": username, "is_active": True}
+        )
+
+        # 4️⃣ SocialAccount 연결
+        SocialAccount.objects.get_or_create(
+            provider="google",
+            uid=uid,
+            defaults={"user": user, "extra_data": user_info}
+        )
+
+        # 5️⃣ JWT 발급
+        refresh = RefreshToken.for_user(user)
+        access_token_str = str(refresh.access_token)
+
+        # 6️⃣ Swagger 모드면 JSON 반환
+        if state == "swagger":  # 👈 Swagger 모드일 때만 JSON
+            return JsonResponse({
+                "access": access_token_str,
+                "refresh": str(refresh),
+                "email": email,
+                "username": username,
+                "id": user.id,
+            })
+
+        # 7️⃣ 기본은 프론트엔드로 redirect
+        frontend_redirect_url = (
+            f"{FRONTEND_URL}/oauth2/redirect?"
+            f"token={access_token_str}"
+            f"&email={email}"
+            f"&name={username}"
+            f"&id={user.id}"
+        )
+        return redirect(frontend_redirect_url)