merge to main

.github/workflows/gradle.yml

@@ -71,6 +71,29 @@ jobs:
           push: true
           tags: ${{ secrets.DOCKER_USERNAME }}/nginx
 
+      - name: set target IP
+        run: |
+          STATUS=$(curl -o /dev/null -w "%{http_code}" "http://${{ secrets.EC2_HOST }}/actuator/health")
+          echo $STATUS
+          if [ $STATUS = 200 ]; then
+            CURRENT_UPSTREAM=$(curl -s "http://${{ secrets.EC2_HOST }}/env")
+          else
+            CURRENT_UPSTREAM=green
+          fi
+          echo CURRENT_UPSTREAM=$CURRENT_UPSTREAM >> $GITHUB_ENV
+          if [ $CURRENT_UPSTREAM = blue ]; then
+            echo "CURRENT_PORT=8080" >> $GITHUB_ENV
+            echo "STOPPED_PORT=8081" >> $GITHUB_ENV
+            echo "TARGET_UPSTREAM=green" >> $GITHUB_ENV
+          elif [ $CURRENT_UPSTREAM = green ]; then
+            echo "CURRENT_PORT=8081" >> $GITHUB_ENV
+            echo "STOPPED_PORT=8080" >> $GITHUB_ENV
+            echo "TARGET_UPSTREAM=blue" >> $GITHUB_ENV
+          else
+            echo "error"
+            exit 1
+          fi
+
       # ssh 접근 후 docker 이미지 pull 및 컨테이너 재시작
       - name: executing remote ssh commands using password
         uses: appleboy/ssh-action@master
@@ -85,10 +108,50 @@ jobs:
             echo "${{ secrets.ENV }}" | sudo tee .env > /dev/null
 
             sudo curl -o docker-compose.yml https://raw.githubusercontent.com/ewha-exhibition/Backend/main/docker-compose.yml
+            sudo curl -o docker-compose-blue.yml https://raw.githubusercontent.com/ewha-exhibition/Backend/main/docker-compose-blue.yml
+            sudo curl -o docker-compose-green.yml https://raw.githubusercontent.com/ewha-exhibition/Backend/main/docker-compose-green.yml
 
             sudo chmod 666 /var/run/docker.sock
-            sudo docker rm -f $(docker ps -qa)
+
             sudo docker pull ${{ secrets.DOCKER_USERNAME }}/backend
-            sudo docker pull ${{ secrets.DOCKER_USERNAME }}/nginx
-            docker compose -f docker-compose.yml --env-file .env up -d
+            docker compose -f docker-compose-${{env.TARGET_UPSTREAM}}.yml --env-file .env up -d
             docker image prune -f
+
+      - name: Check deploy server URL
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.EC2_HOST }}
+          username: ubuntu
+          key: ${{ secrets.EC2_KEY }}
+          script: |
+            set -e
+            for i in {1..10}; do
+              echo "[$i] health check..."
+              if curl -f http://localhost:${{ env.STOPPED_PORT }}/actuator/health > /dev/null 2>&1; then
+                echo "health check success"
+                exit 0
+              fi
+              echo "health check failed, retrying in 5s..."
+              sleep 5
+            done
+            echo "health check failed after 10 attempts"
+            exit 1
+
+      - name: Change nginx upstream
+        uses: appleboy/ssh-action@master
+        with:
+          username: ubuntu
+          host: ${{ secrets.EC2_HOST }}
+          key: ${{ secrets.EC2_KEY }}
+          script: |
+            sudo docker exec -i nginx bash -c 'echo "set \$service_url ${{ env.TARGET_UPSTREAM }};" > /etc/nginx/conf.d/service-env.inc && nginx -s reload' 
+
+      - name: Stop current server
+        uses: appleboy/ssh-action@master
+        with:
+          username: ubuntu
+          host: ${{ secrets.EC2_HOST }}
+          key: ${{ secrets.EC2_KEY }}
+          script: |
+            sudo docker stop ${{env.CURRENT_UPSTREAM}}
+            sudo docker rm ${{env.CURRENT_UPSTREAM}}

Dockerfile

@@ -1,4 +1,5 @@
 FROM eclipse-temurin:17-jdk
+WORKDIR /app
 # (중요) cgroup 리소스 감지 비활성화
 ENV JAVA_TOOL_OPTIONS="-XX:-UseContainerSupport"
 
@@ -8,7 +9,12 @@ ENV SPRING_AUTOCONFIGURE_EXCLUDE="org.springframework.boot.actuate.autoconfigure
 # (중요) ProcessorMetrics 바인더 비활성화
 ENV MANAGEMENT_METRICS_BINDERS_PROCESSOR_ENABLED="false"
 
+WORKDIR /app
+
 EXPOSE 80
-ARG JAR_FILE=/build/libs/*.jar
+ARG JAR_FILE=build/libs/*.jar
+ARG PROFILES
+ARG ENV
 COPY ${JAR_FILE} app.jar
-ENTRYPOINT ["java","-jar","-Duser.timezone=Asia/Seoul","-Dspring.profiles.active=prod","/app.jar"]
+
+ENTRYPOINT ["java","-jar","-Duser.timezone=Asia/Seoul","-Dspring.profiles.active=prod","/app/app.jar"]

config/nginx/default.conf

@@ -1,12 +1,38 @@
-server {
-    listen 80;
-    listen [::]:80;
+upstream blue {
+	server blue:8080;
+}
+
+upstream green {
+	server green:8080;
+}
 
-    location / {
-      proxy_set_header        Host $host;
-      proxy_pass              http://backend:8080/;
-      proxy_read_timeout      90;
+server {
+	listen 80;
+	listen [::]:80;
+
+	include /etc/nginx/conf.d/service-env.inc;
 
-      ## try_files $uri $uri/ =404;
+	location = /env {
+	default_type text/plain;
+	return 200 "service_url";
     }
-}
+
+	location / {
+		proxy_pass http://$service_url;
+
+		proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header Host $http_host;
+
+		root /usr/share/nginx/html;
+		index index.html index.htm;
+	}
+
+	error_page 500 502 503 504 /50x.html;
+	location = /50x.html {
+		root /usr/share/nginx/html;
+	}
+}
+
+
+

docker-compose-blue.yml

@@ -0,0 +1,19 @@
+version: '3.8'
+
+services:
+  blue:
+    image: nokmaster/backend
+    container_name: blue
+    ports:
+      - "8080:8080"
+    env_file:
+      - .env
+    environment:
+      - PROFILES=blue
+      - ENV=blue
+    networks:
+      - nok-network
+
+networks:
+  nok-network:
+    external: true

docker-compose-green.yml

@@ -0,0 +1,19 @@
+version: '3.8'
+
+services:
+  green:
+    image: nokmaster/backend
+    container_name: green
+    ports:
+      - "8081:8080"
+    env_file:
+      - .env
+    environment:
+      - PROFILES=green
+      - ENV=green
+    networks:
+      - nok-network
+
+networks:
+  nok-network:
+    external: true

docker-compose.yml

@@ -1,19 +1,16 @@
-version: "3"
-
+version: '3.8'
 services:
-  backend:
-    image: nokmaster/backend
-    container_name: backend
-    hostname: backend
-    env_file:
-      - .env
-    expose:
-      - "8080"
-
   nginx:
     image: nokmaster/nginx
-    depends_on:
-      - backend
+    container_name: nginx
     restart: always
     ports:
-      - "80:80"
+      - "80:80"
+    volumes:
+      - ./nginx/conf.d:/etc/nginx/conf.d
+    networks:
+      - nok-network
+
+networks:
+  nok-network:
+    name: nok-network

src/main/java/com/example/tikitaka/global/config/SecurityConfig.java

@@ -54,7 +54,7 @@ public PasswordEncoder passwordEncoder() {
     };
 
     private final String[] ActuatorPatterns = {
-            "/actuator/health"
+            "/actuator/health", "/env"
     };
 
     private final String[] GetPermittedPatterns = {

src/main/resources/application.yml

@@ -4,7 +4,12 @@ spring:
       max-file-size: 10MB
       max-request-size: 10MB
   profiles:
-    active: prod
+    active: blue
+    group:
+      local: local
+      blue: blue, prod
+      green: green, prod
+
   security:
     oauth2:
       client:
@@ -67,7 +72,26 @@ logging:
     org.hibernate.orm.jdbc.bind: trace
     com.zaxxer.hikari: DEBUG
 
-app:
-  cookie:
-    secure: false
-    same-site: Lax
+---
+spring:
+  config:
+    activate:
+      on-profile: blue
+
+server:
+  port: 8080
+  serverAddress: \${SERVER_PROD_URL}
+
+serverName: blue_server
+---
+spring:
+  config:
+    activate:
+      on-profile: green
+
+server:
+  port: 8080
+  serverAddress: \${SERVER_PROD_URL}
+
+serverName: green_server
+---