Skip to content

Commit 6dce6ff

Browse files
junotbjunotb
authored
Merge pull request #43 from junotb/feature/2026-02-12
feat: GCP Cloud Run 배포를 위한 Docker 및 CI/CD 구성
2 parents 9bfae6a + 97dce37 commit 6dce6ff

10 files changed

Lines changed: 244 additions & 2 deletions

File tree

‎.github/workflows/deploy.yml‎

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
# main 브랜치 push 시 api, web 이미지 빌드 → ghcr.io 푸시 → Cloud Run 배포
2+
name: Deploy to Cloud Run
3+
4+
on:
5+
push:
6+
branches: [main]
7+
8+
env:
9+
GCP_REGION: ${{ secrets.GCP_REGION }}
10+
GCP_PROJECT_ID: ${{ secrets.GCP_PROJECT_ID }}
11+
GHCR_IMAGE_PREFIX: ghcr.io/${{ github.repository_owner }}
12+
13+
jobs:
14+
deploy:
15+
runs-on: ubuntu-latest
16+
permissions:
17+
contents: read
18+
id-token: write
19+
packages: write
20+
21+
steps:
22+
- name: Checkout
23+
uses: actions/checkout@v4
24+
25+
- name: Log in to GitHub Container Registry
26+
uses: docker/login-action@v3
27+
with:
28+
registry: ghcr.io
29+
username: ${{ github.actor }}
30+
password: ${{ secrets.GITHUB_TOKEN }}
31+
32+
- name: Build and push API image
33+
run: |
34+
SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-7)
35+
docker build -f api/Dockerfile -t ${{ env.GHCR_IMAGE_PREFIX }}/lms-api:$SHORT_SHA -t ${{ env.GHCR_IMAGE_PREFIX }}/lms-api:latest ./api
36+
docker push ${{ env.GHCR_IMAGE_PREFIX }}/lms-api:$SHORT_SHA
37+
docker push ${{ env.GHCR_IMAGE_PREFIX }}/lms-api:latest
38+
39+
- name: Build and push Web image
40+
run: |
41+
SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-7)
42+
docker build -f web/Dockerfile -t ${{ env.GHCR_IMAGE_PREFIX }}/lms-web:$SHORT_SHA -t ${{ env.GHCR_IMAGE_PREFIX }}/lms-web:latest ./web
43+
docker push ${{ env.GHCR_IMAGE_PREFIX }}/lms-web:$SHORT_SHA
44+
docker push ${{ env.GHCR_IMAGE_PREFIX }}/lms-web:latest
45+
46+
- name: Authenticate to GCP
47+
uses: google-github-actions/auth@v2
48+
with:
49+
credentials_json: ${{ secrets.GCP_SA_KEY }}
50+
51+
- name: Set up Cloud SDK
52+
uses: google-github-actions/setup-gcloud@v2
53+
with:
54+
project_id: ${{ secrets.GCP_PROJECT_ID }}
55+
56+
- name: Deploy API to Cloud Run
57+
run: |
58+
SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-7)
59+
gcloud run deploy lms-api \
60+
--image ${{ env.GHCR_IMAGE_PREFIX }}/lms-api:${SHORT_SHA} \
61+
--region ${{ env.GCP_REGION }} \
62+
--platform managed \
63+
--allow-unauthenticated
64+
65+
- name: Deploy Web to Cloud Run
66+
run: |
67+
SHORT_SHA=$(echo ${{ github.sha }} | cut -c1-7)
68+
gcloud run deploy lms-web \
69+
--image ${{ env.GHCR_IMAGE_PREFIX }}/lms-web:${SHORT_SHA} \
70+
--region ${{ env.GCP_REGION }} \
71+
--platform managed \
72+
--allow-unauthenticated

‎api/.dockerignore‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Gradle
2+
.gradle
3+
build
4+
5+
# IDE
6+
.idea
7+
*.iml
8+
.vscode
9+
10+
# 환경 파일 (보안)
11+
.env
12+
.env.*
13+
*.pem
14+
15+
# Git
16+
.git
17+
.gitignore
18+
19+
# 문서
20+
*.md
21+
docs

‎api/.env.example‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Database
2+
DB_URL=jdbc:postgresql://host:5432/postgres?sslmode=require
3+
DB_USERNAME=postgres
4+
DB_PASSWORD=
5+
6+
# Redis
7+
REDIS_URL=rediss://default:PASSWORD@host:6379
8+
9+
# CORS (콤마 구분, 프로덕션: 프론트엔드 Cloud Run URL)
10+
CORS_ALLOWED_ORIGINS=http://localhost:3000
11+
12+
# Video
13+
VIDEO_PROCESSOR_ENABLED=true
14+
FFMPEG_PATH=/opt/homebrew/bin/ffmpeg
15+
16+
# Gemini
17+
GOOGLE_GEMINI_API_KEY=
18+
GEMINI_MODEL=gemini-2.5-flash
19+
20+
# Session
21+
SESSION_EXPIRES_IN_DAYS=7
22+
SESSION_CACHE_TTL_SECONDS=300

‎api/.gitignore‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ bin/
2929
### Environment ###
3030
.env
3131
.env.*
32+
!.env.example
3233
*.keystore
3334
*.jks
3435

‎api/Dockerfile‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# Build stage: Gradle로 JAR 빌드
2+
FROM eclipse-temurin:21-jdk-alpine AS builder
3+
4+
WORKDIR /app
5+
6+
# Gradle wrapper 및 소스 복사
7+
COPY gradlew .
8+
COPY gradle gradle
9+
COPY build.gradle.kts settings.gradle.kts ./
10+
COPY src src
11+
12+
# Gradle 캐시 활용을 위해 의존성만 먼저 다운로드 (소스 변경 시 캐시 무효화 최소화)
13+
RUN chmod +x gradlew && ./gradlew dependencies --no-daemon || true
14+
15+
# JAR 빌드 (테스트 제외, 프로덕션 최적화)
16+
RUN ./gradlew bootJar --no-daemon -x test
17+
18+
# Runtime stage: 경량 JRE 이미지
19+
FROM eclipse-temurin:21-jre-alpine
20+
21+
WORKDIR /app
22+
23+
# 보안: root가 아닌 사용자로 실행
24+
RUN addgroup -S appgroup && adduser -S appuser -G appgroup
25+
USER appuser
26+
27+
# 빌드된 JAR 복사
28+
COPY --from=builder /app/build/libs/*.jar app.jar
29+
30+
# Spring Boot는 기본 8080 포트 사용
31+
EXPOSE 8080
32+
33+
# Cloud Run 등 컨테이너 메모리 제한에 맞춘 JVM 옵션
34+
ENTRYPOINT ["java", "-XX:MaxRAMPercentage=75.0", "-XX:+UseContainerSupport", "-jar", "app.jar"]

‎web/.dockerignore‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
# Dependencies
2+
node_modules
3+
.pnp
4+
.pnp.js
5+
6+
# Build
7+
.next
8+
out
9+
dist
10+
build
11+
12+
# IDE
13+
.idea
14+
.vscode
15+
*.swp
16+
*.swo
17+
18+
# 테스트 및 개발
19+
coverage
20+
.nyc_output
21+
__tests__
22+
*.test.ts
23+
*.test.tsx
24+
*.spec.ts
25+
*.spec.tsx
26+
jest.config.ts
27+
jest.setup.ts
28+
.eslintrc*
29+
30+
# 환경 파일 (빌드 시 주입)
31+
.env
32+
.env.*
33+
34+
# Git
35+
.git
36+
.gitignore
37+
38+
# 문서
39+
*.md
40+
README.md

‎web/.env.example‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# API
2+
NEXT_PUBLIC_API_URL=http://localhost:8080
3+
NEXT_PUBLIC_WEB_URL=http://localhost:3000
4+
5+
# Better-Auth
6+
BETTER_AUTH_SECRET=
7+
BETTER_AUTH_URL=http://localhost:3000
8+
DATABASE_URL=postgresql://user:password@host:6543/postgres

‎web/.gitignore‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ yarn-error.log*
3232

3333
# env files (can opt-in for committing if needed)
3434
.env*
35+
!.env.example
3536

3637
# prompts (Gemini 등, Git 노출 금지)
3738
prompts/

‎web/Dockerfile‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
# Build stage: Next.js 빌드
2+
FROM node:20-alpine AS builder
3+
4+
WORKDIR /app
5+
6+
# 의존성 설치 (캐시 활용, package-lock.json 있으면 npm ci 사용)
7+
COPY package.json package-lock.json* ./
8+
RUN if [ -f package-lock.json ]; then npm ci --no-audit; else npm install --no-audit; fi
9+
10+
# 소스 복사 및 빌드
11+
COPY . .
12+
RUN npm run build
13+
14+
# Runtime stage: standalone 출력 사용
15+
FROM node:20-alpine AS runner
16+
17+
WORKDIR /app
18+
19+
ENV NODE_ENV=production
20+
ENV NEXT_TELEMETRY_DISABLED=1
21+
22+
# 보안: root가 아닌 사용자로 실행
23+
RUN addgroup -g 1001 -S nodejs && adduser -S nextjs -u 1001 -G nodejs
24+
25+
# standalone 출력에서 필요한 파일만 복사
26+
COPY --from=builder /app/public ./public
27+
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
28+
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
29+
30+
USER nextjs
31+
32+
EXPOSE 3000
33+
34+
ENV PORT=3000
35+
ENV HOSTNAME="0.0.0.0"
36+
37+
CMD ["node", "server.js"]

‎web/src/constants/api.ts‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,8 @@
1-
export const API_URL = process.env.NEXT_PUBLIC_API_URL ?? "http://localhost:8080";
2-
export const AUTH_CLIENT_BASE_URL = process.env.NEXT_PUBLIC_WEB_URL ?? "http://localhost:3000";
1+
const isProd = process.env.NODE_ENV === "production";
2+
3+
/** Cloud Run 배포 후 실제 서비스 URL로 교체 (GCP Console > Cloud Run > 서비스 URL 확인) */
4+
const PROD_API_URL = "https://lms-api-xxxxx-xx.a.run.app";
5+
const PROD_WEB_URL = "https://lms-web-xxxxx-xx.a.run.app";
6+
7+
export const API_URL = isProd ? PROD_API_URL : "http://localhost:8080";
8+
export const AUTH_CLIENT_BASE_URL = isProd ? PROD_WEB_URL : "http://localhost:3000";

0 commit comments

Comments
 (0)