deploy.yml

name: Build & Deploy 

on:
  push:
    branches:
      - main

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"
          cache: gradle

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew

      - name: Build Spring Boot
        run: ./gradlew clean bootJar

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Docker Hub Login
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build & Push Docker Image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          platforms: linux/arm64
          tags: |
            lkyoung/craweb:latest
            lkyoung/craweb:${{ github.sha }}

      - name: Deploy via SSH
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          port: ${{ secrets.SERVER_SSH_PORT }}
          key: ${{ secrets.SERVER_SSH_KEY }}
          script: |
            set -e

            cd ~/cra-web

            echo "${{ secrets.SERVER_USER_PASSWORD }}" | sudo -S docker login \
              -u ${{ secrets.DOCKERHUB_USERNAME }} \
              -p ${{ secrets.DOCKERHUB_TOKEN }}

            echo "${{ secrets.SERVER_USER_PASSWORD }}" | sudo -S docker compose up -d --pull always
            echo "${{ secrets.SERVER_USER_PASSWORD }}" | sudo -S docker logout