refactor: prod/stage 환경 nginx 블루/그린 배포 방식 도입

.github/workflows/dev-cd.yml

@@ -66,7 +66,7 @@ jobs:
           cache-from: type=registry,ref=${{ steps.image_meta.outputs.image_name }}:buildcache
           cache-to: type=registry,ref=${{ steps.image_meta.outputs.image_name }}:buildcache,mode=max
 
-      # --- 이미지 정리 (이전 Job에 있던 것) ---
+      # --- 이미지 정리 ---
       - name: Clean up old image versions from GHCR
         uses: snok/container-retention-policy@v2
         with:
@@ -87,7 +87,6 @@ jobs:
       packages: read
 
     steps:
-      # 설정 파일 전송을 위해 코드 체크아웃 (서브모듈 불필요)
       - name: Checkout config files
         uses: actions/checkout@v4
         with:
@@ -96,52 +95,83 @@ jobs:
             docs/infra-config
           sparse-checkout-cone-mode: false
 
-      # --- 설정 파일 전송 ---
       - name: Copy config files to remote
         run: |
           echo "${{ secrets.DEV_PRIVATE_KEY }}" > deploy_key.pem
           chmod 600 deploy_key.pem
-          
+
           scp -i deploy_key.pem \
             -o StrictHostKeyChecking=no \
             ./docker-compose.dev.yml \
             ${{ secrets.DEV_USERNAME }}@${{ secrets.DEV_HOST }}:/home/${{ secrets.DEV_USERNAME }}/solid-connection-dev/
 
-      # --- 서버에서 Docker Pull 및 재시작 ---
-      - name: Run deployment on server
+      - name: Blue/Green deploy
         run: |
           ssh -i deploy_key.pem \
-           -o StrictHostKeyChecking=no \
-           ${{ secrets.DEV_USERNAME }}@${{ secrets.DEV_HOST }} \
-           '
-            set -e
-
-            # 1. 환경 변수 설정 (이전 Job의 Output 사용)
-            export OWNER_LOWERCASE=$(echo "${{ github.repository_owner }}" | tr "[:upper:]" "[:lower:]")
-            export IMAGE_TAG_ONLY="${{ needs.build-and-push.outputs.image_tag }}"
-            export FULL_IMAGE_NAME="ghcr.io/${OWNER_LOWERCASE}/solid-connection-dev:${IMAGE_TAG_ONLY}"
-            export IMAGE_NAME_BASE="ghcr.io/${OWNER_LOWERCASE}/solid-connection-dev"
-
-            # 2. Pull 전 정리 (디스크 공간 확보)
-            echo "Cleaning up old tagged images (keeping last 2)..."
-            docker images "${IMAGE_NAME_BASE}" --format "{{.Tag}}" | \
-            sort -r | \
-            tail -n +3 | \
-            xargs -I {} docker rmi "${IMAGE_NAME_BASE}:{}" || true
-
-            echo "Pruning dangling images..."
-            docker image prune -f
-
-            # 3. GHCR 로그인 & Pull
-            echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
-            echo "Pulling new image: $FULL_IMAGE_NAME"
-            docker pull $FULL_IMAGE_NAME
-
-            # 4. Spring Boot 앱 재시작
-            echo "Restarting Docker Compose with tag: $IMAGE_TAG_ONLY"
-            cd /home/${{ secrets.DEV_USERNAME }}/solid-connection-dev
-            docker compose -f docker-compose.dev.yml down || true
-            OWNER_LOWERCASE=$OWNER_LOWERCASE IMAGE_TAG=$IMAGE_TAG_ONLY docker compose -f docker-compose.dev.yml up -d
-
-            echo "Deployment finished successfully."
-            '     
+            -o StrictHostKeyChecking=no \
+            ${{ secrets.DEV_USERNAME }}@${{ secrets.DEV_HOST }} \
+            '
+              set -e
+              OWNER_LOWERCASE=$(echo "${{ github.repository_owner }}" | tr "[:upper:]" "[:lower:]")
+              IMAGE_TAG_ONLY="${{ needs.build-and-push.outputs.image_tag }}"
+              FULL_IMAGE_NAME="ghcr.io/${OWNER_LOWERCASE}/solid-connection-dev:${IMAGE_TAG_ONLY}"
+              IMAGE_NAME_BASE="ghcr.io/${OWNER_LOWERCASE}/solid-connection-dev"
+              WORK_DIR="/home/${{ secrets.DEV_USERNAME }}/solid-connection-dev"
+              CONTAINER_BASE="solid-connection-dev"
+
+              # 1. Active 슬롯 확인 (upstream.conf 기준)
+              UPSTREAM_PORT=$(grep -oE "server 127\.0\.0\.1:[0-9]+" /etc/nginx/conf.d/upstream.conf 2>/dev/null | grep -oE "[0-9]+$" || echo "8081")
+              if [ "$UPSTREAM_PORT" = "8080" ]; then
+                ACTIVE_SLOT="blue"; ACTIVE_PORT=8080; NEW_SLOT="green"; NEW_PORT=8081
+              else
+                ACTIVE_SLOT="green"; ACTIVE_PORT=8081; NEW_SLOT="blue"; NEW_PORT=8080
+              fi
+              echo "Active: ${ACTIVE_SLOT}(${ACTIVE_PORT}) → Deploy: ${NEW_SLOT}(${NEW_PORT})"
+
+              # 2. MySQL 기동 확인 (블루/그린 전환 대상 아님)
+              docker compose -f docker-compose.dev.yml up -d mysql 2>/dev/null || true
+
+              # 3. Pull 전 디스크 정리 (태그 이미지 최근 2개 유지)
+              docker images "${IMAGE_NAME_BASE}" --format "{{.Tag}}" | \
+                grep -v buildcache | sort -r | tail -n +3 | \
+                xargs -I {} docker rmi "${IMAGE_NAME_BASE}:{}" 2>/dev/null || true
+              docker image prune -f
+
+              # 4. GHCR 로그인 & Pull
+              echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
+              docker pull "${FULL_IMAGE_NAME}"
+
+              # 5. 새 슬롯 잔여 컨테이너 정리
+              docker stop "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+              docker rm   "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+
+              # 6. 새 컨테이너 시작
+              cd "${WORK_DIR}"
+              SLOT="${NEW_SLOT}" APP_PORT="${NEW_PORT}" OWNER_LOWERCASE="${OWNER_LOWERCASE}" IMAGE_TAG="${IMAGE_TAG_ONLY}" \
+                docker compose -p "${CONTAINER_BASE}-${NEW_SLOT}" -f docker-compose.dev.yml up -d solid-connection-dev
+
+              # 7. 헬스 체크 (앱 기동 대기, 최대 150초)
+              # /actuator/health 미노출로 포트 응답 여부로 확인 (HTTP 000 = 연결 불가)
+              echo "Waiting for app on port ${NEW_PORT}..."
+              for i in $(seq 1 30); do
+                HTTP=$(curl -s --connect-timeout 2 -o /dev/null -w "%{http_code}" "http://localhost:${NEW_PORT}/" || true)
+                [ "$HTTP" != "000" ] && { echo "App responding (HTTP ${HTTP}, attempt ${i})"; break; }
+                [ "$i" = "30" ] && {
+                  echo "Health check timed out after 150s" >&2
+                  docker stop "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+                  docker rm   "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+                  exit 1
+                }
+                sleep 5
+              done
+
+              # 8. Nginx upstream 전환 (무중단)
+              sudo sed -i "s|server 127.0.0.1:[0-9]*;|server 127.0.0.1:${NEW_PORT};|" /etc/nginx/conf.d/upstream.conf
+              sudo nginx -s reload
+              echo "Traffic switched → ${NEW_SLOT}(${NEW_PORT})"
+
+              # 9. 구 컨테이너 종료
+              docker compose -p "${CONTAINER_BASE}-${ACTIVE_SLOT}" -f docker-compose.dev.yml down 2>/dev/null || true
+
+              echo "Deployment complete. Active: ${NEW_SLOT}(${NEW_PORT})"
+            '

.github/workflows/prod-cd.yml

@@ -57,17 +57,17 @@ jobs:
         id: image_meta
         run: |
           OWNER_LOWERCASE=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
-          
+
           # Trigger가 Release인 경우: Release의 Tag Name (예: v1.0.0) 사용
           if [ "${{ github.event_name }}" == "release" ]; then
             IMAGE_TAG="${{ github.ref_name }}"
           # Trigger가 수동(workflow_dispatch)인 경우: 입력받은 tag_name 사용
           else
             IMAGE_TAG="${{ inputs.tag_name }}"
           fi
-          
+
           echo "Docker Image Tag: $IMAGE_TAG"
-          
+
           echo "image_name=ghcr.io/${OWNER_LOWERCASE}/solid-connection-server" >> $GITHUB_OUTPUT
           echo "image_tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
 
@@ -103,7 +103,6 @@ jobs:
       packages: read
 
     steps:
-      # 설정 파일 전송을 위해 코드 체크아웃 (서브모듈 불필요)
       - name: Checkout config files
         uses: actions/checkout@v4
         with:
@@ -112,44 +111,80 @@ jobs:
             docs/infra-config
           sparse-checkout-cone-mode: false
 
-      # --- 설정 파일 전송 ---
       - name: Copy config files to remote
         run: |
           echo "${{ secrets.PRIVATE_KEY }}" > deploy_key.pem
           chmod 600 deploy_key.pem
-          
+
           scp -i deploy_key.pem \
             -o StrictHostKeyChecking=no \
             ./docker-compose.prod.yml \
             ${{ secrets.USERNAME }}@${{ secrets.HOST }}:/home/${{ secrets.USERNAME }}/solid-connection-prod/
 
-      # --- 서버에서 Docker Pull 및 재시작 ---
-      - name: Run docker compose and apply nginx config
+      - name: Blue/Green deploy
         run: |
           ssh -i deploy_key.pem \
-           -o StrictHostKeyChecking=no \
-           ${{ secrets.USERNAME }}@${{ secrets.HOST }} \
-           '
-            set -e
-
-            # 1. 변수 설정 (이전 Job의 Output 사용)
-            export OWNER_LOWERCASE=$(echo "${{ github.repository_owner }}" | tr "[:upper:]" "[:lower:]")
-            export IMAGE_TAG_ONLY="${{ needs.build-and-push.outputs.image_tag }}"
-            export FULL_IMAGE_NAME="ghcr.io/${OWNER_LOWERCASE}/solid-connection-server:${IMAGE_TAG_ONLY}"
-
-            # 2. GHCR 로그인 & Pull
-            # App Token 대신 현재 워크플로우의 임시 토큰을 사용합니다.
-            echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
-            echo "Pulling new image: $FULL_IMAGE_NAME"
-            docker pull $FULL_IMAGE_NAME
-
-            # 3. Spring Boot 앱 재시작
-            echo "Restarting Docker Compose with tag: $IMAGE_TAG_ONLY"
-            cd /home/${{ secrets.USERNAME }}/solid-connection-prod
-            docker compose -f docker-compose.prod.yml down || true
-            OWNER_LOWERCASE=$OWNER_LOWERCASE IMAGE_TAG=$IMAGE_TAG_ONLY docker compose -f docker-compose.prod.yml up -d
-
-            # 6. 정리
-            docker image prune -f
-            echo "Deployment finished successfully."
-           '
+            -o StrictHostKeyChecking=no \
+            ${{ secrets.USERNAME }}@${{ secrets.HOST }} \
+            '
+              set -e
+              OWNER_LOWERCASE=$(echo "${{ github.repository_owner }}" | tr "[:upper:]" "[:lower:]")
+              IMAGE_TAG_ONLY="${{ needs.build-and-push.outputs.image_tag }}"
+              FULL_IMAGE_NAME="ghcr.io/${OWNER_LOWERCASE}/solid-connection-server:${IMAGE_TAG_ONLY}"
+              IMAGE_NAME_BASE="ghcr.io/${OWNER_LOWERCASE}/solid-connection-server"
+              WORK_DIR="/home/${{ secrets.USERNAME }}/solid-connection-prod"
+              CONTAINER_BASE="solid-connection-server"
+
+              # 1. Active 슬롯 확인 (upstream.conf 기준)
+              UPSTREAM_PORT=$(grep -oE "server 127\.0\.0\.1:[0-9]+" /etc/nginx/conf.d/upstream.conf 2>/dev/null | grep -oE "[0-9]+$" || echo "8081")
+              if [ "$UPSTREAM_PORT" = "8080" ]; then
+                ACTIVE_SLOT="blue"; ACTIVE_PORT=8080; NEW_SLOT="green"; NEW_PORT=8081
+              else
+                ACTIVE_SLOT="green"; ACTIVE_PORT=8081; NEW_SLOT="blue"; NEW_PORT=8080
+              fi
+              echo "Active: ${ACTIVE_SLOT}(${ACTIVE_PORT}) → Deploy: ${NEW_SLOT}(${NEW_PORT})"
+
+              # 2. Pull 전 디스크 정리 (태그 이미지 최근 2개 유지)
+              docker images "${IMAGE_NAME_BASE}" --format "{{.Tag}}" | \
+                grep -v buildcache | sort -r | tail -n +3 | \
+                xargs -I {} docker rmi "${IMAGE_NAME_BASE}:{}" 2>/dev/null || true
+              docker image prune -f
+
+              # 3. GHCR 로그인 & Pull
+              echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
+              docker pull "${FULL_IMAGE_NAME}"
+
+              # 4. 새 슬롯 잔여 컨테이너 정리
+              docker stop "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+              docker rm   "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+
+              # 5. 새 컨테이너 시작
+              cd "${WORK_DIR}"
+              SLOT="${NEW_SLOT}" APP_PORT="${NEW_PORT}" OWNER_LOWERCASE="${OWNER_LOWERCASE}" IMAGE_TAG="${IMAGE_TAG_ONLY}" \
+                docker compose -p "${CONTAINER_BASE}-${NEW_SLOT}" -f docker-compose.prod.yml up -d
+
+              # 6. 헬스 체크 (앱 기동 대기, 최대 150초)
+              # /actuator/health 미노출로 포트 응답 여부로 확인 (HTTP 000 = 연결 불가)
+              echo "Waiting for app on port ${NEW_PORT}..."
+              for i in $(seq 1 30); do
+                HTTP=$(curl -s --connect-timeout 2 -o /dev/null -w "%{http_code}" "http://localhost:${NEW_PORT}/" || true)
+                [ "$HTTP" != "000" ] && { echo "App responding (HTTP ${HTTP}, attempt ${i})"; break; }
+                [ "$i" = "30" ] && {
+                  echo "Health check timed out after 150s" >&2
+                  docker stop "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+                  docker rm   "${CONTAINER_BASE}-${NEW_SLOT}" 2>/dev/null || true
+                  exit 1
+                }
+                sleep 5
+              done
+
+              # 7. Nginx upstream 전환 (무중단)
+              sudo sed -i "s|server 127.0.0.1:[0-9]*;|server 127.0.0.1:${NEW_PORT};|" /etc/nginx/conf.d/upstream.conf
+              sudo nginx -s reload
+              echo "Traffic switched → ${NEW_SLOT}(${NEW_PORT})"
+
+              # 8. 구 컨테이너 종료
+              docker compose -p "${CONTAINER_BASE}-${ACTIVE_SLOT}" -f docker-compose.prod.yml down 2>/dev/null || true
+
+              echo "Deployment complete. Active: ${NEW_SLOT}(${NEW_PORT})"
+            '

docker-compose.dev.yml

@@ -3,10 +3,11 @@ version: '3.8'
 services:
   solid-connection-dev:
     image: ghcr.io/${OWNER_LOWERCASE}/solid-connection-dev:${IMAGE_TAG:-latest}
-    container_name: solid-connection-dev
+    container_name: solid-connection-dev-${SLOT:-blue}
     network_mode: "host"
     environment:
       - SPRING_PROFILES_ACTIVE=dev
+      - SERVER_PORT=${APP_PORT:-8080}
       - AWS_REGION=ap-northeast-2
       - SPRING_DATA_REDIS_HOST=127.0.0.1
       - SPRING_DATA_REDIS_PORT=6379

docker-compose.prod.yml

@@ -3,10 +3,11 @@ version: '3.8'
 services:
   solid-connection-server:
     image: ghcr.io/${OWNER_LOWERCASE}/solid-connection-server:${IMAGE_TAG:-latest}
-    container_name: solid-connection-server
+    container_name: solid-connection-server-${SLOT:-blue}
     network_mode: "host"
     environment:
       - SPRING_PROFILES_ACTIVE=prod
+      - SERVER_PORT=${APP_PORT:-8080}
       - AWS_REGION=ap-northeast-2
       - SPRING_DATA_REDIS_HOST=127.0.0.1
       - SPRING_DATA_REDIS_PORT=6379