springboot-on-push.yaml

name: Springboot CI on Push

on:
  push:
    branches: [ "develop" ]
  # for debug
  pull_request:
    branches: [ "develop" ]

jobs:
  build:

    runs-on: ubuntu-latest
    defaults:
      run:
        shell: bash
        working-directory: ./springboot

    steps:
    - uses: actions/checkout@v4
    - name: set up JDK 17
      uses: actions/setup-java@v3
      with:
        java-version: '17'
        distribution: 'temurin'
        cache: gradle

    - name: Add test account key from secrets
      run: |
        echo "${{ secrets.FIREBASE_TEST_ACCOUNT_KEY }}" | base64 -d > \
        src/test/kotlin/com/goliath/emojihub/springboot/TestServiceAccountKey.json
        ls -al src/test/kotlin/com/goliath/emojihub/springboot/

    # Build & Test
    - name: Grant execute permission for gradlew
      run: chmod +x gradlew
    - name: Build with Gradle
      run: ./gradlew clean build

    # Setup SSH
    - name: Set up SSH agent with private key
      uses: webfactory/ssh-agent@v0.5.4
      with:
        ssh-private-key: ${{ secrets.SPRINGBOOT_EC2_SSH_KEY }}
    - name: Add remote server to known hosts
      run: |
        mkdir -p ~/.ssh
        ssh-keyscan -H ${{ secrets.SPRINGBOOT_HOST_DNS }} >> ~/.ssh/known_hosts

    # Deploy
    - name: SCP jar file to server
      run: |
        scp *jar ${{ secrets.SPRINGBOOT_USERNAME }}@${{ secrets.SPRINGBOOT_HOST_DNS }}:\
        ${{ secrets.SPRINGBOOT_TARGET_DIR }}
      working-directory: ./springboot/build/libs
    - name: Execute remote commands
      run: |
        ssh -v ${{ secrets.SPRINGBOOT_USERNAME }}@${{ secrets.SPRINGBOOT_HOST_DNS }} \
        "kill -9 $(pgrep -f springboot-0.0.1-SNAPSHOT.jar) || true && \
        cd ${{ secrets.SPRINGBOOT_ROOT_DIR }} && \
        sudo nohup /usr/bin/java -jar ${{ secrets.SPRINGBOOT_TARGET_DIR }}/*.jar \
        > ${{ secrets.SPRINGBOOT_ROOT_DIR }}/app.log 2>&1 &"