[Feature/BAR-277] SANDBOX phase 작성 (#98)

* feat: 환경 구성 변경 테스트

* feat: port 변수화

* feat: 환경변수 수정

* feat: sandbox 환경 구성

* fix: 재실행

* fix: target branch 변경

* feat: 샌박 환경 구축

* feat: port 동작 확인

* feat: port 동작 확인

* feat: 하나의 도커 파일로 처리

* fix: 파일명 변경

* feat: sandbox phase branch 설정

.github/workflows/deploy.yaml → .github/workflows/deploy-prod.yaml

@@ -36,7 +36,7 @@ jobs:
           REPOSITORY: ${{ env.IMAGE_NAME }}
           IMAGE_TAG: ${{ github.sha }}
         run: |
-          docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG .
+          docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG --build-arg PORT=3000 .
           docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG
 
       - name: Delete old docker image in ECR

.github/workflows/deploy-sandbox.yaml

@@ -0,0 +1,66 @@
+name: Create and publish a Docker image to AWS ECR ans deploy to EC2 sandbox
+
+on:
+  push:
+    branches:
+      - develop
+
+env:
+  REGISTRY: ${{ secrets.AWS_ECR_REGISTRY }}
+  AWS_REGION: ap-northeast-2
+  IMAGE_NAME: baro-sandbox
+
+jobs:
+  build-and-push-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Build, tag, and push docker image to Amazon ECR
+        env:
+          REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+          REPOSITORY: ${{ env.IMAGE_NAME }}
+          IMAGE_TAG: ${{ github.sha }}
+        run: |
+          docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG --build-arg PORT=3001 -f Dockerfile .
+          docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG
+
+      - name: Delete old docker image in ECR
+        uses: LeiaInc/devops-delete-old-aws-ecr-images@v1
+        with:
+          repo-name: ${{ env.IMAGE_NAME }}
+          qtd-images: 5
+
+      - name: Deploy to EC2
+        env:
+          REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+          REPOSITORY: ${{ env.IMAGE_NAME }}
+          IMAGE_TAG: ${{ github.sha }}
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.EC2_PUBLIC_DOMAIN }}
+          username: ubuntu
+          key: ${{ secrets.EC2_SSH_PRIVATE_KEY }}
+          envs: REGISTRY,REPOSITORY,IMAGE_TAG,AWS_REGION,IMAGE_NAME
+          script: |-
+            aws ecr get-login-password --region ${{ env.AWS_REGION }} |
+            sudo docker login --username AWS --password-stdin ${{ env.REGISTRY }}/${{ env.REPOSITORY }}
+            sudo docker stop ${{ env.IMAGE_NAME }} || true
+            sudo docker rm ${{ env.IMAGE_NAME }} || true
+            sudo docker rmi $(sudo docker images -aq) || true
+            sudo docker pull $REGISTRY/$REPOSITORY:$IMAGE_TAG
+            sudo docker container run --name ${{ env.IMAGE_NAME }} -d -p 3001:3001 $REGISTRY/$REPOSITORY:$IMAGE_TAG

Dockerfile

@@ -1,6 +1,8 @@
 FROM node:20-alpine AS base
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
+ARG PORT
+ENV PORT ${PORT}
 
 RUN corepack enable
 COPY . /app
@@ -16,5 +18,5 @@ RUN pnpm run build
 FROM base
 COPY --from=prod-deps /app/node_modules /app/node_modules
 COPY --from=build /app/ .
-EXPOSE 3000
-CMD [ "pnpm", "start" ]
+EXPOSE ${PORT}
+CMD pnpm start -p ${PORT}