Build and Deploy Srv #15
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Deploy Srv | |
| on: | |
| workflow_dispatch: {} | |
| env: | |
| AWS_REGION: ap-southeast-1 | |
| STACK_ENV: staging | |
| STACK_NAME: zyg-srv | |
| APPLICATION: backend | |
| ZYG_DB_QUERY_DEBUG: 0 | |
| CGO_ENABLED: 0 | |
| GOOS: linux | |
| GOARCH: amd64 | |
| jobs: | |
| build: | |
| name: Build and Package | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: ./backend | |
| environment: | |
| name: staging | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v4 | |
| name: Checkout Repository | |
| - uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| role-to-assume: ${{ secrets.IAMROLE_GITHUB }} | |
| role-session-name: GitHub-Action-Role | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.23" | |
| cache: true | |
| - name: Pre Build | |
| run: | | |
| go mod download | |
| go mod verify | |
| go vet ./... | |
| test -z $(gofmt -l .) | |
| if [ -n "$(which golangci-lint)" ]; then golangci-lint run; fi | |
| - name: Build Application | |
| run: | | |
| echo "Building Go application from source..." | |
| GIT_COMMIT=${{ github.sha }} | |
| go build -v \ | |
| -ldflags="-s -w \ | |
| -X main.GitCommit=$GIT_COMMIT \ | |
| -X main.BuildTime=$(date -u '+%Y-%m-%d_%H:%M:%S')" \ | |
| -o dist/bin/app cmd/srv/main.go | |
| - name: Create Dist Package | |
| run: | | |
| if [ ! -f dist/bin/app ]; then | |
| echo "Binary not found at dist/bin/app" | |
| exit 1 | |
| fi | |
| echo "dist/ is the root path of the dist package" | |
| echo "Make sure of relative path of the dist/ package when deploying" | |
| cp infra/srv/appspec.yml dist/ | |
| cp -r infra/srv/scripts dist/ | |
| cat << 'EOF' > dist/scripts/srv.service | |
| [Unit] | |
| Description=Zyg Srv Go Application | |
| After=network.target | |
| [Service] | |
| Type=simple | |
| User=ubuntu | |
| Group=ubuntu | |
| ExecStart=/usr/local/bin/app -host 0.0.0.0 -port 8080 | |
| WorkingDirectory=/usr/local/bin/ | |
| Environment=DATABASE_URL=${{ secrets.DATABASE_URL }} | |
| Environment=REDIS_ADDR=${{ secrets.REDIS_ADDR }} | |
| Environment=REDIS_USER=${{ secrets.REDIS_USER }} | |
| Environment=REDIS_PASS=${{ secrets.REDIS_PASS }} | |
| Environment=SUPABASE_JWT_SECRET=${{ secrets.SUPABASE_JWT_SECRET }} | |
| Environment=RESEND_API_KEY=${{ secrets.RESEND_API_KEY }} | |
| Environment=ZYG_DB_QUERY_DEBUG=${{ env.ZYG_DB_QUERY_DEBUG }} | |
| Environment=CF_ACCOUNT_ID=${{ secrets.CF_ACCOUNT_ID }} | |
| Environment=R2_ACCESS_KEY_ID=${{ secrets.R2_ACCESS_KEY_ID }} | |
| Environment=R2_ACCESS_SECRET_KEY=${{ secrets.R2_ACCESS_SECRET_KEY }} | |
| Restart=on-failure | |
| RestartSec=5 | |
| NoNewPrivileges=yes | |
| ProtectSystem=full | |
| ProtectHome=true | |
| PrivateTmp=true | |
| TimeoutStartSec=30 | |
| TimeoutStopSec=30 | |
| [Install] | |
| WantedBy=multi-user.target | |
| EOF | |
| cd dist | |
| zip -r ../dist.zip . | |
| cd .. | |
| - name: Upload Artifacts to S3 | |
| run: | | |
| BUCKET=${{ env.STACK_NAME }}-${{ env.STACK_ENV }}-${{ env.AWS_REGION }}-artifacts-${{ secrets.AWS_ACCOUNT_ID }} | |
| aws s3 cp dist.zip s3://$BUCKET/${{ env.APPLICATION }}/${{ github.sha }}/ | |
| deploy: | |
| name: AWS Deploy | |
| needs: build | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: staging | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| role-to-assume: ${{ secrets.IAMROLE_GITHUB }} | |
| role-session-name: GitHub-Action-Role | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Deploy to AWS CodeDeploy | |
| run: | | |
| BUCKET="${{ env.STACK_NAME }}-${{ env.STACK_ENV }}-${{ env.AWS_REGION }}-artifacts-${{ secrets.AWS_ACCOUNT_ID }}" | |
| DEPLOYMENT_NAME="${{ env.STACK_NAME }}-${{ env.STACK_ENV }}" | |
| DEPLOYMENT_GROUP_NAME="${{ env.STACK_NAME }}-${{ env.STACK_ENV }}-deployment-group" | |
| aws deploy create-deployment \ | |
| --application-name "${DEPLOYMENT_NAME}" \ | |
| --deployment-group-name "${DEPLOYMENT_GROUP_NAME}" \ | |
| --s3-location bucket=${BUCKET},key=${{ env.APPLICATION }}/${{ github.sha }}/dist.zip,bundleType=zip \ | |
| --ignore-application-stop-failures | |