📚 PHP 최상급 - 4주차: CI/CD (지속적 통합/지속적 배포) 파이프라인 구축- 03 PHP 프로젝트를 위한 CI/CD 파이프라인 설계 및 구현

name: PHP CI/CD Pipeline

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  build_test:
    runs-on: ubuntu-latest

    steps:
    - name: Checkout code
      uses: actions/checkout@v3

    - name: Setup PHP
      uses: shivammathur/setup-php@v2
      with:
        php-version: '8.3' # 사용할 PHP 버전
        extensions: pdo_mysql, zip, gd # 필요한 PHP 확장
        ini-values: post_max_size=256M, upload_max_filesize=256M
        tools: composer # Composer 설치 포함

    - name: Get Composer Cache Directory
      id: composer-cache
      run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

    - name: Cache Composer dependencies
      uses: actions/cache@v3
      with:
        path: ${{ steps.composer-cache.outputs.dir }}
        key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
        restore-keys: ${{ runner.os }}-composer-

    - name: Install Composer dependencies
      run: composer install --no-dev --prefer-dist

    - name: Run PHPUnit tests
      run: vendor/bin/phpunit --configuration phpunit.xml

    - name: Run PHPStan (Static Analysis)
      run: vendor/bin/phpstan analyse src --level max

    - name: Build Docker Image
      run: docker build -t your-docker-registry/your-app:${{ github.sha }} .

    - name: Push Docker Image to Registry (e.g., Docker Hub)
      if: github.ref == 'refs/heads/main' # main 브랜치에 푸시될 때만 실행
      run: |
        echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
        docker push your-docker-registry/your-app:${{ github.sha }}

  deploy:
    needs: build_test # build_test Job이 성공해야 실행
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/main' # main 브랜치에 푸시될 때만 실행

    steps:
    - name: Deploy to Production Server via SSH
      uses: appleboy/ssh-action@master
      with:
        host: ${{ secrets.SSH_HOST }}
        username: ${{ secrets.SSH_USERNAME }}
        key: ${{ secrets.SSH_PRIVATE_KEY }}
        script: |
          # 서버에 접속하여 최신 Docker 이미지 pull 및 컨테이너 재시작
          docker pull your-docker-registry/your-app:${{ github.sha }}
          docker stop your-app-container || true
          docker rm your-app-container || true
          docker run -d --name your-app-container -p 80:80 your-docker-registry/your-app:${{ github.sha }}
          # 필요한 경우 데이터베이스 마이그레이션 등 실행
          # docker exec your-app-container php artisan migrate --force