GitHub Actionsでnest.jsの軽量な運用イメージを作成しデプロイ

.
├── Dockerfile
├── Dockerfile.prod               # 運用環境用Dockerfile
├── docker-compose.yml            
└── backend/                      # Nest.jsのプロジェクト

ARG NODE_VER
FROM node:20.10.0

USER node
WORKDIR /home/node/app

COPY --chown=node:node ./backend/node_modules/ ./node_modules/
COPY --chown=node:node ./backend/dist ./dist/

EXPOSE 3000

ENTRYPOINT ["node", "dist/main.js"]

#
name: Development CI

# Configures this workflow to run every time a change is pushed to the branch called `release`.
on:
  push:
    branches: ["main"]
env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
  NODE_VERSION: "20.x"

jobs:
  build-app:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: ${{env.NODE_VERSION}}
          cache: "npm"
          cache-dependency-path: "**/package-lock.json"

      - name: npm install node_modules
        run: npm install
        working-directory: backend

			# ここでCI上のテスト実行場所を確保する

      - name: npm build
        run: npm run build
        working-directory: backend

      - name: Upload Cache app
        uses: actions/cache@v4
        with:
          path: backend/dist/
          key: ${{ runner.os }}-app-${{ github.sha }}

  build-and-push-image:
    runs-on: ubuntu-latest
    needs: "build-app"
    environment: "production"
    outputs:
      image-name: ${{steps.build-name.outputs.container}}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Download Cache app
        uses: actions/cache@v4
        with:
          path: backend/dist/
          key: ${{ runner.os }}-app-${{ github.sha }}

      - uses: actions/setup-node@v4
        with:
          node-version: ${{env.NODE_VERSION}}
          cache: "npm"
          cache-dependency-path: "**/package-lock.json"

      - name: npm install production
        run: npm install --production
        working-directory: backend

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.TOKEN_CLASSIC }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: ${{ github.sha }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./Dockerfile.prod
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

      - name: build container name
        id: build-name
        run: |
          echo "container=${{steps.meta.outputs.tags}}" >> $GITHUB_OUTPUT

  deploy-to-webapps:
    runs-on: ubuntu-latest
    needs: [build-and-push-image]
    environment: "production"
    steps:
      - uses: azure/webapps-deploy@v2
        with:
          app-name: "line-liff-backend"
          publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE }}
          images: "${{needs.build-and-push-image.outputs.image-name}}"