{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::your-bucket-name", "arn:aws:s3:::your-bucket-name/*"]
    },
    {
      "Effect": "Allow",
      "Action": ["cloudfront:CreateInvalidation"],
      "Resource": "arn:aws:cloudfront::account-id:distribution/distribution-id"
    }
  ]
}

# 키 파일 권한 설정 (Linux/macOS)
chmod 400 ./moment-runner-key.pem
 
# SSH 접속
ssh -i ./moment-runner-key.pem ec2-user@<퍼블릭 IPv4 주소>

ssh -i .\moment-runner-key.pem ec2-user@<퍼블릭 IPv4 주소>

# 시스템 업데이트
sudo dnf update -y
 
# 필요한 패키지 설치
sudo dnf install -y git curl tar libicu

# Create a folder
mkdir actions-runner && cd actions-runner
 
# Download the latest runner package
curl -o actions-runner-linux-arm64-2.326.0.tar.gz -L https://github.com/actions/runner/releases/download/v2.326.0/actions-runner-linux-arm64-2.326.0.tar.gz
 
# Optional: Validate the hash
echo "ee7c229c979c5152e9f12be16ee9e83ff74c9d9b95c3c1aeb2e9b6d07157ec85  actions-runner-linux-arm64-2.326.0.tar.gz" | shasum -a 256 -c
 
# Extract the installer
tar xzf ./actions-runner-linux-arm64-2.326.0.tar.gz

# Create the runner and start the configuration experience
./config.sh --url https://github.com/woowacourse-teams/2025-moment --token <발급된_토큰>

√ Runner successfully added
√ Runner connection is good

# Use this YAML in your workflow file for each job
runs-on: self-hosted

# Last step, run it!
./run.sh

# 서비스로 설치
sudo ./svc.sh install
 
# 서비스 시작
sudo ./svc.sh start
 
# 서비스 상태 확인
sudo ./svc.sh status

# 서비스 중지
sudo ./svc.sh stop
 
# 서비스 제거
sudo ./svc.sh uninstall

sudo nano /etc/systemd/system/runner.service

[Unit]
Description=GitHub Actions Runner
After=network.target
 
[Service]
ExecStart=/home/ec2-user/actions-runner/run.sh
WorkingDirectory=/home/ec2-user/actions-runner
User=ec2-user
Restart=always
 
[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reexec
sudo systemctl daemon-reload
sudo systemctl enable runner
sudo systemctl start runner

sudo systemctl status runner

# GitHub Secrets 설정 예시
secrets:
  S3_BUCKET_NAME: your-bucket-name
  CLOUDFRONT_DISTRIBUTION_ID: your-cloudfront-id
  EC2_RUNNER_INSTANCE_ID: i-0123456789abcdef0

name: Deploy to S3 + CloudFront (Ephemeral EC2 Runner)
 
on:
  push:
    branches: [main]
 
jobs:
  start-runner:
    name: Start EC2 Instance
    runs-on: ubuntu-latest
    steps:
      - name: Start EC2 instance
        run: |
          aws ec2 start-instances --instance-ids ${{ secrets.EC2_RUNNER_INSTANCE_ID }}
          echo "Waiting for EC2 runner to start..."
          aws ec2 wait instance-status-ok --instance-ids ${{ secrets.EC2_RUNNER_INSTANCE_ID }}
 
  deploy:
    name: Deploy to S3 + CloudFront
    runs-on: self-hosted
    needs: start-runner
    steps:
      - name: Checkout
        uses: actions/checkout@v3
 
      - name: Upload to S3
        run: aws s3 sync ./build s3://${{ secrets.S3_BUCKET_NAME }} --delete
 
      - name: Invalidate CloudFront cache
        run: aws cloudfront create-invalidation --distribution-id ${{ secrets.CLOUDFRONT_DISTRIBUTION_ID }} --paths "/*"
 
  stop-runner:
    name: Stop EC2 Instance
    runs-on: ubuntu-latest
    if: always()
    needs: deploy
    steps:
      - name: Stop EC2 instance
        run: |
          aws ec2 stop-instances --instance-ids ${{ secrets.EC2_RUNNER_INSTANCE_ID }}

# Amazon Linux 2023
sudo dnf install -y libicu
 
# Ubuntu/Debian
sudo apt-get update && sudo apt-get install -y libicu-dev

name: Deploy Client to AWS S3 + CloudFront
 
on:
  push:
    branches: [main]
 
jobs:
  build-and-deploy:
    name: Build and Deploy Client
    runs-on: self-hosted
    defaults:
      run:
        working-directory: ./client
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
 
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'pnpm'
          cache-dependency-path: ./client/pnpm-lock.yaml
 
 
      - name: Install pnpm
        uses: pnpm/action-setup@v4
        with:
          version: latest
 
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
 
      - name: Create .env file
        run: |
          echo "REACT_APP_BASE_URL=${{ secrets.REACT_APP_BASE_URL }}" > .env
 
      - name: Build application
        run: pnpm run build
        env:
          NODE_ENV: production
 
      - name: Upload to S3
        run: |
          echo "Uploading static files to S3..."
 
          # 1. HTML 외 모든 파일 먼저 업로드
          aws s3 sync ./dist s3://${{ secrets.S3_BUCKET_NAME }}/moment \
            --delete \
            --cache-control "public,max-age=31536000,immutable" \
            --exclude "*.html" \
            --exclude "service-worker.js" \
            --region ap-northeast-2
 
          # 2. .html 파일은 개별적으로 --content-type text/html 지정
          find ./dist -name "*.html" | while read file; do
            aws s3 cp "$file" s3://${{ secrets.S3_BUCKET_NAME }}/moment/"${file#./dist/}" \
              --cache-control "public,max-age=0,must-revalidate" \
              --content-type "text/html" \
              --region ap-northeast-2
          done
 
          # 3. service-worker.js도 개별 업로드
          if [ -f ./dist/service-worker.js ]; then
            aws s3 cp ./dist/service-worker.js s3://${{ secrets.S3_BUCKET_NAME }}/moment/service-worker.js \
              --cache-control "public,max-age=0,must-revalidate" \
              --content-type "application/javascript" \
              --region ap-northeast-2
          fi
 
      - name: Invalidate CloudFront cache
        run: |
          echo "Invalidating CloudFront cache..."
          aws cloudfront create-invalidation \
            --distribution-id ${{ secrets.CLOUDFRONT_DISTRIBUTION_ID }} \
            --paths "/*" \
            --region us-east-1