Refactor: 서비스 전반 리팩토링 및 유효성 검증 강화

.dockerignore

@@ -0,0 +1,44 @@
+# Git
+.git
+.gitignore
+.gitattributes
+
+# IDE
+.idea
+.vscode
+*.iml
+
+# Build outputs
+build/
+.gradle/
+gradle/
+gradlew
+gradlew.bat
+
+# Documentation
+README.md
+*.md
+
+# Environment files
+.env*
+!.env.example
+
+# Logs
+*.log
+logs/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Docker
+Dockerfile
+docker-compose.yml
+.dockerignore
+
+# Test files
+src/test/
+
+# Temporary files
+tmp/
+temp/

.env.example

@@ -0,0 +1,32 @@
+SPRING_PROFILES_ACTIVE=dev
+
+# MySQL
+DB_CONNECTION=localhost
+DB_NAME=sayup_dev
+DB_USERNAME=root
+DB_PASSWORD=dev_password
+
+# JWT
+JWT_SECRET=dev_jwt_secret_key_for_development
+JWT_EXPIRATION=3600000  # 1시간
+JWT_REFRESH_EXPIRATION=86400000  # 1일
+
+# Redis
+REDIS_HOST=localhost
+REDIS_PORT=6379
+
+# 파일 업로드
+FILE_UPLOAD_DIR=./uploads/dev
+
+# 카카오 설정
+KAKAO=your_kakao_dev_key
+KAKAO_REDIRECT_URI=http://localhost:8080/api/auth/kakao/callback
+
+# Python 서버
+PYTHON_SERVER_URL=http://127.0.0.1:8000
+
+# 프론트엔드 URL
+FRONTEND_URL=http://localhost:3000
+
+# OpenAI API 키
+API_KEY=sk-your_openai_api_key_here

.env.prod

@@ -1,3 +1,32 @@
+# .env.prod
+
+# 데이터베이스 환경변수
+DB_USERNAME=root
 DB_PASSWORD=0000
+DB_CONNECTION=mysql
+DB_NAME=sayup
+
+# Redis 환경변수
+REDIS_HOST=redis
+REDIS_PORT=6379
+REDIS_PASSWORD=redis
+
+# JWT 관련
+JWT_SECRET=your-jwt-secret
+JWT_EXPIRATION=86400000
+JWT_REFRESH_EXPIRATION=604800000
+
+# 외부 API 키
 CHATGPT_API_KEY=temp
-DOCKERHUB_USERNAME=yukyung0
+KAKAO_CLIENT_ID=kakao-temp-client-id
+KAKAO_REDIRECT_URI=http://localhost:8080/api/auth/kakao/callback
+
+# 파일 업로드 경로
+FILE_UPLOAD_DIR=/app/tmp/file/userVoice
+
+# Python 서버 URL
+PYTHON_SERVER_URL=http://127.0.0.1:8000
+
+# Docker 이미지 관련
+DOCKERHUB_USERNAME=user
+IMAGE_TAG=latest

Dockerfile

@@ -1,19 +1,32 @@
+FROM gradle:8.5-jdk17 AS build
+WORKDIR /app
+COPY . .
+RUN gradle build -x test
+
 FROM openjdk:17-jdk-slim
 
+# 보안을 위한 비루트 사용자 생성
+RUN groupadd -r sayup && useradd -r -g sayup sayup
+
+# 필수 패키지 설치
+RUN apt-get update && apt-get install -y \
+    curl \
+    && rm -rf /var/lib/apt/lists/* \
+
 WORKDIR /app
+COPY --from=build /app/build/libs/*.jar app.jar
+
+# 필요한 디렉토리 생성 및 권한 설정
+RUN mkdir -p /app/logs /app/tmp/file/userVoice && \
+    chown -R sayup:sayup /app
+
+USER sayup
 
-# JAR 파일 복사 (빌드된 JAR 파일 이름에 맞춰 수정 필요)
-COPY build/libs/SayUp-0.0.1-SNAPSHOT.jar app.jar
+ENV JAVA_OPTS="-Xms512m -Xmx1024m -XX:+UseG1GC -XX:+UseContainerSupport -XX:MaxRAMPercentage=75.0"
 
-ARG DB_PASSWORD
-ARG API_KEY
+HEALTHCHECK --interval=30s --timeout=3s --start-period=60s --retries=3 \
+    CMD curl -f http://localhost:8080/actuator/health || exit 1
 
-# 환경변수 설정
-ENV DB_CONNECTION=mysql
-ENV DB_NAME=sayup_db
-ENV DB_USERNAME=root
-ENV DB_PASSWORD=$DB_PASSWORD
-ENV API_KEY=$API_KEY
-ENV FILE_UPLOAD_DIR=/file/temp
+EXPOSE 8080
 
-ENTRYPOINT ["java", "-jar", "app.jar"]
+ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS -jar app.jar"]

build.gradle

@@ -31,6 +31,7 @@ dependencies {
 	testImplementation 'org.springframework.boot:spring-boot-testcontainers'
 	testImplementation 'org.testcontainers:junit-jupiter'
 	testImplementation 'org.testcontainers:mysql:1.20.0'
+	testImplementation 'com.h2database:h2'
 	testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
 
 	implementation 'io.jsonwebtoken:jjwt-api:0.11.5'
@@ -55,7 +56,7 @@ dependencies {
 	implementation 'org.springframework.boot:spring-boot-starter-websocket'
 
 	// Swagger 3 (SpringDoc OpenAPI) 의존성
-	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.3.0'
+	implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:2.7.0'
 
 	// ClassGraph 버전 명시
 	implementation 'io.github.classgraph:classgraph:4.8.149'
@@ -74,7 +75,11 @@ dependencies {
 	// AOP
 	implementation 'org.springframework.boot:spring-boot-starter-aop'
 
-	implementation 'org.springframework.boot:spring-boot-starter-webflux'
+	// Redis 의존성 추가
+	implementation 'org.springframework.boot:spring-boot-starter-data-redis'
+
+	// Actuator
+	implementation 'org.springframework.boot:spring-boot-starter-actuator'
 }
 
 tasks.named('test') {

docker-compose.yml

@@ -4,41 +4,128 @@ services:
   mysql:
     image: mysql:8.0
     container_name: sayup_mysql
-    restart: always
+    restart: unless-stopped
     environment:
       MYSQL_ROOT_PASSWORD: "${DB_PASSWORD}"
       MYSQL_DATABASE: "sayup_db"
+      MYSQL_USER: "${DB_USERNAME}"
+      MYSQL_PASSWORD: "${DB_PASSWORD}"
+      TZ: "Asia/Seoul"
     ports:
       - "3306:3306"
     volumes:
       - mysql_data:/var/lib/mysql
+      - mysql_backup:/backup
+      - ./mysql/init:/docker-entrypoint-initdb.d
     networks:
       - app_network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      timeout: 20s
+      retries: 10
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+        reservations:
+          memory: 512M
+
+  redis:
+    image: redis:7-alpine
+    container_name: sayup_redis
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_data:/data
+      - redis_backup:/backup
+    networks:
+      - app_network
+    command: redis-server --appendonly yes --requirepass "${REDIS_PASSWORD}"
+    healthcheck:
+      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
+      timeout: 3s
+      retries: 5
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+        reservations:
+          memory: 128M
 
   app:
-    build: .
-    image: ${DOCKERHUB_USERNAME}/sayup:latest
-    container_name: sayup
-    restart: always
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: ${DOCKERHUB_USERNAME:-sayup}/sayup:${IMAGE_TAG:-latest}
+    container_name: sayup_app
+    restart: unless-stopped
     depends_on:
-      - mysql
+      mysql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
     env_file:
       - .env.prod
     environment:
+      SPRING_PROFILES_ACTIVE: "prod"
       DB_CONNECTION: "mysql"
+      DB_HOST: "mysql"
       DB_NAME: "sayup_db"
-      DB_USERNAME: "root"
+      DB_USERNAME: "${DB_USERNAME}"
       DB_PASSWORD: "${DB_PASSWORD}"
-      # 경로 변경 필요
-      FILE_UPLOAD_DIR: "tmp/file/userVoice"
+      REDIS_HOST: "redis"
+      REDIS_PORT: "6379"
+      REDIS_PASSWORD: "${REDIS_PASSWORD}"
+      FILE_UPLOAD_DIR: "/app/tmp/file/userVoice"
       API_KEY: "${CHATGPT_API_KEY}"
+      JWT_SECRET: "${JWT_SECRET}"
+      KAKAO_CLIENT_ID: "${KAKAO_CLIENT_ID}"
+      TZ: "Asia/Seoul"
     ports:
       - "8080:8080"
+    volumes:
+      - app_logs:/app/logs
+      - app_files:/app/tmp/file/userVoice
     networks:
       - app_network
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/actuator/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 60s
+    deploy:
+      resources:
+        limits:
+          memory: 2G
+          cpus: '2.0'
+        reservations:
+          memory: 1G
+          cpus: '1.0'
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
 
 networks:
   app_network:
+    driver: bridge
+    ipam:
+      config:
+        - subnet: 172.20.0.0/16
 
 volumes:
   mysql_data:
+    driver: local
+  mysql_backup:
+    driver: local
+  redis_data:
+    driver: local
+  redis_backup:
+    driver: local
+  app_logs:
+    driver: local
+  app_files:
+    driver: local