Notion → GitHub 자동 배포 파이프라인 구축기

name: Sync Notion Posts
 
on:
  workflow_dispatch:        # 수동 트리거
    inputs:
      dry_run:
        description: 'Dry run (커밋/푸시 없이 변환만)'
        type: boolean
        default: false
 
jobs:
  sync:
    runs-on: ubuntu-latest
    permissions:
      contents: write
 
    steps:
      - uses: actions/checkout@v4
 
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
 
      - run: pip install -r scripts/requirements.txt
 
      - name: Run Notion sync script
        id: sync
        continue-on-error: true
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_TOKEN }}
          NOTION_DATABASE_ID: ${{ secrets.NOTION_DATABASE_ID }}
          POSTS_DIR: posts
          PUBLIC_DIR: public
          DRY_RUN: ${{ inputs.dry_run || 'false' }}
        run: python scripts/sync_notion.py
 
      - name: Commit and push changes
        id: push
        if: steps.sync.outcome == 'success' && inputs.dry_run != true
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add posts/ public/
          if git diff --cached --quiet; then
            echo "No changes to commit."
            echo "pushed=false" >> $GITHUB_OUTPUT
          else
            git commit -m "chore: sync notion posts"
            git push
            echo "pushed=true" >> $GITHUB_OUTPUT
          fi
 
      - name: Update Notion status to synced
        if: steps.push.outputs.pushed == 'true'
        env:
          NOTION_TOKEN: ${{ secrets.NOTION_TOKEN }}
          NOTION_DATABASE_ID: ${{ secrets.NOTION_DATABASE_ID }}
          SYNC_MODE: update-notion
        run: python scripts/sync_notion.py

name: CD Pipeline
 
on:
  push:
    branches: [main]
  workflow_dispatch:
 
env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
 
jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
 
    steps:
      - uses: actions/checkout@v4
 
      - uses: actions/setup-node@v4
        with: { node-version: '20' }
 
      - uses: pnpm/action-setup@v2
        with: { version: latest }
 
      - run: pnpm install --frozen-lockfile
      - run: pnpm build
 
      - uses: docker/setup-buildx-action@v3
 
      - uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
 
      - uses: docker/metadata-action@v5
        id: meta
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
            type=raw,value=latest,enable={{is_default_branch}}
            type=sha,prefix={{branch}}-
 
      - uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
 
  deploy:
    needs: build-and-push
    runs-on: self-hosted       # 홈서버에 설치한 runner
 
    steps:
      - uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
 
      - name: Deploy
        run: |
          docker stop mark-blog 2>/dev/null || true
          docker rm   mark-blog 2>/dev/null || true
          docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
          docker run -d \
            --name mark-blog \
            --restart unless-stopped \
            -p 3000:3000 \
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
          sleep 10
          curl -f http://localhost:3000

HEADERS = {
    'Authorization': f'Bearer {NOTION_TOKEN}',
    'Notion-Version': '2022-06-28',
    'Content-Type': 'application/json',
}
 
def fetch_published_pages() -> list[dict]:
    body = {
        'filter': {
            'property': 'status',
            'status': {'equals': 'published'},
        },
    }
    data = notion_post(f'databases/{DATABASE_ID}/query', body)
    return data.get('results', [])

def block_to_md(block: dict, image_dir: Path, depth: int = 0) -> str | None:
    bt = block['type']
    data = block.get(bt, {})
    rich = data.get('rich_text', [])
 
    match bt:
        case 'heading_1': return f'\n# {rich_to_md(rich)}'
        case 'heading_2': return f'\n## {rich_to_md(rich)}'
        case 'heading_3': return f'\n### {rich_to_md(rich)}'
        case 'paragraph':
            text = rich_to_md(rich)
            return f'\n{text}' if text else ''
        case 'bulleted_list_item':
            return f'{"  " * depth}- {rich_to_md(rich)}'
        case 'code':
            lang = data.get('language', '')
            return f'\n```{lang}\n{get_plain_text(rich)}\n```'
        case 'quote':
            return f'\n> {rich_to_md(rich)}'
        case 'image':
            local_path = download_image(url, image_dir)
            rel = os.path.relpath(local_path, PUBLIC_DIR)
            return f'\n![{caption}](/{rel})'
        case 'table':
            return render_table(block)
        case _:
            return None

def download_image(url: str, save_dir: Path) -> str | None:
    resp = requests.get(url, timeout=15)
    ext = url.split('?')[0].rsplit('.', 1)[-1].lower()
    name = hashlib.md5(url.encode()).hexdigest()[:12] + '.' + ext
    save_dir.mkdir(parents=True, exist_ok=True)
    (save_dir / name).write_bytes(resp.content)
    return str(save_dir / name)

---
title: '[HTTP] 인터넷과 네트워크'
published: false
date: 2026.05.12
description: 'IP 프로토콜의 한계와 TCP, UDP의 차이...'
---