Guides

GitHub Actions से Node.js App EC2 पर Deploy कैसे करें

By Ravindra Bagale, DevOps trainer · LinkedIn · Published: 28 October 2026 · Last updated: 28 October 2026

GitHub Actions में Node build, EC2 पर copy, systemctl restart, curl /health. SSH key सिर्फ CI secrets में.

Language: English · मराठी · हिंदी

यह मार्ग क्यों

छोटे apps के लिए Node EC2 पर। हर push समान build।

Why: Manual SCP टूटता है। What: Actions build, copy, restart, curl. How: Workflow + systemd + health.

Example 1: Local Node health route

Type this:

mkdir -p /tmp/node-ec2 && printf '%s\n' 'const http=require("http");http.createServer((q,r)=>{if(q.url==="/health"){r.writeHead(200);r.end("ok")}else r.end("hi")}).listen(3000)' > /tmp/node-ec2/server.js && node -e "require('fs').accessSync('/tmp/node-ec2/server.js');console.log('server.js ready')"

You will see:

server.js ready

What it means: Tiny /health route — Flipkart-style health checks.

Example 2: Run and curl health

Type this:

cd /tmp/node-ec2 && node server.js & sleep 0.4; curl -s http://127.0.0.1:3000/health; kill %1 2>/dev/null || true

You will see:

ok

What it means: Fix the app locally before you trust CI.

Example 3: Package a tarball

Type this:

cd /tmp/node-ec2 && tar -czf /tmp/app.tgz server.js && tar -tzf /tmp/app.tgz

You will see:

server.js

What it means: CI ships a small artifact list.

Concept 1: CI artifact

npm ci फिर छोटा tarball.

Why: Laptop builds lockfile छिपाते हैं। What: Clean install. How: checkout → npm ci → tar.

Example 3: Package a tarball

Type this:

cd /tmp/node-ec2 && tar -czf /tmp/app.tgz server.js && tar -tzf /tmp/app.tgz

You will see:

server.js

What it means: CI ships a small artifact list.

Example 4: Workflow sketch

Type this:

mkdir -p /tmp/node-ec2/.github/workflows && printf '%s\n' 'name: deploy-ec2' 'on: [push]' 'jobs:' '  deploy:' '    runs-on: ubuntu-latest' '    steps:' '      - uses: actions/checkout@v4' '      - run: tar -czf app.tgz server.js' '      - run: echo SCP_TO_EC2_HERE' > /tmp/node-ec2/.github/workflows/deploy.yml && wc -l /tmp/node-ec2/.github/workflows/deploy.yml

You will see:

9 /tmp/node-ec2/.github/workflows/deploy.yml

What it means: Workflow under .github/workflows; key stays in CI secrets.

Example 10: Secrets stay out of git

Type this:

printf '%s\n' 'ok: store EC2_SSH_KEY only in CI secrets'

You will see:

ok: store EC2_SSH_KEY only in CI secrets

What it means: Amazon/Flipkart runbooks ban committing PEM files.

Concept 2: Copy और restart

rsync; systemd process.

Why: हाथ से kill reboot पर मरता है। What: Unit + restart. How: rsync → systemctl.

Example 5: systemd unit sketch

Type this:

printf '%s\n' '[Unit]' 'Description=demo node' '[Service]' 'ExecStart=/usr/bin/node /opt/app/server.js' 'Restart=always' '[Install]' 'WantedBy=multi-user.target' > /tmp/node-app.service && head -3 /tmp/node-app.service

You will see:

[Unit]

What it means: TCS/Capgemini expect systemd so reboot recovers.

Example 6: SSH config pattern

Type this:

printf '%s\n' 'Host app-ec2' '  HostName 203.0.113.10' '  User ec2-user' '  IdentityFile ~/.ssh/app-ec2.pem' > /tmp/ssh-demo && cat /tmp/ssh-demo

You will see:

Host app-ec2

What it means: Dedicated deploy key — never paste PEM into YAML.

Example 7: rsync dry-run style

Type this:

mkdir -p /tmp/ec2-opt-app && rsync -avn /tmp/node-ec2/server.js /tmp/ec2-opt-app/ && ls /tmp/ec2-opt-app

You will see:

server.js

What it means: Drop -n on the real host after you trust the list.

Example 8: Remote restart commands

Type this:

printf '%s\n' 'sudo systemctl restart node-app && sudo systemctl is-active node-app' > /tmp/remote-restart.sh && chmod 750 /tmp/remote-restart.sh && cat /tmp/remote-restart.sh

You will see:

sudo systemctl restart node-app && sudo systemctl is-active node-app

What it means: is-active must print active.

Concept 3: Prove और rollback

Health curl; previous release.

Why: Green पर dead app धोखा। What: curl -fsS. How: health → previous.

Example 9: Health in the job

Type this:

printf '%s\n' 'curl -fsS http://127.0.0.1:3000/health' > /tmp/healthcheck.sh && cat /tmp/healthcheck.sh

You will see:

curl -fsS http://127.0.0.1:3000/health

What it means: -f fails the job on HTTP errors.

Example 11: Rollback folders

Type this:

mkdir -p /tmp/releases && printf 'v1\n' > /tmp/releases/previous && printf 'v2\n' > /tmp/releases/current && cat /tmp/releases/previous /tmp/releases/current

You will see:

v1
v2

What it means: Keep previous release for a fast flip.

Example 12: journalctl hint

Type this:

printf '%s\n' 'journalctl -u node-app -n 50 --no-pager'

You will see:

journalctl -u node-app -n 50 --no-pager

What it means: When health fails, read the unit log first.

Deploy card

1 CI build 2 EC2 copy 3 restart 4 curl 5 previous

Suppose: SCP permission

Deploy user write + sudo.

Suppose: Health fail

journalctl -u node-app.

Check yourself (quiz)

push → build → copy → restart → curl. Did you understand? Let us try it once more.