nexus3-ssl

Docker compose, nexus3 with ssl support, docker-proxy and anonymous pulling

Installation

Install docker-compose in virtualenv

Steps to deploy

Update env.config file to meet your requirements:

# Data volume root dir
export VOLUME_PATH=/srv/nexus-data

# will be accessable with https://SERVER_NAME
export SERVER_NAME=nexus.sandbox.example.com

# docker dev repo with anonymous push/pull
export DOCKER_DEV_NAME=docker-dev.sandbox.example.com

# docker virtual repo with anonymous pull
export DOCKER_VIRTUAL_NAME=docker-virtual.sandbox.example.com

# will be used in docker-proxy upstream configuration
export UPSTREAM_DOCKER_REPO=https://docker-prod-virtual.docker.example.com

Put ssl.key and ssl.crt files in in nginx/ssl/ directory

Automatic deployment steps on Nexus side

Implemeted by running curl with related json files

Create Remote User Token
Create docker-dev repository with listening on 8082 port
Create docker-proxy repository with pointing to Upstream docker repo UPSTREAM_DOCKER_REPO defined in env.config
Create docker-virtual repository with listening on 8083 port and which includes both:
- docker-dev
- docker-proxy

Running

Please check ./manage.sh for help

Usage: ./manage.sh ACTION

 ACTION:
   init                 [Optional] generate config files,
                        check ssl keys, build required images
   status               get containers status
   debug                run docker-compose in foreground
   start                start all containers in background
   stop                 stop all containers

Usage

Your nexus web interface will be available - SERVER_NAME
Your dev repository for pushing/pulling - DOCKER_DEV_NAME
Your proxy repository for pulling from upstream + dev - DOCKER_VIRTUAL_NAME For example:

# 1. nexus web interface available https://nexus.sandbox.example.com
# with admin:admin123 (nexus default credentials)
SERVER_NAME=nexus.sandbox.example.com

# 2. pushing to dev
docker push dev-nexus.sandbox.example.com/my-container:v1.0.0

# 3. pulling from virtual, which is dev+UPSTREAM_DOCKER_REPO
docker pull virtual-nexus.sandbox.example.com/debian:jessie

Notes and limitations

push/pull to docker-dev repo DOESN'T require authorization since we are doing this transparantly on proxy
pull from docker-virtual (which is docker-dev + docker-proxy) can be done anonymously as well