nexus3-ssl
Docker compose, nexus3 with ssl support, docker-proxy and anonymous pulling
Installation
Install docker-compose in virtualenv
Steps to deploy
- Update env.config file to meet your requirements:
# Data volume root dir
export VOLUME_PATH=/srv/nexus-data
# will be accessable with https://SERVER_NAME
export SERVER_NAME=nexus.sandbox.example.com
# docker dev repo with anonymous push/pull
export DOCKER_DEV_NAME=docker-dev.sandbox.example.com
# docker virtual repo with anonymous pull
export DOCKER_VIRTUAL_NAME=docker-virtual.sandbox.example.com
# will be used in docker-proxy upstream configuration
export UPSTREAM_DOCKER_REPO=https://docker-prod-virtual.docker.example.com- Put
ssl.keyandssl.crtfiles in innginx/ssl/directory
Automatic deployment steps on Nexus side
Implemeted by running curl with related json files
- Create Remote User Token
- Create docker-dev repository with listening on 8082 port
- Create docker-proxy repository with pointing to Upstream docker repo UPSTREAM_DOCKER_REPO defined in
env.config - Create docker-virtual repository with listening on 8083 port and which includes both:
- docker-dev
- docker-proxy
Running
Please check ./manage.sh for help
Usage: ./manage.sh ACTION
ACTION:
init [Optional] generate config files,
check ssl keys, build required images
status get containers status
debug run docker-compose in foreground
start start all containers in background
stop stop all containersUsage
- Your nexus web interface will be available -
SERVER_NAME - Your dev repository for pushing/pulling -
DOCKER_DEV_NAME - Your proxy repository for pulling from upstream + dev -
DOCKER_VIRTUAL_NAMEFor example:
# 1. nexus web interface available https://nexus.sandbox.example.com
# with admin:admin123 (nexus default credentials)
SERVER_NAME=nexus.sandbox.example.com
# 2. pushing to dev
docker push dev-nexus.sandbox.example.com/my-container:v1.0.0
# 3. pulling from virtual, which is dev+UPSTREAM_DOCKER_REPO
docker pull virtual-nexus.sandbox.example.com/debian:jessieNotes and limitations
- push/pull to docker-dev repo DOESN'T require authorization since we are doing this transparantly on proxy
- pull from docker-virtual (which is docker-dev + docker-proxy) can be done anonymously as well
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent