Nexus: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
Line 1: | Line 1: | ||
{| | {| | ||
| valign="top" | | | valign="top" | | ||
Line 59: | Line 8: | ||
export NEXUS_HOME=$HOME/nexus | export NEXUS_HOME=$HOME/nexus | ||
|} | |} | ||
{| class="wikitable sortable" | |||
|- | |||
! Local location !! Container location !! Usage | |||
|- | |||
| <code>$NEXUS_HOME/nexus3/nexus-data</code> || <code>/nexus-data</code> || Nexus data | |||
|} | |||
<source lang="bash"> | <source lang="bash"> | ||
docker run -it --rm \ | docker run -it --rm \ | ||
Line 73: | Line 26: | ||
chown -R 200:200 $NEXUS_HOME/nexus3/nexus-data/ | chown -R 200:200 $NEXUS_HOME/nexus3/nexus-data/ | ||
<source lang="bash"> | ==Docker== | ||
<source lang="bash" highlight="7,8"> | |||
docker run --detach \ | docker run --detach \ | ||
--env NEXUS_CONTEXT=nexus \ | --env NEXUS_CONTEXT=nexus \ | ||
Line 100: | Line 41: | ||
<source lang="bash"> | <source lang="bash"> | ||
docker exec -it nexus bash | docker exec -it nexus bash | ||
echo $(cat /nexus-data/admin.password) | echo $(cat /nexus-data/admin.password) | ||
Line 107: | Line 47: | ||
docker start nexus | docker start nexus | ||
docker stop nexus | docker stop nexus | ||
docker logs nexus | |||
</source> | </source> | ||
== | ==Apache== | ||
<source lang="apache" highlight="6"> | <source lang="apache" highlight="6"> | ||
<Location /nexus> | <Location /nexus> | ||
Line 120: | Line 61: | ||
</source> | </source> | ||
<source lang="bash"> | <source lang="bash"> | ||
touch /etc/apache2/sites-enabled/01-{hub,reg}.chorke.org.conf | touch /etc/apache2/sites-enabled/01-{hub,reg}.chorke.org.conf | ||
Line 127: | Line 67: | ||
</source> | </source> | ||
=== | ==Group== | ||
===HTTP=== | |||
---- | ---- | ||
<source lang="apache" highlight="3-5,27-30"> | <source lang="apache" highlight="3-5,27-30"> | ||
Line 165: | Line 105: | ||
</source> | </source> | ||
===HTTPS=== | |||
---- | ---- | ||
<source lang="apache" highlight="4-7,12,29-35,37-40"> | <source lang="apache" highlight="4-7,12,29-35,37-40"> | ||
Line 213: | Line 153: | ||
</source> | </source> | ||
=== | ==Private== | ||
===HTTP=== | |||
---- | ---- | ||
<source lang="apache" highlight="3-5,27-30"> | <source lang="apache" highlight="3-5,27-30"> | ||
Line 250: | Line 190: | ||
EOF | EOF | ||
</source> | </source> | ||
===HTTPS=== | |||
---- | ---- | ||
<source lang="apache" highlight="4-7,12,29-35,37-40"> | <source lang="apache" highlight="4-7,12,29-35,37-40"> |
Revision as of 18:36, 25 August 2020
Linux: export NEXUS_HOME=/srv/nexus |
MacOS: export NEXUS_HOME=$HOME/nexus |
Local location | Container location | Usage |
---|---|---|
$NEXUS_HOME/nexus3/nexus-data |
/nexus-data |
Nexus data |
docker run -it --rm \
--env NEXUS_CONTEXT=nexus \
--publish 8081:8081 \
sonatype/nexus3:3.22.0 \
bin/bash
id; exit
mkdir -p $NEXUS_HOME/nexus3/nexus-data/ chown -R 200:200 $NEXUS_HOME/nexus3/nexus-data/
Docker
docker run --detach \
--env NEXUS_CONTEXT=nexus \
--publish 8081:8081 \
--publish 8082:8082 \
--publish 8083:8083 \
--name nexus \
--restart always \
--volume $NEXUS_HOME/nexus3/nexus-data:/nexus-data \
sonatype/nexus3:3.26.0
docker exec -it nexus bash
echo $(cat /nexus-data/admin.password)
exit
docker start nexus
docker stop nexus
docker logs nexus
Apache
<Location /nexus>
Order Allow,Deny
Allow from all
ProxyPass http://localhost:8081/nexus nocanon
ProxyPassReverse http://localhost:8081/nexus
RequestHeader set X-Forwarded-Proto "https"
</Location>
touch /etc/apache2/sites-enabled/01-{hub,reg}.chorke.org.conf
touch /etc/apache2/sites-enabled/01-{hub,reg}.chorke.org-le-ssl.conf
mkdir -p /var/chorke/www/{hub,reg}.chorke.org/html/.well-known/acme-challenge/
Group
HTTP
cat <<EOF >> /etc/apache2/sites-enabled/01-hub.chorke.org.conf
<VirtualHost *:80>
ProxyRequests Off
ProxyPreserveHost On
AllowEncodedSlashes Off
ServerAlias hub.chorke.org
ServerAdmin [email protected]
ServerName www.hub.chorke.org
DocumentRoot /var/chorke/www/hub.chorke.org/html
ErrorLog /var/chorke/www/hub.chorke.org/error.log
CustomLog /var/chorke/www/hub.chorke.org/requests.log combined
<Directory "/var/chorke/www/hub.chorke.org/">
AllowOverride None
Require all granted
</Directory>
<Directory "/var/chorke/www/hub.chorke.org/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
Order allow,deny
Allow from all
</Directory>
#RewriteEngine on
#RewriteCond %{SERVER_NAME} =www.hub.chorke.org [OR]
#RewriteCond %{SERVER_NAME} =hub.chorke.org
#RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
EOF
HTTPS
cat <<EOF >> /etc/apache2/sites-enabled/01-hub.chorke.org-le-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
SSLProxyEngine On
ProxyRequests Off
ProxyPreserveHost On
AllowEncodedSlashes Off
ServerAlias hub.chorke.org
ServerAdmin [email protected]
ServerName www.hub.chorke.org
DocumentRoot /var/chorke/www/hub.chorke.org/html
ErrorLog /var/chorke/www/hub.chorke.org/error.log
CustomLog /var/chorke/www/hub.chorke.org/requests.log combined
<Directory "/var/chorke/www/hub.chorke.org/">
AllowOverride None
Require all granted
</Directory>
<Directory "/var/chorke/www/hub.chorke.org/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
Order allow,deny
Allow from all
</Directory>
<Location />
Order Allow,Deny
Allow from all
ProxyPass http://localhost:8082/ nocanon
ProxyPassReverse http://localhost:8082/
RequestHeader set X-Forwarded-Proto "https"
</Location>
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/hub.chorke.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/hub.chorke.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/hub.chorke.org/chain.pem
</VirtualHost>
</IfModule>
EOF
Private
HTTP
cat <<EOF >> /etc/apache2/sites-enabled/01-reg.chorke.org.conf
<VirtualHost *:80>
ProxyRequests Off
ProxyPreserveHost On
AllowEncodedSlashes Off
ServerAlias reg.chorke.org
ServerAdmin [email protected]
ServerName www.reg.chorke.org
DocumentRoot /var/chorke/www/reg.chorke.org/html
ErrorLog /var/chorke/www/reg.chorke.org/error.log
CustomLog /var/chorke/www/reg.chorke.org/requests.log combined
<Directory "/var/chorke/www/reg.chorke.org/">
AllowOverride None
Require all granted
</Directory>
<Directory "/var/chorke/www/reg.chorke.org/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
Order allow,deny
Allow from all
</Directory>
#RewriteEngine on
#RewriteCond %{SERVER_NAME} =www.reg.chorke.org [OR]
#RewriteCond %{SERVER_NAME} =reg.chorke.org
#RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
EOF
HTTPS
cat <<EOF >> /etc/apache2/sites-enabled/01-reg.chorke.org-le-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
SSLProxyEngine On
ProxyRequests Off
ProxyPreserveHost On
AllowEncodedSlashes Off
ServerAlias reg.chorke.org
ServerAdmin [email protected]
ServerName www.reg.chorke.org
DocumentRoot /var/chorke/www/reg.chorke.org/html
ErrorLog /var/chorke/www/reg.chorke.org/error.log
CustomLog /var/chorke/www/reg.chorke.org/requests.log combined
<Directory "/var/chorke/www/reg.chorke.org/">
AllowOverride None
Require all granted
</Directory>
<Directory "/var/chorke/www/reg.chorke.org/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
Order allow,deny
Allow from all
</Directory>
<Location />
Order Allow,Deny
Allow from all
ProxyPass http://localhost:8083/ nocanon
ProxyPassReverse http://localhost:8083/
RequestHeader set X-Forwarded-Proto "https"
</Location>
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/reg.chorke.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/reg.chorke.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/reg.chorke.org/chain.pem
</VirtualHost>
</IfModule>
EOF
Distribution
<settings>
[...]
<profiles>
<profile>
<id>nex</id>
<properties>
<altSnapshotDeploymentRepository>snapshots::default::https://nex.chorke.org/repository/maven/snapshots</altSnapshotDeploymentRepository>
<altReleaseDeploymentRepository>releases::default::https://nex.chorke.org/repository/maven/releases</altReleaseDeploymentRepository>
</properties>
</profile>
</profiles>
</settings>