1. 使用docker-compose部署nexus

1. docker-compose-nexus.yml

   version: "3"
   services:nexus:container_name: my-nexusimage: sonatype/nexus3:3.67.1hostname: my-nexusnetwork_mode: hostports:- 8081:8081deploy:resources:limits:cpus: '4'memory: 8192Mreservations:cpus: '4'memory: 4096Mhealthcheck:test: ["CMD", "curl", "-f", "http://localhost:8081"]interval: 30stimeout: 10sretries: 3volumes:- "/data/nexus:/nexus-data"- "/etc/localtime:/etc/localtime"restart: always

2. 部署

   docker-compose -f docker-compose-nexus.yml up -d
   

3. 根據自己服務器IP地址，配置hosts

   vim /etc/hosts192.168.xxx.xxx my-nexus
   

4. 防火墻開放8081端口

   firewall-cmd --zone=public --add-port=8081/tcp --permanent
   firewall-cmd --reload
   

5. web訪問

   http://192.168.xxx.xxx:8081

   用戶名：admin

   容器創建會生成默認密碼，在容器內的/nexus-data/admin.password中。由于做了數據卷映射。所以在宿主機/data/nexus中也能看到admin.password

   使用默認密碼登錄成功后，根據提示修改密碼

2. 配置https訪問

1. docker-compose-nginx.yml

   version: "3"
   services:nginx:restart: alwaysimage: nginx:1.26.2container_name: my-nginxhostname: my-nginxnetwork_mode: hostprivileged: truevolumes:- "/config/nginx/nginx.conf:/etc/nginx/nginx.conf"- "/config/nginx/conf.d:/etc/nginx/conf.d"- "/logs/nginx:/var/log/nginx"- "/data/nginx:/data/nginx"
   

2. ssl證書及配置文件

   • 自己生成ssl證書，放到指定目錄

   • 配置文件

     server {listen    18081 ssl;server_name  localhost;ssl_certificate      /etc/nginx/conf.d/certs/server.crt;ssl_certificate_key  /etc/nginx/conf.d/certs/server.key;ssl_session_cache    shared:SSL:1m;ssl_session_timeout  5m;ssl_protocols TLSv1.2 TLSv1.3;ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;ssl_prefer_server_ciphers  on;server_tokens off;add_header Strict-Transport-Security "max-age=3600; includeSubDomains";client_max_body_size 2000m;root html;charset 'utf-8';location / {proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header    Host $http_host;proxy_set_header   X-Forwarded-Proto https;  # 轉發時使用https協議server_name_in_redirect on;proxy_pass      http://my-nexus:8081;}}
     

3. 部署

   docker-compose -f docker-compose-nginx.yml up -d
   

4. 根據服務器IP，配置hosts

   vim /etc/hosts192.168.xxx.xxx my-nginx
   

5. 防火墻開放18081端口

   firewall-cmd --zone=public --add-port=18081/tcp --permanent
   firewall-cmd --reload
   

6. web訪問

   https://192.168.xxx.xxx:18081