Nexus Repository Community Edition on AWS, packaged by CloudSOE

Deploy a production ready Sonatype™ Nexus™ Repository Community Edition server on AWS in minutes: one private registry for your Maven, npm, Docker, PyPI, NuGet, Cargo, Composer and other components, proxying and caching the public registries your builds depend on. Built for development teams and platform engineers who want build dependencies cached close to CI, private artifacts hosted under their control, and protection from public registry outages and rate limits, without the Java, storage and reverse proxy assembly a correct deployment requires. This image ships the environment hardened and assembled; the latest Community Edition installs from Sonatype's official distribution on first start, and you accept Sonatype's EULA in the product's own onboarding wizard.

Why a repository manager, and why this image

Every build your team runs pulls dependencies from public registries that rate limit, change and occasionally disappear. A repository manager caches those dependencies once, close to your CI runners, and gives your own artifacts a home with access control. Nexus Repository is the long standing standard for the job. This image handles the deployment realities: correct Java runtime, data directory on its own path with sizing guidance (artifact storage grows relentlessly).

Common use cases

• Dependency caching: proxy Maven Central, npmjs, PyPI and Docker Hub once, insulate CI from rate limits and outages
• Private artifact hosting: your libraries, packages and images with access control
• Private Docker registry: hosted images for your deployments without per seat registry pricing
• Air gap and controlled environments: a single, auditable path for components entering your network
• Build performance: dependencies served from your VPC instead of the public internet, CI minutes saved on every run

Usage notes

• To activate CloudWatch and Session Manager, attach an IAM instance role with the AWS-managed policies CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore. No AWS credentials are stored on the image.
• Web UI: http://:8081 (open TCP 8081 and 22 in the security group). Initial admin password: sudo cat /opt/sonatype-work/nexus3/admin.password, then complete the setup wizard. Install: /opt/nexus; data: /opt/sonatype-work/nexus3; secrets key: /opt/nexus/nexus.secrets.json; JVM options: /opt/nexus/bin/nexus.vmoptions.
• CloudWatch agent configuration: /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/nexus-oss.json.

Quick Start:

• Browse to http://:8081.
• First admin password (per Sonatype convention): SSH in as 'ubuntu' and run sudo cat /opt/sonatype-work/nexus3/admin.password.
• Complete the setup wizard to set your own password.
• Monitoring: attach an IAM instance role with the AWS-managed policies CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore to enable CloudWatch logs/metrics (namespace CloudSOE/nexus-oss) and Session Manager. No AWS credentials are stored on the image.

Sizing guidance

Nexus is a JVM service with appetite. Minimum listed: t3.large (8 GB), suitable for small teams. Recommended production: m7i.large with gp3 storage sized generously for artifacts.

Trademark and licensing notice

Sonatype™, Nexus™ and Sonatype Nexus Repository™ are trademarks of Sonatype, Inc. This product is independently packaged and maintained and is not affiliated with, endorsed by, or supported by Sonatype, Inc. Nexus Repository Community Edition is Sonatype's software, installed at first boot from Sonatype's official distribution and licensed to you directly by Sonatype under the Community Edition EULA you accept in the onboarding wizard.