Package com.cloudforgeci.api.application.artifactregistry

Class NexusApplicationSpec

java.lang.Object
com.cloudforgeci.api.application.artifactregistry.NexusApplicationSpec
All Implemented Interfaces:
ApplicationSpec
@ApplicationPlugin(value="nexus", category="artifactregistry", displayName="Nexus", description="Universal artifact repository manager", defaultCpu=2048, defaultMemory=4096, defaultInstanceType="t3.medium", supportsFargate=true, supportsEc2=true, supportsOidc=false) public class NexusApplicationSpec extends Object implements ApplicationSpec
Sonatype Nexus Repository Manager ApplicationSpec implementation.

Nexus is a universal artifact repository supporting Maven, npm, Docker, PyPI, RubyGems, and more.

Key Features:

  • Universal artifact repository (Maven, npm, Docker, PyPI)
  • Proxy remote repositories
  • Role-based access control
  • Vulnerability scanning
  • License analysis

Compliance Use Cases:

  • SOC2: Software bill of materials (SBOM) tracking
  • PCI-DSS: Secure artifact storage for payment processing applications
  • HIPAA: Audit trail for healthcare application deployments

Fintech Applications:

  • Store payment gateway SDK artifacts
  • Host Docker images for financial services
  • Proxy npm packages for fintech frontends
  • Track artifact provenance and signatures

Security Note:

  • Change default admin password immediately
  • Enable LDAP/SAML/OIDC for production
  • Configure blob store encryption
  • Enable audit logging
See Also:

  • Constructor Details

    • NexusApplicationSpec

      public NexusApplicationSpec()

  • Method Details

    • applicationId

      public String applicationId()
      Description copied from interface: ApplicationSpec
      Returns a unique identifier for this application. Used for logging, metrics, and resource naming.
      Specified by:
      applicationId in interface ApplicationSpec
      Returns:
      application identifier (e.g., "jenkins", "gitlab", "vault")

    • defaultContainerImage

      public String defaultContainerImage()
      Description copied from interface: ApplicationSpec
      Returns the default container image for this application. Can be overridden by deployment context configuration.
      Specified by:
      defaultContainerImage in interface ApplicationSpec
      Returns:
      container image string (e.g., "jenkins/jenkins:lts")

    • applicationPort

      public int applicationPort()
      Description copied from interface: ApplicationSpec
      Returns the primary application port. This is the port the application listens on inside the container.
      Specified by:
      applicationPort in interface ApplicationSpec
      Returns:
      application port (e.g., 8080 for Jenkins)

    • optionalPorts

      public List<ApplicationSpec.OptionalPort> optionalPorts()
      Description copied from interface: ApplicationSpec
      Returns optional ports that can be enabled via deployment configuration.

      These ports are NOT exposed by default. Users must set the corresponding configKey to true in their deployment configuration to enable each port.

      Example implementation for Mattermost:

      
 @Override
 public List<OptionalPort> optionalPorts() {
     return List.of(
         OptionalPort.outboundTcp(587, "enableSmtp", "SMTP Email"),
         OptionalPort.inboundTcp(8074, "enableClustering", "Cluster Gossip")
     );
 }

      User enables in deployment-context.json:

      
 {
   "enableSmtp": true,
   "enableClustering": true
 }
      Specified by:
      optionalPorts in interface ApplicationSpec
      Returns:
      list of optional ports (empty by default - most apps only need primary port)

    • containerDataPath

      public String containerDataPath()
      Description copied from interface: ApplicationSpec
      Returns the container path where application data is stored. This is where the volume will be mounted inside the container.
      Specified by:
      containerDataPath in interface ApplicationSpec
      Returns:
      container mount path (e.g., "/var/jenkins_home")

    • efsDataPath

      public String efsDataPath()
      Description copied from interface: ApplicationSpec
      Returns the EFS path for this application's data. This is the path within the EFS filesystem.
      Specified by:
      efsDataPath in interface ApplicationSpec
      Returns:
      EFS path (e.g., "/jenkins")

    • volumeName

      public String volumeName()
      Description copied from interface: ApplicationSpec
      Returns the volume name for this application. Used to reference the volume in task definitions.
      Specified by:
      volumeName in interface ApplicationSpec
      Returns:
      volume name (e.g., "jenkinsHome")

    • containerUser

      public String containerUser()
      Description copied from interface: ApplicationSpec
      Returns the container user (UID:GID) to run as. Important for file permissions when using EFS.
      Specified by:
      containerUser in interface ApplicationSpec
      Returns:
      user in format "UID:GID" (e.g., "1000:1000")

    • efsPermissions

      public String efsPermissions()
      Description copied from interface: ApplicationSpec
      Returns the EFS permissions for the access point.
      Specified by:
      efsPermissions in interface ApplicationSpec
      Returns:
      permissions string (e.g., "750")

    • ebsDeviceName

      public String ebsDeviceName()
      Description copied from interface: ApplicationSpec
      Returns the EBS device name for EC2 instances when not using EFS. This is the device that will be formatted and mounted for application data.
      Specified by:
      ebsDeviceName in interface ApplicationSpec
      Returns:
      EBS device path (e.g., "/dev/xvdh")

    • ec2DataPath

      public String ec2DataPath()
      Description copied from interface: ApplicationSpec
      Returns the EC2 data path where application stores persistent data. This may differ from containerDataPath depending on application packaging.
      Specified by:
      ec2DataPath in interface ApplicationSpec
      Returns:
      EC2 mount path (e.g., "/var/lib/jenkins")

    • ec2LogPaths

      public List<String> ec2LogPaths()
      Description copied from interface: ApplicationSpec
      Returns CloudWatch log file paths for EC2 monitoring. These files will be streamed to CloudWatch Logs for centralized logging.
      Specified by:
      ec2LogPaths in interface ApplicationSpec
      Returns:
      list of absolute log file paths (e.g., ["/var/log/jenkins/jenkins.log"])

    • configureUserData

      public void configureUserData(UserDataBuilder builder, Ec2Context context)
      Description copied from interface: ApplicationSpec
      Configure EC2 UserData script for application installation and setup.

      The implementation should use the UserDataBuilder to add application-specific installation commands while leveraging infrastructure helpers for storage mounting and CloudWatch configuration.

      The infrastructure handles:

      • System updates
      • EFS vs EBS storage mounting (based on availability)
      • CloudWatch Agent installation and configuration
      • File permissions and ownership

      The application provides:

      • Application installation commands (yum/dnf install, etc.)
      • Application configuration
      • Service startup commands
      Specified by:
      configureUserData in interface ApplicationSpec
      Parameters:
      builder - The UserDataBuilder providing infrastructure helpers
      context - The Ec2Context providing runtime information

    • supportsOidcIntegration

      public boolean supportsOidcIntegration()
      Description copied from interface: ApplicationSpec
      Returns whether this application supports OIDC integration.

      Applications with built-in OIDC support (GitLab, Grafana, SonarQube) or plugin support (Jenkins) should return true.

      Specified by:
      supportsOidcIntegration in interface ApplicationSpec
      Returns:
      true if application can integrate with OIDC providers

    • getOidcIntegration

      public OidcIntegration getOidcIntegration()
      Description copied from interface: ApplicationSpec
      Returns the OIDC integration handler for this application.

      This provides application-specific configuration for integrating with Cognito or IAM Identity Center OIDC.

      Specified by:
      getOidcIntegration in interface ApplicationSpec
      Returns:
      OIDC integration handler, or null if not supported

    • toString

      public String toString()
      Overrides:
      toString in class Object