

| Layer | Detail |
|---|---|
| OS | Ubuntu 24.04 - systemd as PID 1 |
| Runtime | Java 21 (OpenJDK) |
| Service | Nexus 3.89.1-02 CE - runs as the nexus system user |
| Reverse proxy | Nginx on port 80 → proxies to Nexus on 8081 |
| Tunnel client | cloudflared pre-installed for public domain access via Cloudflare Tunnel |
systemd
└── lab-init (oneshot) - SSH keys, /run dirs, Nexus data ownership
└── nginx - reverse proxy on :80
└── nexus - artifact server on :8081
Inside the lab: click the Nexus UI tab. That's it.
Public URL: cloudflared is pre-installed. Install a tunnel token and
point the route to localhost:80 for SSL access on your own domain.
cat /opt/sonatype-work/nexus3/admin.password