Add Sonatype Nexus repository integration module

[MAVRICK-1]

Add Sonatype Nexus Repository Integration Module

Summary

Implements a Coder module for Sonatype Nexus Repository Manager integration that automatically configures Maven, npm, PyPI, and Docker registries for development workspaces.

Demo Video & Screenshots

Screencast.from.2025-07-29.23-34-36.mp4

Features

• ✅ Maven Support: Automatic settings.xml configuration
• ✅ npm Support: Automatic .npmrc configuration with scoped packages
• ✅ PyPI Support: Automatic pip.conf configuration
• ✅ Docker Support: Registry authentication setup
• ✅ Flexible Configuration: Support for multiple repositories per package manager
• ✅ Secure Credentials: API token and password support
• ✅ Username Options: Configurable username field (username or email)

Nexus Repository Manager Requirements

Version Requirements

Yes, this module requires Nexus Repository Manager Pro version for full functionality, though basic features work with the Community Edition (OSS).

Supported Authentication Methods

This module supports 4 authentication methods:

1. User Token Authentication (Recommended - Pro only)

   • Enhanced security with two-part tokens
   • Ideal for CI/CD and automated environments
   • Requires nx-usertoken-current privilege

2. API Token Authentication (Pro only)

   • Single-use access tokens via REST API
   • Programmatic token generation and management

3. Basic Authentication (OSS & Pro)

   • Standard HTTP Basic Auth with username/password
   • Works with both OSS and Pro versions

4. Base64 Encoded Credentials (OSS & Pro)

   • Base64 encoded username:password format
   • Compatible with npm and other package managers

Testing Instructions

Prerequisites

• Nexus Repository Manager instance (OSS or Pro)
• Admin access to configure repositories
• Test repositories for each package manager you want to test

Setup Test Environment

1. Create Test Repositories in your Nexus instance:

   • Maven: maven-public, maven-releases
   • npm: npm-public, @company:npm-private
   • PyPI: pypi-public, pypi-private
   • Docker: docker-public, docker-private

2. Configure Authentication:

   • For Pro: Generate user tokens via UI (User menu → User Token)
   • For OSS: Use username/password or base64 encoded credentials
   • Set up appropriate permissions for test repositories

3. Test the Module:

   module "nexus" {
     source         = "registry.coder.com/mavrickrishi/nexus/coder"
     version        = "1.0.0"
     agent_id       = coder_agent.main.id
     nexus_url      = "https://your-nexus-instance.com"
     nexus_password = var.nexus_api_token  # or password
     package_managers = {
       maven  = ["maven-public", "maven-releases"]
       npm    = ["npm-public", "@company:npm-private"]
       pypi   = ["pypi-public", "pypi-private"]
       docker = ["docker-public", "docker-private"]
     }
   }

4. Verify Configuration:

   • Check generated config files in workspace
   • Test package installation from configured repositories
   • Verify authentication works for each package manager

EC2 Deployment Testing

Tested by deploying on EC2 instance with:

• Ubuntu 22.04 LTS
• Nexus Repository Manager Pro
• All package managers (Maven, npm, PyPI, Docker)
• Both token and basic authentication methods

Usage Example

module "nexus" {
  source         = "registry.coder.com/mavrickrishi/nexus/coder"
  version        = "1.0.0"
  agent_id       = coder_agent.main.id
  nexus_url      = "https://nexus.company.com"
  nexus_password = var.nexus_api_token
  package_managers = {
    maven  = ["maven-public", "maven-releases"]
    npm    = ["npm-public", "@company:npm-private"]
    pypi   = ["pypi-public", "pypi-private"]
    docker = ["docker-public", "docker-private"]
  }
}

Testing

• ✅ 11 comprehensive tests covering all functionality
• ✅ Variable validation tests
• ✅ Package manager configuration tests
• ✅ Error handling tests
• ✅ All tests passing
• ✅ EC2 deployment tested

Files Added

• registry/mavrickrishi/modules/nexus/main.tf - Main module configuration
• registry/mavrickrishi/modules/nexus/README.md - Complete documentation
• registry/mavrickrishi/modules/nexus/main.test.ts - Test suite

Checklist

• Module follows existing patterns and conventions
• Comprehensive test coverage (11 tests)
• Complete documentation with examples
• Input validation and error handling
• Secure credential handling
• All tests passing
• Demo video included
• Screenshots added
• Testing instructions provided
• Authentication methods documented
• EC2 deployment tested

Closes #202
/claim #202

[MAVRICK-1]

linting issue fixed

[bpmct]

How does the user authenticate their account?

[MAVRICK-1]

@bpmct through url and password

[matifali]

Left a few suggestions.

[matifali]

Does it work with https://help.sonatype.com/en/user-tokens.html?

[matifali]

Also, @michaelbrewer, do you use https://help.sonatype.com/en/user-tokens.html based authentication?

[MAVRICK-1]

Does it work with https://help.sonatype.com/en/user-tokens.html?

yeah

[matifali]

I think we should rename eModule to be valued Nexus repository as Nexus has multiple other products. Please also update all other references.

[Copilot]

Pull Request Overview

This PR adds a comprehensive Sonatype Nexus Repository integration module for Coder that automatically configures Maven, npm, PyPI, and Docker registries for development workspaces with secure credential handling.

• Implements a complete Nexus integration module with support for multiple package managers
• Provides secure credential handling using API tokens and password authentication
• Includes comprehensive test coverage with 11 tests covering all functionality

Reviewed Changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
registry/mavrickrishi/modules/nexus/main.tf	Main Terraform module with variable definitions, validation rules, and script configuration
registry/mavrickrishi/modules/nexus/run.sh	Shell script that configures package managers (Maven, npm, PyPI, Docker) with Nexus repositories
registry/mavrickrishi/modules/nexus/main.test.ts	Comprehensive test suite with 11 tests covering all module functionality
registry/mavrickrishi/modules/nexus/README.md	Complete documentation with usage examples for all supported package managers
registry/mavrickrishi/README.md	Registry metadata and module listing for the mavrickrishi namespace

[MAVRICK-1]

test passed

[matifali]

One last thing
to make it in parity with JFrog is the go support. Can you add that too? I am setting up a Nexus Repository instance to test it as soon as I can.

[MAVRICK-1]

@DevelopmentCats any updates?

[DevelopmentCats]

@DevelopmentCats any updates?

Ill check on this now. I hadn't gotten an email from them

[DevelopmentCats]

@MAVRICK-1 can you run bun run fmt on this in the meantime?

[MAVRICK-1]

on it

[MAVRICK-1]

@DevelopmentCats done

[DevelopmentCats]

@MAVRICK-1 Would this work with nexus repositories that allow anonymous connections?

Im testing it out now, and I notice that nexus_password is a required variable.

[MAVRICK-1]

@DevelopmentCats yeah
User Token Authentication
Basic Authentication
Base64 Encoded Credentials
API Token Authentication

[DevelopmentCats]

@DevelopmentCats yeah User Token Authentication Basic Authentication Base64 Encoded Credentials API Token Authentication

I guess I might be misunderstanding, because when I setup nexus repository, it asked if I wanted to allow anonymous access. It definitely works when I use authentication, but the anonymous access option seemed like it would allow usage of the nexus repo without needing authentication at all. I realize that this might not be the usual usage, but we might want to leave it as a possibility since its probably not unheard of in air gapped environments.

[MAVRICK-1]

@DevelopmentCats are you using the pro version? Pro version have Authentication

[DevelopmentCats]

@DevelopmentCats are you using the pro version? Pro version have Authentication

Im not, but it seems like this would be available for basic or pro versions? https://help.sonatype.com/en/anonymous-access.html

[MAVRICK-1]

@DevelopmentCats https://help.sonatype.com/en/user-authentication.html

[MAVRICK-1]

@DevelopmentCats sorry , i didn't understood your question properly?
Is this pr good to go or any other changes needed

[DevelopmentCats]

@MAVRICK-1 I tested everything out and it seems to work well for setting up the connection to the nexus repository in all of my tests.

The only thing that I think you need to do before we can merge this is find a better logo to use for nexus. Take a look at the other icons that are used for other modules to get an idea of what we would need. We would basically just want this logo:

Once you have changed that, you will need to add the icon to https://github.com/coder/coder/tree/main/site/static/icon

In order for it to show up properly for the coder-script when run in the workspace.

You can look at my PR below for reference.

coder/coder#20219

[MAVRICK-1]

@DevelopmentCats done 🥇

[DevelopmentCats]

@MAVRICK-1 Did you make the pr to add it to the site/static/icons?

[MAVRICK-1]

coder/coder#20227

@DevelopmentCats

[DevelopmentCats]

@MAVRICK-1 Perfect!

Once that is merged, I will go ahead and release this.

Thanks for the contribution!!!

[MAVRICK-1]

@DevelopmentCats @matifali thanx a lot for all the reviews, I have learned a lot from here . Is there any way I can become a member of coder ( as a volunteer) ?

[MAVRICK-1]

@DevelopmentCats pr is merged

[DevelopmentCats]

@DevelopmentCats @matifali thanx a lot for all the reviews, I have learned a lot from here . Is there any way I can become a member of coder ( as a volunteer) ?

I would keep an eye out for announcements in discord, as the coder team will post information along those lines there. 😄