nexus reverse proxy config (/etc/nginx/http.d/nexus.conf)

gistfile1.txt

# First server: Nexus main endpoint (UI and repos except docker)
server {
    listen 1808 ssl http2;

    server_name nexus.DOMAIN.net;

    ssl_certificate /etc/nginx/ssl/gitea-nexus-nginx-nas.crt;
    ssl_certificate_key /etc/nginx/ssl/gitea-nexus-nginx-nas.key;

    access_log logs/nexus.log main;

    # allow large uploads of files
    client_max_body_size 20480m;
  
    # optimize downloading files larger than 1G
    proxy_max_temp_file_size 2048m;

    location / {
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto "https";
       proxy_pass http://10.1.1.11:2937;
    }
}

# Second server: docker registry
server {
    listen 9820 ssl http2;

    server_name nexus.DOMAIN.net;
    ssl_certificate /etc/nginx/ssl/gitea-nexus-nginx-nas.crt;
    ssl_certificate_key /etc/nginx/ssl/gitea-nexus-nginx-nas.key;

    access_log logs/docker.log main;

    # allow large uploads of files
    client_max_body_size 20480m;
  
    # optimize downloading files larger than 1G
    proxy_max_temp_file_size 2048m;

    location /v2/ {
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto "https";
       proxy_pass http://10.1.1.11:5000;
    }
}