NEXUS PLATFORM

Terraform | Azure | Docker | CI/CD

CLOUD INFRASTRUCTURE

Modern deployment requires scalable and reproducible environments. For the Nexus Platform, I utilized Infrastructure as Code (IaC) via Terraform to architect a fully containerized cloud deployment.

The modular Terraform configuration automatically provisions a secure Azure Virtual Network, an Azure Container Registry (ACR), and a Linux Web App. By containerizing a lightweight Nginx web server with Docker, the infrastructure ensures environmental consistency from local development to production.

The deployed Nexus Platform container running on Azure

ZERO-TRUST SECURITY

Backend data protection was a primary focus of this architecture. I deployed an Azure SQL database utilizing strict Virtual Network rules to restrict all access exclusively to the application subnet, isolating the database from public internet exposure.

To prevent sensitive credentials from being exposed in the deployment pipeline, I implemented Azure Key Vault. The Terraform configuration dynamically generates complex SQL administrator passwords, stores them securely as secrets within the vault, and applies them to the database without hardcoding any values.

AUTOMATED PIPELINE

To bridge the gap between code integration and live deployment, I engineered a continuous integration and continuous deployment (CI/CD) pipeline using GitHub Actions.

Configured via a deploy.yml workflow, the pipeline listens for pushes to the main branch. Upon triggering, it securely authenticates with Azure, builds the latest Docker image, pushes it to the Azure Container Registry, and triggers a redeployment of the web app, ensuring zero-touch updates.