I want to switch from elk to open distro but installation is really hard. In docker way of installation i need to install single node elastic and kibana without TLS/HTTPS about 1 day working with opendistro i back to elastic cause of lake of documentation and problems.
We use something like wire guard to implement security between server and tls for each service is not easy and optimized.
What’s the correct config of docker-compose.yml for non/TLS (raw HTTP) opendistro elastic / kibana
version: '3'
services:
odfe-node1:
image: amazon/opendistro-for-elasticsearch:1.4.0
container_name: odfe-node1
environment:
#- cluster.name=odfe-cluster
- node.name=odfe-node1
- discovery.type=single-node
#- discovery.seed_hosts=odfe-node1
#- cluster.initial_master_nodes=odfe-node1
- bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
- "ES_JAVA_OPTS=-Xms4096m -Xmx4096m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
- network.host=0.0.0.0 # required if not using the demo Security configuration
- opendistro_security.ssl.http.enabled=false
ulimits:
memlock:
soft: -1
hard: -1
nofile:
soft: 65536 # maximum number of open files for the Elasticsearch user, set to at least 65536 on modern systems
hard: 65536
volumes:
- odfe-data1:/usr/share/elasticsearch/data
ports:
- 9200:9200
# - 9600:9600 # required for Performance Analyzer
networks:
- odfe-net
kibana:
image: amazon/opendistro-for-elasticsearch-kibana:1.4.0
container_name: odfe-kibana
ports:
- 80:5601
expose:
- "5601"
environment:
ELASTICSEARCH_URL: http://odfe-node1:9200
ELASTICSEARCH_HOSTS: http://odfe-node1:9200
SERVER_SSL_ENABLED: "false"
networks:
- odfe-net
volumes:
odfe-data1:
networks:
odfe-net: