commit

templates/elasticsearch.yml.j2

@@ -0,0 +1,47 @@
+# ======================== Elasticsearch Configuration =========================
+# ANSIBLE MANAGED FILE: Do not edit directly. Changes will be overwritten.
+#
+# ---------------------------------- Cluster -----------------------------------
+cluster.name: "{{ es_cluster_name }}"
+
+# ------------------------------------ Node ------------------------------------
+node.name: "{{ es_node_name }}"
+
+# ----------------------------------- Paths ------------------------------------
+path.data: /var/lib/elasticsearch
+path.logs: /var/log/elasticsearch
+
+# ----------------------------------- Memory -----------------------------------
+# Lock the memory on startup to prevent the OS from swapping it out.
+bootstrap.memory_lock: true
+
+# ---------------------------------- Network -----------------------------------
+# Bind to the host's private IP address for cluster communication.
+network.host: "{{ es_network_host }}"
+http.port: 9200
+
+# --------------------------------- Discovery ----------------------------------
+# A list of hosts to contact to discover the cluster.
+discovery.seed_hosts: {{ es_seed_hosts | to_json }}
+
+# Bootstrap the cluster using an initial set of master-eligible nodes.
+cluster.initial_master_nodes: {{ es_initial_master_nodes | to_json }}
+
+# ---------------------------------- Security ----------------------------------
+# Security features are enabled by default on Elasticsearch 8.0+
+# On first start, a password for the 'elastic' user and a Kibana enrollment
+# token will be generated in the output of the 'elasticsearch' service.
+# You can also generate them manually later.
+xpack.security.enabled: true
+xpack.security.enrollment.enabled: true
+
+# These settings configure TLS for HTTP and transport (inter-node) layers.
+# Elasticsearch automatically generates these certificates on first startup.
+xpack.security.http.ssl:
+  enabled: true
+  keystore.path: certs/http.p12
+xpack.security.transport.ssl:
+  enabled: true
+  verification_mode: certificate
+  keystore.path: certs/transport.p12
+  truststore.path: certs/transport.p12