# ======================== Elasticsearch Configuration =========================
# ANSIBLE MANAGED FILE: Do not edit directly. Changes will be overwritten.
#
# ---------------------------------- Cluster -----------------------------------
cluster.name: "{{ es_cluster_name }}"

# ------------------------------------ Node ------------------------------------
node.name: "{{ es_node_name }}"

# ----------------------------------- Paths ------------------------------------
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch

# ----------------------------------- Memory -----------------------------------
# Lock the memory on startup to prevent the OS from swapping it out.
bootstrap.memory_lock: true

# ---------------------------------- Network -----------------------------------
# Bind to the host's private IP address for cluster communication.
network.host: "{{ es_network_host }}"
http.port: 9200

# --------------------------------- Discovery ----------------------------------
# A list of hosts to contact to discover the cluster.
discovery.seed_hosts: {{ es_seed_hosts | to_json }}

# Bootstrap the cluster using an initial set of master-eligible nodes.
cluster.initial_master_nodes: {{ es_initial_master_nodes | to_json }}

# ---------------------------------- Security ----------------------------------
# Security features are enabled by default on Elasticsearch 8.0+
# On first start, a password for the 'elastic' user and a Kibana enrollment
# token will be generated in the output of the 'elasticsearch' service.
# You can also generate them manually later.
xpack.security.enabled: true
xpack.security.enrollment.enabled: true

# These settings configure TLS for HTTP and transport (inter-node) layers.
# Elasticsearch automatically generates these certificates on first startup.
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12