35 lines
2.1 KiB
YAML
35 lines
2.1 KiB
YAML
# WARNING: revise all the lines below before you go into production
|
|
network.host: "${OGLOG_IP}"
|
|
plugins.security.ssl.transport.pemcert_filepath: esnode.pem
|
|
plugins.security.ssl.transport.pemkey_filepath: esnode-key.pem
|
|
plugins.security.ssl.transport.pemtrustedcas_filepath: root-ca.pem
|
|
plugins.security.ssl.transport.enforce_hostname_verification: false
|
|
plugins.security.ssl.http.enabled: true
|
|
plugins.security.ssl.http.pemcert_filepath: oglog-os.{SUBDOMAIN}.crt.pem
|
|
plugins.security.ssl.http.pemkey_filepath: oglog-os.{SUBDOMAIN}.key.pem
|
|
plugins.security.ssl.http.pemtrustedcas_filepath: ca.crt.pem
|
|
plugins.security.allow_unsafe_democertificates: true
|
|
plugins.security.allow_default_init_securityindex: true
|
|
plugins.security.authcz.admin_dn: ['CN=kirk,OU=client,O=client,L=test,C=de']
|
|
plugins.security.audit.type: internal_opensearch
|
|
plugins.security.enable_snapshot_restore_privilege: true
|
|
plugins.security.check_snapshot_restore_write_privileges: true
|
|
plugins.security.restapi.roles_enabled: [all_access, security_rest_api_access]
|
|
plugins.security.system_indices.enabled: true
|
|
plugins.security.system_indices.indices: [.plugins-ml-agent, .plugins-ml-config, .plugins-ml-connector,
|
|
.plugins-ml-controller, .plugins-ml-model-group, .plugins-ml-model, .plugins-ml-task,
|
|
.plugins-ml-conversation-meta, .plugins-ml-conversation-interactions, .plugins-ml-memory-meta,
|
|
.plugins-ml-memory-message, .plugins-ml-stop-words, .opendistro-alerting-config,
|
|
.opendistro-alerting-alert*, .opendistro-anomaly-results*, .opendistro-anomaly-detector*,
|
|
.opendistro-anomaly-checkpoints, .opendistro-anomaly-detection-state, .opendistro-reports-*,
|
|
.opensearch-notifications-*, .opensearch-notebooks, .opensearch-observability, .ql-datasources,
|
|
.opendistro-asynchronous-search-response*, .replication-metadata-store, .opensearch-knn-models,
|
|
.geospatial-ip2geo-data*, .plugins-flow-framework-config, .plugins-flow-framework-templates,
|
|
.plugins-flow-framework-state]
|
|
node.max_local_storage_nodes: 3
|
|
discovery.type: single-node
|
|
compatibility.override_main_response_version: true
|
|
plugins.security.ssl.http.clientauth_mode: REQUIRE
|
|
plugins.security.ssl_cert_reload_enabled: true
|
|
|