Elasticsearch & Kibana with TLS / X-Pack Security Enabled

docker-compose-elasticsearch-kibana-tls.yaml

version: '2.2'
services:
  elasticsearch-master-tls:
    image: docker.elastic.co/elasticsearch/elasticsearch:7.10.1
    container_name: elasticsearch-master-tls
    environment:
      - node.name=elasticsearch-master-tls
      - cluster.name=elasticsearch-cluster-server
      - cluster.initial_master_nodes=elasticsearch-master-tls
      - bootstrap.memory_lock=true
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - xpack.security.enabled=true
      - xpack.license.self_generated.type=trial
      - xpack.security.transport.ssl.enabled=true
      - xpack.security.transport.ssl.verification_mode=certificate
      - xpack.security.transport.ssl.certificate_authorities=/usr/share/elasticsearch/config/certificates/ca/ca.crt
      - xpack.security.transport.ssl.certificate=/usr/share/elasticsearch/config/certificates/elasticsearch-master/elasticsearch-master.crt
      - xpack.security.transport.ssl.key=/usr/share/elasticsearch/config/certificates/elasticsearch-master/elasticsearch-master.key
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65536
        hard: 65536
    volumes:
      - elasticsearch-master-tls:/usr/share/elasticsearch/data
      - ./elasticsearch/certificates/certs/:/usr/share/elasticsearch/config/certificates/
    ports:
      - 9200
    networks:
      - elastic-tls
  kibana-tls:
    image: docker.elastic.co/kibana/kibana:7.10.1
    container_name: kibana-tls
    ports:
      - 5602:5601
    environment:
      - ELASTICSEARCH_URL=http://elasticsearch-master-tls:9200
      - ELASTICSEARCH_HOSTS=http://elasticsearch-master-tls:9200
      - ELASTICSEARCH_USERNAME=kibana_system
      - ELASTICSEARCH_PASSWORD=kibanapass
      - ELASTIC_SSL_CERTIFICATEAUTHORITIES=/etc/kibana/config/certs/ca.crt
      - ELASTICSEARCH_SSL_VERIFICATIONMODE=certificate
      - XPACK_SECURITY_ENABLED=true
      - VIRTUAL_HOST=foobar.com
      - VIRTUAL_PORT=5602
    volumes:
      - ./elasticsearch/certificates/certs/ca/:/etc/kibana/config/certs/
    networks:
      - elastic-tls
    depends_on:
      - elasticsearch-master-tls
volumes:
  elasticsearch-master-tls:
    driver: local
  certs:
    driver: local
networks:
  elastic-tls:
    driver: bridge