version: "3.8"

services:
  elasticsearch:
    image: "docker.elastic.co/elasticsearch/elasticsearch:8.11.3"
    environment:
      - cluster.name=docker-cluster
      - bootstrap.memory_lock=true
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
      - discovery.type=single-node
      # Disable authentication and ssl completely
      # - xpack.security.enabled=false
      # Use this to enable Basic Authentication:
      - xpack.security.enabled=true
      - xpack.security.http.ssl.enabled=false
      - ELASTIC_PASSWORD_FILE=/var/run/secrets/elasticsearch_password
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - elasticsearch:/usr/share/elasticsearch/data
    networks:
      - internal
    secrets:
      - source: elasticsearch_password
        uid: "1000"
        gid: "1000"
        mode: 0600

secrets:
  elasticsearch_password:
    external: true
    name: ${STACK_NAME}_elasticsearch_password_${SECRET_ELASTICSEARCH_PASSWORD_VERSION}

volumes:
  elasticsearch: