version: '3.7'

services:
  dev-elastic-stack-01-elastic:
    image: "docker.elastic.co/elasticsearch/elasticsearch:7.12.0"
    container_name: "dev-elastic-stack-01-elastic"
    restart: always
    user: root
    environment:
      ES_JAVA_OPTS: -Xms3886m -Xmx3886m
      node.name: "dev-elastic-stack-01-elastic"
      cluster.name: dev-elastic-stack
      discovery.seed_hosts: dev-elastic-stack-02-elastic,dev-elastic-stack-03-elastic
      cluster.initial_master_nodes: dev-elastic-stack-01-elastic,dev-elastic-stack-02-elastic,dev-elastic-stack-03-elastic
      bootstrap.memory_lock: "true"
      network.publish_host: 10.0.0.2
      xpack.security.enabled: "true"
      xpack.security.http.ssl.enabled: "true"
      xpack.security.http.ssl.key: /usr/share/elasticsearch/config/certificates/dev-elastic-stack-01-elastic/dev-elastic-stack-01-elastic.key
      xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/certificates/ca/ca.crt
      xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/certificates/dev-elastic-stack-01-elastic/dev-elastic-stack-01-elastic.crt
      xpack.security.transport.ssl.enabled: "true"
      xpack.security.transport.ssl.verification_mode: certificate
      xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/certificates/ca/ca.crt
      xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/certificates/dev-elastic-stack-01-elastic/dev-elastic-stack-01-elastic.crt
      xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/certificates/dev-elastic-stack-01-elastic/dev-elastic-stack-01-elastic.key
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - "dev-elastic-stack-01-elastic-data:/usr/share/elasticsearch/data"
      - "./certs:/usr/share/elasticsearch/config/certificates:ro"
      - "./config/roles.yml:/usr/share/elasticsearch/config/roles.yml:ro"
    networks:
      - "back-tier"
    extra_hosts:
      - dev-elastic-stack-01-elastic:10.0.0.2
      - dev-elastic-stack-02-elastic:10.0.0.3
      - dev-elastic-stack-03-elastic:10.0.0.4
    ports:
      - 9200:9200
      - 9300:9300

networks:
  back-tier:
    external: True

volumes:
  dev-elastic-stack-01-elastic-data: {}