60 lines
2.2 KiB
Django/Jinja
60 lines
2.2 KiB
Django/Jinja
# {{ ansible_managed }}
|
|
|
|
cluster.name: {{ elasticsearch_cluster_name }}
|
|
node.name: {{ elasticsearch_node_name }}
|
|
path.data: /var/lib/elasticsearch
|
|
path.logs: /var/log/elasticsearch
|
|
bootstrap.memory_lock: true
|
|
network.host: {{ elasticsearch_network_host }}
|
|
|
|
{% if single_node %}
|
|
discovery.type: single-node
|
|
{% elif elasticsearch_bootstrap_node %}
|
|
node.master: true
|
|
cluster.initial_master_nodes:
|
|
{% for item in elasticsearch_cluster_nodes %}
|
|
- {{ item }}
|
|
{% endfor %}
|
|
discovery.seed_hosts:
|
|
{% for item in elasticsearch_discovery_nodes %}
|
|
- {{ item }}
|
|
{% endfor %}
|
|
{% else %}
|
|
node.master: {{ elasticsearch_master_candidate|lower }}
|
|
discovery.seed_hosts:
|
|
{% for item in elasticsearch_discovery_nodes %}
|
|
- {{ item }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
{% if elasticsearch_lower_disk_requirements %}
|
|
cluster.routing.allocation.disk.threshold_enabled: true
|
|
cluster.routing.allocation.disk.watermark.flood_stage: 200mb
|
|
cluster.routing.allocation.disk.watermark.low: 500mb
|
|
cluster.routing.allocation.disk.watermark.high: 300mb
|
|
{% endif %}
|
|
|
|
# XPACK Security
|
|
|
|
{% if elasticsearch_xpack_security %}
|
|
xpack.security.enabled: true
|
|
xpack.security.transport.ssl.enabled: true
|
|
xpack.security.transport.ssl.verification_mode: certificate
|
|
xpack.security.transport.ssl.key: {{node_certs_destination}}/{{ elasticsearch_node_name }}.key
|
|
xpack.security.transport.ssl.certificate: {{node_certs_destination}}/{{ elasticsearch_node_name }}.crt
|
|
{% if generate_CA == true %}
|
|
xpack.security.transport.ssl.certificate_authorities: [ "{{ node_certs_destination }}/ca.crt" ]
|
|
{% elif generate_CA == false %}
|
|
xpack.security.transport.ssl.certificate_authorities: [ "{{ node_certs_destination }}/{{ca_cert_name}}" ]
|
|
{% endif %}
|
|
xpack.security.http.ssl.enabled: true
|
|
xpack.security.http.ssl.verification_mode: certificate
|
|
xpack.security.http.ssl.key: {{node_certs_destination}}/{{ elasticsearch_node_name }}.key
|
|
xpack.security.http.ssl.certificate: {{node_certs_destination}}/{{ elasticsearch_node_name }}.crt
|
|
{% if generate_CA == true %}
|
|
xpack.security.http.ssl.certificate_authorities: [ "{{ node_certs_destination }}/ca.crt" ]
|
|
{% elif generate_CA == false %}
|
|
xpack.security.http.ssl.certificate_authorities: [ "{{ node_certs_destination }}/{{ca_cert_name}}" ]
|
|
{% endif %}
|
|
{% endif %}
|