Simple role to install a single node (unsecured) ElasticStack with kibana and beats templates. Development is still in an early stage and usage in production is not suggested!
!!! Make Kibana listen only on local host and put a BasicAuth secured Proxy in front of it !!!
!!! Make elasticsearch listen on all devices (0.0.0.0) and restrict access using iptables !!!
elasticsearch_heap_size: 1g
elasticsearch_install_elasticsearch: True
elasticsearch_install_kibana: True
# elasticsearch_network_host: "localhost" # elasticsearch listens here
# elasticsearch_listen_ip: "localhost" # ip address to which kibana and beats should connect to
# elasticsearch_kibana_listen_ip: "localhost" # kibana listens here
elasticsearch_release: 7.16.2
elasticsearch_install_auditbeat: True
elasticsearch_install_filebeat: True
elasticsearch_install_heartbeat: True
elasticsearch_install_metricbeat: True
elasticsearch_install_packetbeat: True
elasticsearch_init_trial_license: False # Should a 30 Day Trial license be initialized and XPack feature be installed
- hosts: elasticsearch
roles:
- { role: andrelohmann.elasticsearch }
Implement the following instructions into the role
https://blog.netways.de/2017/09/14/secure-elasticsearch-and-kibana-with-an-nginx-http-proxy/
or
implement SearchGuard
MIT