version: '3.7'
services:
  es01:
    image: docker.elastic.co/elasticsearch/elasticsearch:6.6.2
    container_name: ${NODE_NAME}
    hostname: ${NODE_NAME}
    environment:
      - node.name=${NODE_NAME}
      - node.name=${NODE_NAME}
      - discovery.zen.minimum_master_nodes=${DISCOVERY_ZEN_MINIMUM_MASTER_NODES}
      - cluster.name=${CLUSTER_NAME}
      - bootstrap.memory_lock=true
      - xpack.security.enabled=true
      - discovery.zen.ping.unicast.hosts=${DISCOVERY_ZEN_PING_UNICAST_HOSTS}
      - ES_JAVA_OPTS=${JAVA_MEM}
      - xpack.security.transport.ssl.enabled=true
      - xpack.security.transport.ssl.verification_mode=certificate
      - xpack.security.transport.ssl.keystore.path=/usr/share/elasticsearch/config/certificates/elastic-certificates.p12
      - xpack.security.transport.ssl.truststore.path=/usr/share/elasticsearch/config/certificates/elastic-certificates.p12
      - node.master=${NODE_MASTER}
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - /data/es:/usr/share/elasticsearch/data
      - ./elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro
      - ./elasticsearch/certificates:${CERTS_DIR}
    ports:
      - 9200:9200
      - 9300:9300
    network_mode: "host"