elasticsearch 启用密码

修改/添加elasticsearch.yml

xpack.security.enabled: true

重启elasticsearch。

设置密码

交互式设置密码

根据指引设置数个密码。

.\elasticsearch-setup-passwords.bat interactive

自动生成密码

根据指引自动生成数个密码。注意保存命令行输出。

.\elasticsearch-setup-passwords auto

在程序中使用密码

nest

修改url为http://username:password@localhost:9200/。

生产环境

from https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html

生成证书

.\elasticsearch-certutil ca

修改/添加elasticsearch.yml

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate 
xpack.security.transport.ssl.keystore.path: elastic-stack-ca.p12
xpack.security.transport.ssl.truststore.path: elastic-stack-ca.p12

设置证书密码

.\elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password

.\elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password

重启elasticsearch，设置密码。

启用外网

在elasticsearch.yml中修改

network.host: [192.168.0.123,127.0.0.1]
discovery.seed_hosts: ["127.0.0.1", "[::1]"]

tips:整个配置流程多看报错日志。