tpotce/docker/elk/elasticsearch/docker-compose.yml

services:

# ELK services
## Elasticsearch service
  elasticsearch:
    build: .
    container_name: elasticsearch
    restart: always
    environment:
     - bootstrap.memory_lock=true
     - ES_JAVA_OPTS=-Xms1024m -Xmx1024m
     - ES_TMPDIR=/tmp
    cap_add:
     - IPC_LOCK
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65536
        hard: 65536
    mem_limit: 2g
    ports:
     - "127.0.0.1:64298:9200"
    image: "dtagdevsec/elasticsearch:24.04"
    volumes:
     - $HOME/tpotce/data:/data
tweaking, hardening 2018-03-31 15:18:28 +00:00			`services:`

			`# ELK services`
			`## Elasticsearch service`
			`elasticsearch:`
			`build: .`
			`container_name: elasticsearch`
			`restart: always`
			`environment:`
			`- bootstrap.memory_lock=true`
finetuning, tweaking 2018-05-16 14:57:52 +00:00			`- ES_JAVA_OPTS=-Xms1024m -Xmx1024m`
			`- ES_TMPDIR=/tmp`
tweaking, hardening 2018-03-31 15:18:28 +00:00			`cap_add:`
			`- IPC_LOCK`
			`ulimits:`
			`memlock:`
			`soft: -1`
			`hard: -1`
			`nofile:`
			`soft: 65536`
			`hard: 65536`
			`mem_limit: 2g`
			`ports:`
			`- "127.0.0.1:64298:9200"`
add 24.04 version tag 2024-03-24 18:22:37 +00:00			`image: "dtagdevsec/elasticsearch:24.04"`
tweaking, hardening 2018-03-31 15:18:28 +00:00			`volumes:`
cleanup, tweaking, updating make tpotinit aware of sigterm events to unload blackhole routes, firewall rules fixes #1204 where citrixhoneypot logs use logs instead of log folder bump ELK stack to 8.12.2 add wordpot logs to logstash pipeline bump t-pot attackmap to 2.2.0, alpine 3.19 2024-03-12 16:03:43 +00:00			`- $HOME/tpotce/data:/data`