From 8064d91dfb76bc38466b5e9382b4d43f3188a444 Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Sat, 26 Feb 2022 18:56:16 +0100
Subject: Add security to telemetry deployment

---
 app/telemetry/deploy/telemetry.hcl | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'app/telemetry/deploy')

diff --git a/app/telemetry/deploy/telemetry.hcl b/app/telemetry/deploy/telemetry.hcl
index e92d0ec..48ea4ea 100644
--- a/app/telemetry/deploy/telemetry.hcl
+++ b/app/telemetry/deploy/telemetry.hcl
@@ -77,6 +77,7 @@ http.port=9200
 cluster.name=es-docker-cluster
 discovery.type=single-node
 bootstrap.memory_lock=true
+xpack.security.enabled=true
 ES_JAVA_OPTS=-Xms512m -Xmx512m
 EOH
         destination = "secrets/env"
@@ -96,6 +97,8 @@ EOH
         data = <<EOH
 SERVER_NAME=kibana.local
 ELASTICSEARCH_HOSTS=http://localhost:9200
+ELASTICSEARCH_USERNAME=kibana_system
+ELASTICSEARCH_PASSWORD={{ key "secrets/telemetry/elastic_passwords/kibana_system" }}
 EOH
         destination = "secrets/env"
         env = true
-- 
cgit v1.2.3