elasticsearch 啟用密碼

修改/添加elasticsearch.yml

xpack.security.enabled: true

重啟elasticsearch。

設置密碼

交互式設置密碼

根據指引設置數個密碼。

.\elasticsearch-setup-passwords.bat interactive

自動生成密碼

根據指引自動生成數個密碼。注意保存命令行輸出。

.\elasticsearch-setup-passwords auto

在程序中使用密碼

nest

修改url為http://username:password@localhost:9200/。

生產環境

from https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html

生成證書

.\elasticsearch-certutil ca

修改/添加elasticsearch.yml

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate 
xpack.security.transport.ssl.keystore.path: elastic-stack-ca.p12
xpack.security.transport.ssl.truststore.path: elastic-stack-ca.p12

設置證書密碼

.\elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password

.\elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password

重啟elasticsearch，設置密碼。

啟用外網

在elasticsearch.yml中修改

network.host: [192.168.0.123,127.0.0.1]
discovery.seed_hosts: ["127.0.0.1", "[::1]"]

tips:整個配置流程多看報錯日志。