How to deply Elasticsearch and Kibana (elastic stack 7.14) in docker

How to deploy Elasticsearch and kibana in docker?

I will use docker-compose to fast deploy Elastic stack version 7.14.

1'st step:

Install docker on your machine :)

2'nd Step:

Generate certificate using any tool with what you know how to use. I used CA cert and elastic host cert for both elasticsearch and kibana. Elastic provides tool to generate certificates called  elasticsearch-certutil and you can run it from location /usr/share/elasticsearch/bin (After installing elasticsearch).

3'rd step:

After first run generate users and passwords. You can add new user with superuser role or use tool provided by elastic team (/usr/share/elasticsearch/bin/elasticsearch-setup-passwords). I used tool from elastic team because it can generate passwords for all built-in accounts.

4'th step:

Create all paths:

/docker/es01/data

/docker/es01/config/

And files:

ca.crt, pn.crt, pn.key

5'th step:

Change IP address, passwords and keys in config:

HOST_IP, Password_for_kibana_system, 32characterKey

Docker-compose.yaml:

version: '3'
services:
es01:
image: docker.elastic.co/elasticsearch/elasticsearch:7.14.0
container_name: es01
environment:
- node.name=es01
- cluster.name=elk
- discovery.type=single-node
- bootstrap.memory_lock=true
- "ES_JAVA_OPTS=-Xms2g -Xmx2g"
- http.port=9201
- network.host=HOST_IP
- xpack.security.enabled=true
- xpack.security.http.ssl.enabled=true
- xpack.security.http.ssl.key=pn.key
- xpack.security.http.ssl.certificate_authorities=ca.crt
- xpack.security.http.ssl.certificate=pn.crt
- xpack.security.transport.ssl.enabled=true
- xpack.security.transport.ssl.verification_mode=certificate
- xpack.security.transport.ssl.certificate_authorities=ca.crt
- xpack.security.transport.ssl.certificate=pn.crt
- xpack.security.transport.ssl.key=pn.key
- xpack.security.authc.api_key.enabled=true
ulimits:
memlock:
soft: -1
hard: -1
nofile:
soft: 65535
hard: 65535

volumes:
- /docker/es01/data:/usr/share/elasticsearch/data
- /docker/es01/config/pn.crt:/usr/share/elasticsearch/config/pn.crt
- /docker/es01/config/pn.key:/usr/share/elasticsearch/config/pn.key
- /docker/es01/config/ca.crt:/usr/share/elasticsearch/config/ca.crt
restart: always
network_mode: "host"

kib01:
image: docker.elastic.co/kibana/kibana:7.14.0
container_name: kib01
environment:
ELASTICSEARCH_URL: "https://HOST_IP:9201"
ELASTICSEARCH_HOSTS: '["https://HOST_IP:9201"]'
ELASTICSEARCH_USERNAME: "kibana_system"
ELASTICSEARCH_PASSWORD: "Password_for_kibana_system"
XPACK_MONITORING_ENABLED: "true"
XPACK_MONITORING_COLLECTION_ENABLED: "true"

XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: "32characterKey"
XPACK_REPORTING_ENCRYPTIONKEY: "32characterKey"
ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES: /usr/share/kibana/config/ca.crt
SERVER_PORT: '5601'
ELASTICSEARCH_REQUESTTIMEOUT: 300000
volumes:
- /docker/es01/config/ca.crt:/usr/share/kibana/config/ca.crt
restart: always
network_mode: "host"

This is all you need to setup single node cluster.