CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Enable tls for 9200 on search capable nodes

Browse Source
This commit is contained in:
Mike Reeves
2020-10-11 10:53:54 -04:00
parent 3cfee82b59
commit f6f9097cd9
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/elasticsearch/files/sotls.yml
View File

@@ -9,4 +9,8 @@ protocols:
ciphers: ciphers:
- TLS_RSA_WITH_AES_128_CBC_SHA256 - TLS_RSA_WITH_AES_128_CBC_SHA256
transport.encrypted: true transport.encrypted: true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
http.encrypted: true
{%- else %}
http.encrypted: false http.encrypted: false
{%- endif %}