mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
18 lines
454 B
YAML
18 lines
454 B
YAML
keystore.path: /usr/share/elasticsearch/config/sokeys
|
|
keystore.password: changeit
|
|
keystore.algorithm: SunX509
|
|
truststore.path: /etc/pki/java/cacerts
|
|
truststore.password: changeit
|
|
truststore.algorithm: PKIX
|
|
protocols:
|
|
- TLSv1.2
|
|
ciphers:
|
|
- TLS_RSA_WITH_AES_128_CBC_SHA256
|
|
- TLS_RSA_WITH_AES_256_GCM_SHA384
|
|
transport.encrypted: true
|
|
{%- if grains['role'] in ['so-node','so-heavynode'] %}
|
|
http.encrypted: true
|
|
{%- else %}
|
|
http.encrypted: false
|
|
{%- endif %}
|