docker-compose.base.yml

services:
  os-node:
    image: opensearchproject/opensearch:2
    pull_policy: "always"
    restart: "unless-stopped"
    environment:
      - DISABLE_INSTALL_DEMO_CONFIG=true
      - node.name=os-node-1
      - discovery.seed_hosts=os-node-1,os-node-2
      - cluster.initial_master_nodes=os-node-1,os-node-2
      - bootstrap.memory_lock=true # along with the memlock settings below, disables swapping
      - "OPENSEARCH_JAVA_OPTS=-Xms${OPENSEARCH_HEAPSIZE:-512}m -Xmx${OPENSEARCH_HEAPSIZE:-512}m" # minimum and maximum Java heap size, recommend setting both to 50% of system RAM
      - OPENSEARCH_ADMIN_PASSWORD
      - OPENSEARCH_KIBANASERVER_PASSWORD
      - OPENSEARCH_LOGGINGUSER_PASSWORD
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65536 # maximum number of open files for the OpenSearch user, set to at least 65536 on modern systems
        hard: 65536
    volumes:
      - os-node-1:/usr/share/opensearch/data
      # NOTE: We map every file separately so that we don't overwrite the files created
      # in the same directory from opensearch.
      - ./docker/opensearch/security/internal_users.template.yml:/usr/share/opensearch/config/internal_users.template.yml:ro
      - ./docker/opensearch/security/internal_users.yml:/usr/share/opensearch/plugins/opensearch-security/securityconfig/internal_users.yml
      - ./docker/opensearch/security/tenants.yml:/usr/share/opensearch/plugins/opensearch-security/securityconfig/tenants.yml:ro
      - ./docker/opensearch/opensearch.yml:/usr/share/opensearch/config/opensearch.yml:ro
      - ./docker/opensearch/init-security.sh:/usr/share/opensearch/init-security.sh:ro
      # internal ssl files
      - ./ssl/node1-crt.pem:/usr/share/opensearch/config/node-crt.pem:ro
      - ./ssl/node1-key.pem:/usr/share/opensearch/config/node-key.pem:ro
      - ./ssl/admin-crt.pem:/usr/share/opensearch/config/admin-crt.pem:ro
      - ./ssl/admin-key.pem:/usr/share/opensearch/config/admin-key.pem:ro
      - ./ssl/root-ca-crt.pem:/usr/share/opensearch/config/root-ca.pem:ro
      # ssl for external communication
      - ./ssl/cluster-crt.pem:/usr/share/opensearch/config/cluster-crt.pem:ro
      - ./ssl/cluster-key.pem:/usr/share/opensearch/config/cluster-key.pem:ro