How to Install and Secure Elasticsearch with Let’s Encrypt on Ubuntu

October 26, 2022 . 1 MIN READ

Create a DNS Record
Add an A record that points to the Droplet’s IP address.
Open Port 80
Open port 80 on the Droplet, as it is required for the Certbot verification process.
Install and Run Certbot

sudo apt install certbot
sudo certbot certonly –standalone
- Enter your domain name when prompted.
- Certificate files will be generated in:
  /etc/letsencrypt/live/<domain>
Copy Certificate Files to Elasticsearch

sudo rm /etc/elasticsearch/certs/*
sudo cp /etc/letsencrypt/live/<domain>/* /etc/elasticsearch/certs/
sudo chmod 640 /etc/elasticsearch/certs/*
sudo chown -R root:elasticsearch /etc/elasticsearch/certs/
Update Elasticsearch Configuration
Edit /etc/elasticsearch/elasticsearch.yml and replace:

xpack.security.http.ssl.keystore.path
xpack.security.http.ssl.truststore.path

with:

xpack.security.http.ssl.key: certs/privkey.pem
xpack.security.http.ssl.certificate: certs/fullchain.pem
xpack.security.http.ssl.certificate_authorities: [“certs/chain.pem”]
Restart Elasticsearch

sudo systemctl restart elasticsearch
Close Port 80
Once the certificate is installed, close port 80 on the Droplet.

certbot renew

Reference:

https://www.cloudbooklet.com/install-and-secure-elasticsearch-with-lets-encrypt-on-ubuntu/

https://github.com/CollectionBuilder/collectionbuilder-sa_draft/issues/37

Leave a Reply Cancel reply