From e45976d4e54ca5540e4afa1c1d90cb713010a433 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sybren=20A=2E=20St=C3=BCvel?= Date: Tue, 26 Sep 2017 12:27:36 +0200 Subject: [PATCH] Added ElasticProxy to the docker/README.md file. --- docker/README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/docker/README.md b/docker/README.md index 1430d5a..9ce2702 100644 --- a/docker/README.md +++ b/docker/README.md @@ -78,7 +78,12 @@ than every time the container is recreated. `/data/storage/elasticsearch` needs to be writable by UID 1000, GID 1000. -Production Kibana should be placed in read-only mode: +Kibana connects to [ElasticProxy](https://github.com/armadillica/elasticproxy), which only allows +GET, HEAD, and some specific POST requests. This ensures that the public-facing Kibana cannot be +used to change the ElasticSearch database. + +Production Kibana can be placed in read-only mode, but this is not necessary now that we use +ElasticProxy. However, I've left this in here as reference. `curl -XPUT 'localhost:9200/.kibana/_settings' -d '{ "index.blocks.read_only" : true }'`