version: '3.8'
services:   
  elasticsearch3:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.13.2
    environment:
      - node.name=elasticsearch3
      - cluster.name=docker-cluster
      - discovery.seed_hosts=elasticsearch1,elasticsearch2
      - cluster.initial_master_nodes=elasticsearch1,elasticsearch2,elasticsearch3
      - node.roles=master,data
      - ES_JAVA_OPTS=-Xms1024m -Xmx1024m
      - bootstrap.memory_lock=true
      - xpack.security.enabled=false
      - network.host=0.0.0.0
      - http.cors.enabled=true
      - http.cors.allow-origin="http://localhost:9000"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    volumes:
      - /opt/siem/es-data3:/usr/share/elasticsearch/data
    networks:
      - esnet
    deploy:
      replicas: 1
      resources:
        limits:
          memory: 2G
        reservations:
          memory: 1G
networks:
  esnet:
    driver: overlay
    attachable: true