add kibana config and rm traefik

compose.yaml

@@ -192,14 +192,10 @@ services:
       es03:
         condition: service_healthy
     image: docker.elastic.co/kibana/kibana:${STACK_VERSION}
-    # labels:
-    #   - "traefik.enable=true"
-    #   - "traefik.http.routers.search.rule=Host(`search.layer.systems`)"
-    #   - "traefik.http.routers.search.entrypoints=websecure"
-    #   - "traefik.http.routers.search.tls.certresolver=myresolver"
     volumes:
       - certs:/usr/share/kibana/config/certs
-      - kibanadata:/usr/share/kibana/data
+      - ./kibanadata:/usr/share/kibana/data
+      - ./kibana.yml:/usr/share/kibana/config/kibana.yml
     ports:
       - ${KIBANA_PORT}:5601
     environment:
@@ -230,26 +226,6 @@ services:
       - certs:/app/certs/
     mem_limit: ${MEM_LIMIT_SECONDARY}
 
-  # traefik:
-  #   image: "traefik:v2.10"
-  #   container_name: "traefik"
-  #   command:
-  #     #- "--log.level=DEBUG"
-  #     - "--api.insecure=true"
-  #     - "--providers.docker=true"
-  #     - "--providers.docker.exposedbydefault=false"
-  #     - "--entrypoints.websecure.address=:443"
-  #     - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
-  #     #- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
-  #     - "--certificatesresolvers.myresolver.acme.email=mail@pascalrost.de"
-  #     - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
-  #   ports:
-  #     - "443:443"
-  #     - "8080:8080"
-  #   volumes:
-  #     - ./letsencrypt:/letsencrypt
-  #     - "/var/run/docker.sock:/var/run/docker.sock:ro"
-
 volumes:
   certs:
     driver: local

kibana.yml

@@ -0,0 +1,22 @@
+server.name: kibana
+server.host: 0.0.0.0
+elasticsearch.hosts: [ https://es01:9200 ]
+
+elasticsearch.ssl.certificateAuthorities: [ "config/certs/ca/ca.crt" ]
+
+monitoring.ui.container.elasticsearch.enabled: true
+
+## X-Pack security credentials
+#
+elasticsearch.username: kibana_system
+elasticsearch.password: kibana
+
+
+xpack.security.authc.providers:
+  basic.basic1:
+    order: 0
+  anonymous.anonymous1:
+    order: 1
+    credentials:
+      username: "guest"
+      password: "guest"