First setup of elasticsearch

templates/etc/systemd/system/elasticsearch.service.j2

@@ -0,0 +1,67 @@
+[Unit]
+Description=Elasticsearch
+Documentation=https://www.elastic.co
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+# the elasticsearch process currently sends the notifications back to systemd
+# and for some reason exec does not work (even though it is a child). We should change
+# this notify access back to main (the default), see https://github.com/elastic/elasticsearch/issues/86475
+NotifyAccess=all
+RuntimeDirectory=elasticsearch
+PrivateTmp=true
+Environment=ES_HOME={{ elastic_home }}
+Environment=ES_PATH_CONF={{ elastic_conf }}
+Environment=PID_DIR={{ elastic_home }}
+Environment=ES_SD_NOTIFY=true
+
+WorkingDirectory={{ elastic_home }}
+
+User={{ elastic_usr }}
+Group={{ elastic_grp }}
+
+ExecStart={{ elastic_link }}/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet
+
+# StandardOutput is configured to redirect to journalctl since
+# some error messages may be logged in standard output before
+# elasticsearch logging system is initialized. Elasticsearch
+# stores its logs in /var/log/elasticsearch and does not use
+# journalctl by default. If you also want to enable journalctl
+# logging, you can simply remove the "quiet" option from ExecStart.
+StandardOutput=journal
+StandardError=inherit
+
+# Specifies the maximum file descriptor number that can be opened by this process
+LimitNOFILE=65535
+
+# Specifies the maximum number of processes
+LimitNPROC=4096
+
+# Specifies the maximum size of virtual memory
+LimitAS=infinity
+
+# Specifies the maximum file size
+LimitFSIZE=infinity
+
+# Disable timeout logic and wait until process is stopped
+TimeoutStopSec=0
+
+# SIGTERM signal is used to stop the Java process
+KillSignal=SIGTERM
+
+# Send the signal only to the JVM rather than its control group
+KillMode=process
+
+# Java process is never killed
+SendSIGKILL=no
+
+# When a JVM receives a SIGTERM signal it exits with code 143
+SuccessExitStatus=143
+
+# Allow a slow startup before the systemd notifier module kicks in to extend the timeout
+TimeoutStartSec=900
+
+[Install]
+WantedBy=multi-user.target

templates/opt/elastic/home/config/elasticsearch.yml.j2

@@ -0,0 +1,46 @@
+---
+# ======================== Elasticsearch Configuration =========================
+cluster:
+    name: {{ cloud_name | default('elasticsearch') }}.{{ cloud_stage }}
+    initial_master_nodes:
+{% for node in elastic_cluster_nodes %}
+        - {{ node }}
+{% endfor %}
+node:
+    name: {{ ansible_hostname }}
+    #attr:
+    #    rack: r1
+
+# ----------------------------------- Paths ------------------------------------
+path:
+    data: {{ elastic_data_location }}
+    logs: {{ elastic_logs_location }}
+
+# ----------------------------------- Memory -----------------------------------
+bootstrap:
+    memory_lock: true
+
+# ---------------------------------- Network -----------------------------------
+network:
+    host: {{ ansible_default_ipv4.address }}
+http:
+    {{ elastic_config_http | to_nice_yaml | indent(4) }}
+
+# --------------------------------- Discovery ----------------------------------
+discovery:
+    seed_hosts:
+{% for node in elastic_cluster_nodes %}
+        - {{ node }}.hnw
+{% endfor -%}
+
+# ---------------------------------- Various -----------------------------------
+action:
+    destructive_requires_name: true
+
+#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
+xpack:
+    {{ elastic_config_xpack }}
+transport:
+    host: {{ elastic_transport_host }}
+
+#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

templates/opt/elastic/home/config/jvm.options.j2

@@ -0,0 +1,83 @@
+################################################################
+##
+## JVM configuration
+##
+################################################################
+##
+## WARNING: DO NOT EDIT THIS FILE. If you want to override the
+## JVM options in this file, or set any additional options, you
+## should create one or more files in the jvm.options.d
+## directory containing your adjustments.
+##
+## See https://www.elastic.co/guide/en/elasticsearch/reference/8.17/advanced-configuration.html#set-jvm-options
+## for more information.
+##
+################################################################
+
+
+
+################################################################
+## IMPORTANT: JVM heap size
+################################################################
+##
+## The heap size is automatically configured by Elasticsearch
+## based on the available memory in your system and the roles
+## each node is configured to fulfill. If specifying heap is
+## required, it should be done through a file in jvm.options.d,
+## which should be named with .options suffix, and the min and
+## max should be set to the same value. For example, to set the
+## heap to 4 GB, create a new file in the jvm.options.d
+## directory containing these lines:
+##
+## -Xms4g
+## -Xmx4g
+##
+## See https://www.elastic.co/guide/en/elasticsearch/reference/8.17/heap-size.html
+## for more information
+##
+################################################################
+
+
+################################################################
+## Expert settings
+################################################################
+##
+## All settings below here are considered expert settings. Do
+## not adjust them unless you understand what you are doing. Do
+## not edit them in this file; instead, create a new file in the
+## jvm.options.d directory containing your adjustments.
+##
+################################################################
+
+-XX:+UseG1GC
+
+## JVM temporary directory
+-Djava.io.tmpdir=${ES_TMPDIR}
+
+# Leverages accelerated vector hardware instructions; removing this may
+# result in less optimal vector performance
+20-:--add-modules=jdk.incubator.vector
+
+# Required to workaround performance issue in JDK 23, https://github.com/elastic/elasticsearch/issues/113030
+23:-XX:CompileCommand=dontinline,java/lang/invoke/MethodHandle.setAsTypeCache
+23:-XX:CompileCommand=dontinline,java/lang/invoke/MethodHandle.asTypeUncached
+
+## heap dumps
+
+# generate a heap dump when an allocation from the Java heap fails; heap dumps
+# are created in the working directory of the JVM unless an alternative path is
+# specified
+-XX:+HeapDumpOnOutOfMemoryError
+
+# exit right after heap dump on out of memory error
+-XX:+ExitOnOutOfMemoryError
+
+# specify an alternative path for heap dumps; ensure the directory exists and
+# has sufficient space
+-XX:HeapDumpPath=data
+
+# specify an alternative path for JVM fatal error logs
+-XX:ErrorFile=logs/hs_err_pid%p.log
+
+## GC logging
+-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,level,pid,tags:filecount=32,filesize=64m