anchor.diff:      image: {docker-image}
       environment:
         - node.name=es01
  -      - discovery.seed_hosts=es02
  +      - discovery.seed_hosts=es01,es02
         - cluster.initial_master_nodes=es01,es02
         - ELASTIC_PASSWORD=$ELASTIC_PASSWORD <1>
         - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
  
positive.code:     image: {docker-image}
      command: >
        bash -c '
          if [[ ! -d config/certificates/certs ]]; then
            mkdir config/certificates/certs;
          fi;
          if [[ ! -f /local/certs/bundle.zip ]]; then
            bin/elasticsearch-certgen --silent --in config/certificates/instances.yml --out config/certificates/certs/bundle.zip;
            unzip config/certificates/certs/bundle.zip -d config/certificates/certs; <1>
          fi;
          chgrp -R 0 config/certificates/certs
        '
      user: $\{UID:-1000\}
      working_dir: /usr/share/elasticsearch
      volumes: ['.:/usr/share/elasticsearch/config/certificates']
  ----
  
  <1> The new node certificates and CA certificate+key are placed under the local directory `certs`.
  endif::[]
  
  [[getting-starter-tls-create-docker-compose]]
  
negative.code: --url https://localhost:9200"
  ----
  --
  
  [float]
  ==== Tear everything down
  To remove all the Docker resources created by the example, issue:
  --
  ["source","sh"]
  ----
  docker-compose down -v
  ----
  --
  