anchor.diff:  --url https://localhost:9200"
   ----
   --
  +
  +[float]
  +==== Tear everything down
  +To remove all the Docker resources created by the example, issue:
  +--
  +["source","sh"]
  +----
  +docker-compose down -v
  +----
  +--
  
positive.code: . Access the {es} API over SSL/TLS using the bootstrapped password:
  +
  --
  ["source","sh"]
  ----
  curl --cacert certs/ca/ca.crt -u elastic:PleaseChangeMe https://localhost:9200
  ----
  // NOTCONSOLE
  --
  
negative.code: `.env`:
  [source,yaml]
  ----
  COMPOSE_PROJECT_NAME=es <1>
  CERTS_DIR=/usr/share/elasticsearch/config/certificates <2>
  ELASTIC_PASSWORD=PleaseChangeMe <3>
  ----
  <1> Use an `es_` prefix for all volumes and networks created by docker-compose.
  <2> The path, inside the Docker image, where certificates are expected to be found.
  <3> Initial password for the `elastic` user.
  
  [[getting-starter-tls-create-certs-composefile]]
  `create-certs.yml`:
  