anchor.diff:        - discovery.zen.minimum_master_nodes=2
         - ELASTIC_PASSWORD=$ELASTIC_PASSWORD <1>
         - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
  +      - xpack.license.self_generated.type=trial <2>
  +      - xpack.security.enabled=true
         - xpack.security.http.ssl.enabled=true
         - xpack.security.transport.ssl.enabled=true
  -      - xpack.security.transport.ssl.verification_mode=certificate <2>
  +      - xpack.security.transport.ssl.verification_mode=certificate <3>
         - xpack.ssl.certificate_authorities=$CERTS_DIR/ca/ca.crt
         - xpack.ssl.certificate=$CERTS_DIR/es01/es01.crt
         - xpack.ssl.key=$CERTS_DIR/es01/es01.key
  
positive.code: 
  <<docker,Install {es} with Docker>>.
  
  Inside a new, empty, directory create the following **four files**:
  
  `instances.yml`:
  ["source","yaml"]
  
negative.code: [role="xpack"]
  [[configuring-tls-docker]]
  === Encrypting Communications in an {es} Docker Container
  
  Starting with version 6.0.0, {security} (Gold, Platinum or Enterprise subscriptions) https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking-6.0.0-xes.html[requires SSL/TLS]
  encryption for the transport networking layer.
  
  This section demonstrates an easy path to get started with SSL/TLS for both
  HTTPS and transport using the {es} Docker image. The example uses
  Docker Compose to manage the containers.
  
  For further details, please refer to
  {xpack-ref}/encrypting-communications.html[Encrypting Communications] and
  