title: Elasticsearch Securing the connection
body: <p>i am (desperately) new to elasticsearch (<em>7.9.0</em>) and i currently have a cluster with two nodes running.
  After a lot of effort it is performing as i would like it to.</p>
  <p>It is running on docker and also has an <em>nginx</em> in front of it to route the traffic to it since it is being accessed directly from my website (angular 10).
  The elasticsearch is being used as well from my <em>laravel</em> backend directly through the docker container name so that is secure (i guess).</p>
  <p>My problem now is that i cannot find or understand a way to secure the http access from outside docker (eg the normal website).</p>
  <p>Going via <em>Laravel</em> is an option but this is too slow for my purpose.
  Is there a way i can securely have http access to the elasticsearch from the web?</p>
  <p>Also, is there a way i can restrict the actions to read only actions?
  If you need more info to help out please let me know as i am not knowledgable on what is important here and what not.</p>
  <p>Thanks</p>