> from a production perspective, I think security should be topic one Two general approaches to security: - Upgrade to a paid Elastic cluster, and use their o

> from a production perspective, I think security should be topic one Two general approaches to security: - Upgrade to a paid Elastic cluster, and use their own feature-full security suite. - Put a reverse proxy server in front of Elastic (like nginx), and configure that to handle security.