Don't expose elasticsearch to the public. You wouldn't expose your database to the public (or would you?), and this isn't any different. At the very least, lim

Don't expose elasticsearch to the public. You wouldn't expose your database to the public (or would you?), and this isn't any different. At the very least, limit the set of IPs that can connect to your server.