I appreciate the systems perspective and find the writeup useful. However, from a production perspective, I think security should be topic one.
Two general approaches to security:
- Upgrade to a paid Elastic cluster, and use their own feature-full security suite.
- Put a reverse proxy server in front of Elastic (like nginx), and configure that to handle security.