We contacted the ES security team (@bytebilly) in terms of reviewing our Compose stack.

We get a recommendation to enable secure connections anywhere. Secure connections will be enabled by default in the Elastic release v8.0, so we need to be sure if default configuration options don't break anything.