improvements

use docker-compose from pypi with support for 2.1 compose file version
logstash, kibana, head & netdata are now depending on a healthy elasticsearch container before starting
remove alerta-cli
tweak installer

installer/etc/tpot/compose/tpot.yml

@@ -1,6 +1,6 @@
 # T-Pot (Standard)
 # For docker-compose ...
-version: '2'
+version: '2.1'
 
 networks:
   cowrie_local:
@@ -19,9 +19,11 @@ services:
     restart: always
     networks:
       - cowrie_local
+    cap_add:
+     - NET_BIND_SERVICE
     ports:
-     - "22:2222"
-     - "23:2223"
+     - "22:22"
+     - "23:23"
     image: "dtagdevsec/cowrie:1706"
     volumes:
      - /data/cowrie:/data/cowrie
@@ -75,7 +77,7 @@ services:
     restart: always
     environment:
       - bootstrap.memory_lock=true
-#      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
+      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
     cap_add:
      - IPC_LOCK
     ulimits:
@@ -97,7 +99,8 @@ services:
     container_name: kibana
     restart: always
     depends_on:
-     - elasticsearch
+     elasticsearch:
+       condition: service_healthy
     ports:
      - "127.0.0.1:64296:5601"
     image: "dtagdevsec/kibana:1706"
@@ -107,7 +110,8 @@ services:
     container_name: logstash
     restart: always
     depends_on:
-     - elasticsearch
+     elasticsearch:
+       condition: service_healthy
     env_file:
      - /etc/tpot/elk/environment
     image: "dtagdevsec/logstash:1706"
@@ -120,7 +124,8 @@ services:
     container_name: head
     restart: always
     depends_on:
-     - elasticsearch
+     elasticsearch:
+       condition: service_healthy
     ports:
      - "127.0.0.1:64302:9100"
     image: "dtagdevsec/head:1706"
@@ -164,8 +169,13 @@ services:
 # Netdata service
   netdata:
     container_name: netdata
+    hostname: ${HOSTNAME}
     restart: always
-    network_mode: "host"
+    depends_on:
+     elasticsearch:
+       condition: service_healthy
+    ports:
+     - "127.0.0.1:64301:19999"    
     cap_add:
      - SYS_PTRACE
     security_opt: