Configure Meilisearch (Hardened)

Configuration files

/etc/meilisearch.env (environment-file driven)

Credential rotation

sudo systemctl stop meilisearch; write a new MEILI_MASTER_KEY=... into /etc/meilisearch.env; sudo systemctl start meilisearch — then re-issue API keys (the master key derives them).

Monitoring & logging

• Logs: journalctl -u meilisearch -f
• Health: curl -s http://127.0.0.1:7700/health → {"status":"available"} — wire this into your cloud's monitoring agent or an external probe.
• Cloud-native agents (CloudWatch agent, Google Cloud Ops Agent) install normally on this image if you want metrics/log shipping — none is pre-installed or phoning home by default.

Upgrades

Replace with the newest image version; move data via dumps (POST /dumps → import on the new instance).

Backup & restore

POST /dumps (portable) or snapshots directory for same-version restores; copy off-box.