First @sixstringssteve in the future please format your yml with the formatting button above </> otherwise it is very difficult to help.
2nd there are some important concept that you really need to understand / take a look at with respect to Elasticsearch ...
Take a look at This post that I wrote up a while ago... this is one windows but the concepts are the same
In short, Elastic forces you to make a very conscious decision to attach your cluster to the network... as soon as you do you should be thinking about auth / auth data security etc. With the proper configuration you can dev / test etc , but you need to set some settings and you should read about them first... but in no way do we recommend putting production data in an unsecured cluster.