docker-compose: Strip needless OS config settings

deploy/dockerephemeral/docker/opensearch/opensearch.yml

@@ -4,15 +4,12 @@ cluster.name: opensearch-cluster
 network.host: 0.0.0.0
 
 # Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
-# Implicitly done if ".singleNode" is set to "true".
 discovery.type: single-node
 
-action.auto_create_index: true
-
 path.data: /usr/share/opensearch/data
 
-# Start OpenSearch Security Demo Configuration
-# WARNING: revise all the lines below before you go into production
+# WARNING: This is not a production-ready config! (Good enough for testing,
+# though.)
 plugins:
   security:
     ssl:
@@ -29,8 +26,6 @@ plugins:
     allow_unsafe_democertificates: true
     allow_default_init_securityindex: true
     audit.type: internal_opensearch
-    enable_snapshot_restore_privilege: true
-    check_snapshot_restore_write_privileges: true
     restapi:
       roles_enabled: ["all_access", "security_rest_api_access"]
     system_indices: