IMO you should try to move certificate_verification: true from elasticsearch.yml to readonlyrest.yml
ssl:
keystore_file: “elastic-ssl.keystore.jks”
keystore_pass: secret
key_pass: secret
certificate_verification: true
see docs: readonlyrest-docs/elasticsearch.md at master · beshu-tech/readonlyrest-docs · GitHub