iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To expose Lioran S3 over HTTPS, keep its storage service on a private Docker network and use Caddy as the public-facing reverse proxy and TLS terminator. Persist both the object data and Caddy’s certificate state, then verify DNS, ports, proxy behavior, and health checks before relying on the deployment. The guide describing this setup labels Lioran S3 V1 Pre-Alpha, so treat it as an evaluation deployment and test failure and recovery behavior before storing important data.
How the deployment is arranged
The deployment guide’s architecture places Caddy in front of Lioran S3: clients connect to Caddy over HTTPS, and Caddy forwards requests to the storage service over HTTP on a private Docker network. This keeps the storage listener from needing a direct public endpoint. Publish the proxy’s public ports, not an unnecessary direct storage listener.
The guide’s Lioran-specific details are reported in its deployment guide. It describes the project as V1 Pre-Alpha; confirm current image, environment-variable names, and behavior against the project’s current official repository before deploying. The details below describe the guide’s architecture and examples, not independently verified Lioran project documentation.
Recommended Free Tools
Prepare the application settings and storage
Review the environment configuration
Start with the project’s production example environment file, as the guide recommends. Replace development credentials and every secret placeholder with deployment-specific values; do not copy sample credentials or signing secrets into a live service.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
The guide’s example settings are:
BASTION_HOST=0.0.0.0BASTION_PORT=27118BASTION_DATA_DIR=/dataBASTION_DURABILITY=strictBASTION_PUBLIC_URL=https://storage.example.com
These are example values, not universal defaults. Review the listener address and port, data directory, public URL, CORS origins, durability mode, and production environment mode for your own installation. Set CORS to the origins that actually need browser access rather than adopting a wildcard by habit. Use non-default admin credentials and a persistent signing secret.
Keep object data and metadata on durable storage
Mount the application’s data directory to storage that survives container replacement. The guide says object data and metadata must be persistent and warns against relying on disposable container-only storage. Decide how configuration and object data will be backed up, and test that a restore works; a running service is not itself a backup.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Plan for disk headroom as well as current usage. The guide calls out available disk space as a production setting to review, but it does not establish a capacity target. Choose one based on your workload and retention needs.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Choose a durability mode deliberately
The guide characterizes strict as using explicit synchronization boundaries before an object is considered durable, while balanced relies more heavily on operating-system writeback. This is a description of the guide’s options, not a performance or power-loss guarantee. Check current implementation details and test the failure modes relevant to your hardware before choosing a mode.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Configure Caddy and automatic HTTPS
Meet the public HTTPS prerequisites
For Caddy to obtain and renew certificates automatically for a public hostname, the hostname must appear in the Caddy configuration, its DNS A and/or AAAA records must point to the server, and ports 80 and 443 must be reachable from the internet and forwarded or bound to Caddy. Caddy also needs writable persistent data storage. Its Automatic HTTPS documentation explains how public hostnames trigger certificate management and HTTP-to-HTTPS redirects.
Use the intended public hostname consistently in DNS, Caddy’s site configuration, and the application’s public URL setting. The guide uses storage.example.com as an illustration; substitute your own domain. Configure the proxy site explicitly rather than assuming the image’s default Caddyfile matches this deployment: the official Caddy Docker image documentation notes that its default Caddyfile listens only on port 80.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Persist Caddy’s data directory
Mount Caddy’s data directory, commonly represented by /data in container examples, to persistent storage. It holds certificates, private keys, OCSP staples, and other necessary state. Caddy’s Docker image documentation is explicit: “The data directory must not be treated as a cache.” If that state disappears, certificate continuity and normal operation may be affected.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallPublic and local HTTPS are different cases
A public DNS-backed hostname is the relevant path when clients need a publicly trusted certificate. Caddy can also serve local or internal hostnames using a locally generated CA, but clients that do not trust that CA will show security errors. Internal HTTPS therefore requires a plan to establish client trust; it is not interchangeable with a publicly trusted certificate.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Check proxy behavior for object-storage traffic
Object-storage requests may involve large bodies and long-lived transfers, so review Caddy and any surrounding network layer for:
- Request-size limits that will accept the objects your clients need to upload.
- Idle, read, and write timeouts that fit expected upload and download durations.
- Streaming behavior that does not unnecessarily buffer request bodies in memory or on disk.
- Access-log settings that redact authorization headers, signed URLs, or other credentials.
These settings depend on the client workload and proxy configuration; the guide does not provide universal numeric limits. Validate uploads and downloads at realistic sizes, including slow or interrupted transfers, rather than assuming a successful health check proves data-plane behavior.
Quick Recap
Bring it up and verify both paths
- Review configuration: confirm production mode, non-default admin credentials, a persistent signing secret, intended CORS origins, the public URL, listener settings, data path, and chosen durability mode.
- Attach persistent storage: verify that Lioran S3’s data directory and Caddy’s data directory are mounted to durable storage. Keep configuration in a recoverable location and include it in backup planning.
- Keep the storage listener private: connect the service and Caddy over a private Docker network. Expose the proxy’s ports 80 and 443; do not publish the storage listener unless your design specifically requires it.
- Set up DNS and reachability: point the hostname’s A/AAAA records at the host and ensure inbound ports 80 and 443 can reach Caddy through any firewall, router, or cloud network rules.
- Configure Caddy’s site: use the real hostname and explicitly proxy to the Lioran service’s private network address and port. Ensure Caddy can write its persistent data directory.
- Check the service locally: the guide gives
http://127.0.0.1:27118/healthas an illustrative local check. Adjust the address and port to match the actual listener. - Check the public endpoint: the guide gives
https://storage.example.com/healthas an illustrative public check. Replace the hostname, then confirm the endpoint responds over HTTPS and inspect Caddy and application logs if it does not. - Exercise real requests: test representative uploads and downloads, CORS from the intended browser origins, limits and timeouts, streaming, and access-log redaction. Test backup restoration and failure behavior before entrusting important data.
Common setup failures to isolate
- Certificate issuance does not complete: check that the configured hostname matches DNS, that A/AAAA records point to the right host, and that ports 80 and 443 reach Caddy. Confirm Caddy’s data directory is writable.
- The public hostname works but the application generates incorrect URLs: compare the configured public URL with the hostname clients use, including the HTTPS scheme.
- Large or slow transfers fail while health checks pass: inspect request-size limits, read/write and idle timeouts, and body buffering across the proxy path.
- Browser requests are blocked: compare the browser origin with the configured CORS origins and allow only the origins the application needs.
- Credentials appear in logs: review access-log fields and redact authorization data and signed URL components before enabling broader log collection.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
