For a public Lioran S3 endpoint, the deployment guide’s design is to keep the storage service on a private Docker network and let Caddy handle public HTTPS and reverse proxying. Treat this as an evaluation deployment: the guide describes the project as V1 Pre-Alpha, so test restarts, failures, and recovery before trusting important data. The Lioran-specific settings below are reported by the guide, not independently confirmed against the project’s current repository; check its current production example before deploying.
How the deployment is arranged
In this layout, clients connect to Caddy over HTTPS. Caddy terminates TLS and forwards requests to Lioran S3 over HTTP on a private Docker network. The storage listener does not need to be exposed directly to the internet. This is the architecture described by the deployment guide, rather than independently verified project documentation: Deploying Lioran S3 with Docker, Caddy and HTTPS.
As an Amazon Associate I earn from qualifying purchases.
Use a persistent host directory or persistent volume for object data and metadata. Container-only storage can disappear when a container is replaced, so it is not an appropriate home for data you intend to keep. Keep configuration backed up as well, and plan how both data and configuration will be restored.
Caddy needs persistent storage too. Its Docker image documentation says the data directory contains certificates, private keys, OCSP staples, and other necessary state: “The data directory must not be treated as a cache.” Mount that directory on persistent storage, as described in the official Caddy Docker image documentation.
#1 Best Overall
- Entry-level NAS Personal Storage：UGREEN NAS DH2300 is your first and best NAS made easy. It is designed for beginners who want a simple, private way to store videos, photos and personal files, which is intuitive for users moving from cloud storage or external drives and move away from scattered date across devices. This entry-level NAS 2-bay perfect for personal entertainment, photo storage, and easy data backup (doesn't support Docker or virtual machines).
- Set Your Devices Free, Expand Your Digital World: This unified storage hub supports massive capacity up to 64TB.*Storage drives not included. Stop Deleting, Start Storing. You can store 22 million 3MB images, or 2 million 30MB songs, or 43K 1.5GB movies or 67 million 1MB documents! UGREEN NAS is a better way to free up storage across all your devices such as phones, computers, tablets and also does automatic backups across devices regardless of the operating system—Window, iOS, Android or macOS.
- The Smarter Long-term Way to Store: Unlike cloud storage with recurring monthly fees, a UGREEN NAS enclosure requires only a one-time purchase for long-term use. For example, you only need to pay $459.98 for a NAS, while for cloud storage, you need to pay $719.88 per year, $2,159.64 for 3 years, $3,599.40 for 5 years. You will save $6,738.82 over 10 years with UGREEN NAS! *NAS cost based on DH2300 + 12TB HDD; cloud cost based on 12TB plan (e.g. $59.99/month).
- Blazing Speed, Minimal Power: Equipped with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles multiple tasks with ease. File transfers reach up to 125MB/s—a 1GB file takes only 8 seconds. Don't let slow clouds hold you back; they often need over 100 seconds for the same task. The difference is clear.
- Let AI Better Organize Your Memories: UGREEN NAS uses AI to tag faces, locations, texts, and objects—so you can effortlessly find any photo by searching for who or what's in it in seconds. It also automatically finds and deletes similar or duplicate photo, backs up live photos and allows you to share them with your friends or family with just one tap. Everything stays effortlessly organized, powered by intelligent tagging and recognition.
Choose public HTTPS or local/internal HTTPS
For a public hostname, Caddy’s automatic HTTPS needs the domain to resolve to the server and to be included in the Caddy configuration. Ports 80 and 443 must be reachable from the internet and forwarded or bound to Caddy. Caddy uses them to obtain and renew certificates and redirect HTTP requests to HTTPS. See Caddy’s Automatic HTTPS documentation.
For local or internal hostnames, Caddy uses a locally generated certificate authority instead. Clients that do not trust that CA will show certificate warnings; this is a different trust setup from a publicly trusted certificate.
Rank #2
- 【Advanced Home Data & Media Hub】For advanced home users who need phone backup, file storage, and centralized data management. Centralize family photos, 4K videos, movies, computer backups, and personal files in one place while running multiple apps for home entertainment and everyday data management. Suitable for households with growing digital libraries and multiple NAS use cases.
- 【Built for Creators, Media Servers & Advanced Apps】Powered by the Intel N100 Quad-Core CPU, 8GB DDR5 RAM, 2.5GbE networking, and dual M.2 NVMe slots, DXP2800 handles large files and heavier workloads with ease. Run Docker, virtual machines, and media server applications compatible with Plex—ideal for content creators, tech enthusiasts, and advanced home users managing 4K videos, RAW photos, personal media libraries, and multiple NAS apps.
- 【Up to 80TB for Growing Digital Libraries】 Supports up to 80TB of storage using two HDD bays and two M.2 NVMe SSD slots for family photos, movies, RAW photos, 4K videos, work files, and device backups. AI photo management supports recognition of people, objects, scenes, and locations, album organization, and duplicate photo detection. HDDs and SSDs are not included.
- 【AI-powered Home Surveillance】Turn DXP2800 into a centralized home surveillance hub by connecting compatible network cameras and storing recordings locally on your NAS. AI-powered features include Face Recognition, People Detection, and Pet Detection, helping advanced home users review important events more efficiently while managing home surveillance and personal data in one place.
- 【One data Center Across Your Devices】Keep files from desktops, laptops, phones, tablets, and other devices together instead of scattered across cloud accounts and external drives. Access, back up, organize, and share data across Windows, macOS, Android, iOS, web browsers, and compatible smart TVs—ideal for creators and advanced home users working across multiple devices.
Before bringing up a public endpoint
- Point the hostname’s A and/or AAAA records at the server’s public address.
- Allow inbound TCP traffic on ports 80 and 443 through the host firewall and any upstream firewall or router.
- Ensure those ports reach Caddy, not an exposed Lioran S3 listener.
- Include the exact hostname in Caddy’s site configuration.
- Give Caddy writable persistent storage for its data directory.
Review the Lioran S3 settings
The guide’s example uses the following values. They are examples to review, not universal defaults or a substitute for checking the project’s current production example environment file.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Setting | Guide example | What to review |
|---|---|---|
BASTION_HOST |
0.0.0.0 |
Bind to the container interface needed for communication over the private Docker network. |
BASTION_PORT |
27118 |
Keep the listener reachable by Caddy on the private network; avoid publishing it publicly unless there is a deliberate reason. |
BASTION_DATA_DIR |
/data |
Mount this path to persistent storage for object data and metadata. |
BASTION_DURABILITY |
strict |
Choose the durability mode based on the project’s current behavior and your failure tolerance. |
BASTION_PUBLIC_URL |
https://storage.example.com |
Replace the example with the public URL clients will use. |
| CORS origin | A specific origin | Set only the origins your clients need; do not adopt a wildcard in production by habit. |
Replace example admin credentials and signing-secret placeholders with strong, deployment-specific values. Keep the signing secret persistent across restarts; changing it may affect signatures or access behavior. Review production environment mode, data directory, listener address and port, public URL, CORS origins, disk headroom, and the configuration’s backup plan. Do not copy sample values without confirming what the current project version expects.
Rank #3
- Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
- Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
- Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
- Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
- Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
Choose a durability mode deliberately
The guide characterizes strict as using explicit synchronization boundaries before an object is considered durable. It describes balanced as relying more heavily on operating-system writeback. This is a distinction in the guide’s description, not a performance or survival guarantee; validate the current implementation and test the failure cases that matter to you before selecting a mode.
Configure the proxy for object-storage traffic
A working HTTPS connection is only one part of a usable object-storage endpoint. Check Caddy’s request-size handling, idle/read/write timeouts, and whether request bodies are buffered or streamed. Limits or buffering that are reasonable for a small web form may interfere with large or long-running object transfers.
Rank #4
- Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
- Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
- Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
- Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
- Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
Review access logging on both sides of the proxy. Object-storage requests can carry credentials in authorization headers or signed URLs; configure logs so they do not expose secrets. Confirm that CORS permits the intended browser origins and methods, rather than relaxing it broadly just to make a test client work.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallBring it up and verify both paths
- Review the project’s current production example environment file. Replace development credentials and secret placeholders, and confirm variable names against the version you are deploying.
- Choose persistent storage for object data and metadata, and decide how to back up and restore those files and the application configuration.
- Put the storage service and Caddy on a private Docker network. Publish the public proxy ports, not an unnecessary direct storage listener.
- Configure Caddy with the public hostname, then point DNS to the server and make ports 80 and 443 reachable. Check that Caddy’s data directory is persistent and writable.
- Use a versioned Caddy image tag rather than relying on an unpinned image. Configure the intended proxy site explicitly: the official image documentation notes that the default image Caddyfile listens only on port 80.
- Check the health endpoint from the host and through the public HTTPS hostname. The guide’s illustrative checks are
http://127.0.0.1:27118/healthlocally andhttps://storage.example.com/healthpublicly; adjust the port and hostname to match your configuration. - Inspect application and proxy logs, then test actual uploads and downloads, including the request sizes and durations your clients need. Verify CORS behavior and confirm logs do not reveal credentials.
Test recovery before storing important data
Because the guide labels the repository V1 Pre-Alpha, a healthy endpoint is not evidence that the system is ready for critical data. Test what happens when containers restart, the host reboots, storage fills, and a backup must be restored. Confirm that Caddy retains its certificate state and that application data and configuration survive the replacement of containers. Keep independent backups; a persistent volume protects against container replacement, not every kind of data loss.
Quick Recap
Best Value
- Your Personal Streaming Server - Build your own Netflix-style media library and stream 4K movies, shows and photos to any device without monthly fees
- Create Your Own Cloud - Store your entire photo, video and music collection; access from anywhere with fast 282 MB/s transfer speeds
- Creator-Grade Backup Solution - Protect your irreplaceable content with automated backups to cloud services, external drives and remote NAS
- Multi-Layered Data Protection - Combine RAID redundancy, automated backups and snapshot technology to prevent data loss from any cause
- Smart Home Surveillance - Support up to 30 IP cameras with AI detection, instant alerts and secure remote monitoring
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
