LioranDB Tutorial: Secure Database Deployment Using Docker Compose, Caddy, and TLS
The eleventh installment of the LioranDB TypeScript series provides a step-by-step guide to deploying LioranDB securely in a production-like environment. The tutorial demonstrates how to place LioranDB inside a private Docker network, exposing it only through a Caddy reverse proxy that handles public HTTPS and TLS termination. Database ports are deliberately not published to the host, preventing direct internet access to the database service. A Docker Compose configuration is provided, covering resource limits, environment variables, volume mounts, and network segmentation. The guide also covers firewall recommendations, bootstrap password management, and application connection via the public TLS endpoint.
