Continuous Delivery for Django on DigitalOcean with GitHub Actions & Docker
TL;DR: In this guide, you’ll learn how to build a production-grade Continuous Delivery (CD) pipeline for your Django app using GitHub Actions, Docker, and a DigitalOcean Ubuntu VM. We’ll automate everything from testing to deployment—so your app updates with every push to main.
💡 What is Continuous Delivery?
Continuous Delivery is a software practice where code is always in a deployable state. It allows teams to:
- ✅ Ship faster
- 🔄 Automate deployments
- 🔐 Reduce human error
- 🚀 Release confidently
We’ll implement a pipeline that looks like this:
🔄 CD Pipeline Workflow
graph TD
A[Push code to GitHub] --> B[GitHub Actions CI/CD triggered]
B --> C[Checkout code]
C --> D[SSH to DigitalOcean VM]
D --> E[Pull latest code from Git]
E --> F[Rebuild Docker containers]
F --> G[Restart Django app via Docker Compose]
G --> H[Live site is updated automatically]
🔍 Step-by-Step Summary
| Step | Description |
|---|---|
| A | Developer pushes code to main |
| B | GitHub Actions starts the CI/CD workflow |
| C | Code is checked out in the GitHub runner |
| D | GitHub connects to your DigitalOcean VM via SSH |
| E | Latest code is pulled into your server |
| F | Docker containers are rebuilt |
| G | Docker Compose restarts the app |
| H | Nginx serves the latest version to users |
🛠️ Tools We’ll Use
| Role | Tool |
|---|---|
| CI/CD | GitHub Actions |
| Deployment | DigitalOcean (Ubuntu VM) |
| Containerization | Docker + Docker Compose |
| Web Server | Nginx |
| Secure Access | SSH with GitHub Secrets |
📦 Step 1: Dockerize Your Django App
Dockerfile
FROM python:3.11-slim
ENV PYTHONDONTWRITEBYTECODE 1
ENV PYTHONUNBUFFERED 1
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .
CMD ["gunicorn", "myproject.wsgi:application", "--bind", "0.0.0.0:8000"]
🐳 Step 2: Docker Compose for Production
docker-compose.prod.yml
version: '3.9'
services:
web:
build: .
env_file: .env
volumes:
- .:/app
expose:
- 8000
nginx:
image: nginx:alpine
ports:
- "80:80"
volumes:
- ./nginx.conf:/etc/nginx/conf.d/default.conf
depends_on:
- web
🌐 Step 3: Nginx Configuration
nginx.conf
server {
listen 80;
server_name yourdomain.com;
location / {
proxy_pass http://web:8000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
}
}
🔐 Step 4: SSH Setup for GitHub
- On your local machine:
ssh-keygen -t ed25519 -C "your_email@example.com"
- Copy the public key to your server’s
~/.ssh/authorized_keys - Add the private key to your GitHub repo secrets:
→DO_SSH_PRIVATE_KEY
🤖 Step 5: GitHub Actions Workflow
.github/workflows/deploy.yml
name: Django CD to DigitalOcean
on:
push:
branches: [main]
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v3
- name: Setup SSH
run: |
mkdir -p ~/.ssh
echo "${{ secrets.DO_SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
chmod 600 ~/.ssh/id_ed25519
ssh-keyscan your.server.ip >> ~/.ssh/known_hosts
- name: Deploy via SSH
run: |
ssh -i ~/.ssh/id_ed25519 deploy@your.server.ip << 'EOF'
cd /home/deploy/myproject/
git pull origin main
docker compose -f docker-compose.prod.yml down
docker compose -f docker-compose.prod.yml up -d --build
EOF
Replace:
your.server.ipwith your actual VM IPdeploywith your username
🔧 Step 6: Production .env Example
DJANGO_SECRET_KEY=supersecret
DEBUG=False
ALLOWED_HOSTS=yourdomain.com
📁 Folder Structure on the Server
/home/deploy/myproject/
├── manage.py
├── myproject/
├── Dockerfile
├── docker-compose.prod.yml
├── .env
├── nginx.conf
✅ Final Result
Every time you push to main, your app is:
- Pulled to your server
- Rebuilt with Docker
- Restarted with zero manual steps
🌟 Bonus Ideas
- Add Sentry for error monitoring
- Auto-restart using systemd
- Setup Let’s Encrypt for HTTPS
🧠 Conclusion
You’ve now built a real Continuous Delivery pipeline for Django on a live Ubuntu VM. It’s reliable, repeatable, and scales with your app.
Get in Touch with us
Related Posts
- 现代网络安全监控与事件响应系统设计 基于 Wazuh、SOAR 与威胁情报的可落地架构实践
- Building a Modern Cybersecurity Monitoring & Response System. A Practical Architecture Using Wazuh, SOAR, and Threat Intelligence
- AI 时代的经典编程思想
- Classic Programming Concepts in the Age of AI
- SimpliPOSFlex. 面向真实作业现场的 POS 系统(中国市场版)
- SimpliPOSFlex. The POS Designed for Businesses Where Reality Matters
- 经典编程思维 —— 向 Kernighan & Pike 学习
- Classic Programming Thinking: What We Still Learn from Kernighan & Pike
- 在开始写代码之前:我们一定会先问客户的 5 个问题
- Before Writing Code: The 5 Questions We Always Ask Our Clients
- 为什么“能赚钱的系统”未必拥有真正的价值
- Why Profitable Systems Can Still Have No Real Value
- 她的世界
- Her World
- Temporal × 本地大模型 × Robot Framework 面向中国企业的可靠业务自动化架构实践
- Building Reliable Office Automation with Temporal, Local LLMs, and Robot Framework
- RPA + AI: 为什么没有“智能”的自动化一定失败, 而没有“治理”的智能同样不可落地
- RPA + AI: Why Automation Fails Without Intelligence — and Intelligence Fails Without Control
- Simulating Border Conflict and Proxy War
- 先解决“检索与访问”问题 重塑高校图书馆战略价值的最快路径













