Deploying Django Like a Pro: Production-Ready Pipeline with Docker, Nginx, and EC2

Copy

ssh -i path-to-key.pem ec2-user@your-ec2-ip

Copy

project-root/
├── docker-compose.yml
├── Dockerfile
├── nginx/
│   └── default.conf
├── certbot/
│   ├── www/
│   └── conf/
├── .env
└── portfolio/  # Django project folder

Copy

FROM python:3.10-slim
WORKDIR /app
ENV PYTHONDONTWRITEBYTECODE 1
ENV PYTHONUNBUFFERED 1
COPY requirements.txt .
RUN pip install --upgrade pip && pip install -r requirements.txt
COPY . .
CMD ["gunicorn", "portfolio.wsgi:application", "--bind", "0.0.0.0:8000"]

Copy

server {
  listen 80;
  server_name your-domain.com www.your-domain.com;

  location /static/ {
    alias /app/static/;
  }

  location / {
    proxy_pass http://portfolio-web:8000;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
  }
}

Copy

version: "3.9"
services:
  portfolio-web:
    build: .
    volumes:
      - .:/app
    expose:
      - "8000"
    env_file:
      - .env

  nginx-container:
    image: nginx:latest
    ports:
      - "80:80"
    volumes:
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
      - ./certbot/www:/var/www/certbot
      - ./certbot/conf:/etc/letsencrypt
    depends_on:
      - portfolio-web

Copy

docker-compose down

Copy

docker run -it --rm \
  -v "$(pwd)/certbot/www:/var/www/certbot" \
  -v "$(pwd)/certbot/conf:/etc/letsencrypt" \
  certbot/certbot certonly \
  --webroot --webroot-path=/var/www/certbot \
  --email your-email@example.com \
  --agree-tos --no-eff-email \
  -d your-domain.com -d www.your-domain.com

Copy

server {
  listen 80;
  server_name your-domain.com www.your-domain.com;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl;
  server_name your-domain.com www.your-domain.com;

  ssl_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/your-domain.com/privkey.pem;

  location /static/ {
    alias /app/static/;
  }

  location / {
    proxy_pass http://portfolio-web:8000;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Proto $scheme;
}

Copy

certbot:
  image: certbot/certbot
  volumes:
    - ./certbot/www:/var/www/certbot
    - ./certbot/conf:/etc/letsencrypt
  entrypoint: /bin/sh -c
  command: "trap exit TERM; while :; do sleep 6h & wait $${!}; certbot renew; done"

Copy

docker-compose up -d --build

Copy

docker-compose run --rm certbot renew --dry-run