How to Install Django on a Linux VPS

Install Django on a VPS as a production stack, not as a single pip install command. The dependable layout is an isolated Python environment for your project, a production WSGI or ASGI application server, Nginx in front of it, a production database, systemd supervision, DNS, and HTTPS. This guide walks through that setup on a typical Linux VPS and marks the values you must replace for your project.

Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.

What a production Django VPS contains

A working deployment has several separate responsibilities:

#	Preview	Product	Price
1		TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for...	$13.98	Buy on Amazon
2		Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen...	$17.99	Buy on Amazon
3		New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and...	$8.99	Buy on Amazon
4		BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees	$199.99	Buy on Amazon
5		Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide...	$19.98	Buy on Amazon

As an Amazon Associate I earn from qualifying purchases.

• Linux host: SSH access, a non-root deployment account, operating-system updates, and required system libraries.
• Application environment: a Python virtual environment containing Django and the exact versions pinned by your project.
• Application server: a production WSGI server for synchronous Django code, or an ASGI server when asynchronous handling or long-lived connections are required.
• Front-end web server: Nginx terminates HTTPS, serves static and media files where appropriate, and proxies dynamic requests.
• State and operations: PostgreSQL or another production database, migrations, static-file collection, process supervision, logs, backups, and a rollback procedure.

Django’s deployment guidance makes two points that determine the rest of this article: “The internet is a hostile environment,” and the runserver command “is not designed for a production setting.” Use runserver only for development and testing.

Before you start

Prepare these items before connecting to the server. The placeholders below are intentional; substitute your own values rather than copying them literally.

#1 Best Overall

Sale

TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black

• [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
• [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
• [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
• [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
• [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

$13.98

Buy on Amazon

1. Provision and secure the VPS

Connect initially with the provider’s documented SSH method, then create or use a non-root account with permission to run the deployment commands. Do not run the application as root.

1. Update the operating system using its package manager. On an Ubuntu/Debian-style system, that commonly means sudo apt update followed by sudo apt upgrade. Use the equivalent commands for your distribution.
2. Create the deployment account if your image did not create one, grant it only the administrative privileges it needs, and install its SSH public key.
3. Configure the host firewall to permit SSH and, once Nginx is ready, HTTP and HTTPS. Keep the database port private unless a documented administrative need requires otherwise.
4. Set the server’s time zone and time synchronization according to your distribution’s standard tools. Accurate time makes certificate, log, and incident analysis far easier.

Keep a separate root or provider-console recovery path. Test that the deployment user can log in with its key before disabling password or root SSH access; otherwise a security change can lock you out.

2. Install Python and build dependencies

You need Python, the virtual-environment package, Git, and any compiler, header, or database-client libraries required by your project’s dependencies. Package names vary by distribution and by database driver.

On a Debian/Ubuntu-style host, an illustrative installation is:

sudo apt update
sudo apt install python3 python3-venv python3-pip git build-essential

Add the development headers or client libraries required by your pinned requirements. For example, a PostgreSQL driver may need a PostgreSQL client development package; the correct package name depends on the distribution and driver version. If a package fails to build, read the error for the missing header or compiler tool instead of bypassing the virtual environment.

Confirm the interpreter that will run the service:

python3 --version
python3 -m pip --version

Compare that version with the Django release, every compiled dependency, and the currently supported Gunicorn release. Do not assume the distribution’s default Python is suitable just because it is installed.

3. Put the project in a controlled directory

Choose one deployment path and keep source, the virtual environment, and release artifacts organized. The following uses /srv/myproject and a Git checkout as examples.

Rank #2

Sale

Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)

• 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
• 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
• 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
• 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
• 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

$17.99

Buy on Amazon

1. Create the directory and assign ownership to the deployment account:

sudo mkdir -p /srv/myproject
sudo chown -R deploy:deploy /srv/myproject

2. Log in as that account and obtain the code from your controlled repository:

cd /srv/myproject
git clone YOUR_REPOSITORY_URL app
cd app

Replace YOUR_REPOSITORY_URL with your repository address. If the VPS receives an artifact rather than cloning Git, copy the release into the same controlled location and record its commit or version so it can be rolled back.

3. Create and activate a virtual environment using the Python interpreter you verified:

python3 -m venv /srv/myproject/venv
. /srv/myproject/venv/bin/activate
python -m pip install --upgrade pip

4. Install the project’s pinned dependencies. A committed lock or requirements file is preferable to unconstrained installs:

python -m pip install -r requirements.txt

Gunicorn’s installation guidance specifically says to install Gunicorn inside a virtual environment so its dependencies remain isolated from the operating system and other applications. Install it from the project’s pinned requirements or, if your project manages it separately, inside this same environment.

4. Configure production settings safely

Production settings must not depend on development defaults. Keep private values out of Git and inject them through environment variables or a protected environment file readable by the service account.

Required Django settings

• SECRET_KEY: use a long, unpredictable value and keep it secret. Rotating it can invalidate sessions and other signed data, so plan rotation rather than changing it casually.
• DEBUG = False: never expose Django’s debug pages to the public internet.
• ALLOWED_HOSTS: list the exact production hostnames, such as example.com and www.example.com. Django requires a suitable value when DEBUG is false.
• Database configuration: read the engine, name, user, password, host, and port from protected configuration rather than source-controlled literals.
• URL and cookie security: configure secure cookies, trusted origins, and proxy-related settings consistently with the HTTPS and Nginx arrangement you will deploy.

A minimal pattern in settings might look like this:

import os

SECRET_KEY = os.environ['DJANGO_SECRET_KEY']
DEBUG = os.environ.get('DJANGO_DEBUG', 'False').lower() == 'true'
ALLOWED_HOSTS = [h for h in os.environ.get('DJANGO_ALLOWED_HOSTS', '').split(',') if h]

Store the corresponding values in a root-owned or service-owned environment file with restrictive permissions. Do not paste the real secret into a shell history, issue tracker, or repository.

5. Configure the database, migrations, and static files

Database

Create the production database and a least-privilege application user according to your database provider’s instructions. Verify connectivity from the VPS before putting Nginx in front of the application. A managed database reduces patching and backup work but adds a service dependency, network latency, and recurring cost; a self-managed database keeps traffic local but makes you responsible for upgrades, disk capacity, monitoring, and tested backups.

Apply migrations and create an administrator

Run management commands from the project directory with the virtual environment active and production settings loaded:

Rank #3

New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer

• [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
• [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
• [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
• [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
• [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

$8.99

Buy on Amazon

cd /srv/myproject/app
. /srv/myproject/venv/bin/activate
python manage.py migrate
python manage.py createsuperuser

Run createsuperuser only when the project needs Django admin access. Confirm that migrations completed against the intended database; accidentally pointing at a local development database is a common release failure.

Collect static files

Static assets must have an intentional storage and serving plan. Configure the project’s STATIC_ROOT and chosen storage backend, then run:

python manage.py collectstatic --noinput

Nginx can serve the collected directory directly on a single VPS, while a remote object store or CDN may be preferable as traffic and deployment complexity grow. User-uploaded media is different from static assets: preserve it across releases, restrict upload handling, and serve it only through the path and permissions your application requires.

6. Choose WSGI or ASGI and test the application server

Choose the interface based on the workload, not popularity.

Replace project with the Python package containing wsgi.py or asgi.py. Test WSGI with Gunicorn bound only to loopback:

cd /srv/myproject/app
. /srv/myproject/venv/bin/activate
gunicorn --bind 127.0.0.1:8000 project.wsgi:application

From a second shell on the VPS, request the local address and watch the first shell for import, settings, database, or static-file errors. For ASGI, use the ASGI server selected for your project and point it at project.asgi:application; follow that server’s documented command and worker configuration rather than substituting a WSGI command.

Stop this foreground test with Ctrl+C after confirming that the application starts. It is a diagnostic step, not the process-management solution.

Rank #4

BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees

• Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
• Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
• All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
• Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
• Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

$199.99

Buy on Amazon

7. Run the application under systemd

systemd starts the application at boot, restarts it after an unexpected exit, and gives you a consistent place to inspect status and logs. Create a unit such as /etc/systemd/system/myproject.service, adapting paths, user names, and the application callable:

[Unit]
Description=My Django application
After=network.target

[Service]
User=deploy
Group=deploy
WorkingDirectory=/srv/myproject/app
EnvironmentFile=/etc/myproject/myproject.env
ExecStart=/srv/myproject/venv/bin/gunicorn --bind unix:/run/myproject.sock project.wsgi:application
Restart=on-failure

[Install]
WantedBy=multi-user.target

Create the environment-file directory, protect the file, and ensure the service account can read it:

sudo install -d -m 750 -o root -g deploy /etc/myproject
sudo chmod 640 /etc/myproject/myproject.env

Then load and start the unit:

sudo systemctl daemon-reload
sudo systemctl enable --now myproject
sudo systemctl status myproject
sudo journalctl -u myproject -e

A Unix socket keeps the application server local and lets Nginx proxy without exposing port 8000. A loopback TCP bind is also valid and can be easier to inspect with standard network tools. Whichever you choose, use the identical socket path or address in the Nginx configuration and verify permissions when the proxy receives a 502 error.

8. Put Nginx in front of Django

Nginx should terminate TLS, reject unknown hosts, serve static and media files where appropriate, and proxy only dynamic requests to the local application server. A representative server block is:

server {
    listen 80;
    server_name example.com www.example.com;

    location /static/ {
        alias /srv/myproject/app/staticfiles/;
    }

    location /media/ {
        alias /srv/myproject/app/media/;
    }

    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://unix:/run/myproject.sock;
    }
}

Adjust the static and media paths to match your settings and storage policy. Some Nginx builds require a slightly different Unix-socket proxy_pass syntax; validate the configuration on your distribution before reloading it:

sudo nginx -t
sudo systemctl reload nginx

Install a separate default server that rejects requests with unrecognized host headers, or configure the distribution’s default site so it cannot accidentally serve your application for arbitrary domains. Django’s deployment checklist also recommends host validation at the web-server layer.

9. Point DNS at the VPS and enable HTTPS

1. Create the required DNS records for example.com and any other production hostnames, pointing them to the VPS address. Wait for the records to resolve before troubleshooting Nginx.
2. Use an ACME-compatible certificate client or your certificate provider’s documented method to obtain a certificate for every hostname.
3. Configure Nginx to listen on 443 with that certificate and private key, then redirect HTTP traffic to HTTPS.
4. Forward the original host and scheme headers as shown above and configure Django’s secure-cookie and trusted-origin settings consistently with the proxy.
5. Renew the certificate automatically and test renewal before the first certificate approaches expiration.

HTTPS is not an optional cosmetic step: credentials, sessions, admin access, and user data cross the network. Keep private keys readable only by the accounts that need them.

Best Value

Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide Walkthroughs

$19.98

Buy on Amazon

10. Verify the deployment before calling it live

Run the deployment check against production settings:

python manage.py check --deploy

Use the same environment variables and settings module that systemd uses. Then perform a release check rather than relying on a successful service status alone:

• Open the HTTPS site and confirm that the expected hostname is served.
• Log in through the real authentication flow and verify session cookies.
• Load CSS, JavaScript, images, and a representative uploaded media file.
• Exercise a page that reads and writes the production database.
• Inspect Nginx access/error logs and journalctl -u myproject for tracebacks, permission errors, and repeated restarts.
• Send an intentionally unknown host header and confirm that it is rejected rather than routed to the application.
• Confirm that the service starts after a reboot and that the socket is recreated.
• Take a database backup and verify that you can restore it to an isolated location.

Deploy updates without losing the ability to roll back

Treat each release as a recorded version. A safe sequence is to obtain the new code, create or refresh the virtual environment from pinned dependencies, load production settings, run migrations, collect static files, restart the supervised service, and exercise a smoke test. Keep the previous release directory or commit available until the new version has passed checks.

Migrations deserve special care. A migration that changes application code and schema simultaneously may not be reversible without an intermediate release. Read the migration plan, back up the database first, and define the exact command and code version that will restore service if the release fails.

Backups are only useful when restoration is tested. Keep database backups separate from the VPS, protect them with encryption and access controls, and document retention, recovery time expectations, and who can perform a restore. Preserve user media independently of disposable release directories.

Common failures and their fixes

Operational choices that matter as the VPS grows

Unix socket or loopback TCP

A Unix socket is local and avoids a listening TCP port, but its filesystem ownership and path must be managed during restarts and deploys. A loopback address is often simpler to inspect and can make service discovery clearer, while still preventing direct public access. Neither choice replaces Nginx, TLS, host validation, or process supervision.

One VPS or separate services

Running Nginx, Django, and PostgreSQL on one VPS is compact and can reduce network latency, but all components share CPU, memory, disk, and failure risk. Separating the database or moving it to a managed service reduces some operational tasks and blast radius while adding network configuration, cost, and another dependency. Choose based on recovery requirements rather than a universal performance claim.

Worker and timeout settings

Worker counts, request timeouts, and asynchronous worker classes depend on CPU, memory, request duration, and workload. Start with conservative settings, observe memory and restart behavior, and change one variable at a time. There is no responsible universal worker number for every VPS.

Quick Recap

SaleBestseller No. 1

TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black

$13.98

SaleBestseller No. 2

Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)

$17.99

Bestseller No. 3

New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer

[Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable

$8.99

Bestseller No. 4

BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees

$199.99

Bestseller No. 5

Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide Walkthroughs

$19.98

Final pre-launch checklist

• The deployment user, SSH key access, firewall, and recovery path are tested.
• The selected Python version is compatible with Django, Gunicorn or the ASGI server, and every pinned dependency.
• The project runs from a virtual environment and dependencies are reproducible.
• SECRET_KEY, database credentials, and other secrets are outside source control.
• DEBUG is false, ALLOWED_HOSTS contains the real hostnames, and proxy security settings match HTTPS.
• Database migrations, static collection, and any administrator creation have been completed against production.
• systemd starts and restarts the application, and logs are readable during an incident.
• Nginx validates hosts, serves the intended static/media paths, proxies dynamic requests, and passes nginx -t.
• DNS resolves correctly, HTTPS redirects and renews, and unknown hosts are rejected.
• Backups, restore tests, release records, and rollback steps are documented.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

deploymentDjangoGunicornLinux VPSNGINXPythonWeb development