How to deploy Streamlit using st.login() to Digital Ocean

Question

I am looking to deploy my Streamlit app to Digital Ocean but there’s a problem.

My app uses st.login() which gets my login credentials from secrets I stored in the secrets.toml file. However, there’s no place for me to upload my secrets file securely within Digital Ocean.

I can’t assign the credentials to environmental variables because Streamlit’s st.login() looks specifically for a secrets.toml file.

I don’t want to hard code my secrets in a secrets.toml file when I deploy my app, so what should I do?

Bobby · Answer

Hi Draco, One simple workaround on DigitalOcean (especially if you’re using a Droplet) is to upload your secrets.toml file after deployment via SSH. You can place it in ~/.streamlit/secrets.toml on the server and make sure that file is not tracked in your Git repo. Basically: SSH into your Droplet. Create the folder: mkdir -p ~/.streamlit Upload your secrets.toml securely, eg: scp secrets.toml root@your_droplet_ip:~/.streamlit/secrets.toml This keeps your secrets file out of your repo and allows Streamlit to find it where it expects it. Alternatively, if you’re using App Platform, you might want to refactor your code to pull secrets from environment variables instead, since App Platform lets you manage those securely. Hope that this helps! - Bobby

KFSys · Answer

Heya, Since st.secrets (not st.login() — I assume you meant st.secrets["key"]) specifically loads from a secrets.toml file and not environment variables, here’s how you can securely manage this for deployment: Solution: Use a secure secrets.toml during deployment via environment-aware scripting Here’s a practical and secure approach: Keep secrets.toml out of version control Add it to .gitignore: .streamlit/secrets.toml Create secrets.toml during deployment from environment variables Instead of uploading the file, create it during the deployment process using a script (e.g., in your Dockerfile, cloud-init, or startup script). Here’s how: Example deployment shell script: #!/bin/bash # Create the .streamlit directory if it doesn't exist mkdir -p /app/.streamlit # Write secrets.toml from environment variables cat <<EOF > /app/.streamlit/secrets.toml [general] username = "${STREAMLIT_USERNAME}" password = "${STREAMLIT_PASSWORD}" EOF Set the STREAMLIT_USERNAME and STREAMLIT_PASSWORD as environment variables in DigitalOcean (via the App Platform UI if using that, or in your shell if you’re using a droplet).

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

How to deploy Streamlit using st.login() to Digital Ocean

Related questions

Is it safe to run production apps on a single DigitalOcean Droplet?

403 Forbidden on DigitalOcean App Platform with FastAPI Backend & Streamlit Frontend

I'm getting this ERROR: you dont' have permission to complete this action

App.yaml file is not detected in the root or .do directory

ReferenceError: module is not defined in ES module scope

npm run build/vite build time out killed

Droplet's Nginx Reverse Proxy Fails with 502 Bad Gateway Only After Deploy Any Thoughts?

Cannot deploy from private github repo

Django/Nginx/Gunicorn "unknown errors" in nginx logs

How to deploy a responsive web design project on a VPS using Git?

How to skip build step for a service in app platform

Does a DO function do npm install, or I need to manually upload the node_modules folder?

Report this

How to deploy Streamlit using st.login() to Digital Ocean

Related questions

Is it safe to run production apps on a single DigitalOcean Droplet?

403 Forbidden on DigitalOcean App Platform with FastAPI Backend & Streamlit Frontend

I'm getting this ERROR: you dont' have permission to complete this action

App.yaml file is not detected in the root or .do directory

ReferenceError: module is not defined in ES module scope

npm run build/vite build time out killed

Droplet's Nginx Reverse Proxy Fails with 502 Bad Gateway Only After Deploy Any Thoughts?

Cannot deploy from private github repo

Django/Nginx/Gunicorn "unknown errors" in nginx logs

How to deploy a responsive web design project on a VPS using Git?

How to skip build step for a service in app platform

Does a DO function do npm install, or I need to manually upload the node_modules folder?