On success, Travis pushes to a separate prod copy of the repository (Travis remains read-only for Github).
Prod repository has a pre-receive hook configured to only accept commits also present in Github.
Prod has a post-receive hook to build production files for the frontend, push everything to serving locations, where nginx picks them up, and restart the api via supervisor.
Currently, everything is in a hard-coded debug mode. We need to turn that off for production and prepare tooling to make deployment a no-brainer.