Elixir Blog Posts

I think your post also assumes that the build happens on the production or production-like server that also contains the secrets. Am I reading it right?