Great article as usual Brandon!
Couple of things.
Should the key for guardian be added to the config file (if the project is to be hosted in github for example)?
There are quite a few examples about generating the keys https://hexdocs.pm/jose/key-generation.html so should any of these be used or the phoenix.gen.secret is good enough?
Lastly, the phoenix.gen.secret needs to be run after installing the dependencies.