I don't quite get how he's actually serving the page. Does `hugo` contain a webserver, I thought it's a static site generator

It's further down in the article but he's using `hugo serve` which renders the static site and serves it in one command.

Not entirely sure how he's doing TLS from a quick skim of what he's shared though.

He has nginx reverse proxy in front on another machine in his lan, so I suspect TLS is terminated there

Care to enlighten us? Maybe it's just you overestimating the implications