It's further down in the article but he's using `hugo serve` which renders the static site and serves it in one command.

Not entirely sure how he's doing TLS from a quick skim of what he's shared though.

He has nginx reverse proxy in front on another machine in his lan, so I suspect TLS is terminated there