Hugo publishing: ship a complete static release
Make generated files into an inspectable release with link checks, a clean artifact, public verification, and a recovery path.
Connect generated public files with the trusted environment that builds and deploys them. Keep the release complete without carrying private working files into production.
Read the Hugo release guide for artifact inspection, transfer, and rollback. Pair it with the credentials guide before adding privileged deployment automation. A public directory should be easy to inventory and safe to serve. Review both what is present and what is absent: missing assets break a release, while included secrets create a different and more serious boundary failure.
Choose the article closest to the decision you are making today. Note the source record, approval boundary, destination, and verification method it proposes. Compare those assumptions with the system you actually operate. Keep unresolved questions visible, and follow the related topic links when you need to examine a specific platform or implementation layer in more detail.
Make generated files into an inspectable release with link checks, a clean artifact, public verification, and a recovery path.
Draw the public boundary, scope release permissions, review diagnostics, and rehearse credential rotation and recovery.