This is a tutorial, not a think piece. David Alvarez Rosa walks through the exact steps to serve a static site (Hugo-generated) as a Tor hidden service: configure torrc, point nginx at localhost, build a second copy of the site with the .onion base URL, automate deployment via GitHub Actions. The whole thing fits in a few config blocks and two shell commands. The technical core is straightforward and well-documented elsewhere, but the value here is in the specific decisions made and the friction points noted. Tor insists on owning the HiddenServiceDir (chmod 700, user debian-tor) — point it at your web root and it refuses to start. The nginx block strips TLS, HTTP/2, and QUIC because Tor provides its own encryption over plain TCP. These are the kind of gotchas that save you an hour of debugging. The dual-build pattern is the most transferable idea. A static site generator bakes its base URL into every absolute link, so a clearnet build served over Tor would leak visitors back to the clearnet domain. The fix — building once per target and rsyncing each to its own web root — is clean and generalizable to any multi-origin static deployment. What's missing is threat modeling. The guide covers how to set up a hidden service but not why you'd choose this architecture over alternatives, what attack surfaces remain (traffic correlation, server-side leaks, operational security failures), or what the performance tradeoffs look like for visitors. For a privacy-focused deployment, these omissions matter. The Tor Project advocacy paragraph is earnest and welcome — the network depends on relay operators and users — but it sits oddly in what is otherwise a dry technical walkthrough. The piece would be stronger if it either committed to the advocacy frame (why self-hosting on Tor matters politically) or stayed purely mechanical. As a tutorial, it does the job: you can follow along and have a working .onion site in under an hour. As a piece of writing about self-hosting on the dark web, it's a narrow slice — setup without context, plumbing without architecture.
