[eloisant]

The best of both worlds already exist: take a CMS (like Wordpress) and generate static content from that. There are multiple Wordpress plugins that do that.

You have one Wordpress instance completely internal, safely hidden behind a VPN, get all the convenience of Wordpress, and each time you publish a change in an article it will publish the static site.

[marc_io]

Yes, that's a nice solution. It's very easy to create a local instance of WP with the Local.app (localwp.com) and use the WP2Static plugin to generate a static version of it (or appi.sh, if you need to do that via terminal).