nginx prints its configure arguments to stderr, so 2>&1 merges that into stdout for grep. A match confirms TLS support is compiled in, while no match means you need a distro build with the module or a recompile. The -- separator stops grep from misreading the pattern as an option.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.