After a few days away, the hugo service was exposed through metallb to the LAN, and reverse proxied via the wicknet.dev frontend server.