brokkr hub prove-out
--------------------
host:   brokkr-hub (192.168.1.20, VM on aiml)
serves: kent.dev.hydra.host
If you can read this over HTTPS, the DMZ path works end to end:
internet -> router:443 -> hub VM -> caddy