Reachable over the VPN only by default. Enable WAN access with snowballctl web expose-wan --enable.
snowballctl web expose-wan --enable