Can you share what the final desired goal is? It sounds like your goal is actually to provide your services to Bob securely over the internet, is that a fair description? You mentioned eventually grabbing a domain, how do you feel about publicly exposed services with authentication? For instance, I use authentik in front of Jellyfin and paperless myself for a little extra authentication juice.
I would tell you to fight me, but I guess I need to add an
GTK_USE_PORTAL=1
argument to my KDE Konflict Picker first…