

I was recently reading about Talon Voice, which sounded quite interesting with lots of usability hacks. Unfortunately, not an option anymore if you are a Linux user: https://www.osnews.com/story/145162/accessibility-input-tool-removes-x11-support-doesnt-want-to-support-wayland-users-caught-in-the-middle/
I would also do #1, and I’d probably make it work (loooong time Linux user and persistent debugger).
#2 is probably simpler, both conceptually and technically. NAT and FW config is self-contained, and there are plenty of docs and how-tos.
Note: I’m not a proxmox user, so there could be some proxmox specific spanners… But I doubt it.