Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

public domain for internal services

I guess they need a CA then

https://smallstep.com/docs/step-ca/

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/

Raspberry PI

In my experience I’m actually impressed with the ‘full simulation’ performance so far.

Absolutely it was released far too early, I’m looking forward to feature parity with CS1 and getting it to a proper state.

Gnome terminal supports everything you’re asking for

https://help.gnome.org/users/gnome-terminal/stable/pref.html.en

TLDR, no

The cpu isn’t the only piece of the puzzle. 6.5 kernel is only just released, and at least just supported on Debian testing.

It’s not crazy that you haven’t setup any power saving profiles, or that the kernel doesn’t natively support these new chips and architecture.

HDMI 2.0 has limited support for high-res displays at 21:9. Check that your cables also are up to the task.

Running both the internal and external display at these high resolutions will be a challenge, only getting 30hz here makes sense.