PROTON_DUMP_DEBUG_COMMANDS=1 - outputs a launch script you can use outside of Steam in /tmp
This seems super overcomplicated. What I would do is put all the subdomains on the public DNS, let HTTP(S) through the firewall for the respective hosts, deny everything from outside of your local network on the http server that isn’t under the HTTP challenge path and then run the HTTP challenge as you would for a public site.
Then you can get certs, everyone outside trying to access will get 403, and inside the network you can access as normal.
Of course you’ll have to trust your http server’s ACL for that, but I’m just going to assume servers like nginx (which I use) have a reliable implementation.
KDE Frameworks used to be a single package (I think with KDE 4?) that people complained about because it contained unnecessary features for the software they want to use. They split it into different packages because of that, so software could only depend on the part of Frameworks that it actually used. And now people complain that KDE software has “a billion dependencies”. Unbelievable.