I second this, it is easy to set up Traefik as a reverse proxy with automatic certificate renewal.

Do you use fractional scaling? Because it is sharp on my machine on sway.

It is not out ot scope. Basic auth exists: https://username:password@example.com

In case you haven’t started yet. Learn docker, but use podman.

Just a thought: It should be possible to save the default ps output does that not fit your use case better?

man 5 docker-config-json

https://man.archlinux.org/man/extra/docker/docker-config-json.5.en

Boot a live Linux, chroot into your system, run pacman again and fix your systemd boot to include a fallback option for the next time this happens.