Very close to my arrangement but I noted VPN + Firefox + non-trackers are treated suspiciously by most remote work systems so one way or another you have to keep a chrome browser close by to authenticate through those gates.

PS: These kind of detailed comments are he reason I believe in the fediverse. It is refreshing to see the community grow.