Honestly just install wireguard on client and they use that to remote access the server when away from lan network

But I do run my vaultwarden on arch…no one gives a shit

What backend of vaultwarden are you using? Mysql or Mysql lite or postgresql?

I’ve ran arch for many years in many vms acting as servers. I’ve never had any more issues with arch than Ubuntu. With any system you can choose you need your keep backups or snap shots