Just don’t distribute anything.

Can’t get SSL certificates for an unregistered domain, my bitwarden instance is purely local (+VPN) but I still need SSL for it to work properly and I’m really not interested in managing my own CA and installing certificates on all my devices.

Why don’t you run a speedtest with the ISP modem before you bridge it and see what you get.