@queue
nixos with the surf display manager https://search.nixos.org/options?channel=23.05&show=services.xserver.desktopManager.surf-display.enable&from=0&size=50&sort=relevance&type=packages&query=surf
services.xserver.desktopManager.surf-display.enable = true;
services.xserver.desktopManager.surf-display.defaultWwwUri = "https://yourlibrary.com/internalzone";
and you should be set. Depends of course on whether you want them to be able to run programs and stuff...
I think the experiment is over.
There is hope