This is so great, thank you for sharing this! I work for OB1, the team leading the development of OpenBazaar, and have a couple of quick notes from our dev team:

1. Add sudo ufw allow 4001/tcp after the other ufw command

2. You can download client-only binaries (no need to have another server installed locally), they have "client" in the filename https://github.com/OpenBazaar/openbazaar-desktop/releases

3. We have a new command for certs but it hasn’t been tested by anyone outside of our team that you're welcome to try if you'd like. It’s

go run openbazaard.go gencerts --host <ip>

and then the certs are in <datadir>/ssl/