Noderunner is indeed a tough job. If you are puzzled by and not willing to dig into any of the following, you'll be toasted sooner or later, even before dealing with lightning itself: "rdr on igc1 inet proto tcp from any to (igc1) port = 9735 -> 10.0.210.42 port 9735", "bind-addr", "bitcoin-rpcuser=clnusr", "rpc-file-mode=0660", or "runePath=", or "cln-backup:/mnt/datastore/hdds/cln /mnt/cln_on_backup nfs defaults 0 0". Advice from someone who is puzzled by things every week, but willing to dig deeper.