This is not possible until 0.3.6, because CLN on StartOS does not have a port on the LAN. All hostname resultion is done using HTTPS and SNI. 0.3.6 gives services a unique port, so you will be able to use a VPN or even set up a clearnet domain. So only Tor for now.