don’t assign an exit node for the machine with your ln node and you should be good.. other machines you may want to provide a public interface that obfuscates your real ip… eg web server, nostr relay