Is that still the best way given that I'll need lnbits for other purposes anyway?
You are almost there. To receive zaps using lnaddresses, install btcpayserver, create an accou t, check the box that says create invoice automatically, create a lightning address, create a docker based azure website using instructions here
https://docs.btcpayserver.org/Deployment/ReverseProxyToTor/#do-all-this-in-a-docker-container
These are step by step directions. More like a reference, but the azure app service needs 2 environment variables. The first one is TOR_SITE and the 2nd is TOR_PORT.
The last think is https://uptime.betterstack.com to keep the azure website awake, and you also get to monitor your node's uptime.
Discussion
I wouldn't trust lnbits. DYOR, but I have heard they still have vulnerabilities in their code. If you need to have multiple shared lightning accounts then there is no better option that I am aware of, but if you just need one account with multiple lnaddresses then btcpayserver is the way to go.