OK. Finally landed on Snort for web client after trying a few, found a way to not hand over my private key by installing the Flamingo extension, and I'm using Amethyst for Android. Private Nostr relay over tor is only getting connected via web client, but I can't get Flamingo on Firefox so that's a no-go for now. Also added a lightning address on my node and once I connected it to my npub and got a NIP-05 identifier, I can receive zaps, sometimes even without crashing the tor proxy!
Making progress... but man, this is a lot.