To put it bluntly, you should never put your node on a public IP

But if you want to access it from anywhere, you have to do that

or;

- use LNC (lightning node connect)

- use tor bridge like IP2TOR (but tbh I think I'm the cause of breaking IP2TOR last year [sry])

- reverse proxy

Can't have it both ways without some sacrifice

Hard truth is, If you really care about privacy, spinup a second node in the cloud.

Tailscale is 90% FOSS. Only part that is not is how they connect their servers. Which you can actually run yourself if you don't trust tailscale checkout HeadScale on github.

Its only free for a limited amount of users & devices. They offer a paid plan for more features.