I don't need to expose the node to clearnet, just want to expose the BTCPayServer to clearnet. Thanks for the link anyways, TIL about tunnelsats.