I’m kind of new to LND and Linux in general, so some of my paranoid design decisions are probably built on faulty logic. But my line of reasoning at the time was…. I want to keep all my Bitcoin stuff as physically close to me as possible, so stuff like bitcoin core, electrum server, and LND live on the home servers. But for stuff that requires inbound connections that expose my IP, like LNUrl or even just receiving money over LN when supplying an invoice, I want to keep those open ports as *far away* from me as possible. That’s when I came up with using port forwarding over a OpenVPN tunnel (using Proton as anonymizer). Probably not the most efficient way to do it but was a fun learning exercise.