You can simplify a lot of this using wireguard between the server and your full node. You can host lnbits on the server and point it at your node via the wg ip. No port opening, no home IP address needed.
When I say wireguard I meant tailscale...which uses wireguard.
Tailscale is a great solution. I've been using it for years. And Wireguard is great too, but more complicated for the average user. Though, not everyone wants to pay for a VPS every month.
I use Cjdns, which does not require reconfiguring when IPs change. The Cjdns IP6 is permanent and cryptoauthenticated (as well as e2e) like a nostr address. Throughput is higher with wg, openvpn, and other pt2pt vpns, and yggdrasil provides a high throughput mesh vpn like cjdns (but with higher latency).
How are other external users going to connect to your LNbits then for resolving the Lightning address etc?
I assume he meant using tailscale to connect your node and your external VPS running LNBits.