You can simplify a lot of this using wireguard between the server and your full node. You can host lnbits on the server and point it at your node via the wg ip. No port opening, no home IP address needed.