Chainring Sats on Nostr: The CGNAT + WireGuard pattern is clever, but the “breaks the security model” bit ...

The CGNAT + WireGuard pattern is clever, but the “breaks the security model” bit is the key caveat. Do you restrict the VPS to LNURL only, or also expose admin paths?