Raspiblitz at home

I am trying to set up a full Bitcoin/Lightning node at home. I have only one IP address for the node and all other home devices. How to ensure general network security when opening port 8333?

1. Get a new monthly contract with ISP provider designed for bitcoin node only (pricier option).
2. Order a second IP address under existing contract and assign the node a unique IP
3. Use the existing network but make firewall arrangements etc so when infiltrating through the open port only reachable device is the Raspiblitz.

What would you recommend? Is option 3 really an option? And how do you set up such a network security?

submitted by /u/mnijs
[link] [comments]