How to separate bitcoin core and lightning data flow

There is a great guide on that!

This should meet your needs as you only need to specify the LND port behind the VPS/VPN, so there will not be an advertised IP or port for bitcoin core when configured properly.