MetalLB provides LoadBalancer Services on bare metal. On this server (<public-ip>/26), all three options are documented: Option 1 (additional IP), Option 2 (NodePort fallback without MetalLB), Option 3 (internal software bridge).
NOTE: On Hetzner, ARP is blocked for IPs not officially assigned to the server — an additional IP is required for external MetalLB access.
MetalLB Operator (namespace: metallb-system)/32, L2Advertisement on eno2<public-ip>:<NodePort>