One public STUN (Cloudflare). Suitable for LAN + most home NAT pairs.
No ICE servers at all. Host candidates only — true same-LAN only.