I agree it’s a stupid hack, but there are good reasons to use public addresses in your local environment too: for example you’ll need it for any roaming device like a laptop or a phone. It also vastly simplifies certificate management where you can just use sour existing publicly valid certs to access your services.
The only proper solution would probably be ipv6, but that’s not trivial either.



Ahh okay. Well then the issue becomes actually having this DNS server with all the records you need, and serving it to the correct clients - for example you’ll need a different set of records for your LAN and for your VPN.
Although come to think of it since my DNS records are already kinds scripted I could probably fairly easily just script different URLs based on the DNS server I want to serve them from… Maybe worth a try.