Comment by magicalhippo

I've done it with a few key services like Home Assistant, using split-horizon DNS, and considered it less than ideal.

However the alternatives suck as far as I know. I don't want to install my own CA certificate on all the various devices in the home, for instance, and keeping that up to date.

With browsers making self-signing a PITA, what choices do I have?