Over time my home network accumulated quite some devices which run web interfaces. They are accessed only locally, from within the home network.
What would be the best way to run them with https, while being able to access them with names, and not IPs. Self-signed certificates are not an option.
I came up with the following idea:
- Create names in the zone
home.myown.tld
in the public DNS of mymyown.tld
pointing to my local addresses, likeserver.home.myown.tld
pointing to 192.168.x.y. - Create letsencrypt certificates for all the servers and devices
Is that a good approach or can it be done better?
Specifically: How bad is it to assign local addresses to a public domain name?