Over time my home network accumulated quite some devices which run web interfaces. They are accessed only locally, from within the home network.
What would be the best way to run them with https, while being able to access them with names, and not IPs. Self-signed certificates are not an option.
I came up with the following idea:
- Create names in the zone
home.myown.tldin the public DNS of my
myown.tldpointing to my local addresses, like
server.home.myown.tldpointing to 192.168.x.y.
- Create letsencrypt certificates for all the servers and devices
Is that a good approach or can it be done better?
Specifically: How bad is it to assign local addresses to a public domain name?