If you host your own internal dns server like a pihole, you can just add them in as local names.
Careful of something called split brain dns though.
For reference, I use AWS Route53 to host my dns domain publicly and internally I use pihole and Traefik. Traefik deals with getting certificates for my internal resources.