Re 3, that's why you need to run a DNS server in your LAN, like pihole or adguard or coredns. And don't use .local, use .home.arpa instead, or use a DDNS domain like DuckDNS and make it resolve to your LAN IP with your DNS server. And use Caddy (shameless plug)