Comment by khoirul

You could run it within a Tailscale VPN network. In fact Headscale (Tailscale server) has a very basic DNS server built-in.