That’s the same as having them within the same LAN. That makes https unnecessary, but you’d still have to remember ip+port combos without a domain. The domain doesn’t need to be publicly registered unless you want services to be accessible externally without a VPN connection.
I only allow a couple of my services to be accessed directly via public domain, mostly for sharing with friends. The rest you’ve gotta be within the LAN either by wifi/ethernet or a VPN that I host.
I’d prefer to be able to setup like you have, but an always on VPN for stock Android is a PITA.
Been running openVPN as an always on VPN for stock Android for about 2 years now. Keeps it behind pihole and able to access my LAN only services.
The only issue I have is manually having to tell it to reconnect when the device restarts. Other than that it’s been no different than no vpn.
