AFAICT current "best practice" for private networks is to use a private subdomain of your real domain. Say, .internal.example.com.
There are a lot of workarounds sure, but try explaining that to everyone else.
But for my machines, I just use a domain that I own.