

Yeah, I have 3 Ruckus APs scattered around the house and the devices are on their own SSID which I’ve VLANd off and blocked from the internet… until it’s time to do updates.
The Zeros are in far corners of the house to get a better idea of which location people are with the Bluetooth detection, but in the end I just had to throttle their bandwidth (in the Zeros) and they seem more stable now… hopefully won’t impact you, so it’s just an FYI 🙂
Hmmm… there’s a few different things going on here.
As others have already said you don’t need a cert if you’re just messing around internally, you can use an internal TLD -
.localis reserved for mdns, Avahi, etc. so that’s fine… personally, I use.homeI use pfSense, but I presume that OPNSense has the same function in DHCP to provide the Domain Name in there, so any static mappings will respond to
thing.homeI also have HAProxy to resolve external httpS://IP:Port to an internal http://thing.home (note: no S internally)… this simplifies my setup, and I presume it could work internally too, but I’ve not set it up as DHCP solves that for me.
I don’t use containers, instead each thing is it’s own VM, or physical machine, so I don’t know whether NAT (on proxmox) would resolve your issues with everything’s on 1 VM…?