[gyrgtyn]

You can make public DNS records for your zerotier/wireguard/tailscale ip addresses (and make lets encrypt certs for them).

some routers block rfc1918 addresses from dns lookups, but you can turn that off, or put your virtual lan in a different range.

Then you can have sql01.example.network point to 100.13.14.15