You can self host DNS within a wireguard subnet.
Like Headscale
Headscale work nicely? I looked into it a couple years back but didn't get very far.
Yeah that could work too