.internal works fine now.

Both of these are meant for operating a home/private network.

.self seems to be geared towards a 'accessible from the everyday net' kind of approach.

Right.