> How do clients get the address for a nice domain name without the addresses in public DNS?

They don’t. You put the addresses in public DNS.

Yeah, nah. Won't be doing that.

Why not? It's easy to set up and manage and it just points at an internal IP address