Cannot resolve fully qualified names on LAN

I assume the problem is that DNS (correctly) returns your public IP but that one doesn’t route correctly from within your LAN.

You can certainly configure knot-resolver hints to override the answers for some particular domains – to get local IPs instead of the public ones. There are various ways how to get that into the config, e.g. see DNS redirection