The first 1024 are reserved and you usually can freely choose the ones greater than that. You can also use .local for local domains.
Current best practice is to use a subdomain of a domain you control for internal stuff. Makes getting certs for internal hosts easier too if you can be bothered.