HA Mobile App - ios - have to reauth every time I come home & does not use Nabu Casa away from home

Background - Setup my HA instance & ios apps roughly 4-5 years ago. Largely has been stable & trouble free that entire time.

Recently, in troubleshooting a new ios device that wasn’t staying connected I have disrupted all other ios devices. Fun.

So I am in a situation where sometimes it works and sometimes it doesn’t. My questions:

  1. When I am not home, why is the app not using the properly configured External URL which points to nabu casa? It seems to think it needs to route through the internal URL even though it is no longer attached to that server.
  2. When I return home, it says that I have been disconnected from my server and now have to reauth. When I do, it proceeds to create a new token, every time, even though there are at least 10 previously used token on the server.

I am using trusted networks, which I suspect is part of the problem, but am not clear why (its been fine for at least 4 years…). Anyone familiar with the authorization flow that can help shed light on some of my issues?

Also relevant, I turned off Private WIFI Address in ios and each device is assigned a static IP on my home network.