Building a Self-Hosted AI Security Camera System with Raspberry Pi,
OpenWRT and WireGuard
reddit / selfhosted

----------------------------------------------------------------------
EndlessHiway · 2023-12-02 14:29

why?

----------------------------------------------------------------------
0r_not · 2023-12-02 18:44

Frigate + Coral TPU, Homeassistant with public facing address (Proxy -
nginx or HAproxy). Integrate frigate with Homeassistant -- add the
frigate card to Lovelace.

----------------------------------------------------------------------
TorGuardVPN · 2023-12-02 19:44

You're absolutely right about HAOS having solid Frigate support,
though initial setup can be a bit daunting for newcomers. The OpenWRT
LuCi app in the tutorial works with Docker, whether on x86 or ARM, and
utilizes yq for managing Frigate's config.yml.

Opsec requirements can vary, and it's crucial to consider the risks
involved in exposing self-hosted security cameras to the outside
world, especially through domains. For safer public access, we
recommend using Nginx Proxy Manager, bolstered with additional layers
of security like user/password authentication and IP whitelisting. For
public access point your domain to the Wireguard IP and add port rules
to fw external traffic to your internal Nginx Proxy Manager ports.

In this guide, we've leveraged Wireguard to facilitate remote access
to the cameras, maintaining connection through the VPN. This ensures
that only your approved Wireguard peers can access the network and
cameras. Wireguard not only serves as the remote access VPN solution
but also doubles as an effective firewall. For those who require added
security, measures like routine wg config rotation and IP whitelisting
are highly advisable to safeguard against unauthorized external
access.