• 0 Posts
  • 5 Comments
Joined 2 years ago
cake
Cake day: June 15th, 2023

help-circle


  • Raspberry Pi:

    1. Install wireguard (as a server)
    2. Set up a peer/client config
    3. Open wireguard port on the router

    MiniPC:

    1. Install wireguard (as a client)
    2. Add server config and connect to server
    3. Verify connection
    4. Ensure connect on boot

    Points to note:

    • Configure them both locally and ensure you have a connection before you move the pi to another country

    • If you’re behind a CGNAT on one network, that’ll change some things. That network will have to be the client. (If both are behind CGNAT, you’re out of luck and cant use this - will have to be tailscale or other method)

    • If using a domain name make sure its always pointing to your ip (in case it’s not static)

    • I think if you set allowed ip as 0.0.0.0/0 on the client it’ll route all traffic.

    Edit:

    Saw your comment about just having qbt use the vpn. Check this guide out



  • Good suggestions in the chat. Ill throw in my setup for your consideration.

    I have several cameras, specifically with Ingenic SOCs on which ive flashed Thingino firmware (foss) so thats a bit of security on the camera side. Some others like hikvision ive picked up but not gotten around to setting up yet. But itll be plug and play as youll see next.

    Next i have a router flashed with freshtomato but openwrt is also an option. On that ive set up a vlan for the cameras that do not have internet or inter vlan access. So even if i didnt have custom camera firmware, they still wouldnt be able to send it anywhere.

    Next my home vlan has one way access in to the “camera vlan” so i can view from my network.

    Finally wireguard server (on the home vlan so it has internet access) so i can monitor remotely

    I just pull the rtsp streams. Havent gotten round to feed analysis yet but i used to use zoneminder. But i hear frigate and another software (cant remember off my head) supports for coral tpu quite well even after it has been dropped from support