2nd this configuration. My firewall rules block all camera external access and Frigate (once configured) is superb at detecting people without false alerts. It is disturbing just how much traffic smart devices try to send to China and Amazon even when not subscribed to cloud services. The open Wireguard ports appear closed to scanners so I’m also reasonably comfortable with network security.