I specified locally hosted/managed because we’d like to avoid clouds and subscriptions. I don’t really want to divulge details but this is mostly for home security against a specific individual, and this person might be inclined to attempt logins into a cloud service. From my end I’d just set up a wireguard tunnel and us it to remote into some kind of server/NVR at my sister’s house.