What are good option for self hosting home security camera?

Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨jaybone@lemmy.zip⁩ to ⁨selfhosted@lemmy.world⁩

I’d like to host this on the Ubuntu Linux box in my home office and put a camera in my living room. Would like to be able to monitor the camera from an iPhone, and have it auto record on motion detection.

For external access though, I don’t have a domain name registered, and I’d rather not have one. I’d be happy to access this just using my external IP address. But I don’t know how “static” the IP address from my ISP is. (My router gets it via DHCP, but I don’t know how long those leases are, or if it re-uses the same IP when renewing.)

source

Comments

Sort:hotnew top

BlameThePeacock@lemmy.ca ⁨2⁩ ⁨days⁩ ago
frigate.video

You can absolutely use your external IP rather than a domain, your ISP likely keeps your IP the same for long stretches of time. Mine only ever really changes during long power outages.

You can get around that the IP issue by broadcasting your ip from your local machine to a known service, there are some free ones but they aren’t the most stable things in the world if it’s critical. Google Dynamic DNS

source
- antimongo@lemmy.world ⁨16⁩ ⁨hours⁩ ago
  I also use Frigate!
  
  Piggybacking to also recommend Tailscale to OP for external access. Not 100% self hosted, but solves the DDNS issue. And works well with Frigate in my experience.
  
  source
- ravenaspiring@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
  With amcrest cameras
  
  source
  - CmdrShepard49@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
    This is what i have. Amcrest cameras tied to an Amcrest NVR which offers remote viewing, recording, and playback and then also tied into Frigate and Home Assistant also for remote viewing, event notifications, etc. I could ditch the NVR but I’d need to get a POE switch and I like having it as a backup.
    
    source
  - letsgo2themall@lemmy.world ⁨1⁩ ⁨day⁩ ago
    depends on the camera. I just ordered 2 new wifi cameras that do not have local access. app via internet only. So I’m sending them back. That said, amcrest does make some good cheapo cameras.
    
    source
  - JustEnoughDucks@feddit.nl ⁨1⁩ ⁨day⁩ ago
    Or Hikvision for very similar cameras at an actually affordable price (but you HAVE to block then from the internet and/or put them on an isolated VLAN because they send everything back home).
    
    Reolink also makes gold budget cameras, especially their doorbell camera.
    
    source
    -> View More Comments
anamethatisnt@sopuli.xyz ⁨2⁩ ⁨days⁩ ago
If you haven’t bought cameras yet then you can always check for one that works with thingino Open-source Firmware for Ingenic SoC IP Cameras

source
- muusemuuse@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
  Holy crap, this is amazing! I can take shitty wifi cams I have in storage and make them reliable, cloudless Ethernet cams! Woohoo!
  
  source
jdr8@feddit.org ⁨2⁩ ⁨days⁩ ago
Have a look at Frigate.

You can self host and support several cameras, AI detection, etc.

source
ikidd@lemmy.world ⁨2⁩ ⁨days⁩ ago
If you get a camera that is ONVIF compatible, you won’t need an app to set it up. Vikylin, amcrest are a couple I’ve used.

Use tailscale to access your cameras, don’t portforward them. They are pathetically terrible for security.

source
CompactFlax@discuss.tchncs.de ⁨2⁩ ⁨days⁩ ago
Any ONVIF/ RTSP camera is probably going to work but I still keep them segregated from the Internet.

Motion triggered recording works fine to a SD card on many cameras. I’m so far happy with Reolink.

For remote access look into Tailscale.

source
xavier666@lemmy.umucat.day ⁨1⁩ ⁨day⁩ ago

For external access though, I don’t have a domain name registered, and I’d rather not have one. I’d be happy to access this just using my external IP address. But I don’t know how “static” the IP address from my ISP is. (My router gets it via DHCP, but I don’t know how long those leases are, or if it re-uses the same IP when renewing.)

Some routers have integration with dyndns or noip. You can get a free (disposable) domain. If you do the correct port forwarding to your camera’s application server, you can access your camera from outside. However, ensure you are using HTTPS, a strong password, and the server on a non-standard port.

Pro-tip = Run wireguard to access everything securely.

source
- philpo@feddit.org ⁨22⁩ ⁨hours⁩ ago
  Did you just seriously recommend port forwarding to a NVR login? Even worse with a consumer grade router? With HTTPS,non Standard Port and a strong password as the only security tips?
  
  Please,people,for the love of god: Don’t do that. Really. Don’t. This is really bad advice,sorry.
  
  Unless you are very very sure that your NVR solution is impecable in terms of security (none are), you are 100% sure you stay up-to-date all the time (including reviewing updates for issues) and have additional measures like fail2ban, IDM/IDS,etc. in place this is a very bad idea. HTTPS is only helping in terms of password transmission/spoofing,which is an unlikely vector here, a non standard port doesn’t help one bit here(have a bit of fun with shodan and see yourself) and while a strong password helps it only helps if the auth of the system and the OS below itself is watertight - a hard task.
  
  It is always a bad idea to port forward unless you really really cannot avoid it.
  
  Use a VPN - as you said, wireguard.
  
  source
  - xavier666@lemmy.umucat.day ⁨16⁩ ⁨hours⁩ ago
    I will agree that my advice is bad.
    
    I myself run all my services over wireguard. But I run ssh natively though but with extra hardening (fail2ban/sshkey/no default port/max retries, etc). Plus my IP changes every 24 hours. However, I did learn how to setup online services and this can be a stepping stone.
    
    If one is experimenting, exposing the port is fine (temporarily). But if someone is running a service 24/7 over the internet, and the person does not have any cyber security acumen, wireguard is the clear winner.
    
    source
- atmorous@lemmy.world ⁨1⁩ ⁨day⁩ ago
  Can you make some tutorials for how to?
  
  source
  - xavier666@lemmy.umucat.day ⁨1⁩ ⁨day⁩ ago
    If you tell me what kind of hardware you have, i can direct you to the correct resource. I have done it for my TPLink router, which has support for noip.com. OpenWRT/OPNSense has dedicated plugins or it’s baked-in.
    
    source
AmbiguousProps@lemmy.today ⁨2⁩ ⁨days⁩ ago
I use Frigate and Reolink cameras. I have a Home Assistant install to access the cameras remotely through reverse proxy.

source
gole@lemmy.zip ⁨1⁩ ⁨day⁩ ago
I’d recommend

github.com/roflcoopter/viseron

Checks all the boxes: local storage and streaming, detection, recognition.

Should work fine with most cameras, but configuration is via YAML only, no GUI.

You can try a DDNS service to get a fixed domain name bound to your dynamic IP. Most modern routers support a few providers, try looking in the settings. They are mostly free for personal use.

source
philpo@feddit.org ⁨22⁩ ⁨hours⁩ ago
Have a look at Agent DVR. Works locally and the “pro” features that one would need to pay for are basically just Plugins. Everything else works nice without it. Additionally it accepts basically everything you throw at it camera wise and is far easier to configure than frigate, also has a (good) HA integration and is extremly mighty if your system grows over the years.

source
emerald@lemmy.blahaj.zone ⁨2⁩ ⁨days⁩ ago
I actually just set something like this up using sentryshot and a random IP camera my dad had laying around. The docs are kinda sparse but it was simple enough to get the camera set up. It supports motion and object detection in software and I think you can set it to just record on one of those events but I haven’t messed with that at all.

source
ryokimball@infosec.pub ⁨2⁩ ⁨days⁩ ago
I tried using kerberos.io a while back, I did not have success but I think that’s because my setup was wonky. We’re looking into, at least.

Also, HandsOnKatie has done a couple videos on home surveillance, I know she likes ReoLink and Home Assistant But I don’t remember what her full software stack set up as like.

source