I use wireguard. One network is behind cgnat so i just get that client to connect outbound to the other client to initiate the tunnel (instead of trying to connect to IT) and it works just fine.

I did try tailscale once upon a time but it was so clunky and confusing for me…i just wanted to simply access my entire networks remotely without any overhead

I have joplin but personally found myself using Nextcloud Notes 100% of the time. I just need very basic, quick markdown notes

Ticks all your boxes

Raspberry Pi:

1. Install wireguard (as a server)
2. Set up a peer/client config
3. Open wireguard port on the router

MiniPC:

1. Install wireguard (as a client)
2. Add server config and connect to server
3. Verify connection
4. Ensure connect on boot

Points to note:

• Configure them both locally and ensure you have a connection before you move the pi to another country

• If you’re behind a CGNAT on one network, that’ll change some things. That network will have to be the client. (If both are behind CGNAT, you’re out of luck and cant use this - will have to be tailscale or other method)

• If using a domain name make sure its always pointing to your ip (in case it’s not static)

• I think if you set allowed ip as 0.0.0.0/0 on the client it’ll route all traffic.

Edit:

Saw your comment about just having qbt use the vpn. Check this guide out

Syncthing or rsync?

Good suggestions in the chat. Ill throw in my setup for your consideration.

I have several cameras, specifically with Ingenic SOCs on which ive flashed Thingino firmware (foss) so thats a bit of security on the camera side. Some others like hikvision ive picked up but not gotten around to setting up yet. But itll be plug and play as youll see next.

Next i have a router flashed with freshtomato but openwrt is also an option. On that ive set up a vlan for the cameras that do not have internet or inter vlan access. So even if i didnt have custom camera firmware, they still wouldnt be able to send it anywhere.

Next my home vlan has one way access in to the “camera vlan” so i can view from my network.

Finally wireguard server (on the home vlan so it has internet access) so i can monitor remotely

I just pull the rtsp streams. Havent gotten round to feed analysis yet but i used to use zoneminder. But i hear frigate and another software (cant remember off my head) supports for coral tpu quite well even after it has been dropped from support

Tesco in the uk does this.

Coincidentally enough this post a few down from yours (on my feed) shows a trial for the second part of your post

Reverse proxy the stream and reference itself in the reverse proxied website? Is there no way to do it internally in nginx?

Many selfhosted NVRs have been suggested. Personally ive tried:

iSpy

Frigate

Zoneminder

Shinobi

Ended up settling on zoneminder at this stage.

For cameras themselves i just want to point out the OpenIPC project - opensource firmware if youre technically inclined

Edit: I’m hesitant to recomment OpenIPC now since the main streamer is closed source. Thingino is fully open and developed by some of the devs who didn’t agree with the closed source portion