Security Assesment

[Dazcomputers]

Next lesson I need is best configuration for a secure server that can still be accessed from the app or ui3. I have the system configured pretty well. Now I want to address the security of it. I upgraded to bi 6 and optimized everything with the help of this community. I've been using Chatgpt along with this community to get a deeper understanding of this software and security cameras in general. I'm currently setting up a friends bar securtiy then I will duplicate at my other friends bar and my own home so thank you ahead of time for all the valualbe lessens.

 

[wittaj]

Set up a VPN that you host. These are free. Paid VPN is not what you want.

Most routers include a VPN like OpenVPN.

 

[jeremyx]

Adding to the VPN advice, two things that go with it:

1. Once the VPN is up, the only port forward should be the one the VPN itself uses. Nothing forwarded to the BI PC or the cameras, and UPnP turned off on the router so nothing opens ports by itself. The app and UI3 then just connect to the BI PC's LAN address while the VPN is on.
2. Keep the cameras from reaching the internet. A lot of them try to phone home, so either put them on a second NIC in the BI PC or a separate VLAN, or block their IPs from WAN access in the router. BI is the only thing that needs to talk to them.

Since you're repeating this at the bars: if a bar's router can't run a VPN server, WireGuard on the BI PC itself works too.