@ajmartinez@fosstodon.org It depends on how far you want to go with everything being free. If you can stomach that those cheap PoE cameras run a blend of FOSS and proprietary code, you can get by with those on a private PoE switch connected to a separate port on a computer that doesn't act as a router, running zoneminder.

Keeps that whole potentially untrusted network off the Internet where any questionable bits you can't inspect might phone home.