Good suggestions in the chat. Ill throw in my setup for your consideration.

I have several cameras, specifically with Ingenic SOCs on which ive flashed Thingino firmware (foss) so thats a bit of security on the camera side. Some others like hikvision ive picked up but not gotten around to setting up yet. But itll be plug and play as youll see next.

Next i have a router flashed with freshtomato but openwrt is also an option. On that ive set up a vlan for the cameras that do not have internet or inter vlan access. So even if i didnt have custom camera firmware, they still wouldnt be able to send it anywhere.

Next my home vlan has one way access in to the “camera vlan” so i can view from my network.

Finally wireguard server (on the home vlan so it has internet access) so i can monitor remotely

I just pull the rtsp streams. Havent gotten round to feed analysis yet but i used to use zoneminder. But i hear frigate and another software (cant remember off my head) supports for coral tpu quite well even after it has been dropped from support

Reverse proxy the stream and reference itself in the reverse proxied website? Is there no way to do it internally in nginx?

Many selfhosted NVRs have been suggested. Personally ive tried:

iSpy

Frigate

Zoneminder

Shinobi

Ended up settling on zoneminder at this stage.

For cameras themselves i just want to point out the OpenIPC project - opensource firmware if youre technically inclined

Edit: I’m hesitant to recomment OpenIPC now since the main streamer is closed source. Thingino is fully open and developed by some of the devs who didn’t agree with the closed source portion