Yeah, this. I do the same with my Reolink cameras - block all external access and I use a Frigate docker container to record footage to my storage. Bonus is I have Frigate using a Coral TPU, so it's got some really accurate, and fast, inferencing/recognition baked in.