VPN vs HTTPS?

[aj3]

Hello,
I'm starting my first ZoneMinder installation.
It's a small testing setup at my home.

I'd like to be able to access the camera(s) via ZoneMinder from the outside.
What's the "best practice"?
Can I "publish" ZoneMinder via port-forwarding on my router? Obviously with https setup.

Or is it more secure a VPN setup?

Thank you for the advice!

[bbunge]

VPN would be more secure than even https port forwarded. The security of ZM with OPT_USE_AUTH is enabled and even better with Google Captcha. Which ever you choose I recommend using a non-standard port on your router. I had lots of probes of my VPN server using the default port.

[kingofkya]

I have had pretty good luck with https://www.zerotier.com p2p vpn that free mostly because the android app works well and doesn't kill my battery.

[aj3]

Thanks for the feedback everyone.

Yet question: For VPN, I would then be setting up port-forwarding on my home router.
If that IP address changes, I can't hit it directly via IP.
So maybe a "dynamic DNS" service?

Question: What about setting up a small VPS (say a 5$/month Linode) that hosts the VPN?
In that case, I would get the static IP from Linode.
I can VPN into the small VPS, and from there jump to the house's ZoneMinder installation.

Thoughts?