This is traefik, but its worth watching this because local SSL and external SSL setup is amazing and highly versatile for homelab
When you adapt this to caddy I recommend a similar certificate configuration
Home Maintenance Reminder system
Single Sign in for Home Assistant now possible with OpenID
Custom Attributes in Authentik OIDC
Help with ZFS Array
Am I the only one who missed the Owncloud rewrite in Go?
A Story of Silent Data Corruption with Seafile
Self hosted YouTube player with automatic yt-dlp downloader
I did this using a POE switch to both power the cameras and also have that entire switch on a VLAN. On my OPNSense, that vlan only has permission to send or recieve packets to home assistant which is on my main LAN. They have no other access to anything including each other on the camera vlan.
Other than the initial setup, the only interaction I have with the cameras is via home assistant. This allows them to be completely isolated and still have remote access as per usual with home assistant.
My HA is using the all in one VM setup on Proxmox. I would highly recommend HA installed as a VM rather than Docker due to the ease if installing plugins. After that the above setup will keep your IOT devices nicely isolated.