Thanks for the explanation, I guess I will choose NVR with separated POE switch, since I already setup a wireguard in the router so I can easily access both NVR and camera
another question:
1. in OP configuration, there is
Hairpin NAT >> eth1 and eth2, what is the explanation for only this...