Time To Live

Expose a VPN endpoint on non standard port and keep everything else internal if you can. If you want things to be even nicer create a seperate vlan for your internal services or just firewall rules from your VPN to the needed ports on your services.

If you are even more paranoid send an email notification everytime the VPN server has a new connection or keep a default account/password on your services with 0 permissions and monitor when some dumbass logs in with it. Little scripting and you can automatically kill the connection when your VPN has been compromised. You can also disable the exposed VPN whenever you are detected “home”. You can go crazy with the ideas if you have too much free time on your hands!

You can always run a recording server and firewall the cameras as you should with all of them anyway

Only when you are sober. Otherwise you may experience frame drops with extended load times

So soon we will have a brand new pandemic with a rouge computer virus that spawns up new cpus in our lungs huh?

Business and Visionary plans only currently. You can find out more at https://proton.me/support/smtp-submission

You can use protonmail’s smtp gateway(tokenized) also if you have one of the larger plans

Get your own domain. Much easier to hop service providers with a simple DNS update