Wired PoE cameras, ideally on a separate network without access to the internet. In that case, you can even use Chinese cameras like Hikvision, without that I would stick to something like Ubiquiti where I expect your data will not be actively sent out, but who knows. Then definitely use local NVR, ideally open-source like Frigate or ZoneMinder.