Above is a layout of the desired network. I am struggling with getting it just right. The internal link from the router is not relevant for this problem.
What I have achieved so far:
I believe 3 networks are necessary:
I am configuring everything via Portainer, and the docker host is using Firewalld. Thanks in advance for any suggestions!