VLANs are layer 2, they don’t really need things like a router to work and should be set up at the switch//layer 2 level and are not routable across the internet. Based on the specifications you’ve stated you want to make a DMZ which is a lot different and will require knowledge of IP subnets, access control lists, and wildcard masks. It’s not much harder to do, but it is different than what your doing, you wouldn’t use a hammer for a screw.
People that down voted you don’t know how to network engineer…