Hello, My home network setup is as follows: My home server is a mini PC that has 2 ethernet ports. One of them is connected directly to the ISP router. The other ethernet port in the server is not connected to anything. The ISP router is also connected to a mesh WIFI for other home devices (PCS, laptops, phones, tablets, TVs, etc.). The server has Proxmox installed with some VMs and containers. They are publicly accessible through Cloudflare tunnels using a domain I purchased, and they are working fine with no issues at all. However, I want to secure the VMs and containers using a virtual firewall. What is the best way to do this? If I install pfSense as a VM in Proxmox, should I connect the physical server to the mesh WIFI? If yes, then what's the point of this? The VMs and the containers are not connected to the mesh network. Or is there other way to secure the VMs and the containers without the need to connect the other ethernet port? If there is a guide or a YouTube video for a similar scenario, I would really appreciate it if someone posts it here.