I have a solution for you. Just don’t have your Internet facing things on the same /24 as your home stuff. Why vlan if you can just separate them by network and switch.

Or: just do it anyways. I learned most shit after everything broke. Not before.