simplys use this config:
firewall wan in vmbr0
firewall trusted interface attached to vmbr1
vmbr0 need static configuration
in my case proxmox mgmt ip are 1.1.1.10, and firewall attacched to same interface neet to be registered by mac address with another public ip address by ur cloud provider