Access UI of Turnkey File Server on vmbr1 from laptop

[ediacarian]

Hello,

I have one pve node in my new home server setup. It has /etc/network/interfaces as follows:

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 10.0.0.204/24
        gateway 10.0.0.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

auto vmbr1
iface vmbr1 inet static
        address 192.168.10.100/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up iptables -t nat -A POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '192.168.10.0/24' -o vmbr0 -j MASQUERADE

source /etc/network/interfaces.d/*

I access the server from windows 10 laptop on wifi from 10.0.0.204:8006. [My ISP is Xfinity Comcast and I am using the rented Gateway modem/router. The server is connected to that by ethernet.]

I installed Turnkey File Server LXC Container and gave it gateway 192.168.10.100 and address 192.168.10.161/24. It was able to update, it can ping google.com, it can ping my public IP, it can also ping the "real" subnet 10.0.0.1 that my laptop and other devices are on.

I added the following route on my laptop:

route add 192.168.10.0 mask 255.255.255.0 10.0.0.1

but I still cannot reach https://192.168.10.161:12321 from my browser. While troubleshooting, I disabled Datacenter, Node and Container firewalls as well as Windows Defender on laptop and that did not change the outcome. I ran Wireshark but cannot see anything useful from the packets captured during the process of failing to reach the address. What am I missing or doing wrong? I am new to networking, servers, and Proxmox. Thanks in advance.