PROXMOX on public /28 range, VMs should be in a private net and reachable via NAT

[muekno]

It is nearly a week I am searching for a solution, found some, but tests shows none works and none is really complete, VM configuration is missing always.
Situation PVE 8.2.2
Server in DC (still has Debian 12 on bare metal) should be replaced with a PVE, with separate VMs for Configuration (ISPConfig multiserver),Mail, WEB, DNS
Server in private network should be reached via NAT, the PROXMOX Firewall should be used, access to PROXMOX and all other critical services should be reached via VPN (WireGuard) respectiv via SSH over the VPN
As I have a /28 range some services should be reachable via different publich IP addresses.

Any help, hint, link to solution is welcome

Regards

RAiner

 

[muekno]

Additional information. Whatever solution I try, I can not install a new VM in the private network, as there is no internet access, any yes I tried solutions from the PROXMOX networking docu, but the same no internet access in the private network, so i.e. an debian netinstall fails