Learning QVPN Service + Container Station, need routing help/advice

As a new QNAP NAS user, I'm trying to learn more about how their Network & Virtual Switch, QVPN Service and Contain Station can work together to accomplish a few different tasks. Consider the following (super crude, sorry) diagram:

​

QNAP VPN Server and container client routing

Here is what I'm trying to accomplish:

1. Host a VPN server to allow remote access to my NAS and Local Area Network (with internet traffic routed through my LAN gateway for connected clients)
2. Establish a VPN client connection to Mullvad from QVPN and route traffic from a Container Station Virtual Switch through that connection. The rest of the traffic from the NAS and the LAN route through the LAN internet gateway.
3. Allow machines on the local area network to access a specific TCP port on the container station docker app from within the LAN.

It seems like this should all be possible using QVPN, Container Station and QNAP Network & Virtual Switch, but I can't quite figure out how to put it all together (and network routing tables are not a strength of mine). Is there someone who might be able to help walk me through it?

Note: I know this is possible from alternative means (such as hosting a wireguard container), but I am specifically trying to learn QNAP tools and see what is and is not possible using the QVPN+Container Station+Virtual Switch services and UI.

Thanks very much in advance for any assistance!