https://imgur.com/a/ptOu5S8

https://imgur.com/a/ubsJz1j

I'll say the answer is probably simple and staring me in the face, no doubt, but I'm learning here.

1. Proxmox seems to be properly configured. Bridge has vlan awareness and includes a range of what VLANs are assigned.
2. Under Opnsense's container, no vlan tags are set but according to guides I've read online, if a single interface is going to handle multiple vlans, you shouldn't set a singular tag there anyway.
3. VLAN interface is created and assigned with vtnet1 as parent, IP range is set
4. Firewall rules should allow all traffic to exit the net.
5. DHCP is set to serve that subnet includes IP scope
6. My smart switch...I think is properly configured? This is the part I understand the least. Since port 1 is the uplink to my proxmox/opnsense box, I want all 3 vlans to accept tags on it - but am I essentially overwriting tags? I don't get this part as much right now.

E: Figured it out, it was the switch like I thought. My end point ports, 7 and 8, are not vlan aware, so I had to mark them as 'untagged', since the packets coming back into that interface did not have a tag.