So...

We are in the Philippines and with "home schooling" and things my plan is to offer my neighbors (mostly family) free internet at school times (6am to 9pm) and access to a printer so they can print off maybe 20 pages/each/month free.

I am also thinking that later... if we have enough bandwidth we can sell that on a voucher basis - probably 30 days at a time without time limits.

I've got the EAP110 setup with a Wireless/Guest Network on Omada (voucher based):

Router 1 = Aztech DSL5068EN(1T1R) - that has the internet connection

Router 2 = TP-Link 841N - connected to Router 1 via WAN port - DHCP 

Router 1 has 3 reseverd spots:

192.168.254.100 - for Router 2 WAN port

192.168.254.101 - for EAP110

192.168.254.102 - for Mini PC running Omada Controller

192.168.254.103-49 are available via DHCP

Router 2 has my pc with movies, personal stuff and cctv that I don't really want anyone messing with

LAN = 192.168.0.1

MyPC =192.168.0.2 Static

CCTV = 192.168.0.3 Static

192.168.0.10 to 20 available for DHCP - our phone, tv etc.

I need to add the printer (router 1) and I don't really want anyone snooping on our cctv.

I check/administer Omada using Remote Desktop login and/or the Cloud based Controller from MyPC 

I've tried to split things up but wondering whether there's anything else I could do to make it a bit more robust?

Thanks