Model :

Hardware Version : Not Clear

Firmware Version :

ISP :

Hello. I need some direction in configuring the TP-Link switches I have for a common private\guest wireless configuration.
I am only seeking advice regarding the TP-Link gear configurations and not my other equipment listed below.
Attached is a network diagram I put together to illustrate what I am describing below.

I have the following equipment:

Switches in question:
TP-LINK TL-SG1016DE
TP-LINK TL-SG108E

Router:
Ubiquiti Edgemax ER-Lite 3 port (VLAN capable)

Wireless APs:
Ubiquiti Unifi (VLAN capable)

Desired result:
VLAN1 for private (business) traffic
Configure VLAN 2 to handle guest wireless access.

Connections and VLAN config:
Router and switches:

Router eth0 connected to ISP.
Router eth1 connected to port 15 of TL-SG1016DE
Port 15 of the switch should remain default VLAN1 and not pass VLAN2 traffic.

Router eth2 connected to port 16 of TL-SG1016DE
Port 16 of the switch should only pass VLAN2 traffic.

Port 14 will connect to TP-LINK TL-SG108E.
Both ports 14 and 8 need to pass traffic from both VLAN1 and 2 as WAPs will also connect to the TL-SG108E.

All ports not specified will remain Default VLAN1.

Ports 6-8 on switch TP-LINK TL-SG108E need to pass traffic for VLAN 1 and 2 to the TL-SG1016DE.

WAPs will be connected to ports 11-12 of TL-SG1016DE and ports 6-7 on the TL-SG108E.
WAPs will be configured for SSID1-Private for default VLAN1
WAPS will be configured for SSID2-Guest for VLAN2

All Default VLAN1 traffic should pass to the router from port 15 on TL-SG1016DE
All VLAN2 traffic should only pass to the router from port 16 on TL-SG1016DE

Question:
I am assuming (from past switches of another brand) for ports that need to pass traffic for VLAN1 and 2 I untag VLAN1 and TAG for VLAN2... for the WAPs and for the 8 port switch.
However I am not sure how to achieve setting port 16 of the 16 port switch to only send VLAN2 traffic to the router.
Please advise on the desired configuration. Thank you.