Physical connection of the Internet access server from the local network?

Question

Computer networks

Good time!
I'm trying to solve the problem of organizing a network with an access server.
We have:
1. Server with one Ethernet port
2. Time capsule from apple with wan port and 4 lan and wifi.
3. A twisted pair wire from the shield through which the Internet comes from the provider. PPPoE connection.
4. A bunch of different devices, mostly with a wifi connection.
I want the server to decide who to provide access to the Internet and who not, based on a given algorithm. It's like one of the functions.
The problem is that I don't understand the physical wiring diagram.
The first option: buy another lan card. Plug in the internet first. Connect with the server, do everything I need and send everything through the second to the time capsule, which will already be in bridge mode to connect all consumers.
The second and which I want to implement: plug the time capsule into the Internet first, also set it to bridge mode and somehow configure it so that traffic goes through the server. Perhaps by connecting the provider's wire to the lan port, and the server's wire to Vanya's port.
Question: Is the second option possible in principle? If possible, please point me to the right idea. Thank you.

Answer 1

either of the two options is possible. or we put the server at the entrance to the network and pass traffic through it with the second network card. or the server stands behind the time capsule and we simply point to it in the gateway settings (on user computers). and now it lets traffic through the time capsule.