Sorry to disappoint you, but L2 (and parts of L3) is wrong. If you do it right, then no DHCP relays will be needed.
As @anav mentioned: the key is single bridge and multiple VLANs. And this means also APs (and router-AP interconnects).
I’m sure @anav will come back with some configuration code, meanwhile you can read this tutorial on VLANs, it covers various use cases so I guess your’s will be there some way or another as well.