Setup VPN Through PPPOE With Exclusions?

I’m wanting to setup VPN on my firewall (v6.38.4) to connect to a Private Internet Access VPN server through PPPOE, as I have a WISP currently. I’d like for this to apply in one of two ways:

  1. VPN encryption applies to only ports 80 and 443 on everything on my network, with the exception of my web server.
  2. VPN encryption applies to EVERYTHING, minus the ports and computers that I exclude (pretty much everything that I have setup in NAT.

How do I go about achieving this? I have dynamic DNS setup on my webserver so that I can always RDP to my home machines, no matter if my IP address changes or not. I want to ensure that will still work too. I also want all traffic that would go through VPN to halt if VPN disconnect/dies.

This is a bit foreign to me, as is Mikrotik still, so any help would be very much appreciated!