You can read the following article on how to set it up nowadays:
Basically, you define PVID on the access bridge ports and add VLAN entries in the bridge VLAN table for the tagged ports and including the bridge as a tagged member. To enabled the routing you just allow traffic between the VLAN interfaces which I see that you’ve already added for DHCP services probably