You’ll have to accomplish that with a firewall on the OS. A network firewall could restrict traffic based on ports, but your apps aren’t that predictable.
Debian foundation, built-in ZFS, decent web GUI, clusterable -- all in all, a very good VMWare replacement.
Love seeing Proxmox so high on the host OS list.
There, there. It’ll be okay.