Configure TP-Link RE650 v1 as Repeater and WireGuard VPN

I have the TP-Link RE650 v1, running OpenWrt in Access Point Mode, configured with 2 SSIDs: 1 running WireGuard VPN (guest network), and the other does not, as is demonstrated in the link below:

Configure TP-Link RE650 v1 as Access Point and WireGuard VPN

Everything works perfectly well, up to this point.

My aim now, is to run the said configuration, only in Repeater Mode, but this is where the weird behaviour starts to manifest itself.

NOTE:
Access Point Mode uses the LAN interface for internet. Repeater Mode uses the WAN interface for internet.

Problem Symptoms:

  1. Having the Gateway explicitly specified for the LAN interface, I have internet on the LAN zone (LAN port, and SSID using the said zone), but none for the Guest VPN SSID.
  2. Removing the Gateway entry from the LAN interface, the Guest VPN (SSID) works perfectly well, but no internet on the LAN zone.

The logical mind could extrapolate that, I have WAN zone vs LAN zone issues, (default) gateway config issues, or even default routing issues.

Apparently, there is one last configuration step, to resolve the issue, once and for all.

SCREENSHOTS:
Firewall General Settings:

Firewall Traffic Rules (Added to the defaults):