Instructions for creating a VLAN in pfsense are here. You’ll need to configure the switch so that traffic with that tag is allowed to the unRAID and cameras. Also need to setup a docker network on unRAID using that VLAN.
IMO, you should probably also create rules on the pfsense to block the VLAN from WAN.