I actually had a similar job when my wife asked me to set up public WiFi
for her yarn shop (her office and mine are also on site). What I ended up doing was to use two routers; the "outer" (public) router being connected directly to the Internet, and the inner (private) one connected to the outer one using NAS. It works fine, except that my VOIP box has to be outside of both routers.