This is a good general guideline for basic VyOS configuration, and covers zone based firewall (but it lacks IPv6 which can be done following similar steps)
VyOS from Scratch – Edition 1 – blog.kroy.io
blog.kroy.io