The first question is whether the public and private sites actually have to be run together. Ideally they would be run separately, with the public site on an external server and the private site on a server in the LAN.

If they have to be run on the same server then the risk of the private data being compromised is the same regardless of whether it is hosted externally or internally. The question is whether the compromised server can be used to access data and systems unrelated to the site. In order to protect against this you want to host the server in a DMZ if you host it internally.

Should the public website be inside the VPN, with its associated private website?
Aside from the traditional maintenance of oil changes, and keeping fluid levels correct - what else will help prolong the engine's life?

I recall a few years back gasoline additives were the thing to go with - what's the best/recommended one currently? If any.

Edit: I recall reading about each gasoline brand having their own set of additives at one point, where it was suggested to cycle between a few different brands every X amount of km/miles. The reason behind switching was so that the next brand would cleanup any sediments left by the previous brand. How likely is this in today's world? And better yet, how important is it?
