You could make this much simpler by hosting the web site externally such as in Amazon AWS or Azure. It's quite cheap. Also if the web site gets compromised at least they are not on the inside of your network. Low cost, low complexity and good security - a winning trifecta.
... View more