I have created a VPC containing 4 droplets: a Bastion which only allows ssh from a single IP, a public web server, a private CMS to feed the public web server, and a secure data