Thanks for the help Michael. What would you suggest for the architecture? It seems the multiple container approach is more secure and flexible. So a data container and web only container (in their own droplet?) would suffice for the foreseeable future?