We have a civi install that contains some sensitive data. We also have a public facing website. We would like to integrate them so that you can sign up for events, give donations etc on the website. The first though was to have a single site, but we would rather not have sensitive data sitting behind a public site.
EDIT: Also the less custom code the better. A solution that depends on crafting our own forms and interactions between sites is probably going to take too long both to develop and to fix when it goes wrong
Two ideas that come to mind are:
Do a remote integration - is that possible? - so that the public website pulls the data it needs via https or something
Have them on same server but different directories (and different Linux users) but both civi installs point to the same database, but as different mysql users. So the website cannot access certain tables.
I am inclined towards 2. Can you see anything that might go wrong with it?