When I say two servers I mean two VMs to get the system to work effectively.

From memory, the admin interface doesn’t get an SSL certificate issued to it. It perpetually stays HTTP. If you don’t set up another server as a reverse proxy, it won’t let you log in due to CORS issues. Add another server as a reverse proxy, and it’ll come good and let you log in.

Hopefully that makes sense?

Australian here. Yes, I regularly drink water from the tap without boiling it.

The only exception is if Sydney Water issue a “Boil water” alert. That usually only happens after really major flooding though.