I would like to deploy Krill with the CA and Publication Server on a private node, while exposing only the RRDP (HTTPS) and rsync repository from a separate public node. The repository files would be synchronized from the Publication Server to the public node. Is this a supported and recommended deployment architecture?
Note: There is only one CA and do not plan to host CAs for other organizations.