Public site and agent access coexist on one host, with separate trust boundaries.
Isolated data, shared edge, no coupling between the two ERPs.
Over 20 services on one host, restartable, with a deliberately narrow public surface.