When I say two servers I mean two VMs to get the system to work effectively.

From memory, the admin interface doesn’t get an SSL certificate issued to it. It perpetually stays HTTP. If you don’t set up another server as a reverse proxy, it won’t let you log in due to CORS issues. Add another server as a reverse proxy, and it’ll come good and let you log in.

Hopefully that makes sense?

I mean, my local Colesworth doesn’t really give a shit. I’ve seen people on the phone buying mass gift cards and had to step in because the staff just allow the purchases. I haven’t heard a warning over the PA/in-store radio for years now. YMMV but it’s still a problem around NW Sydney it seems.

Australian here. Yes, I regularly drink water from the tap without boiling it.

The only exception is if Sydney Water issue a “Boil water” alert. That usually only happens after really major flooding though.