We have basically setup the systems up like you have briefly documented. We use a https connection and have implemented a self assigned / generated certificate on the server but all the features are otherwise there. We may purchase a certificate down the track but not a pressing need at this point.
What backup strategy does Digital Ocean offer?