Private and public k8s setup

I’m not sure what to search for. I have started working with k8s both at work and at home. I would like to set up the following, but aren’t sure if I can do it in one cluster.

I would like to have k8s managing:

• Public facing:
  • two static websites (running on one container - I have this working already)
  • two WordPress websites (similar to the above - doesn’t sound too hectic)
• Private (behind VPN):
  • NextCloud running with encrypted Space which can only be accessed by connecting to a VPN

I would appreciate anyone’s thoughts as to the architecture involved on DO please? Whether this can be done with one cluster, maybe some docs/tutorials pointing a n00b in the right direction?

Thanks :)