Redmine

Hello all,

I try to find a good way of opening our Redmine issue management to our customer.
But for security reason, we don't want our source code to be store on a "public" server.
I know Redmine has role management and we can say that "customer" role don't have access to repository, but the real problem is to ensure security, to avoid attack on our server and our source code.

So my idea is to setup a "private" redmine server onto our "intranet" only accessible in our local network, and setup a second "public" Redmine server
using the same MySQL database to grant access to our customer to allow them to enter new issue, validate new feature, etc...

Is it a good idea?
Is there another solution?
Is someone have the same problem, and find a good solution?

Thank you in advance for all your answers.