Or, if you really want or need a dynamic website, throw CloudFront or similar in front of the site.
Then lock down your CMS at a secret, SSL-only URL.
It's about 2 lines of Ruby or PHP to ping CloudFront and request an invalidation when you change a page (which only happens rarely anyway.)
Secure, fast, dynamic, only goes down if CloudFront does.