For now, I have one Web/App server and a database server. I want to have a private network in addition to the external network. I want my Database to be accessible only on the internal domain by the Web Application service. I began by making my WEB/app server a Domain Controller and simply added the Database to the domain named differently from the external domain.
Should I have made the Database server the Domain Controller instead? My DataServer also has a public IP for RDC. How do I proceed in structuring the domains so that I can be sure that external requests will only end up running the WebApplication on the WebServer and not in my private network?
It all seems to close for comfort. I would appreciate some guidance how to configure taking into to account that I made add more servers down the road.