moved the web server tier into a private area