I have two machines and need a shared file server (>6TB of storage), database server, and a webserver. Security people here say I should waste an entire machine on the webserver so that I can separate out one machine that has access to the outside world but it doesn't have access to anything else. So the file server and database server will reside on one machine. But I've also read that you would typically not want to bog down a file server with other tasks, especially if it is suspected of operating under a semi-constant load (about 15 people writing/reading large files from it for 10 hours a day) with a semi-constant writing to/reading from a database
Note: I'll also need a machine to act as host for a software suite for several members of the lab, but I just lumped that into a shared "database" term.
How should I distribute tasks? What are some general best practices here?