Design a Network Setup

Hi. I would like someone to design a network setup with the right equipment and placement of equipment for a network setup diagram, so that I can execute it when building my network. Basically, I will be running a PHP/mySQL web app for my business practice on my company intranet or network. Clients that need to access this software are on both Wired Gigabit LAN as well as Wireless LAN. I will also need to have a guest WIFI network for internet access only, no access to the software server. All clients in the network, except for those on the guest WIFI, will be Macs or iPads or iPhones. There will be one Windows 7 PC. The server which I am hosting my PHP/mySQL web app will also be a Mac Mini with OSX Server installed. Other services on the secure LAN that I will have going is DLNA/AirPlay to AppleTVs as well as TimeMachine backups. I would like to use RADIUS to authenticate intranet users too. I would appreciate if somewhere in the line, an Airport Extreme or Express is used so that setup and management of the guest network, as well as extending the range of the network is easy. But if you can propose a solution that can do the same job without I am fine without. I need a hardware firewall-type equipment between my server and the internet, somewhere, because I don't want to take any chances of external intrusion. Ideally, it would be nice to have VPN capability so that I can access this 'intranet web app' from outside the network. Let's assume that I will not be having a static IP with my Internet Service Provider. I would like the proposal to use equipment from TP-Link, [login to view URL] and/or Apple. Thanks. Bobby