Installing FIM Password Reset Portal

Hi,

 I'm looking at doing a FIM deployment for around 10,000 users and so far have the following servers configured:

FimPortal - holds fim service and portal
FimSQL - holds fim service DB and SharePoint DB
FimSync - holds fim sync service and sync DB

I was going to install the password reset portal on server "FimPortal" (using a different IIS and SharePoint site on a 2nd IP) and simply using a new SQL instance on FIMSQL.

I'd like to get some advice on whether this is OK? Or whether I'd definitely need a separate SQL and IIS/FIM Server for the password reset portal?

Thanks