diff --git a/azure/tf/main.tf b/azure/tf/main.tf
index 65d0376..5b31d03 100644
--- a/azure/tf/main.tf
+++ b/azure/tf/main.tf
@@ -11,6 +11,10 @@ module "subnet_addrs" {
 
   base_cidr_block = var.hub_vnet_cidr
   networks = [
+    {
+      name     = "privatelink"
+      new_bits = local.privatelink_newbits
+    },
     {
       name     = "firewall"
       new_bits = local.firewall_newbits
@@ -23,10 +27,6 @@ module "subnet_addrs" {
       name     = "webauth-container"
       new_bits = local.webauth_newbits
     },
-    {
-      name     = "privatelink"
-      new_bits = local.privatelink_newbits
-    },
     {
       name     = "testvm"
       new_bits = local.testvm_newbits