Initial commit, new repo

4 files changed, 110 insertions, 0 deletions

diff --git a/web/create-web-qubes.top b/web/create-web-qubes.top
new file mode 100644
index 0000000..445ebc1
--- /dev/null
+++ b/web/create-web-qubes.top
@@ -0,0 +1,6 @@
+user:
+  dom0:
+    - web.qvm-app
+    - web.qvm-tmpl
+  tmpl-web:
+    - web.tmpl-pkgs
diff --git a/web/qvm-app.sls b/web/qvm-app.sls
new file mode 100644
index 0000000..75a7f02
--- /dev/null
+++ b/web/qvm-app.sls
@@ -0,0 +1,70 @@
+web--create-browsing-qube:
+  qvm.vm:
+    - name: browsing-dvm
+    - present:
+      - template: tmpl-web
+      - label: yellow
+    - prefs:
+      - netvm: sys-mullvad
+      - template_for_dispvms: True
+    - features:
+      - set:
+        - menu-items: librewolf.desktop xfce4-terminal.desktop thunar.desktop
+    - require:
+      - qvm: web--create-template
+
+browsing-features_dvm:
+  qvm.features:
+    - name: browsing-dvm
+    - disable:
+      - service.cups
+      - service.cups-browsed
+      - service.tinyproxy
+    - set:
+      - menu-items: "librewolf.desktop xfce4-terminal.desktop thunar.desktop"
+      - appmenus-dispvm: True
+
+web--create-banking-qube:
+  qvm.vm:
+    - name: web-banking
+    - present:
+      - template: tmpl-web
+      - label: blue
+    - prefs:
+      - label: blue
+      - netvm: sys-mullvad
+    - features:
+      - set:
+        - menu-items: librewolf.desktop xfce4-terminal.desktop thunar.desktop
+    - require:
+      - qvm: web--create-template
+
+web--create-work-qube:
+  qvm.vm:
+    - name: web-work
+    - present:
+      - template: tmpl-web
+      - label: blue
+    - prefs:
+      - label: blue
+      - netvm: sys-mullvad
+    - features:
+      - set:
+        - menu-items: librewolf.desktop xfce4-terminal.desktop thunar.desktop
+    - require:
+      - qvm: web--create-template
+
+web--create-shopping-qube:
+  qvm.vm:
+    - name: web-shopping
+    - present:
+      - template: tmpl-web
+      - label: blue
+    - prefs:
+      - label: blue
+      - netvm: sys-mullvad
+    - features:
+      - set:
+        - menu-items: librewolf.desktop xfce4-terminal.desktop thunar.desktop
+    - require:
+      - qvm: web--create-template
diff --git a/web/qvm-tmpl.sls b/web/qvm-tmpl.sls
new file mode 100644
index 0000000..1a06153
--- /dev/null
+++ b/web/qvm-tmpl.sls
@@ -0,0 +1,4 @@
+web--create-template:
+  qvm.clone:
+    - name: tmpl-web
+    - source: debian-12-minimal
diff --git a/web/tmpl-pkgs.sls b/web/tmpl-pkgs.sls
new file mode 100644
index 0000000..f02112a
--- /dev/null
+++ b/web/tmpl-pkgs.sls
@@ -0,0 +1,30 @@
+web--tmpl-pkgs:
+  pkg.installed:
+    - pkgs:
+      - qubes-core-agent-passwordless-root
+      - qubes-mgmt-salt-vm-connector
+      - qubes-core-agent-networking
+      - qubes-core-agent-thunar
+      - pulseaudio-qubes
+
+{% if grains['os_family']|lower == 'debian' %}
+
+extrepo:
+  pkg.installed
+
+'http_proxy=http://127.0.0.1:8082 https_proxy=http://127.0.0.1:8082 extrepo enable librewolf':
+  cmd.run
+
+{% else %}
+
+'dnf config-manager --add-repo https://rpm.librewolf.net/librewolf-repo.repo':
+  cmd.run
+
+{% endif %}
+
+librewolf-updated:
+  pkg.uptodate:
+    - refresh: True
+
+librewolf:
+  pkg.installed