# User setup / @raffaeleflorio

## Dom0
I installed in Dom0 [luks-2fa-dracut](https://github.com/raffaeleflorio/luks-2fa-dracut).

## TemplateVMs and VMs
The following TemplateVMs are really generic. I didn't include any specialized TemplateVMs (e.g. those used for development).

### TemplateVM fedora-28-minimal
It's used only as a base for other TemplateVM.

### TemplateVM fedora-28-mini
A clone of fedora-28-minimal with:
```
qubes-core-agent-nautilus
qubes-core-agent-networking
qubes-core-agent-network-manager
qubes-core-agent-dom0-updates
network-manager-applet
dejavu-sans-fonts
notification-daemon
qubes-usb-proxy
qubes-input-proxy-sender
qubes-img-converter
qubes-pdf-converter
less
psmisc
pciutils
keepassxc
openssl
qubes-gpg-split
NetworkManager-wifi
wireless-tools
openssh-clients
nmap-ncat
oathtool
vim-common
```

TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|fedora-28-mini-dvm|Template for DispVMs|default|offline|
|sys-net|DispVM based on fedora-28-mini-dvm|300MB-500MB|online|
|sys-usb|DispVM based on fedora-28-mini-dvm|300MB-500MB|offline|
|sys-sd|DispVM based on fedora-28-mini-dvm|300MB-500MB|offline|
|sys-firewall|DispVM based on fedora-28-mini-dvm|300MB-500MB|online|
|vault|Password manager and totp generation|300MB-400MB|offline|
|*|split-{gpg,ssh} backend (e.g. work-keys) with minimal set of (sub)keys|300MB-400MB|offline|
|*|Data container (e.g. backup)|300MB-400MB|offline|

Notes:
- [split gpg](https://www.qubes-os.org/doc/split-gpg/)
- [split gpg advanced setup](https://www.qubes-os.org/doc/split-gpg/#advanced-using-split-gpg-with-subkeys)
- [split ssh](https://github.com/henn/qubes-app-split-ssh)

### TemplateVM fedora-28-net
A clone of fedora-28-mini with:
```
firefox
thunderbird
thunderbird-qubes
pulseaudio-qubes
mozilla-https-everywhere
mozilla-privacy-badger
```

TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|dvm-net|Template for DispVMs, generally used for browsing|400MB-1000MB|online|
|dispNet|DispVM based on dvm-net|400MB-1000MB|online|
|*|Custom Firefox with qubes-url-redirector and/or Thunderbird (e.g. work)|300MB-700MB|firewalled|

Notes:
- [qubes-url-redirector](https://github.com/raffaeleflorio/qubes-url-redirector)
- [Qubes community docs about link/files opening](https://github.com/Qubes-Community/Contents/blob/master/docs/common-tasks/opening-urls-in-vms.md)

### TemplateVM fedora-28-heavy
A clone of fedora-28-net with:
```
libreoffice
gimp
whois
bzip2
bind-utils
emacs
p7zip
java-1.8.0-openjdk
unar
unzip
galculator
polkit
qubes-core-agent-passwordless-root
man-pages
man
git
glibc-langpack-en
gnome-terminal
qubes-vm-recommended
tree
bash-completion
chromium
python2-jwt
```

TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|dvm-heavy-offline|Template for DispVMs. Used to handle every file in every other VMs|400MB-1000MB|offline|
|dispHeavyOffline|DispVM based on dvm-heavy-offline|400MB-1000MB|offline|
|dvm-heavy-online|Template for DispVMs|400MB-1000MB|online|
|dispHeavyOnline|DispVM based on dvm-heavy-online|400MB-1000MB|online|

### TemplateVM fedora-28-media
A clone of fedora-28-heavy with:

```
vlc
ffmpeg
fuse-exfat
*eventually other rpmfusion packages*
```
TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|dvm-media-offline|Template for DispVMs|400MB-1500MB|offline|
|dvm-media-online|Template for DispVMs|400MB-1500MB|online|

### TemplateVM whonix-ws-14
TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|dvm-anon|Template for DispVMs|400MB-1000MB|online|

Notes:
- [Whonix info 1](https://www.qubes-os.org/doc/whonix)
- [Whonix info 2](https://www.whonix.org/wiki/Qubes)

### TemplateVM whonix-gw-14
TemplateBasedVMs table:
|Name|Description|RAM Usage|Networking|
|---|---|---|---|
|sys-whonix|Whonix gateway|500MB-800MB|online|