diff --git a/3isec-common/store/install.sls b/3isec-common/store/install.sls
new file mode 100644
index 0000000..187f72e
--- /dev/null
+++ b/3isec-common/store/install.sls
@@ -0,0 +1,49 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+#
+#
+#
+{% if grains['nodename'] != 'dom0' %}
+
+{% if salt['pillar.get']('update_proxy:caching') %}
+{% if grains['os_family']|lower == 'debian' %}
+{% if grains['nodename']|lower != 'host' %}
+{% for repo in salt['file.find']('/etc/apt/sources.list.d/', name='*list') %}
+{{ repo }}_baseurl:
+  file.replace:
+    - name: {{ repo }}
+    - pattern: 'https://'
+    - repl: 'http://HTTPS///'
+    - flags: [ 'IGNORECASE', 'MULTILINE' ]
+    - backup: False
+
+{% endfor %}
+
+/etc/apt/sources.list:
+  file.replace:
+    - name: /etc/apt/sources.list
+    - pattern: 'https:'
+    - repl: 'http://HTTPS/'
+    - flags: [ 'IGNORECASE', 'MULTILINE' ]
+    - backup: False
+
+{% endif %}
+{% endif %}
+{% endif %}
+
+allow-testing:
+  file.uncomment:
+    - name: /etc/apt/sources.list.d/qubes-r4.list
+    - regex: ^deb\s.*qubes-os.org.*-testing
+    - backup: false
+
+installed:
+  pkg.installed:
+    - refresh: True
+    - pkgs:
+      - qubes-core-agent-thunar
+      - edbrowse
+      - thunar
+    - install_recommends: False
+
+{% endif %}
+
diff --git a/3isec-common/store/install.top b/3isec-common/store/install.top
new file mode 100644
index 0000000..17d2c95
--- /dev/null
+++ b/3isec-common/store/install.top
@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  '*':
+    - 3isec-common.store.install