Monero - follow https://www.getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html

monero/create.sls

@@ -0,0 +1,52 @@
+precursor_gw:
+  qvm.template_installed:
+    - name: whonix-gw-16
+
+precursor:
+  qvm.template_installed:
+    - name: whonix-ws-16
+
+monerod-ws:
+  qvm.present:
+    - name: monerod-ws
+    - template: whonix-ws-16
+    - label: red
+
+monerod-ws_prefs:
+  qvm.prefs:
+    - name: monerod-ws
+    - netvm: sys-whonix
+    - memory: 400
+    - maxmem: 4000
+    - vcpus: 2
+    - template_for_dispvms: False
+    - include_in_backups: True
+
+'qvm-volume extend monerod-ws:private 100G' :
+  cmd.run
+
+monerod-ws_features:
+  qvm.features:
+    - name: monerod-ws
+    - enable:
+      - service.monerod-mainnet
+
+monero-wallet:
+  qvm.present:
+    - name: monero-wallet-ws
+    - template: whonix-ws-16
+    - class: AppVM
+    - netvm: none
+    - label: green
+
+monero-wallet_prefs:
+  qvm.prefs:
+    - name: monero-wallet-ws
+    - autostart: false
+    - include_in_backups: True
+    - netvm: none
+
+update_monero_policy:
+  file.prepend:
+    - name: /etc/qubes/policy.d/30-user.policy
+    - text: 'qubes.monerod-mainnet  *  monero-wallet-ws  monerod-ws  allow'

monero/create.top

@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - monero.create

monero/monerod.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Monero Full Node
+After=network.target
+#ConditionPathExists=/var/run/qubes-service/monerod
+
+[Service]
+User=user
+Group=user
+Type=Forking
+PIDFile=/home/user/.bitmonero/monero.pid
+ExecStart=/usr/bin/monerod --detach --detach-dir=/home/user/.bitmonero \
+ --no-igd --pidfile=home/user/.bitmonero/monero.pid \
+ --log-file=/home/user/.bitmonero/bitmonero.log --p2p-bind-ip=127.0.0.1
+Restart=always
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target