Mullvad - wireguard

mullvad/clone.sls

@@ -0,0 +1,8 @@
+mullvad_precursor:
+  qvm.template_installed:
+    - name: debian-11-minimal
+
+qvm-clone-id:
+  qvm.clone:
+    - name: template-mullvad
+    - source: debian-11-minimal

mullvad/clone.top

@@ -0,0 +1,8 @@
+mullvad_precursor:
+  qvm.template_installed:
+    - name: debian-11-minimal
+
+qvm-clone-id:
+  qvm.clone:
+    - name: template-mullvad
+    - source: debian-11-minimal

mullvad/create.sls

@@ -0,0 +1,25 @@
+include:
+  - mullvad.clone
+
+qvm-present-id:
+  qvm.present:
+    - name: MullvadVPN
+    - class: AppVM
+    - template: template-mullvad
+    - label: green
+
+qvm-prefs-id:
+  qvm.prefs:
+    - name: MullvadVPN
+    - memory: 400
+    - maxmem: 800
+    - vcpus: 2
+    - provides-network: true
+
+qvm-features-id:
+  qvm.features:
+    - name: MullvadVPN
+    - disable:
+      - service.cups
+      - service.cups-browsed
+      - service.tinyproxy

mullvad/create.top

@@ -0,0 +1,4 @@
+base:
+  dom0:
+    - match: nodegroup
+    - mullvad.create