qvm-create --template debian-13-xfce --label green sys-vpn
qvm-prefs sys-vpn netvm sys-firewall
qvm-prefs sys-vpn provides_network True
qvm-prefs sys-vpn memory 400
qvm-prefs sys-vpn maxmem 2000
qvm-start sys-vpn
qvm-run -p sys-vpn 'chmod +x /home/user/Downloads/AmneziaVPN_*.run'
qvm-run -a sys-vpn '/home/user/Downloads/AmneziaVPN_*.run'
qvm-prefs sys-whonix netvm sys-vpn
qvm-run -p -u root sys-vpn 'cat > /rw/config/qubes-firewall-user-script << "EOF"
#!/bin/sh
nft add rule ip qubes custom-forward oifname eth0 counter drop
nft add rule ip6 qubes custom-forward oifname eth0 counter drop
EOF'
qvm-run -p -u root sys-vpn 'chmod +x /rw/config/qubes-firewall-user-script'
qvm-run -p sys-vpn 'curl -4 -s --max-time 10 https://api.ipify.org; echo'
qvm-run -p sys-whonix 'curl -4 -s --max-time 10 https://api.ipify.org; echo'