However, during the template setup (just for using librewolf browser) how am I supposed to use wget to get their gpg key, since the templates have no internet connectivity. When I try wget, it fails saying “temporary domain resolution error.”
How to add their repo to the debian template’s apt repos?
I don’t use Whoinx, but this seems to be what you need to do.
The updates proxy uses RPC/qrexec. The proxy is configured in qrexec policy in dom0: /etc/qubes-rpc/policy/qubes.UpdatesProxy
# any VM with tag `whonix-updatevm` should use `sys-whonix`; this tag is added to `whonix-gw` and `whonix-ws` during installation and is preserved during template clone
@tag:whonix-updatevm @default allow,target=sys-whonix
@tag:whonix-updatevm @anyvm deny