I had been learning rules of nftable on v4.2, and I think minimal Qube is best privacy option, disk usage of the debian-12-minimal is smaller than fedora-39-minimal, so I used debian-12-minimal template.
Because minimal template is more less attack surface, security and privacy hardened.
First, I installed packages following to @eBread user guide, I run apt install qubes-core-agent-networking qubes-core-agent-network-manager wireguard resolvconf iptables.