Monero Wallet/Daemon Isolation with Qubes + Whonix

It is so fucking confusing because I am trying to juggle 4 different guides, and come up with a sane synthesis of them: 1 2 3 4

So, I start on dom0 creating a policy file:

sudoedit /etc/qubes/policy.d/30-user.policy

add the following line into the file:

qubes.ConnectTCP +18081 monero-wallet-ws monerod-ws allow

Now, are you telling me that I need to repeat this 30-user.policy file in the monerod-ws qube, inside /rw/usrlocal/etc/qubes-rpc/user.monerod file? Why the repeat? Isn’t this already saying “aight, establish the connection of the port 18081 between the two monero qubes” ?