Both.
I have a lot of veracrypt containers on a NAS. So I have to share the NAS connection and I think it ended up being SAMBA…that’s relatively easy. Then decrypting the containers in one qube and mounting the decrypted container on another qube…that’s a bit trickier but…I wrote this to describe the process. I didn’t share actual bash language but anyone with a bit of experience with bash should be able to figure it out.
I did this in a very complex way but it can be simplified if you want. I have one qube that maintains the file share, another that does the decryption, and the third qube actually mounts the decrypted container. (There’s also a fourth qube to get the password from the user and pass it to the decryptor; some day I’ll extend it to supply keyfiles and PIMs as appropriate.) Basically the user of the data has no idea it’s on an encrypted container, or where it actually lives.
Split veracrypt - General Discussion - Qubes OS Forum (qubes-os.org)