🎯 appvm => sys-vpn => sys-firewall => web. and not just one sys-vpn qube. this way different appvms can be connected to different vpn connectioms/locations and none (no vpn) simultaneously