Binary release works out of the box in the fedora-37 template on qubes os, so if you route your traffic through whonix-go, you can privately Nostr from the console.