====== Debian — Mirror Configuration ======

The local mirror covers Debian 11 (Bullseye), Debian 12 (Bookworm), Debian 13 (Trixie) for ''amd64''. Security updates and backports are included.

<WRAP important>
**Now matches the real Debian archive layout.** The mirror uses a single shared root (''/debian/dists/'', ''/debian/pool/'') across every release, exactly like ''deb.debian.org''/''ftp.se.debian.org''. Security has its own shared root at ''/debian/security/'', exactly like ''security.debian.org''. Point your client at these two URLs the same way you would at the upstream archive — just swap the host. No per-release path segment, and nothing to reconfigure when a new release is added.
</WRAP>

===== Recommended: shared-root configuration =====

Debian 13 (Trixie) and 12 (Bookworm) — **deb822** format (''.sources'' files). Replace ''/etc/apt/sources.list.d/debian.sources'' with:

<code>
Types: deb
URIs: https://mirror.nplab.bth.se/debian/
Suites: <release> <release>-updates <release>-backports
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Types: deb
URIs: https://mirror.nplab.bth.se/debian/security/
Suites: <release>-security
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
</code>

Replace ''<release>'' with ''trixie'' or ''bookworm'' — same URL for both.

Debian 11 (Bullseye) — classic **sources.list** format (deb822 is not supported). Replace ''/etc/apt/sources.list'' with:

<code>
deb https://mirror.nplab.bth.se/debian bullseye main contrib non-free
deb https://mirror.nplab.bth.se/debian bullseye-updates main contrib non-free
deb https://mirror.nplab.bth.se/debian/security bullseye-security main contrib non-free
</code>

This is exactly what the downloadable config files below contain.

===== Legacy: per-release URLs (outdated) =====

<WRAP alert>
**Outdated — do not use for new installs.** Kept only so nodes already configured against the old per-release URLs (e.g. ''/debian/bookworm/dists/...'', ''/debian/bookworm/security/dists/...'') keep working. An nginx rewrite transparently maps these onto the shared roots above, so the content is identical and always current — but new installs should use the shared-root configuration instead.
</WRAP>

<code>
Types: deb
URIs: https://mirror.nplab.bth.se/debian/<release>/
Suites: <release> <release>-updates <release>-backports
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Types: deb
URIs: https://mirror.nplab.bth.se/debian/<release>/security/
Suites: <release>-security
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
</code>

===== Release Reference =====

^ Release ^ Version ^ Format ^ Shared-root URL (recommended) ^ Config File ^
| trixie | 13 | deb822 | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/trixie.sources|trixie.sources]] |
| bookworm | 12 | deb822 | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/bookworm.sources|bookworm.sources]] |
| bullseye | 11 | sources.list | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/bullseye.list|bullseye.list]] |

**Download and apply (run as root):**

Trixie / Bookworm:
<code bash>
curl -o /etc/apt/sources.list.d/debian.sources https://mirror.nplab.bth.se/configs/debian/bookworm.sources
apt-get update
</code>

Bullseye:
<code bash>
curl -o /etc/apt/sources.list https://mirror.nplab.bth.se/configs/debian/bullseye.list
apt-get update
</code>

===== Notes =====

  * The security suite lives at its own shared root (''/debian/security/''), separate from the main archive — matches upstream ''security.debian.org''.
  * The legacy per-release URLs will be retired once no client is observed using them — check nginx access logs before removing the rewrite.