Debian — Mirror Configuration

The local mirror covers Debian 11 (Bullseye), Debian 12 (Bookworm), Debian 13 (Trixie) for amd64. Security updates and backports are included.

<WRAP important> Now matches the real Debian archive layout. The mirror uses a single shared root (/debian/dists/, /debian/pool/) across every release, exactly like deb.debian.org/ftp.se.debian.org. Security has its own shared root at /debian/security/, exactly like security.debian.org. Point your client at these two URLs the same way you would at the upstream archive — just swap the host. No per-release path segment, and nothing to reconfigure when a new release is added. </WRAP>

Debian 13 (Trixie) and 12 (Bookworm) — deb822 format (.sources files). Replace /etc/apt/sources.list.d/debian.sources with:

Types: deb
URIs: https://mirror.nplab.bth.se/debian/
Suites: <release> <release>-updates <release>-backports
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Types: deb
URIs: https://mirror.nplab.bth.se/debian/security/
Suites: <release>-security
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Replace <release> with trixie or bookworm — same URL for both.

Debian 11 (Bullseye) — classic sources.list format (deb822 is not supported). Replace /etc/apt/sources.list with:

deb https://mirror.nplab.bth.se/debian bullseye main contrib non-free
deb https://mirror.nplab.bth.se/debian bullseye-updates main contrib non-free
deb https://mirror.nplab.bth.se/debian/security bullseye-security main contrib non-free

This is exactly what the downloadable config files below contain.

<WRAP alert> Outdated — do not use for new installs. Kept only so nodes already configured against the old per-release URLs (e.g. /debian/bookworm/dists/…, /debian/bookworm/security/dists/…) keep working. An nginx rewrite transparently maps these onto the shared roots above, so the content is identical and always current — but new installs should use the shared-root configuration instead. </WRAP>

Types: deb
URIs: https://mirror.nplab.bth.se/debian/<release>/
Suites: <release> <release>-updates <release>-backports
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Types: deb
URIs: https://mirror.nplab.bth.se/debian/<release>/security/
Suites: <release>-security
Components: main contrib non-free non-free-firmware
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

Download and apply (run as root):

Trixie / Bookworm:

curl -o /etc/apt/sources.list.d/debian.sources https://mirror.nplab.bth.se/configs/debian/bookworm.sources
apt-get update

Bullseye:

curl -o /etc/apt/sources.list https://mirror.nplab.bth.se/configs/debian/bullseye.list
apt-get update

• The security suite lives at its own shared root (/debian/security/), separate from the main archive — matches upstream security.debian.org.
• The legacy per-release URLs will be retired once no client is observed using them — check nginx access logs before removing the rewrite.