rsync over TLS or even onion is implemented for a long time already and documented here:
https://www.whonix.org/wiki/Hosting_a_Mirror

This was done a long time ago.

Installed. See screenshot on how to use:

@Patrick @mig5 it appears to be working great. thank you and sorry for the late reply.

Does this work for you? @tempest

@Patrick I have set it to a temporary redirect now (302). In my tests in Firefox, the request is not being cached (server sends back the 302 each time according to Nginx logs)

Works great! Thanks @mig5!

I suggest not permanent redirection, otherwise browsers may cache old version.

Edited above comment a few times to fix syntax

Added this to /etc/nginx/sites-enabled/download.whonix.org.conf:

In T895#18241, @mig5 wrote:

It doesn't strike me as too hard to just add a 'current' symlink pointing to the latest release?

Another approach might be to use Nginx redirects (and a shell script or something, to maintain changes as new versions come out), so that URLs like https://download.whonix.org/ova/current/Whonix-XFCE-current.ova redirect to https://download.whonix.org/ova/14.0.1.4.4/Whonix-XFCE-14.0.1.4.4.ova . Useful?

It doesn't strike me as too hard to just add a 'current' symlink pointing to the latest release?

https://phabricator.whonix.org/settings/user/TNTBOMBOM/page/emailpreferences/ is wrong indeed. Set to notify rather than e-mail.

If you can't fix, please send me your login password for phabricator so
I can look.

Works fine so far. No complaints. Closing. We can always reopen in case of issues.

I think the only solution may be this one:

The onion site for the forums and wiki works great however for phabricator when logging in it still redirects to the clearnet site with an error about not being able to set a cookie for the username.

If/when LE let's us get .onions on our certificate, I'll do that as well.

http://phabricator.kkkkkkkkkk63ava6.onion/
http://forums.kkkkkkkkkk63ava6.onion/
http://kkkkkkkkkk63ava6.onion (and http://www.kkkkkkkkkk63ava6.onion)
http://download.kkkkkkkkkk63ava6.onion/ (the same as https://www.whonix.org/download/)

I'm posting from http://phabricator.kkkkkkkkkk63ava6.onion/T494 :)

Doesn't looks like we can get letsencrypt ssl for our onion yet.

Test if it is working for me

Test if it's still working.

whonix-repository:

• refactoring, "made baseuri configurable through WHONIX_APT_REPOSITORY_BASEURI environment and /etc/whonix.d configuration variable":

https://github.com/Whonix/whonix-repository/commit/3d7dbd91f53a516292e11b24181e1daae380e862

• moved Whonix APT Repository default baseuri from http://sourceforge.net/projects/whonixdevelopermetafiles/files/internal/ to http://mirror.whonix.de/whonixdevelopermetafiles/internal/:

https://github.com/Whonix/whonix-repository/commit/fa4621e7b54b8114d4b33ad6c4ce473de0a0abd9

• made baseuri (WHONIX_APT_REPOSITORY_BASEURI) configurable through --baseuri command line parameter:

https://github.com/Whonix/whonix-repository/commit/5577a3dda1577362c0475d368a3bea2f53ba4a0e

• add WHONIX_APT_REPOSITORY_BASEURI to auto generated configuration file:

https://github.com/Whonix/whonix-repository/commit/21475cb81882d598c63503ba4d21ef386572ce51

Done whonixcheck, moved Whonix News files to mirror.whonix.de and use sourceforge as fallback:
https://github.com/Whonix/whonixcheck/commit/a8907e768fc9bf3920767a2d11b8a4c4b88a0d52

The upload scripts are ready. They upload to both sourceforge and mirror.whonix.de now.

This is done. The related varnish vlc snippet:

Test email comment from @WhonixQubes.