From 3ec0ea71682a8107ad9dd50af091eda8caf2e65f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <v@cunat.cz>
Date: Wed, 29 Jul 2026 12:34:32 +0200
Subject: [PATCH] knot-*: avoid the legacy download URLs under secure.nic.cz

They've been HTTP 301 for quite a long time now.
These aliases still work, but let's not rely on that anymore.

(cherry picked from commit 12ae389b1c12c690255d1be80270f8be5ff66bfb)
---
 pkgs/by-name/kn/knot-dns/package.nix        | 2 +-
 pkgs/by-name/kn/knot-resolver_5/package.nix | 2 +-
 pkgs/by-name/kn/knot-resolver_6/package.nix | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/kn/knot-dns/package.nix b/pkgs/by-name/kn/knot-dns/package.nix
index c3c7743e0aa2..221f97d8de89 100644
--- a/pkgs/by-name/kn/knot-dns/package.nix
+++ b/pkgs/by-name/kn/knot-dns/package.nix
@@ -37,7 +37,7 @@ stdenv.mkDerivation (finalAttrs: {
   version = "3.5.6";
 
   src = fetchurl {
-    url = "https://secure.nic.cz/files/knot-dns/knot-${finalAttrs.version}.tar.xz";
+    url = "https://knot-dns.nic.cz/release/knot-${finalAttrs.version}.tar.xz";
     sha256 = "8e2dde44c97f8a63ec5e6c11db26099acd5341286af5b6be900b62ccade68898";
   };
 
diff --git a/pkgs/by-name/kn/knot-resolver_5/package.nix b/pkgs/by-name/kn/knot-resolver_5/package.nix
index af61e7ac71cd..753c82d14208 100644
--- a/pkgs/by-name/kn/knot-resolver_5/package.nix
+++ b/pkgs/by-name/kn/knot-resolver_5/package.nix
@@ -38,7 +38,7 @@ let
     version = "5.7.7";
 
     src = fetchurl {
-      url = "https://secure.nic.cz/files/knot-resolver/knot-resolver-${finalAttrs.version}.tar.xz";
+      url = "https://knot-resolver.nic.cz/release/knot-resolver-${finalAttrs.version}.tar.xz";
       sha256 = "481d2a6eb8690023895d389601e56fffbaeba3cc18cc1de5a5f177df9d0f9530";
     };
 
diff --git a/pkgs/by-name/kn/knot-resolver_6/package.nix b/pkgs/by-name/kn/knot-resolver_6/package.nix
index 715d78394d0d..a80b3046b955 100644
--- a/pkgs/by-name/kn/knot-resolver_6/package.nix
+++ b/pkgs/by-name/kn/knot-resolver_6/package.nix
@@ -39,7 +39,7 @@ let
     version = "6.4.1";
 
     src = fetchurl {
-      url = "https://secure.nic.cz/files/knot-resolver/knot-resolver-${finalAttrs.version}.tar.xz";
+      url = "https://knot-resolver.nic.cz/release/knot-resolver-${finalAttrs.version}.tar.xz";
       hash = "sha256-GqTClyHAm86amfPVZXIjEQNj1ms1ytSYm5Wyr9qTeag=";
     };