now that transparent proxying is enabled again, switch to official mirrors