nix: using public url for nhc