Requires new security.debian.org repository layout quoting from
https://lists.debian.org/debian-devel-announce/2019/07/msg00004.html:
| over the last years we had people getting confused over <suite>-updates
| (recommended updates) and <suite>/updates (security updates). Starting
| with Debian 11 "bullseye" we have therefore renamed the suite including
| the security updates to <suite>-security.
|
| An entry in sources.list should look like
|
| deb http://security.debian.org/debian-security bullseye-security main
|
| For previous releases the name will not change.
--- /dev/null
+# official debian repository:
+ deb http://ftp.debian.org/debian/ bullseye main contrib non-free
+ deb-src http://ftp.debian.org/debian/ bullseye main contrib non-free
+
+# security updates:
+ deb http://security.debian.org/debian-security bullseye-security main contrib non-free
+ deb-src http://security.debian.org/debian-security bullseye-security main contrib non-free