@tcit here :
https://github.com/octopuce/nextcloud-updater-mirror

The download is done only when necessary, so it should work (hopefully) and I'm checking the signature too.

(this could afford a bit of love to ensure files are served once downloaded, not the other way around :) )