Only https urls are enabled in our infra

hi,
We are setting up a new infra with 10.0.4, in our infra only https urls are enabled, now we have installed the root servers and to gather external content we have enabled the setting on root server enable https gather=1 so new site data is visible and is updating also, now we have issue for downloading on the root server, when we are pushing relay server to the clients it is not downloading the required exe for relay server, when we are applying patches then the patches that are downloaded via http url are not able to download the required binaries.

How can we resolve this situation, customer is allowing everything on https not http, but some download urls for some fixlets are in http and those downloads will fail, how can we setup this infra please suggest?