The proxy should maintain a copy of all dependencies (public and private), so only one should be necessary.
You can also just let your GOPROXY fallback go “direct” which will then go straight to vcs (you need to make sure you have a gitconfig setup to redirect https to ssh).