Afaik, nix for https-based git(hub/lab/...) repositories and http-auth protected resources (via fetchurl and friends).