boring-registry, a private, self hosted registry that serves your own Terraform and OpenTofu modules and providers.
boring-registry is a simple open source registry for Terraform and OpenTofu modules and providers, a private alternative to the public Terraform Registry. Point your developers and CI pipelines at boring-registry and consume your organisation's own modules and providers with the standard module and provider source syntax, while you keep full control over what is published and who can reach it. It implements the module registry protocol, the provider registry protocol and the provider network mirror protocol. boring-registry is a headless API server driven by the terraform and tofu commands and its own command line, so there is no web console to manage.
The cloudimg image is hardened and fully patched with boring-registry preconfigured behind nginx, the registry bound to loopback and protected by a per instance API token so it is never open. It is self contained: a lightweight object store is bundled on the same instance and bound to loopback, so the registry works out of the box with no external cloud account. It ships secure by default with no shared credentials: on first boot every instance generates its own registry API token and its own object store credentials and writes them to a root only file. Every instance is backed by a paired deploy guide and 24/7 cloudimg support.