Br

boring-registry on Ubuntu 24.04

Azure Developer Tools

boring-registry, a private, self hosted registry that serves your own Terraform and OpenTofu modules and providers.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

boring-registry is a simple open source registry for Terraform and OpenTofu modules and providers, a private alternative to the public Terraform Registry. Point your developers and CI pipelines at boring-registry and consume your organisation's own modules and providers with the standard module and provider source syntax, while you keep full control over what is published and who can reach it. It implements the module registry protocol, the provider registry protocol and the provider network mirror protocol. boring-registry is a headless API server driven by the terraform and tofu commands and its own command line, so there is no web console to manage.

Why the cloudimg image

The cloudimg image is hardened and fully patched with boring-registry preconfigured behind nginx, the registry bound to loopback and protected by a per instance API token so it is never open. It is self contained: a lightweight object store is bundled on the same instance and bound to loopback, so the registry works out of the box with no external cloud account. It ships secure by default with no shared credentials: on first boot every instance generates its own registry API token and its own object store credentials and writes them to a root only file. Every instance is backed by a paired deploy guide and 24/7 cloudimg support.

Common uses

  • Host your own Terraform and OpenTofu modules privately
  • Serve modules and providers over the standard registry protocols
  • Mirror providers for reproducible, network isolated builds