Terraform provider mirror
A read-only network mirror of the Terraform provider registry,
run for our own estate and for the client environments we operate. It exists so that terraform init
keeps working when the upstream registry is unreachable, rate-limited, or simply slower than we can afford
during a rollout.
Point the CLI at it
Add the block below to ~/.terraformrc (or %APPDATA%\terraform.rc on Windows).
Everything under the listed prefixes is served from here; anything else still goes direct.
# ~/.terraformrc
provider_installation {
network_mirror {
url = "https://mirror.fadminops.space/v1/providers/"
include = ["registry.terraform.io/hashicorp/*"]
}
direct {
exclude = ["registry.terraform.io/hashicorp/*"]
}
}
No credentials, no accounts — the mirror is unauthenticated and read-only. See the docs for CI images, air-gapped bundles and checksum verification.
Mirrored providers
Synced from registry.terraform.io on a six-hour cadence. Platforms:
linux_amd64, linux_arm64, darwin_arm64, windows_amd64.
| Provider | Latest | Versions | Platforms | Size |
|---|---|---|---|---|
| hashicorp/aws | 6.14.1 | 412 | 4 | 28.1 GB |
| hashicorp/azurerm | 4.48.0 | 296 | 4 | 19.7 GB |
| hashicorp/google | 6.55.0 | 238 | 4 | 9.8 GB |
| hashicorp/kubernetes | 2.39.0 | 94 | 4 | 1.9 GB |
| hashicorp/helm | 3.0.2 | 61 | 4 | 0.8 GB |
| hashicorp/tls | 4.1.0 | 38 | 4 | 0.3 GB |
| hashicorp/random | 3.7.2 | 44 | 4 | 0.2 GB |
| hashicorp/null | 3.2.4 | 29 | 4 | 0.1 GB |
| hashicorp/http | 3.5.0 | 31 | 4 | 0.1 GB |
| hashicorp/local | 2.5.3 | 27 | 4 | 0.1 GB |
The rest — vault, consul, dns, time,
external, plus the integrations, cloudflare and grafana
namespaces — is enumerated by the mirror protocol itself; there is no separate browse UI.
How to query it →
What it is not
- Not a registry: it serves providers only, not modules.
- Not a proxy: nothing is fetched on demand. A provider that has not been synced returns
404. - Not a publisher: checksums and signatures are the upstream ones, passed through untouched.
Operational notes
- Next sync window in —.
- Retention: every version upstream still lists, plus 24 months of withdrawn ones.
- Read-only from the public internet; writes come from the sync host over the management network.