diff --git a/modules/rke2/files/registries.yaml b/modules/rke2/files/registries.yaml
new file mode 100644
index 0000000..2fe9f45
--- /dev/null
+++ b/modules/rke2/files/registries.yaml
@@ -0,0 +1,37 @@
+---
+mirrors:
+  docker.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "dockerhub/$1"
+  ghcr.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "ghcr/$1"
+  quay.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "quay/$1"
+  registry.k8s.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "k8s-registry/$1"
+  registry.gitlab.com:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "gitlab/$1"
+  docker.elastic.co:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "elastic/$1"
+  gcr.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "gcr/$1"
diff --git a/modules/rke2/manifests/config.pp b/modules/rke2/manifests/config.pp
index bed5688..0dd9c53 100644
--- a/modules/rke2/manifests/config.pp
+++ b/modules/rke2/manifests/config.pp
@@ -28,6 +28,16 @@ class rke2::config (
     $config = $config_hash
   }
 
+  file { '/etc/rancher/rke2/registries.yaml':
+    ensure  => file,
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0644',
+    source  => 'puppet:///modules/rke2/registries.yaml',
+    require => Package["rke2-${node_type}"],
+    before  => Service["rke2-${node_type}"],
+  }
+
   # create the config file
   file { $config_file:
     ensure  => file,