diff --git a/.github/workflows/build-containers.yml b/.github/workflows/build-containers.yml
index 9bb375a6..d2154be1 100644
--- a/.github/workflows/build-containers.yml
+++ b/.github/workflows/build-containers.yml
@@ -152,11 +152,29 @@ jobs:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PASS }}
 
+      - name: Log in to registry.fraios.dev
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: registry.fraios.dev
+          username: ${{ secrets.FRAIOS_REGISTRY_USERNAME }}
+          password: ${{ secrets.FRAIOS_REGISTRY_PASSWORD }}
+
+      # Mirror every image we build to registry.fraios.dev (on-prem installs
+      # pull from there; Docker Hub remains for existing deployments).
+      - name: Compute fraios registry image name
+        id: fraios
+        run: |
+          IMAGE="${{ matrix.image }}"
+          echo "image=registry.fraios.dev/fraios/${IMAGE#quicklookup/}" >> $GITHUB_OUTPUT
+
       - name: Extract metadata
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ matrix.image }}
+          images: |
+            ${{ matrix.image }}
+            ${{ steps.fraios.outputs.image }}
           tags: |
             type=ref,event=branch
             type=ref,event=pr
diff --git a/services/actions/Dockerfile b/services/actions/Dockerfile
index 66b484f6..a57dab96 100644
--- a/services/actions/Dockerfile
+++ b/services/actions/Dockerfile
@@ -31,3 +31,5 @@ COPY src/ /app/src/
 RUN ln -s $NODE_PATH ./node_modules
 
 CMD ["yarn", "start.dev"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger
diff --git a/services/cubejs/Dockerfile b/services/cubejs/Dockerfile
index d1c698fd..51c6efcf 100644
--- a/services/cubejs/Dockerfile
+++ b/services/cubejs/Dockerfile
@@ -40,3 +40,5 @@ RUN apt-get update && apt-get install -y wget unzip && \
     rm /tmp/DatabricksJDBC.zip
 
 CMD ["yarn", "start"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger
diff --git a/services/hasura/Dockerfile b/services/hasura/Dockerfile
index 1c804c85..46cd2ea5 100644
--- a/services/hasura/Dockerfile
+++ b/services/hasura/Dockerfile
@@ -21,3 +21,5 @@ COPY ./config.yaml ./config.yaml
 
 # Default command shows help; override with specific migration commands  
 CMD ["hasura-cli", "--help"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger