From 20f22deb51c35d9fb30711fc8a6340eb09f09589 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@git.unkin.net>
Date: Sun, 16 Aug 2026 15:27:07 +1000
Subject: [PATCH] arrproxy: apply standard branch protection + squash merge

Match the sibling Go service repo convention (node-lookup/encapi):
require the woodpecker pre-commit/test/build PR status checks,
squash merge style, and restrict merge/approval to Owners/benvin.
---
 config/git.unkin.net/unkin/repository/arrproxy.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/config/git.unkin.net/unkin/repository/arrproxy.yaml b/config/git.unkin.net/unkin/repository/arrproxy.yaml
index d4b2a09..76cab7d 100644
--- a/config/git.unkin.net/unkin/repository/arrproxy.yaml
+++ b/config/git.unkin.net/unkin/repository/arrproxy.yaml
@@ -2,3 +2,15 @@ description: "Go reverse proxy fronting sonarr/radarr/prowlarr: Authentik oauth
 private: true
 default_branch: "main"
 default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/test"
+      - "ci/woodpecker/pr/build"
+    approval_whitelist_users:
+      - "benvin"