From 221bb24e90846a3be377df0bb09b74e0c5648d69 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 16 Jul 2026 22:16:17 +1000
Subject: [PATCH] Add passv Gitea repository

passv (a Vault-backed drop-in for pass) needs a Gitea repo to hold its source
and run its Woodpecker PR/release pipelines.

- Add config/git.unkin.net/unkin/repository/passv.yaml (public, main default
  branch, squash-only, main branch protection gated on the pre-commit/build/test
  PR checks), mirroring the sibling vault-plugin-secrets-gpg repo.
---
 .../git.unkin.net/unkin/repository/passv.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 config/git.unkin.net/unkin/repository/passv.yaml

diff --git a/config/git.unkin.net/unkin/repository/passv.yaml b/config/git.unkin.net/unkin/repository/passv.yaml
new file mode 100644
index 0000000..be30896
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/passv.yaml
@@ -0,0 +1,19 @@
+description: "Vault-backed drop-in replacement for pass (password-store); routes GPG crypto through vault-plugin-secrets-gpg"
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+# Squash-only: the gitea provider has no "default merge style", so we restrict
+# the allowed styles to squash to force it.
+allow_merge_commits: false
+allow_rebase: false
+allow_rebase_explicit: false
+allow_squash_merge: true
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+    approval_whitelist_teams:
+      - "Owners"