diff --git a/config/git.unkin.net/unkin/repository/container-base.yaml b/config/git.unkin.net/unkin/repository/container-base.yaml
new file mode 100644
index 0000000..681878c
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/container-base.yaml
@@ -0,0 +1,16 @@
+description: "Base container images for the estate, carrying internal CA trust and dnf/repo configuration, built as a matrix across the supported distros."
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+      - "ci/woodpecker/pr/pre-commit"
+    approval_whitelist_users:
+      - "benvin"
diff --git a/config/git.unkin.net/unkin/repository/container-gobuilder.yaml b/config/git.unkin.net/unkin/repository/container-gobuilder.yaml
new file mode 100644
index 0000000..9020815
--- /dev/null
+++ b/config/git.unkin.net/unkin/repository/container-gobuilder.yaml
@@ -0,0 +1,16 @@
+description: "Go toolchain builder container image, built on each supported container-base distro image, used by Woodpecker pipelines to compile Go projects."
+private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/build"
+      - "ci/woodpecker/pr/test"
+      - "ci/woodpecker/pr/pre-commit"
+    approval_whitelist_users:
+      - "benvin"