config/git.unkin.net/unkin/repository/prowlarr.yaml

@@ -3,3 +3,14 @@ private: true
 default_branch: "main"
 default_delete_branch_after_merge: true
 default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    # Owner can push main directly for fork maintenance (upstream-fix merges);
+    # everyone else opens a PR that must pass the Woodpecker image build.
+    enable_push: true
+    push_whitelist_users:
+      - "unkinben"
+    status_check_contexts:
+      - "ci/woodpecker/pr/docker"

config/git.unkin.net/unkin/repository/radarr.yaml

@@ -3,3 +3,14 @@ private: true
 default_branch: "main"
 default_delete_branch_after_merge: true
 default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    # Owner can push main directly for fork maintenance (upstream-fix merges);
+    # everyone else opens a PR that must pass the Woodpecker image build.
+    enable_push: true
+    push_whitelist_users:
+      - "unkinben"
+    status_check_contexts:
+      - "ci/woodpecker/pr/docker"

config/git.unkin.net/unkin/repository/sonarr.yaml

@@ -3,3 +3,14 @@ private: true
 default_branch: "main"
 default_delete_branch_after_merge: true
 default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    merge_whitelist_teams:
+      - "Owners"
+    # Owner can push main directly for fork maintenance (upstream-fix merges);
+    # everyone else opens a PR that must pass the Woodpecker image build.
+    enable_push: true
+    push_whitelist_users:
+      - "unkinben"
+    status_check_contexts:
+      - "ci/woodpecker/pr/docker"