diff --git a/.gitea/branch-protection.yml b/.gitea/branch-protection.yml
new file mode 100644
index 00000000..6a6a707a
--- /dev/null
+++ b/.gitea/branch-protection.yml
@@ -0,0 +1,10 @@
+main:
+  allow_force_push: false
+  allow_deletions: false
+  require_pull_request: true
+  required_approvals: 1
+  dismiss_stale_reviews: true
+  require_ci_to_pass: true
+  required_status_checks:
+    - "ci/build"
+    - "ci/test"
diff --git a/.gitignore b/.gitignore
index 2556e45e..769e943d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ node_modules/
 test-results/
 nexus/__pycache__/
 tests/__pycache__/
+.aider*