diff --git a/.gitea/protected_branches.yaml b/.gitea/protected_branches.yaml
new file mode 100644
index 0000000..f6b12cd
--- /dev/null
+++ b/.gitea/protected_branches.yaml
@@ -0,0 +1,8 @@
+main:
+  require_pr: true
+  required_approvals: 1
+  dismiss_stale_approvals: true
+  # Require CI to pass if CI exists
+  require_ci_to_pass: true
+  block_force_push: true
+  block_branch_deletion: true