diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..b3f16b6
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,5 @@
+# Protect workflow files
+.github/workflows/*.yml @socialgouv/sre
+.github/CODEOWNERS @socialgouv/sre
+.kontinuous/ @socialgouv/sre
+Dockerfile @socialgouv/sre
diff --git a/.kontinuous/config.yaml b/.kontinuous/config.yaml
index 271a0ad..3890f79 100644
--- a/.kontinuous/config.yaml
+++ b/.kontinuous/config.yaml
@@ -3,6 +3,9 @@ projectName: archifiltre
 dependencies:
   fabrique:
     import: SocialGouv/kontinuous/plugins/fabrique
+    extends:
+    - name: ovh
+
 
 environmentPatterns:
   # prod: main