diff --git a/.github/workflows/github-organization-as-code.yaml b/.github/workflows/github-organization-as-code.yaml
index 1773279..ec03840 100644
--- a/.github/workflows/github-organization-as-code.yaml
+++ b/.github/workflows/github-organization-as-code.yaml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   call-terraform:
-    uses: xebis/github-organization-as-code/.github/workflows/terraform.yaml@v0.11.0
+    uses: xebis/github-organization-as-code/.github/workflows/terraform.yaml@v0.12.1
     with:
       aws_region: ${{ vars.AWS_REGION }}
       aws_endpoint_url_s3: ${{ vars.AWS_ENDPOINT_URL_S3 }}
diff --git a/xebis.yaml b/xebis.yaml
index 7922795..0b46865 100644
--- a/xebis.yaml
+++ b/xebis.yaml
@@ -1,9 +1,29 @@
 ---
-default-properties:
-  has_issues: true
-  allow_merge_commit: false
-  allow_auto_merge: true
-  delete_branch_on_merge: true
+organization:
+  all-repositories:
+    # All-repository default features
+    has_issues: true
+    # All-repository default settings
+    allow_merge_commit: false
+    allow_auto_merge: true
+    delete_branch_on_merge: true
+    # All-repository default rulesets
+    rulesets:
+      - name: "Main Branch"
+        target: branch
+        enforcement: active
+        conditions:
+          ref_name:
+            include:
+              - ~DEFAULT_BRANCH
+        rules:
+          creation: true
+          update: true
+          deletion: true
+          pull_request:
+            required_approving_review_count: 0
+          required_linear_history: true
+          required_signatures: true
 repositories:
   - name: .github
     description: Xebis organization profile and management.