diff --git a/k8s/forgejo/renovatebot.yaml b/k8s/forgejo/renovatebot.yaml
index abd28f8..05c5a29 100644
--- a/k8s/forgejo/renovatebot.yaml
+++ b/k8s/forgejo/renovatebot.yaml
@@ -28,3 +28,4 @@ data:
   RENOVATE_ENDPOINT: 'https://git.janky.solutions'
   RENOVATE_GIT_AUTHOR: 'Renovate Bot <renovatebot@janky.solutions>'
   RENOVATE_PLATFORM: gitea
+  RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: docker run --rm -v $(pwd):/infra -w /infra git.devhack.net/devhack/containers/deployer:latest -- ./helm/render-all.sh
diff --git a/renovate.json b/renovate.json
index 0d566aa..dad00d5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,10 +8,9 @@
       "**/bundle.yaml"
     ]
   },
-  "allowedPostUpgradeCommands": ["./helm/render-all.sh"],
   "postUpgradeTasks": {
     "commands": [
-      "./helm/render-all.sh"
+      "docker run --rm -v $(pwd):/infra -w /infra git.devhack.net/devhack/containers/deployer:latest -- ./helm/render-all.sh"
     ],
     "fileFilters": [
       "helm/**"