diff --git a/k8s/forgejo/kustomization.yaml b/k8s/forgejo/kustomization.yaml
index 8635c0c..67a708c 100644
--- a/k8s/forgejo/kustomization.yaml
+++ b/k8s/forgejo/kustomization.yaml
@@ -8,6 +8,7 @@ resources:
  - services.yaml
  - statefulset.yaml
  - secrets.yaml
+ - renovatebot.yaml
 configMapGenerator:
 - name: forgejo-templates-base
   files:
diff --git a/k8s/forgejo/renovatebot.yaml b/k8s/forgejo/renovatebot.yaml
new file mode 100644
index 0000000..abd28f8
--- /dev/null
+++ b/k8s/forgejo/renovatebot.yaml
@@ -0,0 +1,30 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate
+spec:
+  schedule: '@hourly'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: renovate
+              image: renovate/renovate:38
+              envFrom:
+                - secretRef:
+                    name: renovate
+                - configMapRef:
+                    name: renovate
+          restartPolicy: Never
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate
+data:
+  RENOVATE_AUTODISCOVER: 'true'
+  RENOVATE_ENDPOINT: 'https://git.janky.solutions'
+  RENOVATE_GIT_AUTHOR: 'Renovate Bot <renovatebot@janky.solutions>'
+  RENOVATE_PLATFORM: gitea