diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
new file mode 100644
index 0000000..74323fa
--- /dev/null
+++ b/.github/workflows/renovate.yaml
@@ -0,0 +1,16 @@
+on:
+  schedule:
+    - cron: "30 00 * * 0"
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: Renovate
+        uses: renovatebot/github-action@v40.1.12
+        with:
+          configurationFile: renovate.json5
+          renovate-version: full
+          token: ${{ secrets.RENOVATE_TOKEN }}
diff --git a/.github/workflows/update-flake.yaml b/.github/workflows/update-flake.yaml
new file mode 100644
index 0000000..bc425e5
--- /dev/null
+++ b/.github/workflows/update-flake.yaml
@@ -0,0 +1,22 @@
+on:
+  schedule:
+    - cron: "30 00 * * 1"
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Repository Checkout
+        uses: actions/checkout@v4
+
+      - name: Instal Nix
+        uses: DeterminateSystems/nix-installer-action@v1
+
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v22
+        with:
+          nix-options: --debug --log-format raw
+          pr-title: "deps: update flake.lock"
+          pr-labels: |
+            dependencies
+            automated
diff --git a/renovate.json5 b/renovate.json5
new file mode 100644
index 0000000..59bcec9
--- /dev/null
+++ b/renovate.json5
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "platform": "github",
+  "semanticCommits": true,
+  "labels": ["renovate"],
+  "repositories": ["dc-tec/k8s-gitops"],
+  "extends": ["config:recommended"],
+}