From 51cf756edcf2f4240c7bed2479c60746ae91fbc8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Sat, 24 Jan 2026 17:58:01 +0100
Subject: [PATCH] Initial Commit

---
 .gitea/workflows/renovate-cron.yaml | 26 ++++++++++++++++++++++++++
 config.js                           | 23 +++++++++++++++++++++++
 renovate.json                       |  3 +++
 3 files changed, 52 insertions(+)
 create mode 100644 .gitea/workflows/renovate-cron.yaml
 create mode 100644 config.js
 create mode 100644 renovate.json

diff --git a/.gitea/workflows/renovate-cron.yaml b/.gitea/workflows/renovate-cron.yaml
new file mode 100644
index 0000000..1a94f57
--- /dev/null
+++ b/.gitea/workflows/renovate-cron.yaml
@@ -0,0 +1,26 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/github-workflow.json
+name: renovate
+
+on:
+  schedule:
+    - cron: "@weekly"
+  push:
+    branches:
+      - main
+  workflow_dispatch: {}
+
+jobs:
+  renovate:
+    runs-on: nix
+    steps:
+      - uses: actions/checkout@v6
+      - name: Run Renovate via Nix
+        run: |
+          nix run nixpkgs#renovate
+        env:
+          RENOVATE_CONFIG_FILE: "config.js"
+          LOG_LEVEL: "debug"
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          # RENOVATE_GITHUB_COM_TOKEN: ${{ secrets.RENOVATE_GITHUB_COM_TOKEN }}
+          # DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
+          # DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
diff --git a/config.js b/config.js
new file mode 100644
index 0000000..47c239d
--- /dev/null
+++ b/config.js
@@ -0,0 +1,23 @@
+// https://docs.renovatebot.com/self-hosted-configuration/#onboarding
+module.exports = {
+  "endpoint": "https://git.svc.hel1.obx/api/v1",
+  "gitAuthor": "Renovate Bot <renovate-bot@oceanbox.io>",
+  "platform": "gitea",
+  "onboardingConfigFileName": "renovate.json",
+  "autodiscover": true, // automatically go over all repos on this server
+  "onboarding": false, // need to manually create renovate.json
+  "requireConfig": "required", // do not run on repos which don't have a config file
+  "optimizeForDisabled": true,
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true
+  }
+  // https://docs.renovatebot.com/docker/#registry-authentication
+  // "hostRules": [
+    // {
+      // "matchHost": "https://docker.io",
+      // "username": process.env.DOCKER_HUB_USERNAME,
+      // "password": process.env.DOCKER_HUB_PASSWORD,
+    // },
+  // ],
+};
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..7190a60
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}