diff --git a/apps/renovate/cronjob.yaml b/apps/renovate/cronjob.yaml
new file mode 100644
index 0000000..81811ec
--- /dev/null
+++ b/apps/renovate/cronjob.yaml
@@ -0,0 +1,35 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate-gitea
+spec:
+  schedule: '@hourly'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          affinity:
+            nodeAffinity:
+              preferredDuringSchedulingIgnoredDuringExecution:
+              - weight: 1
+                preference:
+                  matchExpressions:
+                  - key: location
+                    operator: In
+                    values:
+                    - fsn
+          hostAliases:
+          - ip: "100.105.22.116"
+            hostnames:
+            - "git.prettysunflower.moe"
+          containers:
+            - name: renovate
+              image: renovate/renovate:40.40.3
+              env:
+                - name: LOG_LEVEL
+                  value: debug
+              envFrom:
+                - secretRef:
+                    name: renovate-gitea-env
+          restartPolicy: Never
\ No newline at end of file
diff --git a/apps/renovate/kustomization.yaml b/apps/renovate/kustomization.yaml
new file mode 100644
index 0000000..93ecc6c
--- /dev/null
+++ b/apps/renovate/kustomization.yaml
@@ -0,0 +1,3 @@
+resources:
+  - cronjob.yaml
+  - secrets.yaml
\ No newline at end of file