diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..4b12999
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,126 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+  ],
+  "enabledManagers": [
+    "custom.regex"
+  ],
+  "packageRules": [
+    {
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch",
+      "matchPackagePatterns": [
+        "*"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "prBodyColumns": [
+        "Package",
+        "Type",
+        "Update",
+        "Change",
+        "Pending"
+      ]
+    },
+    {
+      "groupName": "all major dependencies",
+      "groupSlug": "all-major",
+      "matchPackagePatterns": [
+        "*"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "prBodyColumns": [
+        "Package",
+        "Type",
+        "Update",
+        "Change",
+        "Pending"
+      ]
+    }
+  ],
+  "customManagers": [
+    {
+      "description": "ModSecurity 3",
+      "depNameTemplate": "ModSecurity 3",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"modsec3-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "owasp-modsecurity/ModSecurity",
+      "datasourceTemplate": "github-releases"
+    },
+    {
+      "description": "ModSecurity 2",
+      "depNameTemplate": "ModSecurity 2",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"modsec2-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "owasp-modsecurity/ModSecurity",
+      "datasourceTemplate": "github-releases"
+    },
+    {
+      "description": "CRS",
+      "depNameTemplate": "CRS",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"crs-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "coreruleset/coreruleset",
+      "datasourceTemplate": "github-releases"
+    },
+    {
+      "description": "nginx",
+      "depNameTemplate": "nginx",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"nginx-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "nginxinc/nginx-unprivileged",
+      "datasourceTemplate": "docker"
+    },
+    {
+      "description": "httpd",
+      "depNameTemplate": "httpd",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"nginx-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "httpd",
+      "datasourceTemplate": "docker"
+    },
+    {
+      "description": "openresty",
+      "depNameTemplate": "openresty",
+      "customType": "regex",
+      "fileMatch": [
+        "^docker-bake.hcl$"
+      ],
+      "matchStrings": [
+        "^variable \"nginx-version\" {\\n\\s+default = \"(?<currentValue> [^\"]+)\""
+      ],
+      "packageNameTemplate": "openresty/openresty",
+      "datasourceTemplate": "docker"
+    }
+  ]
+}