diff --git a/.github/renovate.json b/.github/renovate.json
index 1e5d877db..194d07a5a 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -3,8 +3,7 @@
   "extends": [
     "config:recommended",
     "default:pinDigestsDisabled",
-    "mergeConfidence:all-badges",
-    "docker:disable"
+    "mergeConfidence:all-badges"
   ],
   "assignees": [
     "SoWieMarkus"
@@ -70,10 +69,25 @@
       "matchFileNames": [
         "postgres/Dockerfile"
       ],
-      "allowedVersions": "17.x",
-      "automerge": true,
+      "allowedVersions": "18.x",
       "groupName": "postgres Dockerfile"
     },
+    {
+      "matchFileNames": [
+        "postgres/Dockerfile"
+      ],
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "digest",
+        "pinDigest"
+      ],
+      "groupName": "postgres Dockerfile base image",
+      "schedule": [
+        "at any time"
+      ]
+    },
     {
       "matchPackageNames": [
         "/^github\\.com\\/sapcc\\/.*/"
@@ -111,8 +125,15 @@
     }
   ],
   "prHourlyLimit": 0,
+  "timezone": "Europe/Berlin",
   "schedule": [
-    "before 8am on Friday"
+    "after 6pm and before 8am every weekday",
+    "every weekend"
   ],
+  "vulnerabilityAlerts": {
+    "schedule": [
+      "at any time"
+    ]
+  },
   "semanticCommits": "disabled"
 }