diff --git a/manifests/raw-resources-infra/renovate/cronjob.yaml b/manifests/raw-resources-infra/renovate/cronjob.yaml
index b3fac5b..f992654 100644
--- a/manifests/raw-resources-infra/renovate/cronjob.yaml
+++ b/manifests/raw-resources-infra/renovate/cronjob.yaml
@@ -15,7 +15,7 @@ data:
         "dvirlabs/dev-tools",
         "dvirlabs/my-apps",
         "dvirlabs/observability-stack",
-        "dvirlabs/ai-stack",
+        "dvirlabs/ai-stack"
       ],
 
       onboarding: false,
@@ -30,6 +30,27 @@ data:
 
       labels: ["renovate"],
 
+      hostRules: [
+        {
+          hostType: "docker",
+          matchHost: "index.docker.io",
+          username: process.env.DOCKERHUB_USERNAME,
+          password: process.env.DOCKERHUB_TOKEN
+        },
+        {
+          hostType: "docker",
+          matchHost: "registry-1.docker.io",
+          username: process.env.DOCKERHUB_USERNAME,
+          password: process.env.DOCKERHUB_TOKEN
+        },
+        {
+          hostType: "docker",
+          matchHost: "docker.io",
+          username: process.env.DOCKERHUB_USERNAME,
+          password: process.env.DOCKERHUB_TOKEN
+        }
+      ],
+
       enabledManagers: [
         "dockerfile",
         "docker-compose",
@@ -45,7 +66,8 @@ data:
           "/(^|/)manifests/.+\\.ya?ml$/",
           "/(^|/)k8s/.+\\.ya?ml$/",
           "/(^|/)apps/.+\\.ya?ml$/",
-          "/(^|/)charts/.+\\.ya?ml$/"
+          "/(^|/)charts/.+\\.ya?ml$/",
+          "/(^|/)raw-resources-.+/.+\\.ya?ml$/"
         ]
       },
 
@@ -86,10 +108,11 @@ metadata:
 spec:
   schedule: "0 3 * * *"
   concurrencyPolicy: Forbid
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 3
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 1
   jobTemplate:
     spec:
+      ttlSecondsAfterFinished: 300
       backoffLimit: 1
       template:
         spec:
@@ -108,6 +131,18 @@ spec:
                       name: renovate-secret
                       key: RENOVATE_TOKEN
 
+                - name: DOCKERHUB_USERNAME
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secret
+                      key: DOCKERHUB_USERNAME
+
+                - name: DOCKERHUB_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secret
+                      key: DOCKERHUB_TOKEN
+
                 - name: LOG_LEVEL
                   value: info