diff --git a/apps/woodpecker/release.yaml b/apps/woodpecker/release.yaml
index fb7ec7e..5f70b39 100644
--- a/apps/woodpecker/release.yaml
+++ b/apps/woodpecker/release.yaml
@@ -50,6 +50,7 @@ spec:
         WOODPECKER_OPEN: "true"
         # Make lumpiasty admin
         WOODPECKER_ADMIN: GiteaAdmin
+        WOODPECKER_PLUGINS_PRIVILEGED: woodpeckerci/plugin-docker-buildx
 
       createAgentSecret: true
 
diff --git a/vault/policy/renovate.hcl b/vault/policy/renovate.hcl
index 01c980a..b8a26fb 100644
--- a/vault/policy/renovate.hcl
+++ b/vault/policy/renovate.hcl
@@ -1,3 +1,7 @@
 path "secret/data/renovate" {
     capabilities = ["read"]
 }
+
+path "secret/data/container-registry" {
+    capabilities = ["read"]
+}