nixos/renovate.json

{
  "nix": {
    "enabled": true
  },
  "lockFileMaintenance": {
    "enabled": true,
    "rebaseWhen": "behind-base-branch",
    "schedule": ["* 2-5 * * *"]
  }
}