diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..a977c395
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @JJGadgets
\ No newline at end of file
diff --git a/.renovate/autoMerge.json5 b/.renovate/autoMerge.json5
index 72655df6..9b1349c5 100644
--- a/.renovate/autoMerge.json5
+++ b/.renovate/autoMerge.json5
@@ -16,7 +16,7 @@
       "automergeType": "pr",
       "matchFileNames": ["kube/deploy/apps/**"],
       "matchUpdateTypes": ["minor", "patch", "digest"],
-      "matchCurrentVersion": "!/^0/", // avoid breaking changes in 0.x SemVer releases
+      "matchCurrentVersion": "!/^0\\./" // avoid breaking changes in 0.x SemVer releases
     },
     {
       "description": "Auto merge patch app-template versions",
diff --git a/.renovate/groups.json5 b/.renovate/groups.json5
index 3c1c9b2b..82f91f88 100644
--- a/.renovate/groups.json5
+++ b/.renovate/groups.json5
@@ -17,7 +17,7 @@
     {
       "description": "Flux Group",
       "groupName": "Flux",
-      "matchPackagePatterns": ["(?<!mini)flux"],
+      "matchPackagePatterns": ["fluxcd"],
       "matchDatasources": ["docker", "github-tags"],
       "versioning": "semver",
       "group": {
diff --git a/.renovaterc.json5 b/.renovaterc.json5
index 8f6bba53..68b54f04 100644
--- a/.renovaterc.json5
+++ b/.renovaterc.json5
@@ -12,7 +12,6 @@
     ":automergeDigest",
     ":automergeBranch",
     ":timezone(Asia/Singapore)",
-    ":assignAndReview(@JJGadgets)",
     "github>JJGadgets/Biohazard//.renovate/autoMerge.json5",
     "github>JJGadgets/Biohazard//.renovate/commitMessage.json5",
     "github>JJGadgets/Biohazard//.renovate/groups.json5",
@@ -28,32 +27,29 @@
   "rebaseWhen": "behind-base-branch", // automerge needs this, and because I keep breaking my shit lol
   // "schedule": ["on saturday"], // TODO: re-add it when I stop being a shut-in NEET
   // NOTE: forward slashes do not need escaping on Renovate, and a proper escape backslash needs double backslashes because JSON moment
+  "assigneesFromCodeOwners": true,
+  "reviewersFromCodeOwners": true,
   "flux": {
-    "fileMatch": [
-      "^kube/.+(?<!sops)\\.ya?ml$"
-    ]
+    "fileMatch": ["^kube/.+\\.ya?ml$"],
+    "ignorePaths": ["**/archive/**", "**/**.sops.**"]
   },
   "helm-values": {
-    "fileMatch": [
-      "^kube/.+(?<!sops)\\.ya?ml$"
-    ]
+    "fileMatch": ["^kube/.+\\.ya?ml$"],
+    "ignorePaths": ["**/archive/**", "**/**.sops.**"]
   },
   "kubernetes": {
-    "fileMatch": [
-      "^kube/.+(?<!sops)\\.ya?ml$"
-    ]
+    "fileMatch": ["^kube/.+\\.ya?ml$"],
+    "ignorePaths": ["**/archive/**", "**/**.sops.**"]
   },
   "kustomize": {
-    "fileMatch": [
-      "(^|/)kustomization\\.ya?ml$"
-    ]
+    "fileMatch": ["^kube/.+\\.ya?ml$"],
+    "ignorePaths": ["**/archive/**", "**/**.sops.**"]
   },
   "regexManagers": [
     {
       "description": "Process various other dependencies",
-      "fileMatch": [
-        "(^|/)kube/.+\\.ya?ml(\\.j2)?(\\.j2)?$"
-      ],
+      "fileMatch": ["^kube/.+\\.ya?ml$"],
+      "ignorePaths": ["**/archive/**", "**/**.sops.**"],
       "matchStrings": [
         // Example: `k3s_release_version: "v1.27.3+k3s1"`
         "datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( versioning=(?<versioning>\\S+))?\n.*?\"(?<currentValue>.*)\"\n",