It's similar to my own setup. I just do it in kubernetes instead of docker. One thing you can consider is a CI that runs renovate on a schedule to PR you when it finds new container image versions.
Here's my setup so you can take some inspiration if you want.
https://github.com/rafaribe/home-ops/blob/main/.github/workflows/schedule-renovate.yaml