# {{ ansible_managed }} version: "3.8" services: watchtower: image: ghcr.io/containrrr/watchtower container_name: watchtower security_opt: - no-new-privileges environment: - PUID=1000 - PGID=1000 - TZ=Asia/Singapore - WATCHTOWER_CLEANUP=true - WATCHTOWER_WARN_ON_HEAD_FAILURE=never volumes: - /var/run/docker.sock:/var/run/docker.sock command: --schedule "0 0 1 * * *" restart: unless-stopped network_mode: bridge