# Watchtower

Watchtower is a Docker container updater that automatically applies new images to running applications. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/301/watchtower

## Description

Watchtower is a Docker container updater that automatically applies new images to running applications. It watches a configured image registry, pulls newer versions, stops the old container, and restarts it with the original Docker options. It suits self-hosted users who want scheduled or registry-triggered container updates without manually pulling images and restarting containers.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

80/100 (Excellent), based on 4 of 5 factors.
- Maintained: 100 (last commit 20 days ago)
- Popular: 73 (4,534 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)
- Security check: 92 (no serious findings, CI, tests, OpenSSF Scorecard 8.1/10)

## Links

- Docker Hub: https://hub.docker.com/r/containrrr/watchtower
- Unraid: https://ca.unraid.net/apps/watchtower-017yeu71f4dysr?q=watchtower
- Official website: https://containrrr.dev/watchtower/
- GitHub: https://github.com/nicholas-fedor/watchtower
- Documentation: https://containrrr.dev/watchtower/arguments/

## Common questions

### What container configuration is needed for Watchtower to update containers and stay available after reboots?

Mount /var/run/docker.sock into the Watchtower container so it can talk to Docker. Also keep restart: unless-stopped so Watchtower comes back after a reboot or Docker restart.

### How should I secure the Watchtower HTTP API if I enable it?

Bind the HTTP API to 127.0.0.1 or a trusted home-network IP. Open the API port only where needed, because leaving it reachable publicly can expose Watchtower controls.

### Is Watchtower suitable for a production environment?

The project says it is intended for homelabs, media centers, and local dev environments. It does not recommend using it in commercial or production environments.

### What kind of breakage can automatic updates cause?

One user reported that enabling Watchtower for a week broke a Frigate install. This shows that automated container updates can disrupt a running service.

## Alternatives

- diun: Diun is a Docker Image Update Notifier that monitors container registries and sends notifications via webhook, email, or chat services when…
- tugtainer: Tugtainer is a self-hosted app for automating Docker container updates.

---
Source: Our Local Host (https://ourlocalhost.com/app/301/watchtower), the self-hosted and open-source app directory.