Watchtower

A small service that watches running Docker containers, compares their images against the registry, and restarts them automatically when a newer image is published. It recreates each container with the same options it was originally started with, and you can narrow which containers it watches or exclude individual ones with labels.

Teams use it on homelab servers, demo environments and long-running services where a manual image pull would otherwise be forgotten.

Running it on your own host means update decisions stay on infrastructure you control rather than a hosted service, it adds no cost per application, and the container configuration it manages is backed up with everything else on the machine.