initial commit, here be dragons

roles/watchtower/templates/docker-compose.yml.j2

@@ -0,0 +1,12 @@
+---
+version: '3'
+
+# watchtower updates container images with mutable tags.
+services:
+  watchtower:
+    image: 'containrrr/watchtower:1.1.6'
+    # Use label `com.centurylinklabs.watchtower.enable="false"` to disable on container!
+    command: '--cleanup --schedule "0 0 4 * * *"' # UTC
+    restart: unless-stopped
+    volumes:
+      - '/var/run/docker.sock:/var/run/docker.sock'