watchtower.yaml

services:
  docker-login:
    image: "docker:latest"
    container_name: "docker-login"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "./config/watchtower:/root/.docker"
    entrypoint: >
      sh -c "
      echo 'Logging in to Docker registry...';
      docker login git.${DOMAIN} -u ${USERNAME} -p ${PASSWORD};
      echo 'Docker login complete.'
      "
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower
    restart: always
    networks:
      - gitea
    environment:
      - DOCKER_TLS_VERIFY=0
      - SSL_CERT_FILE=/etc/ssl/cert.pem
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./config/watchtower/config.json:/config.json
      - ./config/traefik/certs/ca-cert.crt:/etc/ssl/cert.pem
    command: --interval 10 --cleanup --include-stopped --revive-stopped --label-enable
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.watchtower.rule=HostRegexp(`{_:watchtower\\..*}`)"
      - "traefik.http.services.watchtower.loadbalancer.server.port=8080"

networks:
  gitea:
    external: true