services: watchtower: image: containrrr/watchtower container_name: watchtower logging: driver: journald options: {} security_opt: - apparmor:unconfined volumes: - /var/run/docker.sock:/var/run/docker.sock - /etc/timezone:/etc/timezone:ro env_file: - stack.env