From 7cdab580188818e53d0d2f5587f2c5a3e7c3ae44 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Thu, 20 Nov 2025 18:45:38 +0100
Subject: [PATCH] feat: enable Watchtower auto-updates for all application
 services
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add missing Watchtower labels to:
- net_umami: Analytics service
- dev_gitea_runner: CI/CD runner
- sexy_api: Directus CMS backend
- util_linkwarden_meilisearch: Search engine

All application services now have automatic updates enabled.
Critical infrastructure (postgres, redis, traefik) intentionally
excluded from auto-updates for stability.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 dev/compose.yaml  | 3 +++
 net/compose.yaml  | 2 ++
 sexy/compose.yaml | 2 ++
 util/compose.yaml | 3 +++
 4 files changed, 10 insertions(+)

diff --git a/dev/compose.yaml b/dev/compose.yaml
index 6eb063e..1cf6713 100644
--- a/dev/compose.yaml
+++ b/dev/compose.yaml
@@ -88,6 +88,9 @@ services:
       DOCKER_HOST: unix:///var/run/docker.sock
     networks:
       - compose_network
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}"
 
   # Coolify - Self-hosted deployment platform
   coolify:
diff --git a/net/compose.yaml b/net/compose.yaml
index 255e4a1..8d39948 100644
--- a/net/compose.yaml
+++ b/net/compose.yaml
@@ -221,6 +221,8 @@ services:
       - 'traefik.http.routers.${NET_COMPOSE_PROJECT_NAME}-umami-web-secure.middlewares=security-headers@file'
       - 'traefik.http.services.${NET_COMPOSE_PROJECT_NAME}-umami-web-secure.loadbalancer.server.port=3000'
       - 'traefik.docker.network=${NETWORK_NAME}'
+      # Watchtower
+      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
 
   # Mailpit - SMTP server with web UI
   mailpit:
diff --git a/sexy/compose.yaml b/sexy/compose.yaml
index e1fbb3d..97515c5 100644
--- a/sexy/compose.yaml
+++ b/sexy/compose.yaml
@@ -53,6 +53,8 @@ services:
       - 'traefik.http.routers.${SEXY_COMPOSE_PROJECT_NAME}-api-web-secure.middlewares=${SEXY_COMPOSE_PROJECT_NAME}-api-strip,${SEXY_COMPOSE_PROJECT_NAME}-api-web-secure-compress'
       - 'traefik.http.services.${SEXY_COMPOSE_PROJECT_NAME}-api-web-secure.loadbalancer.server.port=8055'
       - 'traefik.docker.network=${NETWORK_NAME}'
+      # Watchtower
+      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
 
   sexy_frontend:
     image: ${SEXY_FRONTEND_IMAGE}
diff --git a/util/compose.yaml b/util/compose.yaml
index 5998e93..18c7130 100644
--- a/util/compose.yaml
+++ b/util/compose.yaml
@@ -127,6 +127,9 @@ services:
       MEILI_NO_ANALYTICS: ${UTIL_LINKS_MEILI_NO_ANALYTICS:-true}
     volumes:
       - linkwarden_meili_data:/meili_data
+    labels:
+      # Watchtower
+      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
 
   # Mattermost - Team collaboration
   mattermost: