diff --git a/docker-compose.yml b/docker-compose.yml
index 315adaf..09b8a20 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -227,8 +227,15 @@ services:
       - "traefik.http.routers.isotope-client.entrypoints=secureweb"
       - "traefik.http.routers.isotope-client.tls=true"
 
-
-
+# auto-update docker images
+watchtower:
+  image: containrrr/watchtower
+  container_name: watchtower
+  # should use --cleanup as well...
+  command: --schedule "0 0 3 * * *" --debug --stop-timeout 60s
+  restart: always
+  volumes:
+     - /var/run/docker.sock:/var/run/docker.sock
 
 # override the default network to use the "user-generated" plex-net
 # weirdy, ONLY, user-generated networks allow DNS service discovery