ansible/roles/docker/tasks/services/watchtower.yml

---
- name: watchtower container
  docker_container:
    name: watchtower
    image: containrrr/watchtower:1.4.0
    restart_policy: unless-stopped
    networks:
      - name: external_services
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - "{{ docker_registry.volume_folder }}/auth/config.json:/config.json"
    env:
      WATCHTOWER_LABEL_ENABLE: "true"
      WATCHTOWER_POLL_INTERVAL: "60"