jgitta/homelab-configs
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: serialize lscr.io checks — one scoped Watchtower per container at 3-min intervals

Browse Source
This commit is contained in:
Jozsef Gtta
2026-05-24 11:44:54 +00:00
parent a73dce0537
commit b7d5949ef4
1 changed files with 67 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jellyfin/arr-stack/docker-compose.yml
+67 -6
View File
@@ -12,6 +12,8 @@ services:
volumes: volumes:
- /srv/docker/radarr/config:/config - /srv/docker/radarr/config:/config
- /mnt/media:/data - /mnt/media:/data
labels:
- "com.centurylinklabs.watchtower.scope=radarr"
sonarr: sonarr:
container_name: sonarr container_name: sonarr
@@ -26,6 +28,8 @@ services:
volumes: volumes:
- /srv/docker/sonarr/config:/config - /srv/docker/sonarr/config:/config
- /mnt/media:/data - /mnt/media:/data
labels:
- "com.centurylinklabs.watchtower.scope=sonarr"
prowlarr: prowlarr:
container_name: prowlarr container_name: prowlarr
@@ -51,6 +55,8 @@ services:
environment: environment:
- TZ=America/Chicago - TZ=America/Chicago
# Main watchtower — handles unscoped containers (flaresolverr, portainer-agent)
# Runs at 4:09 AM — last in sequence, after all lscr.io checks are done
watchtower: watchtower:
image: containrrr/watchtower image: containrrr/watchtower
container_name: watchtower container_name: watchtower
@@ -69,16 +75,69 @@ services:
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y
- WATCHTOWER_NOTIFICATIONS_LEVEL=info - WATCHTOWER_NOTIFICATIONS_LEVEL=info
- WATCHTOWER_CLEANUP=true - WATCHTOWER_CLEANUP=true
- WATCHTOWER_SCHEDULE=0 0 4 * * * - WATCHTOWER_SCHEDULE=0 9 4 * * *
- WATCHTOWER_ROLLING_RESTART=true - WATCHTOWER_ROLLING_RESTART=true
- WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s - WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s
- WATCHTOWER_HTTP_API_PERIODIC_POLLS=false - WATCHTOWER_HTTP_API_PERIODIC_POLLS=false
- WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s - WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s
labels:
- "com.centurylinklabs.watchtower.enable=false"
# Separate scoped instance for prowlarr — staggered 5 min later to avoid # Scoped watchtower for radarr only — runs first at 4:00 AM
# concurrent lscr.io/ghcr.io rate limit bursts. Prowlarr must carry the watchtower-radarr:
# com.centurylinklabs.watchtower.scope=prowlarr label (set above) so the image: containrrr/watchtower
# main watchtower ignores it and only this instance manages it. container_name: watchtower-radarr
restart: unless-stopped
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /home/jgitta/.docker/config.json:/config.json:ro
environment:
- TZ=America/Chicago
- WATCHTOWER_SCOPE=radarr
- WATCHTOWER_NOTIFICATIONS=email
- WATCHTOWER_NOTIFICATION_EMAIL_FROM=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_TO=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER=smtp.fastmail.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=587
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y
- WATCHTOWER_NOTIFICATIONS_LEVEL=info
- WATCHTOWER_CLEANUP=true
- WATCHTOWER_SCHEDULE=0 0 4 * * *
- WATCHTOWER_ROLLING_RESTART=true
- WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s
- WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s
labels:
- "com.centurylinklabs.watchtower.enable=false"
# Scoped watchtower for sonarr only — runs at 4:03 AM
watchtower-sonarr:
image: containrrr/watchtower
container_name: watchtower-sonarr
restart: unless-stopped
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /home/jgitta/.docker/config.json:/config.json:ro
environment:
- TZ=America/Chicago
- WATCHTOWER_SCOPE=sonarr
- WATCHTOWER_NOTIFICATIONS=email
- WATCHTOWER_NOTIFICATION_EMAIL_FROM=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_TO=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER=smtp.fastmail.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=587
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=jgitta@jgitta.com
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y
- WATCHTOWER_NOTIFICATIONS_LEVEL=info
- WATCHTOWER_CLEANUP=true
- WATCHTOWER_SCHEDULE=0 3 4 * * *
- WATCHTOWER_ROLLING_RESTART=true
- WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s
- WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s
labels:
- "com.centurylinklabs.watchtower.enable=false"
# Scoped watchtower for prowlarr only — runs at 4:06 AM
watchtower-prowlarr: watchtower-prowlarr:
image: containrrr/watchtower image: containrrr/watchtower
container_name: watchtower-prowlarr container_name: watchtower-prowlarr
@@ -98,7 +157,9 @@ services:
- WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=2l79229z6r4y8x8y
- WATCHTOWER_NOTIFICATIONS_LEVEL=info - WATCHTOWER_NOTIFICATIONS_LEVEL=info
- WATCHTOWER_CLEANUP=true - WATCHTOWER_CLEANUP=true
- WATCHTOWER_SCHEDULE=0 5 4 * * * - WATCHTOWER_SCHEDULE=0 6 4 * * *
- WATCHTOWER_ROLLING_RESTART=true - WATCHTOWER_ROLLING_RESTART=true
- WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s - WATCHTOWER_ROLLING_RESTART_TIMEOUT=30s
- WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s - WATCHTOWER_CONTAINER_WAIT_BEFORE_STOPPING=60s
labels:
- "com.centurylinklabs.watchtower.enable=false"