{ config, ... }:
{
  virtualisation.oci-containers.containers.watchtower = {
    image = "containrrr/watchtower:latest";
    volumes = [
      "/etc/zoneinfo/${config.time.timeZone}:/etc/localtime:ro"
      "/var/run/docker.sock:/var/run/docker.sock"
    ];
    environment = {WATCHTOWER_SCHEDULE = "0 0 3 * * *";};
  };
}