diff --git a/README.md b/README.md
index b7775c2..48f9930 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,7 @@ The following applications are available:
 [PIA](https://www.privateinternetaccess.com/) with [Wireguard](https://www.wireguard.com/) with port forwarding.
 - [Heimdall](https://heimdall.site/): Application dashboard
 - [Traefik](https://traefik.io/): Reverse proxy
+- [Watchtower](https://containrrr.dev/watchtower/): Automated Docker images update
 
 ## Installation
 
@@ -38,6 +39,7 @@ See [configuration](./CONFIGURATION.md).
 | qBittorrent       | [linuxserver/qbittorrent:14.3.9](https://hub.docker.com/r/linuxserver/qbittorrent) | /qbittorrent | Uses VPN network<br>Frozen to v4.3.9 due to Libtorrent 2.x issues |
 | Heimdall          | [linuxserver/heimdall](https://hub.docker.com/r/linuxserver/heimdall)              | /            |                                                                   |
 | Traefik           | [traefik](https://hub.docker.com/_/traefik)                                        |              |                                                                   |
+| Watchtower        | [watchtower](https://hub.docker.com/r/containrrr/watchtower)                       |              |                                                                   |
 
 
 ## Improvement
diff --git a/docker-compose.yml b/docker-compose.yml
index 60e79ff..eb3a2cb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -128,7 +128,12 @@ services:
       - traefik.http.routers.heimdall.rule=PathPrefix(`/`)
       - traefik.http.services.heimdall.loadbalancer.server.port=80
       - traefik.http.routers.heimdall.tls=true
-      
+  watchtower:
+    image: containrrr/watchtower
+    container_name: watchtower
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+
 networks:
   default:
     name: docker-compose-nas