diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 5b719d36..a8675570 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -30,3 +30,10 @@ jobs:
           file: "./apps/admin/Dockerfile"
           push: true
           tags: ${{ secrets.DOCKERHUB_USERNAME }}/enpitsu:${{ github.ref_name }}
+
+      - name: Deploy
+        uses: darnfish/watchtower-update@v3.2
+        with:
+          url: "${{ secrets.WATCHTOWER_URL }}"
+          api_token: "${{ secrets.WATCHTOWER_API_TOKEN }}"
+          images: ${{ secrets.DOCKERHUB_USERNAME }}/enpitsu:${{ github.ref_name }}
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 9abaa388..453c6b67 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -39,6 +39,10 @@ services:
       AUTH_GOOGLE_SECRET: ${ENPITSU_AUTH_GOOGLE_SECRET}
       CORS_ORIGIN: ${ENPITSU_CORS_ORIGIN}
       SPECIAL_ADMIN_USERS: ${ENPITSU_SPECIAL_ADMIN_USERS}
+#     expose:
+#       - 3000
+    labels:
+      - "com.centurylinklabs.watchtower.enable=true"
     ports:
       - 3000:3000
 
@@ -52,6 +56,18 @@ services:
   #   expose:
   #     - 8000
 
+  watchtower:
+    image: containrrr/watchtower
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    command: --debug --http-api-update
+    environment:
+      - WATCHTOWER_HTTP_API_TOKEN=${WATCHTOWER_HTTP_API_TOKEN}
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    expose:
+      - 8080
+
 volumes:
   db:
   cache: