infrastructure/ansible/roles/docker/tasks/watchtower.yml

- name: Create watchtower directory
  file:
    path: /opt/watchtower
    state: directory
    owner: "{{ docker_user.name }}"
    mode: "{{ docker_compose_directory_mask }}"
  become: true

- name: Install watchtower compose file
  template:
    src: files/watchtower/docker-compose.yml
    dest: /opt/watchtower/docker-compose.yml
    mode: "{{ docker_compose_file_mask }}"
    owner: "{{ docker_user.name }}"
    validate: /usr/bin/docker-compose -f %s config
  register: compose_file
  become: true

- name: Cycle watchtower container
  docker_compose:
    project_src: /opt/watchtower
    pull: true
    remove_orphans: true
    remove_volumes: true
    state: "{{ item }}"
  when: compose_file.changed
  loop:
    - absent
    - present