diff --git a/2026.camp.interhacker.space.yml b/2026.camp.interhacker.space.yml
index 851253e..ba8f918 100644
--- a/2026.camp.interhacker.space.yml
+++ b/2026.camp.interhacker.space.yml
@@ -8,6 +8,15 @@ services:
       caddy_0.reverse_proxy: "{{upstreams 80}}"
       caddy_1: camp.interhacker.space
       caddy_1.redir: https://2026.camp.interhacker.space
+      com.centurylinklabs.watchtower.enable: true
+
+  # we use watchtower to get around portainer business-version-only limitation
+  # on automatic pulls
+  watchtower:
+    image: containrrr/watchtower
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    command: --label-enable --interval 300
 
 networks:
   proxy: