https://github.com/Will-Luck/Docker-Sentinel
Container update orchestrator with web dashboard, per-container policies, automatic rollback, lifecycle hooks, Prometheus metrics, and real-time notifications. Written in Go.
https://github.com/Will-Luck/Docker-Sentinel
containers devops docker docker-updates go homelab self-hosted watchtower-alternative
Last synced: 4 days ago
JSON representation
Container update orchestrator with web dashboard, per-container policies, automatic rollback, lifecycle hooks, Prometheus metrics, and real-time notifications. Written in Go.
- Host: GitHub
- URL: https://github.com/Will-Luck/Docker-Sentinel
- Owner: Will-Luck
- License: apache-2.0
- Created: 2026-02-10T15:04:51.000Z (about 2 months ago)
- Default Branch: main
- Last Pushed: 2026-03-09T15:41:00.000Z (30 days ago)
- Last Synced: 2026-03-09T16:13:30.244Z (30 days ago)
- Topics: containers, devops, docker, docker-updates, go, homelab, self-hosted, watchtower-alternative
- Language: Go
- Homepage: https://github.com/Will-Luck/Docker-Sentinel/wiki
- Size: 10.6 MB
- Stars: 3
- Watchers: 0
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
- fucking-awesome-docker - Docker-Sentinel - Automated container updates with per-container policies, rollback safety, and a real-time web dashboard. By [Will-Luck](https://github.com/Will-Luck). (Container Operations / Monitoring)
- awesome-docker - Docker-Sentinel - Automated container updates with per-container policies, rollback safety, and a real-time web dashboard. By [Will-Luck](https://github.com/Will-Luck). (Container Operations / Monitoring)
README
# Docker-Sentinel
[](https://github.com/Will-Luck/Docker-Sentinel/actions/workflows/ci.yml)
[](https://github.com/Will-Luck/Docker-Sentinel/releases/latest)
[](LICENSE)
[](go.mod)
[](https://goreportcard.com/report/github.com/Will-Luck/Docker-Sentinel)
[](https://github.com/Will-Luck/Docker-Sentinel/pkgs/container/docker-sentinel)
[](https://github.com/Will-Luck/Docker-Sentinel/releases)
[](https://github.com/Will-Luck/Docker-Sentinel/pkgs/container/docker-sentinel)
[](https://hub.docker.com/r/willluck/docker-sentinel)
A container update orchestrator with a web dashboard, written in Go. Replaces Watchtower with per-container update policies, pre-update snapshots, automatic rollback, and real-time notifications.
## Features
- **Per-container update policies** via Docker labels: `auto`, `manual`, or `pinned`
- **Pre-update snapshots** with automatic rollback if a container fails health checks after updating
- **Registry checks** with digest comparison for mutable tags and semver tag discovery with constraint pinning
- **Web dashboard** with SSE live updates, stack grouping, container controls, and mobile-responsive layout
- **Cluster mode** for monitoring and updating containers across multiple Docker hosts from a single dashboard
- **11 notification providers** including Gotify, Slack, Discord, Ntfy, Telegram, Pushover, Email, MQTT, Apprise, and webhooks
- **Authentication** with password, WebAuthn/passkeys, OIDC/SSO, and TOTP/2FA support
- **Maintenance windows** with time-range expressions and per-container cron schedules
- **Lifecycle hooks** with Docker-Guardian integration for coordinated maintenance labels
- **Prometheus metrics** endpoint with an official Grafana dashboard template
- **Update queue** for reviewing, approving, or rejecting pending updates with inline release notes
- **Configuration export/import** for full settings backup and restore via the web UI
## Quick Start
```bash
docker run -d \
--name docker-sentinel \
--restart unless-stopped \
-v /var/run/docker.sock:/var/run/docker.sock:ro \
-v sentinel-data:/data \
-p 8080:8080 \
-e SENTINEL_POLL_INTERVAL=6h \
willluck/docker-sentinel:latest
# Or from GitHub Container Registry:
# ghcr.io/will-luck/docker-sentinel:latest
```
Open `http://localhost:8080` in your browser. On first visit you will be guided through the setup wizard to create an admin account.
## Container Labels
Set per-container update behaviour with Docker labels like `sentinel.policy`, `sentinel.semver-constraint`, `sentinel.cron`, and others. See the [Docker Labels](https://github.com/Will-Luck/Docker-Sentinel/wiki/Docker-Labels) wiki page for the full reference.
Update Lifecycle
1. **Scan** containers and check policies
2. **Check** registries for new digests or semver tags
3. **Queue** updates (auto-policy proceeds immediately, manual-policy waits for approval)
4. **Snapshot** the full container config, then pull the new image before stopping anything
5. **Update** the container: stop, remove, recreate with identical config, start
6. **Validate** after the grace period, and rollback from the snapshot if the container is unhealthy
## Screenshots
| | |
|---|---|
|  |  |
|  |  |
|  |  |
|  |  |
## Documentation
Full documentation is available in the **[Wiki](https://github.com/Will-Luck/Docker-Sentinel/wiki)**, covering:
- [Installation Guide](https://github.com/Will-Luck/Docker-Sentinel/wiki/Installation)
- [Configuration Reference](https://github.com/Will-Luck/Docker-Sentinel/wiki/Configuration-Reference)
- [Docker Labels](https://github.com/Will-Luck/Docker-Sentinel/wiki/Docker-Labels)
- [Web UI Guide](https://github.com/Will-Luck/Docker-Sentinel/wiki/Web-UI-Guide)
- [REST API Reference](https://github.com/Will-Luck/Docker-Sentinel/wiki/REST-API-Reference)
- [Authentication & Security](https://github.com/Will-Luck/Docker-Sentinel/wiki/Authentication-and-Security)
- [Notifications](https://github.com/Will-Luck/Docker-Sentinel/wiki/Notifications)
- [Cluster Mode](https://github.com/Will-Luck/Docker-Sentinel/wiki/Cluster-Mode)
- [Lifecycle Hooks](https://github.com/Will-Luck/Docker-Sentinel/wiki/Lifecycle-Hooks)
- [Troubleshooting](https://github.com/Will-Luck/Docker-Sentinel/wiki/Troubleshooting)
## Building from Source
```bash
make build # Build binary to bin/sentinel
make frontend # Build JS/CSS bundles (esbuild)
make docker # Build Docker image
```
Requires Go 1.24+, Node.js, and Docker.
## Licence
Apache Licence 2.0. See [LICENSE](LICENSE) for details.