I just have Watchtower stopped and configured in "one-shot" mode sitting on all my Docker hosts. And when I'm in the mood of updating and fighting with possible issues, I just run it. Works much better for me than some update notification popping up in the worst possible moment, me dismissing it and then forgetting about it. 🤣