Auto-Updating Self-Hosted Crypto Wallets: Watchtower + GHCR Production Setup

Description and use

Deploying a self-hosted WAIaaS wallet daemon with automatic updates via Watchtower and GHCR, keeping keys local and simplifying maintenance.

Problem

Maintaining up-to-date self-hosted crypto wallet infrastructure is tedious due to manual image updates and security patches.

Outcome

The setup provides a production-ready, self-hosted crypto wallet daemon that stays current without manual intervention, keeps secrets secure, and ensures uptime via healthchecks.

Workflow

• Clone WAIaaS repo and inspect docker-compose.yml
• Run first boot with auto-provision to generate master password
• Use Docker Secrets overlay to store master password securely
• Add Watchtower service to compose file for automatic updates
• Deploy stack with docker compose up -d
• Verify daemon healthcheck and auto-update functionality

Evidence

This guide walks through a production-ready WAIaaS deployment with automatic Docker image updates via Watchtower and GitHub Container Registry (GHCR)

Source

Automatic image updates pulling from ghcr.io/waiaas/waiaas:latest

Source

Production secrets managed via Docker Secrets (no passwords in environment variables)

Source