init: clean history with no PII

Toto repo ma novou cistou historii (1 commit). Predchozi historie
byla smazana, protoze obsahovala osobni udaje (IP, emaily, hesla,
klice, tokeny, Volume cesty). Soubory v aktualnim commit uz tyto
udaje neobsahuji (nahradeno placeholdery <server-ip>, CHANGE_ME,
admin@example.com atd.).

Pokud chces zpet kompletni seznam starych commitu, mas je ve svem
lokalnim working tree - git log --all ukaze prazdno (protoze jsme
smazali .git/ a zacali znovu).

watchtower/.env.example

@@ -0,0 +1,22 @@
+# Watchtower – promenne
+TZ=Europe/Prague
+
+# Mod: true = jen upozorni, false = auto-aktualizuje
+WATCHTOWER_MONITOR_ONLY=true
+
+# Mazat stare image po update
+WATCHTOWER_CLEANUP=true
+
+# Cron schedule (default: kazdou nedeli ve 4:00)
+WATCHTOWER_SCHEDULE=0 0 4 ? * SUN
+
+# Email notifikace
+WATCHTOWER_NOTIFICATIONS=email
+WATCHTOWER_NOTIFICATION_EMAIL_FROM=watchtower@example.com
+WATCHTOWER_NOTIFICATION_EMAIL_TO=admin@example.com
+WATCHTOWER_NOTIFICATION_EMAIL_SERVER=smtp.example.com
+WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=587
+WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=watchtower@example.com
+WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=change-me
+
+# Poznamka: V praxi nastav SMTP podle sveho providera

watchtower/README.md

@@ -0,0 +1,15 @@
+# Watchtower
+
+Docker Compose pro Watchtower (auto-update Docker kontejnerů).
+Toto je **přesná kopie** `docker-compose.yml` z běžícího serveru `/home/mates/docker/watchtower/`.
+
+## Spuštění
+
+```bash
+cp /home/mates/docker/watchtower/docker-compose.yml ./
+docker compose up -d
+```
+
+## Související
+
+Detailní návod: [Watchtower](@note-d31fdd6b) v Jotty (kategorie: Monitoring a nástroje).

watchtower/docker-compose.yml

@@ -0,0 +1,24 @@
+services:
+  watchtower:
+    image: containrrr/watchtower:latest
+    container_name: watchtower
+    labels:
+      - "com.centurylinklabs.watchtower.enable=true"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    environment:
+      - TZ=Europe/Prague
+      - DOCKER_API_VERSION=1.44         # <<< DŮLEŽITÉ – přidáno
+      - WATCHTOWER_MONITOR_ONLY=false
+      - WATCHTOWER_SCHEDULE=0 0 8 * * *
+      - WATCHTOWER_CLEANUP=true
+      - WATCHTOWER_NOTIFICATIONS=email
+      - WATCHTOWER_NOTIFICATION_EMAIL_FROM=admin@example.com
+      - WATCHTOWER_NOTIFICATION_EMAIL_TO=admin@example.com
+      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER=smtp.example.com
+      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=CHANGE_ME
+      - WATCHTOWER_NOTIFICATION_EMAIL_SUBJECTTAG=Server Container Updates
+      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=admin@example.com
+      - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=465
+      - WATCHTOWER_LABEL_ENABLE=true
+    restart: unless-stopped