Watchtower recreated containers outside their podman-compose pod, which took gitea down for three days on 2026-08-14 while reporting failed=0. It is retired. Deploys now SSH to the VPS and restart the systemd unit, so podman-compose rebuilds the project properly. The key is pinned to a forced command that only accepts a service name. Still non-fatal: the image is already pushed and podman-update.timer sweeps at midnight, so a trigger failure delays the deploy rather than failing the build.