diff --git a/.dockerignore b/.dockerignore
index f1de6b4..a00c4a4 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -9,6 +9,7 @@ scripts
 .dockerignore
 .env
 .env.example
+.envrc
 .gitignore
 .gitlab-ci.yml
 .node-version
diff --git a/.env.example b/.env.example
index c31f731..e5e186f 100644
--- a/.env.example
+++ b/.env.example
@@ -8,3 +8,6 @@ DEVTOKEN=
 CLIENTID=
 DEVID=
 GUILDID=
+# watchtower
+WATCHTOWERTOKEN=
+WATCHTOWERURL=
diff --git a/package.json b/package.json
index 26dc9d8..65ba03b 100644
--- a/package.json
+++ b/package.json
@@ -29,6 +29,7 @@
         "db:studio": "drizzle-kit studio",
         "db:start": "docker compose -f dev-db.yml up -d",
         "db:stop": "docker compose -f dev-db.yml down",
+        "bot:update": "tsx scripts/update-bot.ts",
         "push:prod": "tsx scripts/deploy-commands.ts",
         "push:dev": "tsx scripts/dev-deploy.ts",
         "delete:dev": "tsx scripts/delete-commands.ts"
diff --git a/scripts/update-bot.ts b/scripts/update-bot.ts
new file mode 100644
index 0000000..d5b51d0
--- /dev/null
+++ b/scripts/update-bot.ts
@@ -0,0 +1,18 @@
+import axios from "axios"
+
+const url = process.env.WATCHTOWERURL
+const token = process.env.WATCHTOWERTOKEN
+
+if (!url || !token) {
+    throw new Error("Missing WATCHTOWERURL or WATCHTOWERTOKEN")
+}
+
+await axios.get(url, {
+    headers: {
+        Authorization: `Bearer ${token}`
+    }
+}).then(() => {
+    console.log("Illegitimate bot updated")
+}).catch(err => {
+    console.error("Error updating bot", err)
+})