If you have watchtower enable most PDSs auto update at midnight, will want to run docker compose pull or pull the :latest docker image on how you have it setup
Also if you are just using PDS Gatekeeper only for 2FA on a small PDS can just remove it and the endpoint proxies and return on 2FA in app