Yeah I normally use oci-containers but for this workload the only supported method of installation is a `docker-compose.yaml` file.

I've just written a systemd service that does `docker compose pull` and `docker compose up -d --remove-orphans` with the compose file being written to the Nix store, works well.