diff --git a/projects/diun/.env.mako b/projects/diun/.env.mako
new file mode 100644
index 0000000..c3c673f
--- /dev/null
+++ b/projects/diun/.env.mako
@@ -0,0 +1,6 @@
+TZ=${env['timezone']}
+DIUN_WATCH_SCHEDULE='0 */6 * * *'
+DIUN_PROVIDERS_DOCKER=true
+DIUN_PROVIDERS_DOCKER_WATCHBYDEFAULT=true
+DIUN_PROVIDERS_FILE_FILENAME=/etc/diun/images.yml
+DIUN_NOTIF_DISCORD_WEBHOOKURL='${secrets["diun_webhookurl"]}'
diff --git a/projects/diun/compose.yaml.mako b/projects/diun/compose.yaml.mako
new file mode 100644
index 0000000..f2ea99f
--- /dev/null
+++ b/projects/diun/compose.yaml.mako
@@ -0,0 +1,15 @@
+services:  
+  diun:
+    container_name: diun
+    image: docker.io/crazymax/diun:4
+    network_mode: pasta
+    restart: always
+    command: serve
+    env_file: .env.rendered
+    volumes:
+      - ${env['socket']}:/var/run/docker.sock:ro
+      - ./images.yml:/etc/diun/images.yml:ro
+      - data:/data
+
+volumes:
+  data:
diff --git a/projects/diun/images.yml b/projects/diun/images.yml
new file mode 100644
index 0000000..3c070a5
--- /dev/null
+++ b/projects/diun/images.yml
@@ -0,0 +1,27 @@
+- name: quay.io/hedgedoc/hedgedoc
+  watch_repo: true
+  sort_tags: semver
+  max_tags: 1
+  include_tags:
+    - ^[\d\.]+-alpine$
+
+- name: quay.io/keycloak/keycloak
+  watch_repo: true
+  sort_tags: semver
+  max_tags: 1
+  include_tags:
+    - ^\d+\.\d+$
+
+- name: docker.io/stalwartlabs/mail-server
+  watch_repo: true
+  sort_tags: semver
+  max_tags: 1
+  include_tags:
+    - ^v
+
+- name: docker.io/aaronleopold/stump
+  watch_repo: true
+  sort_tags: semver
+  max_tags: 1
+  include_tags:
+    - ^\d