The current workflow is stop/down -> pull -> up.
I haven't figured out the optimal way, but it seems like a single docker compose up -d --pull always would be sufficient to rebuild and restart. Unfortunately, the container gets restarted even if there were no changes to images or configuration.