diff --git a/Makefile b/Makefile
index be8cae8..0fb9b47 100644
--- a/Makefile
+++ b/Makefile
@@ -41,7 +41,7 @@ dev dev-utils dev-local dev-lan rebuild-frontend: export DOMAIN ?= localhost
 
 # A key the template lists and the compose files default, missing from .env,
 # falls back without a word. For TZ that means every cron runs on UTC. Only a
-# warning, so a start never fails over it.
+# warning, so a start never fails over it. `update` runs it after its pull.
 dev dev-local dev-lan up: env-check
 env-check:
 	@missing=$$(grep -ohE '\$$\{[A-Z_]+:?-' docker/compose*.yml | sed 's/^..//; s/:\{0,1\}-$$//' | sort -u \
@@ -134,6 +134,7 @@ umami:  ## Provision + start the optional Umami site-analytics service (idempote
 
 update:  ## Pull, rebuild using the layer cache, and recreate changed containers
 	git pull
+	@$(MAKE) --no-print-directory env-check
 	$(COMPOSE_PROD_RUN) build
 	$(COMPOSE_PROD_RUN) up -d --remove-orphans
 	docker image prune -f
diff --git a/docs/reference/configuration.md b/docs/reference/configuration.md
index 47957e8..149e8c9 100644
--- a/docs/reference/configuration.md
+++ b/docs/reference/configuration.md
@@ -121,8 +121,8 @@ stack does. Production disables it entirely. Staging and production also
 refuse `changethis` values for the session key or administrator password.
 
 Set `TZ` in `.env` for schedules that should follow local time, such as
-`Europe/Berlin`. `make up` and `make dev` warn when `.env` lacks it, or any other
-key `.env.example` lists that Compose would otherwise default.
+`Europe/Berlin`. `make up`, `make update` and `make dev` warn when `.env` lacks
+it, or any other key `.env.example` lists that Compose would otherwise default.
 
 ## Engine and resources