{
  "description": "Incoming HTTP/HTTPS (tcp/80+443)",

  "filter": [
    {
      "in": "internet",
      "out": "container",
      "service": "http",
      "match": "-m conntrack --ctorigdstport 80",
      "action": "accept"
    },
    {
      "in": "internet",
      "out": "container",
      "service": "https",
      "match": "-m conntrack --ctorigdstport 443",
      "action": "accept"
    }
  ]
}