{
  "description": "Incoming HTTP/HTTPS (tcp/80+443)",

  "service": {
    "whoami": { "proto": "tcp", "port": 8000 }
  },

  "filter": [
    {
      "in": "internet",
      "out": "container",
      "service": "whoami",
      "match": "-m conntrack --ctorigdstport 80",
      "action": "accept"
    }
  ]
}