[global_defaults]
external_network_interfaces = "eni"

[backend_defaults]
test = "custom backend defaults"

[container_to_container]
default_policy = "drop"

[[container_to_container.rules]]
network = "network"
src_container = "src_container"
dst_container = "dst_container"
matches = "FILTER"
verdict = "accept"

[container_to_wider_world]
default_policy = "accept"

[[container_to_wider_world.rules]]
network = "network"
src_container = "src_container"
matches = "FILTER"
verdict = "accept"
external_network_interface = "eni"

[container_to_host]
default_policy = "accept"

[[container_to_host.rules]]
network = "network"
src_container = "src_container"
matches = "FILTER"
verdict = "accept"

[wider_world_to_container]

[[wider_world_to_container.rules]]
network = "network"
dst_container = "dst_container"
expose_port = 80
external_network_interface = "eni"
expose_via_ipv6 = false

[[wider_world_to_container.rules]]
network = "network"
dst_container = "dst_container"
expose_port = 22
external_network_interface = "eni"
source_cidr_v4 = ["192.0.2.1/32", "192.0.2.2/32"]
source_cidr_v6 = ["2001:db8::1/128", "2001:db8::2/128"]

[container_dnat]

[[container_dnat.rules]]
src_network = "src_network"
src_container = "src_container"
dst_network = "dst_network"
dst_container = "dst_container"
expose_port = 80