&def_service(parkendd, parkendd, tcp, 22);
&forward_to_service(parkendd, tcp, 2222);
&allow_service_for(postgres, parkendd);

&def_service(parkenddweb, parkendd, tcp, 1338);
&def_service(parkenddweb2, parkendd, tcp, 1339);
&forward_to_service(parkenddweb, tcp, 1338);
&forward_to_service(parkenddweb2, tcp, 1339);

# park-api.higgsboson.tk points to parkendd.higgsboson.tk
# therefore DNAT port http/https back to web container
@def $parkendd_ip6 = @resolve(parkendd, AAAA);
@def $web_ip6 = @resolve(web, AAAA);
domain ip6 table nat chain PREROUTING daddr $parkendd_ip6 proto tcp dport (http https) DNAT to $web_ip6;