docker run -d --name samwaf \
  -p 8080:8080 \
  -e UPSTREAM=http://backend:80 \
  docker.io/samwaf/samwaf:latest

docker run -d --name samwaf \
  --restart unless-stopped \
  -p 80:8080 \
  -e UPSTREAM=http://app.internal:8080 \
  -v /data/samwaf:/etc/samwaf \
  docker.io/samwaf/samwaf:1.0.0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: samwaf
spec:
  replicas: 2
  selector:
    matchLabels:
      app: samwaf
  template:
    metadata:
      labels:
        app: samwaf
    spec:
      containers:
        - name: waf
          image: docker.io/samwaf/samwaf:1.0.0
          ports:
            - containerPort: 8080
          env:
            - name: UPSTREAM
              value: http://backend:8080
          volumeMounts:
            - name: config
              mountPath: /etc/samwaf
      volumes:
        - name: config
          configMap:
            name: samwaf-rules
---
apiVersion: v1
kind: Service
metadata:
  name: samwaf
spec:
  selector:
    app: samwaf
  ports:
    - port: 80
      targetPort: 8080