How to use whitelisting per container

Question

I'm using traefik in docker-mode. It's retrieving most config (acme.domains, enabled, frontend-rules,...) from the docker containers.

Currently all containers are reachable from the WWW (0.0.0.0). I'm wondering how to restrict the access to a single container to some dedicated ip-addresses.

The docker labels of the private web-service would look like:

labels:
  - "traefik.enable=true"
  - "traefik.backend='private container'"
  - "traefik.whitelistSourceRange=192.168.1.0/24"

The whitelisted ip is in this case of course just an example. This could be any private ip-subnet.

Maybe it's possible to set a frontend-rule which bases on "client.ip"?

Thanks for your help!