I assume one could use named matchers, hope this helps: - https://caddyserver.com/docs/caddyfile/matchers#named-matchers community question/answer - https://caddy.community/t/only-allow-certain-ips-to-access-the-server-in-reverse-proxy/11213