Mirotalk might be an option:

https://github.com/miroslavpejic85/mirotalk

If you have multiple networks on a service you need to specifiy on which one Traefik can reach your service. For example for metabase you need to add:
traefik.docker.network=proxy
Otherwise it will be random and you'll end up with erratic gateway timeouts.

Zerotier has WebUI where you can allow/disallow clients