Traefik v2.8 ip whitelist using client real-ip behind cloudflare proxy

Traefik Traefik v2 (latest)
1

I am using cloudflare as reverse proxy to app endpoint but i will like to whitelist certain allowed cidr blocks with the ipwhitelist middleware

but issue is i do not want to whitelist cloudflare ip because that will be defeating the purpose

how can i achieve this? using docker provider with labels

labels:
    - "traefik.enable=true"
    - "traefik.http.services.app.loadbalancer.server.port=8080"
    - "traefik.http.routers.app.entrypoints=http"
    - "traefik.http.routers.app.rule=Host(`app.example.com`)"
    - "traefik.http.routers.app.middlewares=app-ipwhitelist"
    - "traefik.http.middlewares.app-ipwhitelist.ipwhitelist.sourcerange=127.0.0.1/32, 188.101.1.0/24"

what do i need to do to set this up?

thanks a lot