We do not offer inbound IP whitelisting at the network level. To restrict access by IP, you would need to handle it at the application level or use a service like Cloudflare in front of your Railway service, which supports IP access rules and WAF functionality.