What's the best way to require basic auth for all containers except a select few?
Similar to this question that's still waiting for an answer.
You cannot do that, you need to add basic auth on each frontend.
https://docs.traefik.io/configuration/backends/docker/#on-containers