[gentoo-user] *Simple* guide to implementing digest-auth combined with IP based whitelist?

[Tanstaafl]

I've never had a need to protect a site like this so am totally new to it...

I've been reading, and everything says that digest-auth is preferred to 
basic-http-auth (yes, I know that this isn't a very sophisticated level 
of protection, but it is all we need for this site), but is there also a 
way to whitelist certain static IP address so people on those don't get 
prompted for a username/password?

Thanks for any pointers to tfm...