I don't know if I'm doing something wrong but am I right that a droplet firewall doesn't have any ability to create source exceptions to lock an open port down

I don't know if I'm doing something wrong but am I right that a droplet firewall doesn't have any ability to create source exceptions to lock an open port down to a singular IP. Seems like a basic enough feature but I can't seem to find it.