How to serve internal and external resources with the same cluster

Hi guys, I would like to kind of split my docker swarm-mode cluster into two cluster, having like internal resources and external resources running on the same cluster. So then, the intranet and other websites are only accessible from within the company.
How would I do that with Traefik?
Should I expose traefik to 2 diferent networks ?

Right now I have everything under APPS network.

Thanks a lot.