firewalld block all but specified ip addresses from http/s

In a CentOS 7 web server, how do I configure firewalld to block all but a specific list of ip addresses from making successful http or https requests?

I know that I can use httpd.conf to restrict by ip, but how can I get firewalld to restrict by ip? What file? Do I use firewall-cmd? What syntax?