HAProxy: Source IP ACL?

[oguruma]

I have a webserver that hosts my SuiteCRM installs.

I want to restrict access to those to a few hosts (my house, and my office).

I know that I should use an Alias, but what hosts would be a part of that Alias? Would it be my WAN IP? If so, how do deal with the fact that its dynamic? Would I have to go and update that alias everytime my ISP changed my IP address?

What do the HAProxy ACLs/rules look like? My best guess is ACL: url matches mycrm.com (named my_crm) and another ACL for: source IP matches Alias (allowed_inside)

Then, create an action: Use Backend - ACLs = my_crm allowed_inside.

I hope I am on the right track here?