Tunnel - IP restrictions with non-fixed IP

New to setting up tunnels. My first one seems fine.

However, I want to limit access to whitelisted IPs. Unfortunately, my WAN IP is not fixed. However, I am running oznu/Cloudflare-ddns docker container (which updates my WAN IP). Is there a way to use this to whitelist a changing IP for a tunnel application? Or another solution such Cloudflare/cloudflared docker container?

I hope that makes sense. Thanks!