I would consider this bad security practice. Why do you want to do it? You can instead make it only available 'internally' or via a VPN connection. If thse options are not available for you, maybe use IP restrictions to allow access only from known IP addresses?