How to always protect PMM website with the user login

Currently, I can see all my monitoring staff by accessing xxx.xxx.xxx.xxx:80/graph.
I can also login with the admin user but with or without login, I have access to the monitoring system. How to set pmm-server in order to always ask for login?

Milos,
If you did a Docker install for PMM server, you have to specify the password when creating and running the pmm server container. So you’ll be adding SERVER_PASSWORD env variable. I also used the SERVER_USER, but this one is optional. This covers it : https://www.percona.com/doc/percona-monitoring-and-management/security.html#enabling-password-protection.