In the meantime, since I have a nginx proxy server running for the outside world, I configured a basic authentication adding this to my server’s location:
auth_basic “Restricted”;
auth_basic_user_file /path/to/file/.htpasswd;
This is a temporary fix while I investigate for a proper solution.