diff --git a/scripts/functions.sh b/scripts/functions.sh
index 378aa7e..7290f22 100644
--- a/scripts/functions.sh
+++ b/scripts/functions.sh
@@ -25,10 +25,10 @@ sudo yunohost app addaccess $app -u $admin
 # Allow only allowed users to access admin panel
 if [ "$is_cesium_public" = "Yes" ]; then
   # Cesium is public, do not protect it
-  ynh_app_setting_set "$app" protected_uris "/webui","/webmin"
+  ynh_app_setting_set "$app" protected_uris "/webui","/webmin","/modules"
 else
   # Cesium is not public, protect it
-  ynh_app_setting_set "$app" protected_uris "/webui","/webmin","/cesium"
+  ynh_app_setting_set "$app" protected_uris "/webui","/webmin","/modules","/cesium"
 fi
 
 # Duniter is public app, with only some parts restricted in nginx.conf