@mpiton thanks for sharing docs, the crucial part was openssl rand -hex 32
my password was too simple and that's why i got :"Query authentication does not match server setting" error
after setting 32 characters password i got my metrics, in both http://localhost:9004/metrics and http://<xo-ip>/openmetrics/metrics