I’m trying to set up Ghost as a headless CMS for my custom web front end. I toggled it to “Make this site private” in my General settings (screenshot below). However, when I access my blog URL directly, it still appears to be publicly available at https://blog.graymatter.health. No password protection or anything.
What have I missed here?
Private mode looks to be working from my end:
Oh nice! Thank you for checking. For some reason it would load the full site for me even when I signed out.
Signing out — from the admin or from a member account — has nothing to do with private mode functionality. You’d have to clear your cache or open the site in a private window / different browser to get the password prompt for private mode again.