About access control for GitHub Pages sites
With access control for GitHub Pages, you can restrict access to your project site by publishing the site privately. A privately published site can only be accessed by people with read access to the repository the site is published from. You can use privately published sites to share your internal documentation or knowledge base with members of your enterprise.
Nota:
Para publicar un sitio de GitHub Pages de forma privada, la organización debe usar GitHub Enterprise Cloud. Para más información sobre cómo probar GitHub Enterprise Cloud de forma gratuita, consulta Configuración de una versión de prueba de GitHub Enterprise Cloud.
If your enterprise uses Enterprise Managed Users, GitHub Pages sites can only be published as private, and all GitHub Pages sites are only accessible to other enterprise members. For more information about Enterprise Managed Users, see límites de GitHub Pages.
If your organization uses GitHub Enterprise Cloud without Enterprise Managed Users, you can choose to publish your project sites privately or publicly to anyone on the internet.
Access control is available for project sites published from a private or internal repository that the organization owns. You cannot manage access control for an organization site. For more information about the types of GitHub Pages sites, see ¿Qué es GitHub Pages?.
About subdomains for privately published sites
Privately published sites are available at a different subdomain than publicly published sites. This ensures that your GitHub Pages site is secure from the moment it's published:
- Every subdomain of
*.pages.github.iois automatically secured with a TLS certificate, and HSTS is enforced so that browsers always serve the page over HTTPS. - Each privately published site uses a unique subdomain, so other repositories in your organization cannot publish content on the same origin as the site. This protects your site from cookie tossing. This is also why GitHub Pages sites are not hosted on the
github.comdomain.
You can see your site's unique subdomain in the "Pages" tab of your repository settings. If you're using a static site generator configured to build the site with the repository name as a path, you may need to update the settings for the static site generator when changing the site to private. For more information, see Administración de un dominio personalizado para el sitio de GitHub Pages or the documentation for your static site generator.
If you change a privately published site to public, the site's URL changes, unless the site uses a custom domain.
To use a shorter and more memorable domain for your privately published site, you can configure a custom domain. For more information, see Configuración de un dominio personalizado para el sitio de GitHub Pages.
Privately published sites after a plan change
If your organization stops using GitHub Enterprise Cloud, for example because the organization is removed from your enterprise, GitHub keeps existing privately published sites private. A plan change never changes the visibility of a site. However, if a privately published site is deleted, a new site created from the same repository can be public.
After the change:
- Existing privately published sites stay published privately, at their current URL.
- While a site exists, pushing to its publishing source or running a GitHub Pages workflow doesn't publish it publicly.
- Each site keeps its unique subdomain. The subdomain is only released if the site is deleted.
- Organization policies for publishing GitHub Pages sites stay in effect. See Administración de la publicación de sitios de GitHub Pages para su organización.
- New sites can't be published privately.
- You can't change the visibility of an existing privately published site to public.
To publish the content publicly, delete the site, then create it again. The new site is public because the organization can no longer publish privately. See Eliminación de un sitio de GitHub Pages and Creación de un sitio de páginas de GitHub.
You can only create the new site if your organization's plan supports GitHub Pages for the repository and your organization's policy allows publicly published sites. With GitHub Free for organizations, GitHub Pages is only available for public repositories.
After a site is deleted, a push to a branch named gh-pages in the repository can also create a new site from that branch automatically, as long as the same plan and policy conditions are met. That new site is public too.
Advertencia
Before you delete a privately published site, check whether the repository has a gh-pages branch that a person or an automated process might push to.