My client wants to automate the deployment of my website from staging to production without manually enabling/disabling password protection or removing the no-index meta tag. Is it possible to achieve this in Webflow using custom code, or do I need to manually adjust these settings each time I publish to production?
You do not need the no-index meta, if you have staging set so that it is not indexed, robots.txt blocks bots.
Staging-only password protection is an Enterprise feature, so it’s available if your client wants to go Enterprise.
Otherwise I’m uncertain what the goal is, there’s generally nothing to “protect” on staging distinct from the production site.
If it’s just surface-level security, it would be easy to create something using custom CSS + JS that confronts the user with a password, and shows nothing if JS is disabled. Unfortunately no way to reverse-proxy webflow.io
URLs directly so that’s not an option.