Manual:$wgWhitelistRead

Details
If a group of users is blocked from viewing the wiki by using the $wgGroupPermissions setting... ...you may still want them to be able to view certain key pages, in particular the login page! This setting holds an array of page names that all users are allowed to view, regardless of their group permissions.

A recommended minimum is as follows: This allows everyone to view the home page and the login screen, plus it includes the JavaScript/CSS files for the default skin in order to avoid (probably silent) browser errors.

You may also want to include other pages such as help/about/contact pages.

Anonymous users can only view: Special:Userlogin
Anonymous users cannot read or edit any other page, but can still create accounts: To additionally block account creation by anonymous users, add the following line: With anonymous account creation disabled sysops will need to create accounts for new users manually.