Prefer opening /dashboard/ on the backend host (same origin).
If this HTML is on Cloudflare Pages, set <meta name="ghost-api-base" content="https://your-backendβ¦">
and on the backend GHOST_DASHBOARD_COOKIE_SAMESITE=none (HTTPS required).