Dashboard 2 behind authenticating reverse proxy

The only thing I can see is we set is this

"Content-Security-Policy", "frame-ancestors 'self' ${settings.forgeURL}"

But that's for the embedded editor iirc