Ghost, Digital Ocean, Cloudflare, 403 on ghost/api/admin/users/me/?include=roles

The 403 is expected, nothing to worry about. When you access the admin app it makes a request to the API to get the logged-in staff user details, if you’re not logged in the API responds with a 403 and the admin app knows to show the login screen.