diff --git a/README.md b/README.md
index c76ef387..4567c8a0 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,8 @@
 - Set `INDIEKIT_ADMIN_URL` to the public admin base URL, including trailing slash (example: `https://blog.giersig.eu/admin/`).
 - Login uses `PASSWORD_SECRET` (bcrypt hash), not `INDIEKIT_PASSWORD`.
 - If no `PASSWORD_SECRET` exists yet, open `/admin/auth/new-password` once to generate it.
+- Post management UI should use `/posts` (`@indiekit/endpoint-posts.mountPath`).
+- Do not set post-management `mountPath` to frontend routes like `/blog`, otherwise backend publishing can be shadowed by the public site.
 
 ## MongoDB
 
diff --git a/indiekit.config.mjs b/indiekit.config.mjs
index 55505bd1..532f6848 100644
--- a/indiekit.config.mjs
+++ b/indiekit.config.mjs
@@ -105,7 +105,7 @@ export default {
     token: githubContentToken,
   },
   "@indiekit/endpoint-posts": {
-    mountPath: "/blog",
+    mountPath: "/posts",
   },
   "@rmdes/indiekit-endpoint-github": {
     token: githubActivityToken,