diff --git a/.env.example b/.env.example
index a1d51b7..d62acca 100644
--- a/.env.example
+++ b/.env.example
@@ -39,6 +39,12 @@ CORS_ORIGINS=https://your-domain.com
 # ── Frontend ─────────────────────────────────────────────────────────────────
 FRONTEND_PORT=80
 
+# ── Emails ────────────────────────────────────────────────────────────────────
+# Base URL used to build links in outbound emails (set-password, etc).
+# Must match your real public frontend URL — the app falls back to
+# http://localhost:5173 (dev default) if this is not set.
+PLATFORM_URL=https://your-domain.com
+
 # ── Environment flag ─────────────────────────────────────────────────────────
 # Set to "production" for production deployments (enforces SECRET_KEY, etc.)
 AEGIS_ENV=production
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 2a4627d..e90e0c0 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -90,6 +90,9 @@ services:
       REDIS_TOKEN_BLACKLIST_DB: ${REDIS_TOKEN_BLACKLIST_DB:-1}
       REDIS_CACHE_DB: ${REDIS_CACHE_DB:-2}
       CORS_ORIGINS: ${CORS_ORIGINS:-}
+      # Base URL used to build links in outbound emails (set-password, etc).
+      # Must be the real public frontend URL, not the dev default.
+      PLATFORM_URL: ${PLATFORM_URL:-http://aegis.undiamagico.es}
       AEGIS_ENV: ${AEGIS_ENV:-production}
       SECURE_COOKIES: ${SECURE_COOKIES:-false}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}