Use http or https, depending on the value of `request.is_secure()`. That is how links in most other emails are handled.