diff --git a/templates/jmap.yaml b/templates/jmap.yaml
index c19fcea..8b2bab1 100644
--- a/templates/jmap.yaml
+++ b/templates/jmap.yaml
@@ -1,7 +1,7 @@
 name: jmap
 version: "1.0.0"
 description: JMAP email (Stalwart) — search/read/organize + drafts; send and delete gated off by env
-dockerImage: "mysources.co.uk/michal/jmap-mcp:0.6.5-drafts2"
+dockerImage: "mysources.co.uk/michal/jmap-mcp:0.6.5-drafts3"
 transport: STDIO
 repositoryUrl: https://mysources.co.uk/michal/jmap-mcp
 # No command: the image's entrypoint IS the MCP server (deno run), mcpd
@@ -39,3 +39,7 @@ env:
     description: "true = do not register delete_emails (move to Trash still works)"
     required: false
     defaultValue: "true"
+  - name: JMAP_REBASE_SESSION_URLS
+    description: "true = rewrite the session's apiUrl/downloadUrl/uploadUrl/eventSourceUrl onto the session URL's origin. Required over a ClusterIP: Stalwart advertises its publicUrl and the hairpinned call 403s at Envoy."
+    required: false
+    defaultValue: "true"