diff --git a/.gitea/workflows/ci-deploy.yml b/.gitea/workflows/ci-deploy.yml
index 7e23bb16..5b3d34c0 100644
--- a/.gitea/workflows/ci-deploy.yml
+++ b/.gitea/workflows/ci-deploy.yml
@@ -71,8 +71,11 @@ jobs:
       - name: Build SSR image
         id: docker_build
         env:
-          MAP_TILE_URL: ${{ secrets.MAP_TILE_URL || '/map/api/tile/{z}/{x}/{y}.jpeg' }}
-          API_BASE_URL: ${{ secrets.API_BASE_URL || '/api' }}
+          # Both must be full URLs — Zod's .url() validator in src/env/index.ts
+          # rejects relative paths at runtime in the browser. Same-origin works
+          # because the public host is also where nginx is.
+          MAP_TILE_URL: ${{ secrets.MAP_TILE_URL || 'https://ui-dashboard.gnerim.ru/map/api/tile/{z}/{x}/{y}.jpeg' }}
+          API_BASE_URL: ${{ secrets.API_BASE_URL || 'https://ui-dashboard.gnerim.ru/api' }}
         run: |
           docker build -f Dockerfile.react \
             --build-arg "MAP_TILE_URL=${MAP_TILE_URL}" \