Use http or https, depending on the value of `request.is_secure()`.
That is how links in most other emails are handled.