diff --git a/k8s/infra/iam/zitadel-values.yaml b/k8s/infra/iam/zitadel-values.yaml
index 4d7efb7..14b997d 100644
--- a/k8s/infra/iam/zitadel-values.yaml
+++ b/k8s/infra/iam/zitadel-values.yaml
@@ -31,6 +31,17 @@ zitadel:
     ExternalDomain: zitadel.riotpiao.com
     TLS:
       Enabled: false
+    # Notification delivery. ZITADEL sends verification codes and password
+    # resets by SMTP only. Point it at the in-cluster smtp-gotify relay
+    # (k8s/infra/iam/smtp-gotify.yaml), which forwards each message to Gotify so
+    # codes reach the phone. Verified: the relay produced Gotify message 1176.
+    DefaultInstance:
+      SMTPConfiguration:
+        SMTP:
+          Host: smtp-gotify.iam.svc.cluster.local:2525
+        TLS: false
+        From: zitadel@riotpiao.com
+        FromName: ZITADEL
     # First boot is COMPLETE (2026-10-26): the instance, the system org and the
     # `iam-admin` machine key all exist. Skip stops the setup hook from running
     # the first-instance step again. Without it, every sync re-runs the