diff --git a/COOLIFY-TEMPLATE.md b/COOLIFY-TEMPLATE.md
index bbdeec2..3aa3280 100644
--- a/COOLIFY-TEMPLATE.md
+++ b/COOLIFY-TEMPLATE.md
@@ -235,3 +235,21 @@ ls /opt/<stack>/     # ej: /opt/adguard/, /opt/authentik/, /opt/gitea/, etc.
 
 Si existe el directorio con datos → usar bind mount a esa ruta.
 Si no existe → crear el directorio antes de desplegar, o usar named volume.
+
+### Gotcha 6 — Variables en labels de Traefik NO se expanden en Coolify
+
+Coolify expande `${VAR}` en la sección `environment:` pero NO en `labels:`.
+
+```yaml
+# ❌ MAL: quedará como literal ${OO_DOMAIN} en el label del contenedor
+labels:
+  - traefik.http.middlewares.foo.headers.customRequestHeaders.X-Forwarded-Host=${OO_DOMAIN}
+
+# ✅ BIEN: hardcodear el valor real
+labels:
+  - traefik.http.middlewares.foo.headers.customRequestHeaders.X-Forwarded-Host=onlyoffice.sherlockhomeless.net
+```
+
+Esto afecta especialmente a headers `X-Forwarded-Host` de OnlyOffice — si queda
+como literal, el JS de OnlyOffice intenta cargar assets de `https://${oo_domain}/...`
+y el editor de documentos falla completamente.
diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
index 5ca8725..12740c3 100644
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -154,7 +154,7 @@ services:
       - traefik.http.middlewares.oo-secure-headers.headers.contentTypeNosniff=true
 
       - traefik.http.middlewares.oo-forwarded.headers.customRequestHeaders.X-Forwarded-Proto=https
-      - traefik.http.middlewares.oo-forwarded.headers.customRequestHeaders.X-Forwarded-Host=${OO_DOMAIN}
+      - traefik.http.middlewares.oo-forwarded.headers.customRequestHeaders.X-Forwarded-Host=onlyoffice.sherlockhomeless.net
       - traefik.http.middlewares.oo-forwarded.headers.customRequestHeaders.X-Forwarded-Port=443
       - traefik.http.middlewares.oo-forwarded.headers.customRequestHeaders.X-Forwarded-Ssl=on
 
diff --git a/nextcloud/stack.env b/nextcloud/stack.env
index 821e0e2..53b40b0 100644
--- a/nextcloud/stack.env
+++ b/nextcloud/stack.env
@@ -1,6 +1,6 @@
 TZ=Europe/Madrid
-NC_DOMAIN=nextcloud.example.com
-OO_DOMAIN=onlyoffice.example.com
+NC_DOMAIN=nextcloud.sherlockhomeless.net
+OO_DOMAIN=onlyoffice.sherlockhomeless.net
 TRAEFIK_CERTRESOLVER=letsencrypt
 TRUSTED_PROXIES=10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
 MYSQL_ROOT_PASSWORD=change_me_mysql_root_password_long_and_secure
@@ -17,5 +17,5 @@ SMTP_SECURE=tls
 SMTP_AUTHTYPE=
 SMTP_NAME=
 SMTP_PASSWORD=
-MAIL_FROM_ADDRESS=nextcloud
-MAIL_DOMAIN=example.com
+MAIL_FROM_ADDRESS=nextcloud@thehomelesssherlock.com
+MAIL_DOMAIN=thehomelesssherlock.com