diff --git a/src/app/api/auth/callback/route.ts b/src/app/api/auth/callback/route.ts
index 0cafda4..f372e40 100644
--- a/src/app/api/auth/callback/route.ts
+++ b/src/app/api/auth/callback/route.ts
@@ -74,7 +74,12 @@ export async function GET(request: NextRequest) {
     payload: { username: userinfo.preferred_username, displayName: userinfo.name, role: user.role },
   })
 
-  const response = NextResponse.redirect(new URL('/', request.url))
+  // 使用 nginx 转发的 Host 头构造正确的公共 URL
+  const proto = request.headers.get('x-forwarded-proto') || 'http'
+  const host = request.headers.get('x-forwarded-host') || request.headers.get('host') || request.nextUrl.host
+  const publicUrl = `${proto}://${host}`
+
+  const response = NextResponse.redirect(new URL('/', publicUrl))
 
   // 签发 tlyq_session cookie
   response.cookies.set('tlyq_session', token, {