The required feature described as a wish
CloudStack 4.20.1
When a password reset email is sent, the reset URL is automatically generated.
In our setup, the URL uses the private IP of the Management server (behind a reverse proxy) instead of the public domain.
There is already a global setting that allows customizing the email body:
By removing the hardcoded resetLink from the email template (as shown below),
...the reset URL can instead be set and controlled by the administrator like any other setting:
