S3 Fix

.env.example

@@ -1,20 +1,29 @@
-# Copy to /etc/modelviewer.env on the server (chmod 600, owned by root).
+# Copy to .env in this directory (chmod 600). Loaded by dotenv at startup.
 
 PORT=3000
 
 # --- Model source -----------------------------------------------------------
-# Set S3_BUCKET to index a bucket. Leave it unset to use the local models/
-# folder, which is what development does.
-S3_BUCKET=your-bucket
-S3_PREFIX=skins/
-AWS_REGION=eu-west-2
+# The MODEL_S3_* names match the other projects. Plain S3_BUCKET / S3_PREFIX /
+# AWS_REGION are accepted too. Leave MODEL_S3_BUCKET unset to read the local
+# models/ folder instead, which is what development does.
+MODEL_S3_BUCKET="static.southwest-roleplay.com"
+MODEL_S3_REGION="eu-north-1"
+MODEL_S3_KEY_PREFIX="samp/skins"
+
+# Omit both keys on a box with an instance role or an aws-cli profile; the SDK
+# falls back to the default credential chain.
+MODEL_S3_ACCESS_KEY_ID=""
+MODEL_S3_SECRET_ACCESS_KEY=""
 
 # --- Where the browser fetches model files from ------------------------------
-# Path A: leave unset. Files are requested from /models on this origin and
-#         nginx proxies that to S3/CloudFront. No CORS needed.
-# Path B: set to a CDN origin so the browser fetches S3 directly. Requires a
-#         CORS rule on the bucket.
-# MODELS_BASE_URL=https://cdn.southwest-roleplay.dev/skins
+# The bucket is already public at static.southwest-roleplay.com, so point the
+# viewer straight at it: the browser talks to the CDN and this server never
+# serves model bytes. Requires the CORS rule in deploy/bucket-cors.json.
+MODELS_BASE_URL="https://static.southwest-roleplay.com/samp/skins"
+
+# Leave MODELS_BASE_URL unset instead to serve files from /models on this
+# origin, with nginx proxying to S3. No CORS needed, but the bytes go through
+# your box. See the commented block in deploy/nginx.conf.
 
 # How often to re-list the bucket, in ms. Default 15 minutes.
 # INDEX_REFRESH_MS=900000