Fix: Critical S3 environment variables and subdomain support for video playback

[webvijayi]

Problem

The current installer was missing critical environment variables causing Cap uploads to fail with CredentialsProviderError, and video playback to fail with mixed content errors.

Root Causes Discovered

1. Missing Environment Variables Bug

Cap's Aws.ts checks for specific variable names:

• ✅ Now Added: CAP_AWS_ACCESS_KEY and CAP_AWS_SECRET_KEY
• ✅ Now Added: CAP_AWS_ENDPOINT for S3 endpoint configuration
• ✅ Now Added: AWS SDK compatibility variables

Without these, Cap fell back to AWS container metadata, causing errors.

2. Mixed Content Security Issue

When using HTTPS for the main site but HTTP for videos (port 9000), browsers block the content:

Blocked loading mixed active content: http://domain:9000/video.mp4

Solution

Docker Environment Variables

Added all missing variables to docker-compose.yml generation:

CAP_AWS_ACCESS_KEY: "${S3_ACCESS_KEY_ID}"
CAP_AWS_SECRET_KEY: "${S3_SECRET_ACCESS_KEY}"
CAP_AWS_ENDPOINT: "http://cap-minio:9000"
S3_INTERNAL_ENDPOINT: "http://cap-minio:9000"
S3_PUBLIC_ENDPOINT: "${S3_PUBLIC_URL}"
AWS_SDK_LOAD_CONFIG: "0"
AWS_EC2_METADATA_DISABLED: "true"

S3 Subdomain Pattern

Implements industry-standard S3 subdomain approach:

• With SSL: https://s3.domain.com (no mixed content)
• Without SSL/IP: Falls back to http://domain:9000

Smart URL Configuration

# Auto-detects setup and configures appropriately:
if using domain + SSL:
  S3_PUBLIC_URL="https://s3.${DOMAIN}"
elif using domain without SSL:
  S3_PUBLIC_URL="http://${DOMAIN}:9000"
else: # IP address
  S3_PUBLIC_URL="http://${IP}:9000"

Enhanced User Guidance

Added clear DNS setup instructions:

⚠️ IMPORTANT: Also add S3 subdomain for video storage:
Add another A record:
  Type: A
  Name: s3.domain.com
  Value: YOUR_SERVER_IP
  TTL: 300

This subdomain is required for:
- Video playback in web browser
- Desktop app uploads
- Proper HTTPS support (avoids mixed content errors)

Testing

Tested on production server with:

• DirectAdmin + AlmaLinux 8
• Let's Encrypt SSL
• Domain: cap.webfortuners.com
• S3 Subdomain: s3.cap.webfortuners.com

Verified Working:

✅ Desktop app uploads
✅ Video playback in browser
✅ No mixed content errors
✅ Proper S3 authentication
✅ SSL certificate auto-issued for subdomain

Compatibility

• ✅ Works with existing installations (backward compatible)
• ✅ Supports all installation modes (full/user)
• ✅ Supports Apache and Nginx setups
• ✅ Works with external reverse proxies
• ✅ Gracefully falls back when domain not available

References

• Cap source code: packages/web-backend/src/Aws.ts
• Official Cap template uses direct port approach
• This implements production-ready HTTPS subdomain pattern

Fixes issues encountered during self-hosted deployment where uploads and playback both failed.