Use local environment variables; set public headers for S3