Fix insecure S3 URLs

config/initializers/paperclip.rb

@@ -1,5 +1,8 @@
 if ENV['S3_ENABLED'] == 'true'
-  Paperclip::Attachment.default_options[:storage] = :s3
+  Paperclip::Attachment.default_options[:storage]     = :s3
+  Paperclip::Attachment.default_options[:s3_protocol] = 'https'
+  Paperclip::Attachment.default_options[:url]         = ':s3_domain_url'
+  Paperclip::Attachment.default_options[:path]        = '/:class/:attachment/:id_partition/:style/:filename'
 
   Paperclip::Attachment.default_options[:s3_credentials] = {
     bucket: ENV.fetch('S3_BUCKET'),
@@ -7,7 +10,4 @@ if ENV['S3_ENABLED'] == 'true'
     secret_access_key: ENV.fetch('AWS_SECRET_ACCESS_KEY'),
     s3_region: ENV.fetch('S3_REGION')
   }
-
-  Paperclip::Attachment.default_options[:url] = ':s3_domain_url'
-  Paperclip::Attachment.default_options[:path] = '/:class/:attachment/:id_partition/:style/:filename'
 end