Merge branch 'redmine-issues/21750' into 'develop'

REDMINE_ISSUE-21750 | Faille sécu - accès aux documents PDF d'un signalement sans authentification préalable

See merge request geocontrib/geocontrib-frontend!804

nginx.conf

@@ -51,12 +51,20 @@ server {
         proxy_pass http://geocontrib_site;
     }
 
-    location /geocontrib/static/ {
-        alias /opt/geocontrib/static/;
+    location /geocontrib/media/ {
+        proxy_pass_header Set-Cookie;
+        proxy_set_header X-NginX-Proxy true;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $host;
+        proxy_read_timeout 300s;
+        proxy_redirect off;
+
+        proxy_pass http://geocontrib_site
     }
 
-    location /geocontrib/media/ {
-        alias /opt/geocontrib/media/;
+    location /geocontrib/static/ {
+        alias /opt/geocontrib/static/;
     }
 
     location /geocontrib/ {