🔧(tray) allow disabling Cloudfront signed URLs

As part of our migration from CloudFront to Scaleway Edge Services, we need to
disable signed URLs since they are not supported by Scaleway.
This change introduces the ability to turn off signed URL usage.

Author: wilbrdt

CHANGELOG.md

@@ -11,6 +11,7 @@ Versioning](https://semver.org/spec/v2.0.0.html).
 ### Changed
 
 - Increase connection timeout on Nginx for peertube runner success request
+- Allow disabling Cloudfront signed URLs
 
 ## [5.5.3] - 2025-01-09
 

src/tray/templates/services/app/job_db_migrate.yml.j2

@@ -42,6 +42,8 @@ spec:
               value: "{{ marsha_postgresql_port }}"
             - name: DJANGO_ALLOWED_HOSTS
               value: "{{ marsha_hosts[0] }}"
+            - name: DJANGO_CLOUDFRONT_SIGNED_URLS_ACTIVE
+              value: "{{ marsha_should_sign_requests }}"
             - name: DJANGO_CLOUDFRONT_PRIVATE_KEY_PATH
               value: "{{ marsha_cloudfront_private_key_path }}"
           envFrom: