diff --git a/config/environments/development.rb b/config/environments/development.rb
index 2f4f659c..f8ad2c13 100644
--- a/config/environments/development.rb
+++ b/config/environments/development.rb
@@ -36,6 +36,9 @@ Rails.application.configure do
   # Store uploaded files on the local file system (see config/storage.yml for options).
   config.active_storage.service = ENV.fetch("ACTIVE_STORAGE_SERVICE", "local").to_sym
 
+  # Set Active Storage URL expiration time to 7 days
+  config.active_storage.urls_expire_in = 7.days
+
   # Don't care if the mailer can't send.
   config.action_mailer.raise_delivery_errors = false
   config.action_mailer.delivery_method = :letter_opener
diff --git a/config/environments/production.rb b/config/environments/production.rb
index ea7cd99d..8a5e81cf 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -33,6 +33,9 @@ Rails.application.configure do
   # Store uploaded files on the local file system (see config/storage.yml for options).
   config.active_storage.service = ENV.fetch("ACTIVE_STORAGE_SERVICE", "local").to_sym
 
+  # Set Active Storage URL expiration time to 7 days
+  config.active_storage.urls_expire_in = 7.days
+
   # Mount Action Cable outside main process or domain.
   # config.action_cable.mount_path = nil
   # config.action_cable.url = "wss://example.com/cable"
diff --git a/config/storage.yml b/config/storage.yml
index 5b6fdc3f..6c92b2ba 100644
--- a/config/storage.yml
+++ b/config/storage.yml
@@ -20,6 +20,8 @@ cloudflare:
   secret_access_key: <%= ENV['CLOUDFLARE_SECRET_ACCESS_KEY'] %>
   region: auto
   bucket: <%= ENV['CLOUDFLARE_BUCKET'] %>
+  request_checksum_calculation: "when_required"
+  response_checksum_validation: "when_required"
 
 # Removed in #702.  Uncomment, add gems, update .env.example to enable.
 #google: