Nginx代理阿里云OSS图片 并设置缓存

server {
server_name oss.hanye.com;

listen 443 ssl;
ssl_certificate      /usr/local/nginx/ssl/hanye.crt;
ssl_certificate_key  /usr/local/nginx/ssl/hanye.key;
ssl_session_timeout 10m;
access_log /data/wwwlogs/oss_access_nginx.log combined;
ssl_buffer_size     64k;
ssl_session_cache       shared:SSL:10m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
ssl_prefer_server_ciphers on;

location / {

 #跨域设置   强烈建议在OSS控制台设置跨域
  # add_header 'Access-Control-Allow-Origin' $http_origin;
  # add_header 'Access-Control-Allow-Credentials' 'true';
  # add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
  # add_header 'Access-Control-Allow-Headers' 'DNT,web-token,app-token,Authorization,Accept,Origin,Keep-Alive,User-Agent,X-Mx-ReqToken,X-Data-Type,X-Auth-Token,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
   add_header    Cache-Control  max-age=2592000;
   proxy_pass  https:// 内网 Bucket 域名;
   proxy_set_header   X-Real-IP        $remote_addr;
   proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
   proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
   proxy_max_temp_file_size 0;
   proxy_connect_timeout      300;
   proxy_send_timeout         300;
   proxy_read_timeout         300;
   proxy_buffer_size          128k;
   proxy_buffers              4 64k;
   proxy_busy_buffers_size    128k;
  # proxy_temp_file_write_size 128k;
   expires 100d; 

}
}