server {

   server_name oss.hanye.com;

   listen 443 ssl;

   ssl_certificate   /usr/local/nginx/conf/ssl/oss.hanye.com.crt;

   ssl_certificate_key  /usr/local/nginx/conf/ssl/oss.hanye.com.key;

   ssl_session_timeout 10m;

   access_log /data/wwwlogs/oss_access_nginx.log main;

   ssl_buffer_size     64k;

   ssl_session_cache       shared:SSL:10m;

   ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

   ssl_prefer_server_ciphers on;

  location / {

      add_header    Cache-Control  public,max-age=5184000;

      proxy_pass https://hanye.oss-cn-shenzhen-internal.aliyuncs.com;

      proxy_hide_header Content-disposition; #设置默认为预览方式。

      proxy_set_header   X-Real-IP        $remote_addr;

      proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;

      proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

      proxy_max_temp_file_size 0;

      proxy_connect_timeout     400;

      proxy_send_timeout         400;

      proxy_read_timeout         400;

      proxy_buffer_size          128k;

      proxy_buffers              4 64k;

      proxy_busy_buffers_size    128k;

     # proxy_temp_file_write_size 128k;

      expires 100d;

  }

}