Proxy

Add headers

add_header Access-Control-Allow-Credentials true;
add_header Access-Control-Allow-Origin      *;
add_header Access-Control-Allow-Methods     GET,POST;
add_header Access-Control-Allow-Headers     NT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization;

Compress

gzip on;   
gzip_vary on; 
gzip_min_length 1024; 
gzip_proxied expired no-cache no-store private auth; 
gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/javascript application/xml application/octet-stream; 
gzip_disable "MSIE [1-6]\.";

Max size

client_max_body_size 100M;

SSL

server_name _;
ssl_certificate     server.crt;
ssl_certificate_key server.key;
ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers         HIGH:!aNULL:!MD5;

https://www.cnblogs.com/yanjieli/p/15229907.html