Set a hardcoded cache-control for /content/storage

docker/nginx/includes/content/_cache.conf

@@ -0,0 +1,8 @@
+# location {} settings for /content caching
+# used by files in this directory, via `include` directive
+
+# ignore cache-control from upstream so this value is authoritative
+proxy_hide_header Cache-Control;
+
+# content is md5-addressed, so cache aggressively for successful responses
+add_header Cache-Control "public, max-age=31536000, immutable, no-transform";

docker/nginx/includes/content/develop-studio-content.conf

@@ -17,16 +17,46 @@ location @production {
     proxy_pass https://studio-content.storage.googleapis.com;
 }
 
+location @hotfixes_storage {
+    include /etc/nginx/includes/content/_proxy.conf;
+    include /etc/nginx/includes/content/_cache.conf;
+
+    # this is the magic that allows us to intercept errors and try the next location
+    proxy_intercept_errors on;
+    recursive_error_pages on;
+    error_page 404 = @production_storage;
+
+    proxy_pass https://develop-studio-content.storage.googleapis.com;
+}
+
+location @production_storage {
+    include /etc/nginx/includes/content/_proxy.conf;
+    include /etc/nginx/includes/content/_cache.conf;
+
+    proxy_pass https://studio-content.storage.googleapis.com;
+}
+
 location @nowhere {
     return 404;
 }
 
+# Note on try_files
+# -----------------
+# try_files will only use one named route, and it uses the last one. Although, we can't just pass
+# one named route, because it fails.
+
+location ^~ /content/storage/ {
+    # ensure that the /content/ prefix is stripped from the request
+    rewrite ^/content/(.*)$ /$1 break;
+
+    # check staging bucket first, then fall back to production
+    try_files @nowhere @hotfixes_storage;
+}
+
 location /content/ {
     # ensure that the /content/ prefix is stripped from the request
     rewrite ^/content/(.*)$ /$1 break;
 
     # check the emulator bucket first, then cloud development bucket, then fall back to production
-    # try_files will only use one named route, and it uses the last one. Although, we can just
-    # pass one named route, because it fails.
     try_files @nowhere @hotfixes;
 }

docker/nginx/includes/content/studio-content.conf

@@ -1,5 +1,16 @@
 # DO NOT RENAME: this file is named after the primary bucket it proxies to
 
+location ^~ /content/storage/ {
+    include /etc/nginx/includes/content/_proxy.conf;
+    include /etc/nginx/includes/content/_cache.conf;
+
+    # ensure that the /content/ prefix is stripped from the request
+    rewrite ^/content/(.*)$ /$1 break;
+
+    # just direct proxy to the bucket
+    proxy_pass https://studio-content.storage.googleapis.com;
+}
+
 location /content/ {
     include /etc/nginx/includes/content/_proxy.conf;