1.conf

server {
  listen      8000;
  server_name foo.com;
  root        /mnt/foo/current/public;

  # Allow all assets to be cached by CloudFront and browsers.
  add_header Cache-Control public;

  # Default expires of 1 hour.
  expires 1h;

  # Only set far-future expires for assets with hashes. Note: since max_expire
  # contains curly brackets in the regexp, we must use quotes.
  location ~* "-[0-9a-f]{32}\.(ico|css|js|gif|jpe?g|png|svg)(\.gz)?$" {
    expires max;
  }

  location ~* "-[0-9a-f]{32}\.(eot|ttf|otf|woff)(\.gz)?$" {
    add_header Access-Control-Allow-Origin *;
    expires max;
  }

  location ~* "\.(eot|ttf|otf|woff)(\.gz)?$" {
    add_header Access-Control-Allow-Origin *;
  }
}

2.conf

server {
  listen      8000;
  server_name foo.com;
  root        /mnt/foo/current/public;

  # Allow all assets to be cached by CloudFront and browsers.
  add_header Cache-Control public;

  # Default expires of 1 hour.
  expires 1h;

  # Only set far-future expires for assets with hashes. Note: since max_expire
  # contains curly brackets in the regexp, we must use quotes.
  location ~* "-[0-9a-f]{32}\.(ico|css|js|gif|jpe?g|png|eot|ttf|otf|woff|svg)(\.gz)?$" {
    expires max;
  }

  if ($filename ~* "\.(eot|ttf|otf|woff)$"){
    add_header Access-Control-Allow-Origin *;
  }
}