No need to set ssl_session_timeout to the default.

In any case, it's safe to assume the default nginx session timeout
is a reasonable value.
Cache ssl sessions across workers.

8MB allows ~32k cached sessions.