diff --git a/deploy/nginx.conf b/deploy/nginx.conf
index b403f4388..c8f64cc38 100644
--- a/deploy/nginx.conf
+++ b/deploy/nginx.conf
@@ -79,6 +79,14 @@ server {
         alias /srv/funkwhale/data/media/;
     }
 
+    location /_protected/media {
+        # this is an internal location that is used to serve
+        # audio files once correct permission / authentication
+        # has been checked on API side
+        internal;
+        alias   /srv/funkwhale/data/media;
+    }
+
     location /_protected/music {
         # this is an internal location that is used to serve
         # audio files once correct permission / authentication