diff --git a/docker/garage/Dockerfile b/docker/garage/Dockerfile
index 596ca41..cf31ebc 100644
--- a/docker/garage/Dockerfile
+++ b/docker/garage/Dockerfile
@@ -2,7 +2,7 @@ FROM alpine:3.21 AS base
 RUN apk add --no-cache gettext
 
 FROM base
-COPY --from=dxflrs/garage:v1.0.1 /garage /garage
+COPY --from=dxflrs/garage:v2.2.0 /garage /garage
 COPY garage.toml /etc/garage.toml.tpl
 
 CMD envsubst < /etc/garage.toml.tpl > /etc/garage.toml && exec /garage server
diff --git a/docker/nginx/conf.d/haanmind.net.conf b/docker/nginx/conf.d/haanmind.net.conf
index 1b05382..b3a009e 100644
--- a/docker/nginx/conf.d/haanmind.net.conf
+++ b/docker/nginx/conf.d/haanmind.net.conf
@@ -38,6 +38,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host haanmind.net.web.garage;
+    }
+
     location / {
         proxy_pass http://haanmind_net:80;
         proxy_set_header Host $host;
diff --git a/docker/nginx/conf.d/hantim.net.conf b/docker/nginx/conf.d/hantim.net.conf
index f86ed26..ab80708 100644
--- a/docker/nginx/conf.d/hantim.net.conf
+++ b/docker/nginx/conf.d/hantim.net.conf
@@ -38,6 +38,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host hantim.net.web.garage;
+    }
+
     location / {
         proxy_pass http://hantim_net:80;
         proxy_set_header Host $host;
diff --git a/docker/nginx/conf.d/hcsuzuki.net.conf b/docker/nginx/conf.d/hcsuzuki.net.conf
index b9a7a2c..64f3b2b 100644
--- a/docker/nginx/conf.d/hcsuzuki.net.conf
+++ b/docker/nginx/conf.d/hcsuzuki.net.conf
@@ -38,6 +38,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host hcsuzuki.net.web.garage;
+    }
+
     location / {
         proxy_pass http://hcsuzuki_net:80;
         proxy_set_header Host $host;
diff --git a/docker/nginx/conf.d/thekims.family.conf b/docker/nginx/conf.d/thekims.family.conf
index 62944ed..43dfedc 100644
--- a/docker/nginx/conf.d/thekims.family.conf
+++ b/docker/nginx/conf.d/thekims.family.conf
@@ -38,6 +38,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host thekims.family.web.garage;
+    }
+
     location / {
         proxy_pass http://thekims_family:80;
         proxy_set_header Host $host;
diff --git a/docker/nginx/conf.d/timothykim.net.conf b/docker/nginx/conf.d/timothykim.net.conf
index 5c0d211..bee0af3 100644
--- a/docker/nginx/conf.d/timothykim.net.conf
+++ b/docker/nginx/conf.d/timothykim.net.conf
@@ -38,6 +38,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host timothykim.net.web.garage;
+    }
+
     location / {
         proxy_pass http://timothykim_net:80;
         proxy_set_header Host $host;
diff --git a/tools/new-app.sh b/tools/new-app.sh
index 7968c6e..5c47fe3 100755
--- a/tools/new-app.sh
+++ b/tools/new-app.sh
@@ -308,6 +308,11 @@ server {
 
     add_header Strict-Transport-Security "max-age=63072000; preload" always;
 
+    location /media/ {
+        proxy_pass http://garage:3902/;
+        proxy_set_header Host $APP.web.garage;
+    }
+
     location / {
         proxy_pass http://$CONTAINER_NAME:80;
         proxy_set_header Host \$host;