True, we do use a separate hose CDN on prod, so I guess either way is fine, but it's not like that on dev or stage, and does indicate an issue w/ the config. Did you try the /media Alias in the main virtualhost? I'm guessing the ProxyPass directive is taking presidence over the /media one for some reason.