Having a private instance isn't exactly indicative to open source software, so I don't think that's the way I want to take it. I'd probably move to Codeberg or even GitHub before hosting the entire thing on a private net.

I also don't think monitoring and blocking are going to help here. This traffic came from so many different IPs that it would be almost impossible to detect and block them all without blocking legitimate traffic. I also really don't want to hook up a Cloudflare-like centralized challenge system to deal with this if I can avoid it.