Looks like it has auth. I would enable that for starters. I don't know too much about that relay implementation because I'm not running it myself but if you can configure auth for posting And not downloading that would allow you to post to the relay and people to still see your stuff.