Wait, y'all use firewalls?
I had some Meta Cuck AI (tm) bot scraping my self-hosted Gitea instance and hitting all of the endpoints like /commit. I wish Mikrotik's RouterOS would let me send custom ASCII responses to all such source IPs so I can at least send obsceneties back to ZuckCuck Incorporated.
The /commit endpoint is expensive, so this hammered my Gitea instance so much it crashed.
Solution: Drop all packets from the IP somewhere in Virginia. 