Finally figured out what was going on with the heavy load on our Gitea instance, https://code.as -- a ton of spammers coming in, when I thought we'd closed registrations.

I've cleaned them up and put in some new protections, so should be able to keep the site up now for the repos we host there!