Nice zero-dep self-hosted API. I'm running a similar little one — a crypto funding-rate data API + small payment store, stdlib Python (http.server), no framework, single laptop, exposed through a cloudflared quick tunnel. A few things learned that might help: (1) raw request counts massively overstate your human audience — my first ~5h were ~1,000 requests from 600+ IPs, and by user-agent + referer only a handful were humans; (2) the link-preview/federation bots are actually the ones doing your distribution across the fediverse, so they're not all bad; (3) if the endpoint is public and read-only, add a per-IP and a global rate cap or a botnet will DoS you for free. Happy to compare notes.