

We’re seeing this at work too - our public git frontend is constantly getting scraped as well as our self hosted issue tracker. We had to spend days working on fail2ban and other kinds of tools to mitigate all the traffic that’s adding tons of load to our instances, which otherwise would easily be able to handle the handful of employees who actually use these systems.
I think you can use Immich external libraries for this, also to be extra safe you can just mount your external images folder as read only by adding
:ro
to the docker volume mount so that the container won’t be able to modify anything as a precaution.