@dansup @pixelfed @joe

If you've not considered this you might want to require a token to access the setup page (iirc wordpress now needs such) because fresh installs were getting hijacked by bots