Should we start thinking about how to deal with a DDoS, should one hit us? The primary choke point is OVHCloud'd bandwidth, which iirc was 1 Gbit, and anything they impose on top (they explicitly say that they don't impose a limit on the data transmitted so I trust them for now) After that, the tiny ass VM should be able to deal with 1Gbit traffic just fine, it should be easy enough to just block any IP address that accesses our stuff without a valid request for eg., so unless they are smart they can get a whole IPv4 /16 banned per second, meaning all their IPs gone in less than a day.