Why I rate-limit every self-hosted service (and you should too)

I learned this the hard way: an exposed Jellyfin or Vaultwarden instance without rate-limiting is a...