Apologies to anyone getting errors or very slow responses from the site right now — we've seen a threefold increase in traffic in the last 24h and need to make some configuration changes to keep up!
Turns out, it's a DDoS attack. Still ongoing. Perpetrator and motivation unknown. About 10,000 IPs blocked so far. In discussion with hosting provider about further measures.

UA on the DDoS requests is "ConfigSyncClient/1.0". This is either fictional or obscure; web search and lookup in various UA directories didn't yield anything.

I've put the site in maintenance mode while this gets sorted out. Apologies for the interruption in service.

Site is back online. Thanks for your patience! Also thank you to #PythonAnywhere for jumping in with request-blocking assistance.