@alex alex come on. you know closing registrations or forcing by approval isn't the way to solve this. different captcha that requires user input beyond basic OCR, rate limiting the registration API endpoint and basic security fixes (that should be in the default nginx shipped with rebased and pleroma) are the way to solve it.