deer lord, it's going to sound so stupid: it was cloudflare "protecting me from bots". some instances couldn't webfinger my account because of it, and then everything else failed.