@feditips It seems like Mastodon may have split AUTHORIZED_FETCH into two separate toggles. To prevent scraping / public web access you have to also enable DISALLOW_UNAUTHENTICATED_API_ACCESS. With that disabled, the web interface will still work (but you lose most of the privacy benefits of AUTHORIZED_FETCH.