Codeberg is under a heavy, long-running DDoS attack. The Forgejo docs warn that if you allow open sign-ups, you will be inundated in spam. The modern internet is a shark pool, and unfortunately part of self-hosting is learning to wrestle sharks.