The 401 spam that wasn't HA
Gotify kept pinging with 401s. The natural read is "an app's token is broken" or "gotify is down." Neither was true. The gotify server is healthy, and the 401 was content inside a forwarded log line. The thing posting the alert was loggifly, the log-monitor container, matching a keyword in a container's access log and forwarding it through Apprise.
This is the class of work: gotify ping, who actually posted it, what container logged it, who the real client is, what the true cause is.