Put it behind Cloudflare and try out the various firewall rules. Wrote this blog post covering some examples of rules and trade-offs https://developerwithacat.com/blog/202603/block-bots-scrapin...

Also post in r/Cloudflare subreddit. People are very helpful.