Another thing to consider is that most servers only accept HTTP requests that are properly signed.
Maybe you can take a look at one Fedify if you know your way around javascript development? If python is your thing, you can also take a look at my own Django ActivityPub code?
It's public information available for instance admins and any sufficiently motivated person who knows a bit about the ActivityPub protocol.