Immediately make the server code available in accordance with your license.
Given the (probably at least somewhat sane) choice to omit keys.ks
from the repository, and the required authentication on various of your api endpoints, this source code is unable to produce a working product that connects with your server.
Thus, one would have to set up an instance of your server with their own keys to get a working product for e.g. testing/vetting or development purposes. Further, for development purposes, having an implementation of the server is required even if you'd let people on your main instance, given a) most improvements to the client would include ones to the API, and b) you are required to keep random people's test data out of your production database.
Thus, your server source code constitutes "Corresponding Source" under your own license:
The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities.
Thus I hereby ask you to immediately release said source code.
(also just as a only semi-related heads-up you're still in breach of (among others) the license you patched back in in commit 7c378ac2)