bastodon/app/controllers/api/v1/profile
..
avatars_controller.rb
headers_controller.rb