Just self host an open source runner like woodpecker and you’ll never have to move again

How painful is the setup and general maintenance/security?

I’m considering the idea but I just don’t want to deal with people abusing exploits in the actions that give them access to my LAN.