I would risk it. After all, it’s the only thing protecting my entire gitlab account. If someone could break my ssh, they could do what they want to my gitlab presence,and I’m guessing someone at gitlab is paid and qualified to make that call.
I used k3s and use the same node as master and runner. I started off with 3 nodes like you are planning, but soon discovered they for home use it just adds overhead in keeping up to date and backing up, and I had to find some way of doing persistent storage without standing up yet another VM as a NFS host, so downsized to a single node.
I moved away from pihole because every time I had a fiddle, I bought down the DNS of my whole house, resulting in lots of stressed children :) the solution I switched to is against the ethos of this sub, but it’s good and worth the cost.