How easy is it to set up and run this for private repos?

It looks like it has so many cool features -- stacked PRs, jujutsu support, CI in Nix VMs. But I've never tried it because it sounds like (at least by default) it's some sort of decentralized, peer-to-peer public thing

You'll have to wait a bit for private repo support unfortunately. Once its ready setting up a knot via Nix or Docker is super easy: https://docs.tangled.org/knot-self-hosting-guide#knot-self-h...

Yeah, only open for public repositories until Atproto finishes their permissioned data spec.