Cloudflare jumped on the hype and shipped a worker:
https://blog.cloudflare.com/moltworker-self-hosted-ai-agent/
I guess that would be an easy and secure way to run it.
Now they have to rename again, though... [1]
[1] https://openclaw.ai/blog/introducing-openclaw