I'm currently making a small hobby project where I use a Raspberry Pi Zero to control a set of RGB LED's.

I've got a basic python app so far that is built on Flask that allows me to set up a web server so that the LED colours can be set remotely.

My main concern is that I'm self-taught as far as programming goes and I don't know squat about security.

The plan is essentially to be sending any port 80 traffic to the raspberry pi on my home network and give friends my IP. I may eventually get a domain name to simplify things.

Should I have any security concerns when I set this up live full-time? I don't know if it's possible to access my private network via the raspberry pi or if I'm just being paranoid.