caddy-tailscale does not work with disable-ipv4 set in the tailnet ACL. caddy logs: tsnet: address invalid AddrPort: missing port in address and then caddy exits.