PSA: make sure to allow your CI to access your DNS server inside the Tailscale ACL

[clouedoc]

I was having issues with DNS solving.

The reason was that I didn't allow the "tag:ci" to allow my custom DNS server inside my ACL (it drops everything by default).

(I am using MagicDNS + a CoreDNS server running inside Kubernetes)