fix(patrizio): fix MagicDNS resolution for ollama.lan.poldebra.me

- Run tailscaled with --netfilter-mode=off to avoid iptables failures
  in the container, which were breaking the MagicDNS proxy at 100.100.100.100
- Set dns: 100.100.100.100 so Docker forwards DNS queries to Tailscale's
  MagicDNS proxy instead of Contabo's public DNS, which was resolving
  ollama.lan.poldebra.me to the server's public IP instead of the tailnet IP

patrizio/docker-compose.yml

@@ -20,10 +20,12 @@ services:
     hostname: patrizio
     image: tailscale/tailscale:latest
     restart: unless-stopped
+    dns:
+      - 100.100.100.100
     env_file:
       - tailscale.env
     command: >
-      sh -c "tailscaled &
+      sh -c "tailscaled --netfilter-mode=off &
              sleep 5 &&
              tailscale up --accept-dns=true --login-server=https://vpn.poldebra.me &&
              wait"