yep - confirmed - for nostr relay on umbrel with tailscale, do use ws:// not wss:// - exactly as the instructions say