Disable WireGuard when already running a Headscale Tailscale? #27726

I'm trying coder in my toy K3s over Headscale Tailscale network.
I found coders will try to set up another layer of WireGuard, which will weigh on calculation while the network environment is already very secure. Could this behavior be disabled and run only with a direct connection, without any encryption?
Or let it use my Headscale as STUN server, And reuse my Tailscale network directly?

In my setup:

The workspace agent correctly published two candidates: 100.64.0.a and 10.42.3.b, and STUN succeeded as well. However, when sending Coder discovery packets to the direct connection candidate, the kernel kept returning "sendto: message too long," and then fell back to DERP. In other words, this time it's not that Tailscale failed to establish a direct connection, but rather that "Coder's second layer of WireGuard/UDP encapsulated within the Tailscale/Pod link with an MTU of 1280" failed.

So, this additional network layer could sometimes cause trouble.