Tailscale Funnel not serving proxy

UPDATE: After an email with support, I had to cycle the funnel status with:

sudo tailscale serve funnel off && sudo tailscale serve funnel on

I have nginx serving content to my tailnet on port 443, but I also want to open up one specific application to the internet through funnel. I have turned the funnel on through port 8443 like so:

sudo tailscale serve --serve-port 8443 funnel on

And I have enable a proxy serve like so:

sudo tailscale serve / proxy 12345

However when I ask for the serve status I get:

name@node:~$ sudo tailscale serve status
https://node.tailABCDE.ts.net (tailnet only)
|-- / proxy http://127.0.0.1:12345
WARNING: funnel=on for node.tailABCDE.ts.net:8443, but no serve config

Any help would be appreciated!

ETA: my ACL config:

"groups": {
    "group:can-funnel": [
        "[email protected]",
    ],
},
"nodeAttrs": [
    {
        "target": ["group:can-funnel"],
        "attr":   ["funnel"],
    },
],