root@wireguard:/# wgctl group add --name family --desc "Family"
=> SUCCESS: ✅ 🔒  Group created: family
root@wireguard:/# wgctl group list

────────────────────────────────────────────────
  Groups
────────────────────────────────────────────────

  NAME                 DESCRIPTION                         PEERS    STATUS
  ───────────────────────────────────────────────────────────────────────────
/etc/wireguard/wgctl/commands/group.command.sh: line 122: peers_list[0]: unbound variable
root@wireguard:/# wgctl group peer add --name family --peer phone-nuno
=> SUCCESS: ✅ 🔒  Added 'phone-nuno' to group 'family'
root@wireguard:/# wgctl group peer add --name family --peer tablet-nuno
=> SUCCESS: ✅ 🔒  Added 'tablet-nuno' to group 'family'
root@wireguard:/# wgctl group show --name family

────────────────────────────────────────────────
  Group: family
────────────────────────────────────────────────

  Description:         Family
  Peers:               2
  ──────────────────────────────────────────────────

  NAME                         IP              RULE         STATUS
  phone-nuno                   10.1.3.1        admin        active
  tablet-nuno                  10.1.4.1        user         active

root@wireguard:/# wgctl group list

────────────────────────────────────────────────
  Groups
────────────────────────────────────────────────

  NAME                 DESCRIPTION                         PEERS    STATUS
  ───────────────────────────────────────────────────────────────────────────
  family               Family                              2        active

root@wireguard:/# wgctl group block --name family

────────────────────────────────────────────────
  Blocking group: family
────────────────────────────────────────────────
/etc/wireguard/wgctl/commands/group.command.sh: line 477: cmd::block::run: command not found
root@wireguard:/# wgctl group block --name family

────────────────────────────────────────────────
  Blocking group: family
────────────────────────────────────────────────
=> ERROR: ❌  Unknown flag: --force
Usage: wgctl block --name <name> [options]

Block a client entirely or restrict access to specific IPs/ports/subnets.
Block rules are persisted and restored on WireGuard restart.

Options:
  --name <name>         Client name (e.g. phone-nuno)
  --ip <ip>             Block access to specific IP (repeatable)
  --subnet <cidr>       Block access to subnet (repeatable)
  --port <ip:port:proto> Block specific port, e.g. 10.0.0.210:9000:tcp (repeatable)

Examples:
  wgctl block --name phone-nuno
  wgctl block --name phone-nuno --ip 10.0.0.210
  wgctl block --name phone-nuno --subnet 10.0.0.0/24
  wgctl block --name phone-nuno --port 10.0.0.210:9000:tcp
  wgctl ban --name phone-nuno --ip 10.0.0.100 --ip 10.0.0.200
root@wireguard:/# wgctl group unblock --name family

────────────────────────────────────────────────
  Unblocking group: family
────────────────────────────────────────────────
=> WARN: ⚠️ 🔒  phone-nuno — not blocked
=> WARN: ⚠️ 🔒  tablet-nuno — not blocked
=> SUCCESS: ✅ 🔒  Unblocked 0 peers in group 'family'
root@wireguard:/#