────────────────────────────────────────────────
  Firewall Rules
────────────────────────────────────────────────

  NAME                 DESCRIPTION                                   ALLOWS   BLOCKS   PEERS
  ───────────────────────────────────────────────────────────────────────────────────────────────
  admin                Full access                                   0        0        0 peers
  dev-01               Development VM - Blocks rest of LAN           1        1        0 peers
  guest                Guest access - blocks sensitive services      0        7        3 peers
  user                 Standard user - blocks admin UIs              0        3        12 peers

root@wireguard:/# wgctl list

────────────────────────────────────────────────
  WireGuard Clients
────────────────────────────────────────────────

  NAME                         IP              TYPE          RULE         STATUS                 LAST SEEN
  ───────────────────────────────────────────────────────────────────────────────────────────────────────────
  desktop-test                 10.1.1.1        desktop       user         offline                   —
  desktop-test1                10.1.1.2        desktop       user         offline                   —
  guest-test                   10.1.103.1      guest/phone   guest        online                    2026-05-08 22:32 (handshake)
  guest-test2                  10.1.103.2      guest/phone   guest        offline                   —
  guest-test3                  10.1.103.3      guest/phone   guest        offline                   —
  laptop-nuno                  10.1.2.1        laptop        user         offline                   —
  laptop-test                  10.1.2.2        laptop        user         offline                   —
  laptop-test1                 10.1.2.3        laptop        user         offline                   —
  phone-fred                   10.1.3.3        phone         user         offline                   —
  phone-helena                 10.1.3.4        phone         user         offline                   —
  phone-luis                   10.1.3.2        phone         user         offline                   —
  phone-nuno                   10.1.3.1        phone         user         offline                   —
  phone-test                   10.1.3.5        phone         user         offline                   —
  phone-test1                  10.1.3.6        phone         user         offline                   —
  tablet-nuno                  10.1.4.1        tablet        user         offline                   —