root@wireguard:/etc/wireguard/wgctl# wgctl net help
Usage: wgctl net <subcommand> [options]

Manage named network services for use with block/allow rules.
Services map names to IPs and ports, making rules more readable.

Subcommands:
  list                        List all services
  show --name <name>          Show service details
  add --name <name> --ip <ip> Add a service
  add --name <svc:port-name> --port <port:proto>
                              Add a port to a service
  rm --name <name>            Remove service or port
  rm --name <svc:ports>       Remove all ports from service

Options for add (service):
  --name <name>               Service name (e.g. proxmox)
  --ip <ip>                   Service IP address
  --desc <description>        Optional description
  --tag <tag>                 Optional tag (repeatable)

Options for add (port):
  --name <svc:port-name>      Service:port-name (e.g. proxmox:web-ui)
  --port <port:proto>         Port and protocol (e.g. 8006:tcp)
  --desc <description>        Optional description

Options for list:
  --detailed                  Show ports for each service
  --tag <tag>                 Filter by tag

Examples:
  wgctl net list
  wgctl net list --detailed
  wgctl net list --tag admin
  wgctl net show --name proxmox
  wgctl net add --name proxmox --ip 10.0.0.100 --desc "Proxmox VE"
  wgctl net add --name proxmox:web-ui --port 8006:tcp --desc "Web UI"
  wgctl net add --name proxmox:ssh --port 22:tcp
  wgctl net rm --name proxmox:web-ui
  wgctl net rm --name proxmox:ports
  wgctl net rm --name proxmox