diff --git a/website/docs/3-concepts/6-services/1-internal-dns.md b/website/docs/3-concepts/6-services/1-internal-dns.md
new file mode 100644
index 00000000..753e99d6
--- /dev/null
+++ b/website/docs/3-concepts/6-services/1-internal-dns.md
@@ -0,0 +1,61 @@
+# Internal DNS
+
+Services can be addressed on the internal WireGuard network by service name, service ID, or a machine-scoped service name:
+
+## Service name
+```
+$ nslookup nats.internal
+Server:         127.0.0.11
+Address:        127.0.0.11#53
+
+Name:   nats.internal
+Address: 10.210.0.2
+Name:   nats.internal
+Address: 10.210.1.2
+```
+
+```
+$ nslookup worker.internal
+Server:         127.0.0.11
+Address:        127.0.0.11#53
+
+Name:   worker.internal
+Address: 10.210.0.3
+Name:   worker.internal
+Address: 10.210.0.4
+Name:   worker.internal
+Address: 10.210.1.3
+Name:   worker.internal
+Address: 10.210.1.4
+```
+
+## Service ID
+```
+$ nslookup 3ecb3a8bbec5fd3f46efb056a934714a.internal
+Server:         127.0.0.11
+Address:        127.0.0.11#53
+
+Name:   3ecb3a8bbec5fd3f46efb056a934714a.internal
+Address: 10.210.0.4
+```
+
+## Machine ID scoped service name
+```
+$ nslookup 0903f0ee483aa97d559eeeaac5e22283.m.nats.internal
+Server:         127.0.0.11
+Address:        127.0.0.11#53
+
+Name:   nats.internal
+Address: 10.210.1.2
+```
+
+```
+$ nslookup 0903f0ee483aa97d559eeeaac5e22283.m.worker.internal
+Server:         127.0.0.11
+Address:        127.0.0.11#53
+
+Name:   worker.internal
+Address: 10.210.1.3
+Name:   worker.internal
+Address: 10.210.1.4
+```
diff --git a/website/docs/3-concepts/6-services/2-container-env.md b/website/docs/3-concepts/6-services/2-container-env.md
new file mode 100644
index 00000000..b58ec5b1
--- /dev/null
+++ b/website/docs/3-concepts/6-services/2-container-env.md
@@ -0,0 +1,8 @@
+# Container ENV Variables
+
+- `UNCLOUD_MACHINE_ID`
+  - Machine ID the service container is running on.
+  - Example: `UNCLOUD_MACHINE_ID=0903f0ee483aa97d559eeeaac5e22283`
+- `HOSTNAME`
+  - Service name with unique suffix.
+  - Example: `HOSTNAME=worker-c1zd`
diff --git a/website/docs/3-concepts/6-services/_category_.yaml b/website/docs/3-concepts/6-services/_category_.yaml
new file mode 100644
index 00000000..ebd43886
--- /dev/null
+++ b/website/docs/3-concepts/6-services/_category_.yaml
@@ -0,0 +1,4 @@
+label: Services
+collapsed: true # keep the category closed by default
+link:
+  type: generated-index