omarchycn/manual/35-networking.md

Networking

Networking in Omarchy is handled by NetworkManager, and you drive it from the network icon in the top bar or with Super + Ctrl + W.

That panel scans for Wi-Fi networks, shows signal strength, and connects. Ethernet needs nothing at all — plug it in and it works. If you'd rather stay in the terminal, nmtui gives you the same controls, and there's an omarchy network command group too.

Sharing your Wi-Fi

Rather than reading a long password out loud, run Setup > Network > QR Code while you're on Wi-Fi. That puts a QR code on screen that any phone camera can scan to join. It's one of those things you'll use more than you'd expect once you know it's there.

If you actually need the password itself, omarchy network password <interface> prints it.

DNS

Omarchy uses whatever DNS your network hands out over DHCP. You can override that for the whole machine under Setup > Network > DNS, where Cloudflare and Google are one click away. Pick Custom to type in your own servers.

From the terminal, omarchy dns prints the current provider and omarchy dns Cloudflare sets one.

Pinning the Wi-Fi band

If your router puts 2.4GHz, 5GHz, and 6GHz on the same network name, your laptop will sometimes cling to the slow one. omarchy network band shows which band you're on, and omarchy network band 5 pins it. Use auto to let it choose again.

This pins the band rather than a specific access point, so you keep roaming between APs normally.

How fast is it?

Trigger > Speed Test > Network Speed Test measures your actual up and down speed with a pair of dials. From the terminal it's omarchy network speedtest down or up. (There's a disk speed test sitting next to it in that menu, if you're benchmarking the other bottleneck.)

The firewall

The firewall is on by default and blocks all incoming traffic, with one exception: port 53317, so LocalSend works out of the box.

SSH is off until you turn it on with Setup > Security > SSHD, which starts the daemon, opens port 22 rate-limited against brute force, and authorizes a key. Docker is locked down too, so containers can't accidentally expose themselves to the world. See security for the whole story.

Tailscale

Tailscale is a mesh VPN that makes reaching all your computers and servers over the internet simple and secure. Install it with Install > Service > Tailscale.

That gives you a Tailscale panel in the bar, which connects and disconnects the tailnet, switches accounts, and picks an exit node — your own machines and Mullvad regions both show up in the list. It also browses your machines, and that's where Taildrop lives: select a machine and press s to send it files, or c, n, and d to copy its IP, name, or full DNS name. The terminal equivalent is omarchy tailscale send <machine> [file...], and files sent to you land in ~/Downloads automatically.

Installing it also adds a web app for the Tailscale admin console.

When it stops working

Before rebooting, try restarting the offending piece on its own. Update > Hardware has Wi-Fi, Bluetooth, Audio, and Trackpad, and reloading one of those clears up most "it worked five minutes ago" situations. See troubleshooting.