Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Sovereignty in Decentralized Communication
- Analyzing the data governance risks associated with centralized chat platforms.
- Overview of the Matrix protocol: examining rooms, events, and federation.
- Comparing Synapse versus Dendrite as homeserver options.
Deploying the Homeserver
- Setting up a Docker Compose stack incorporating Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxies with Nginx and LetsEncrypt.
- Establishing federation settings, including .well-known delegation and port 8448 usage.
Authentication and Identity Management
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and controlling guest access.
- Configuring SSO via Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Executing cross-signing and device verification workflows.
- Managing key backup and recovery procedures for lost devices.
- Understanding administrative implications regarding encrypted rooms and data export rules.
Managing Spaces, Rooms, and Bridges
- Organizing enterprise spaces for specific departments and projects.
- Utilizing IRC, Slack, and Telegram bridges to enhance inter-team communication.
- Leveraging threading, reactions, and bots to drive automation.
Security and Moderation Strategies
- Using the Admin API for user management, room shutdown, and data deletion tasks.
- Configuring privacy settings such as message retention, redaction, and media purging.
- Applying rate limiting and CAPTCHA mechanisms to prevent spam registration.
Maintenance and Scalability
- Performing Postgres maintenance tasks, including vacuuming, indexing, and long-term retention.
- Managing media repository sizing and offloading to S3.
- Implementing monitoring with Prometheus and defining logging retention policies.
Requirements
- Intermediate proficiency in Linux system administration and Docker fundamentals.
- A solid understanding of federated messaging architecture and HTTPS.
- Practical familiarity with web proxy configuration using Nginx or Apache.
Target Audience
- Enterprise IT teams transitioning from Slack, Teams, or Discord to sovereign messaging solutions.
- Professionals in regulated sectors such as healthcare, finance, and defense.
- Organizations advocating for decentralization and prioritizing privacy.
