NixOS: Declarative Linux for Reproducible Sovereign Infrastructure Training Course

Gitea is a lightweight, open-source, self-hosted Git service offering robust repository management, code review, issue tracking, and CI/CD integration. It has become a preferred alternative to GitHub and GitLab.com for teams requiring complete control over their source code, independent of third-party terms of service or export regulations.

GitLab Self-Managed delivers an on-premises implementation of GitLab's comprehensive DevSecOps suite. This encompasses source control, CI/CD, container registries, security analysis, and monitoring. It stands as the benchmark for enterprises aiming to utilize the full GitLab feature set while ensuring no data leaves their local network, thereby eliminating SaaS dependencies.

This instructor-led, live training in Germany (online or onsite) targets intermediate to advanced DevOps engineers and system administrators who aim to deploy and manage self-hosted Kubernetes clusters without relying on cloud services.

By the end of this training, participants will be capable of: deploying production-ready Kubernetes clusters on bare-metal or virtual machines using kubeadm; configuring high-availability control planes and etcd clusters; implementing container networking and storage for self-managed environments; and setting up monitoring and observability using self-hosted solutions.

This live, instructor-led training, offered online or on-site, targets cloud professionals aiming to design and implement multi-cloud architectures that circumvent vendor lock-in while ensuring data sovereignty.

By the end of the course, participants will be able to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and utilize cloud-agnostic tools.

This live, instructor-led training in Germany—delivered online or on-site—is designed for network engineers and infrastructure professionals seeking to use SONiC and ONL for the deployment and management of open network infrastructure on white-box switches.

By the end of this course, participants will be able to understand SONiC and ONL architectures, deploy open-source NOS on white-box hardware, configure essential networking features, and implement monitoring and automation workflows.

Conducted by live instructors in an online or on-site format, this training is tailored for system administrators and infrastructure engineers aiming to design, deploy, and manage private OpenStack cloud infrastructure for enterprise applications.

By the conclusion of the course, participants will be equipped to comprehend OpenStack architecture, roll out private cloud infrastructure, manage compute and storage resources, establish security frameworks with Keystone, and adopt enterprise best practices.

This live, instructor-led training in Germany (online or on-site) is designed for intermediate-level network engineers and infrastructure administrators seeking to implement software-defined networks using open source tools and technologies.

By the end of this course, participants will have the ability to design SDN architectures, implement Open vSwitch, configure FRRouting, deploy SDN controllers, and automate network management processes.

This live, instructor-led training in Germany (available online or on-site) is tailored for intermediate-level network and infrastructure professionals. It focuses on using open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network.

By the end of the training, participants will be able to: design an open-source enterprise network architecture, configure routing, switching, and wireless services, enhance security and observability, and formulate an operational plan for ongoing support.

Uptime Kuma is a straightforward, self-hosted monitoring tool designed to track the availability of websites, services, and infrastructure. It provides an alternative to Pingdom, Datadog Synthetics, and UptimeRobot for organizations that prioritize keeping monitoring data under their own control. This instructor-led live training, available online or on-site, targets beginner to intermediate SREs and DevOps engineers aiming to shift from cloud uptime monitoring to a self-hosted, sovereign status tracking platform with Uptime Kuma.

This instructor-led, live training in Germany (online or onsite) is designed for security engineers and system administrators seeking to deploy and manage enterprise-grade self-hosted VPN solutions utilizing WireGuard and OpenVPN.

By the end of this course, participants will be equipped to deploy WireGuard and OpenVPN, design scalable architectures, integrate with identity systems, and monitor and secure VPN infrastructure.

OpenVPN and WireGuard stand as the leading open-source protocols for virtual private networks. By hosting your own VPN infrastructure, you eliminate the risk of third-party providers logging traffic metadata, inserting ads, or responding to external data requests. This course addresses both protocols, considering various threat models and performance needs.

Wazuh is an open-source security platform offering integrated XDR and SIEM features for threat detection, integrity monitoring, incident response, and compliance. It consolidates endpoint telemetry within a self-managed analysis engine, positioning itself as a strong alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-based SIEM platforms

Woodpecker CI is a straightforward yet robust continuous integration engine tailored for self-hosted Git platforms such as Gitea and Forgejo. It delivers a streamlined, Docker-native CI/CD solution without the complexity or licensing burdens often associated with enterprise CI platforms.

This instructor-led, live training in Germany (online or onsite) is aimed at intermediate-level to advanced-level security professionals who wish to implement Zero Trust Architecture using open-source tools and sovereign infrastructure.

By the end of this training, participants will be able to design Zero Trust architectures, deploy identity-aware proxies, implement dynamic authentication, secure microservices with service mesh, and monitor zero trust policies.