Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Sovereign Architecture Design
- Threat modeling: Pinpointing cloud dependencies and data egress pathways.
- Network topology: Configuring DMZ, internal zones, and management networks.
- Hardware selection: Choosing servers, storage, networking gear, and UPS systems.
- Requirements for disaster recovery sites and air-gapped environments.
Identity and Access Foundation
- Deploying Authentik to enable SSO across all services.
- Designing LDAP directories and group policies.
- Utilizing Step CA for service-to-service mTLS.
- Enrolling YubiKeys and hardware security tokens.
Communication and Collaboration Hub
- Using Synapse/Element for chat and federation capabilities.
- Implementing Jitsi Meet for video conferencing.
- Setting up Roundcube/Nextcloud Mail for email services.
- Utilizing Nextcloud for file synchronization, calendars, and contacts.
- Integrating OnlyOffice for document editing workflows.
Development and Operations Platform
- Using Gitea for source code management and CI/CD pipelines.
- Employing Woodpecker CI for automated build processes.
- Configuring Nexus or Harbor for artifact and container registries.
- Deploying Wazuh for security monitoring and compliance tracking.
- Using Uptime Kuma for service health dashboards.
AI and Knowledge Management
- Deploying Ollama for local LLM serving capabilities.
- Configuring LibreChat for internal AI assistant access.
- Using Obsidian or Logseq for personal knowledge base management.
- Preserving web content with Hoarder/ArchiveBox.
Security and Perimeter
- Deploying pfSense or OPNsense firewalls.
- Implementing Suricata IDS/IPS with custom rule sets.
- Configuring WireGuard/OpenVPN for secure remote access.
- Setting up Pi-hole for DNS filtering and local resolution.
- Managing team passwords with Vaultwarden.
Backup, DR, and Operations
- Creating a central BorgBackup repository for all services.
- Automating database dumps and off-site replication.
- Documenting runbooks and incident response procedures.
- Planning for capacity and identifying scaling triggers.
- Conducting quarterly sovereignty audits and dependency reviews.
Capstone Project
- Students present their fully operational sovereign stack.
- Peer review of architectural decisions and trade-offs.
- Performing load testing and failure injection exercises.
- Finalizing documentation handoff and assessing operational readiness.
Requirements
- Advanced proficiency in Linux, networking, and container orchestration.
- Completion of at least two other Data Sovereignty courses or comparable practical experience.
- Working knowledge of DNS, TLS, firewall, and backup principles.
Target Audience
- Senior infrastructure architects designing sovereign organizational structures.
- CTOs and CISOs developing digital independence strategies.
- Digital transformation teams within government and defense sectors.
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
