Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Sovereignty in Decentralized Communication
- The data governance risks associated with centralized chat platforms.
- An overview of the Matrix protocol, including rooms, events, and federation.
- Comparing Synapse and Dendrite as homeserver options.
Deploying the Homeserver
- Setting up a Docker Compose stack featuring Synapse, PostgreSQL, and Element Web.
- Configuring a reverse proxy using Nginx and LetsEncrypt.
- Managing federation settings, including .well-known delegation and port 8448.
Authentication and Identity Management
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and controlling guest access.
- Establishing SSO connections with Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Workflows for cross-signing and device verification.
- Strategies for key backup and recovery in case of lost devices.
- Understanding administrative implications for encrypted rooms and export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces for specific departments and projects.
- Using IRC, Slack, and Telegram bridges to facilitate inter-team communication.
- Leveraging threading, reactions, and bots for process automation.
Security and Moderation
- Using the Admin API for user management, room shutdown, and data deletion.
- Configuring privacy settings for message retention, redaction, and media purging.
- Mitigating spam registration through rate limiting and CAPTCHA.
Maintenance and Scaling
- Performing Postgres maintenance, including vacuuming, indexing, and long-term retention.
- Managing media repository sizing and offloading to S3.
- Monitoring with Prometheus and establishing logging retention policies.
Requirements
- Intermediate proficiency in Linux system administration and fundamental Docker knowledge.
- A solid understanding of federated messaging and HTTPS protocols.
- Experience with web proxy configuration, specifically Nginx or Apache.
Target Audience
- Enterprise IT teams looking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Professionals in regulated sectors such as healthcare, finance, and defense.
- Advocates of decentralization and privacy-focused organizations.
