Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 35 hours
Course Outline
Designing Sovereign Architecture
- Threat modeling: pinpointing cloud dependencies and data egress points.
- Network topology: configuring DMZ, internal zones, and management networks.
- Hardware selection: choosing servers, storage, networking gear, and UPS units.
- Establishing disaster recovery sites and air-gap requirements.
Identity and Access Foundations
- Deploying Authentik to enable SSO across all services.
- Designing LDAP directory structures and group policies.
- Configuring Step CA for service-to-service mTLS.
- Enrolling YubiKey and other hardware tokens.
Communication and Collaboration Hubs
- Implementing Synapse/Element for chat and federation.
- Setting up Jitsi Meet for video conferencing.
- Deploying Roundcube/Nextcloud Mail for email services.
- Utilizing Nextcloud for file synchronization, calendars, and contacts.
- Integrating OnlyOffice for document editing capabilities.
Development and Operations Platforms
- Using Gitea for source code management and CI/CD pipelines.
- Configuring Woodpecker CI for automated builds.
- Deploying Nexus or Harbor for artifact and container registry management.
- Implementing Wazuh for security monitoring and compliance checks.
- Establishing Uptime Kuma for service health dashboards.
AI and Knowledge Management
- Deploying Ollama for local LLM serving.
- Setting up LibreChat for internal AI assistant access.
- Adopting Obsidian or Logseq for personal knowledge bases.
- Preserving web content using Hoarder/ArchiveBox.
Security and Perimeter Defense
- Deploying pfSense or OPNsense firewalls.
- Configuring Suricata IDS/IPS with custom rules.
- Setting up WireGuard/OpenVPN for secure remote access.
- Implementing Pi-hole for DNS filtering and local resolution.
- Managing team passwords with Vaultwarden.
Backup, DR, and Operations
- Establishing a BorgBackup central repository for all services.
- Automating database dumps and off-site replication.
- Documenting runbooks and incident response procedures.
- Conducting capacity planning and defining scaling triggers.
- Performing quarterly sovereignty audits and dependency reviews.
Capstone Project
- Presenting a fully operational sovereign stack.
- Peer review of architectural decisions and associated trade-offs.
- Conducting load testing and failure injection exercises.
- Handing over documentation and assessing operational readiness.
Requirements
- Advanced proficiency in Linux, networking, and container orchestration.
- Completion of at least two other Data Sovereignty courses or equivalent professional experience.
- Solid understanding of DNS, TLS, firewall, and backup concepts.
Target Audience
- Senior infrastructure architects involved in designing sovereign organizations.
- CTOs and CISOs formulating digital independence roadmaps.
- Digital transformation teams within government and defense sectors.
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
