Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- Why centralized chat platforms pose risks to data governance.
- Overview of the Matrix protocol: rooms, events, and federation.
- Comparison of Synapse vs. Dendrite homeserver options.
Homeserver Deployment
- Setting up a Docker Compose stack comprising Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxies using Nginx and LetsEncrypt.
- Federation setup: managing .well-known delegation and port 8448.
Authentication and Identity
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Establishing user registration policies and controlling guest access.
- Configuring Single Sign-On (SSO) with Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Managing cross-signing and device verification workflows.
- Handling key backup and recovery procedures for lost devices.
- Understanding administrative implications of encrypted rooms and data export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces to align with departments and projects.
- Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
- Leveraging threading, reactions, and bots for automation.
Security and Moderation
- Using the Admin API for user management, room shutdowns, and data deletion.
- Configuring privacy settings: message retention, redaction, and media purging.
- Implementing rate limiting and CAPTCHA to prevent spam registrations.
Maintenance and Scaling
- PostgreSQL maintenance tasks: vacuuming, indexing, and long-term retention strategies.
- Optimizing media repository sizing and offloading to S3.
- Monitoring system health with Prometheus and defining logging retention policies.
Requirements
- Intermediate knowledge of Linux system administration and Docker fundamentals.
- Understanding of federated messaging systems and HTTPS protocols.
- Familiarity with web proxy configurations (e.g., Nginx/Apache).
Audience
- Enterprise IT teams looking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Sectors in regulated industries such as healthcare, finance, and defense.
- Advocates for decentralization and privacy-focused organizations.
14 Hours
