Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereignty in Decentralized Communication
- Understanding why centralized chat poses data governance risks.
- Overview of the Matrix protocol: rooms, events, and federation mechanics.
- Comparing Synapse and Dendrite as homeserver options.
Deploying the Homeserver
- Building a Docker Compose stack with Synapse, PostgreSQL, and Element Web.
- Setting up reverse proxies using Nginx and LetsEncrypt.
- Configuring federation: .well-known delegation and port 8448 setup.
Authentication and Identity Management
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and controlling guest access.
- Setting up SSO with Keycloak, Authentik, or Authelia.
End-to-End Encryption Implementation
- Managing cross-signing and device verification workflows.
- Establishing key backup and recovery processes for lost devices.
- Understanding administrative implications for encrypted rooms and export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces to align with departments and projects.
- Using IRC, Slack, and Telegram bridges to enhance inter-team communication.
- Leveraging threading, reactions, and bots for automation.
Security and Moderation Strategies
- Using the Admin API for user management, room shutdown, and data deletion.
- Configuring privacy settings: message retention, redaction, and media purging.
- Applying rate limiting and CAPTCHA to prevent spam registration.
Maintenance and Scalability
- PostgreSQL maintenance: vacuuming, indexing, and long-term data retention.
- Managing media repository size and offloading to S3.
- Monitoring with Prometheus and defining logging retention policies.
Requirements
- Intermediate proficiency in Linux system administration and Docker fundamentals.
- A solid grasp of federated messaging concepts and HTTPS.
- Experience with web proxy configuration, specifically Nginx or Apache.
Target Audience
- Enterprise IT teams migrating from Slack, Teams, or Discord to sovereign messaging solutions.
- Professionals in regulated sectors such as healthcare, finance, and defense.
- Organizations prioritizing privacy and decentralization.
14 Hours
