Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- The data governance risks associated with centralized chat platforms.
- Overview of the Matrix protocol: rooms, events, and federation mechanisms.
- Comparison of Synapse and Dendrite homeserver options.
Homeserver Deployment
- Setting up a Docker Compose stack featuring Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxies using Nginx and LetsEncrypt.
- Federation setup: managing .well-known delegation and port 8448.
Authentication and Identity Management
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Establishing user registration policies and controlling guest access.
- Configuring Single Sign-On (SSO) using Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Understanding cross-signing and device verification workflows.
- Managing key backup and recovery procedures for lost devices.
- Exploring administrative implications of encrypted rooms and data export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces to align with departments and project needs.
- Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
- Leveraging threading, reactions, and bots for automation tasks.
Security and Moderation Strategies
- Using the Admin API for user management, room shutdowns, and data deletion.
- Configuring privacy settings including message retention, redaction, and media purging.
- Implementing rate limiting and CAPTCHA to mitigate spam registrations.
Maintenance and Scaling
- PostgreSQL maintenance tasks: vacuuming, indexing, and long-term retention strategies.
- Determining media repository sizing and offloading to S3.
- Implementing monitoring with Prometheus and defining logging retention policies.
Requirements
- Intermediate-level Linux system administration skills and a foundational understanding of Docker.
- Understanding of federated messaging protocols and HTTPS.
- Familiarity with web proxy configuration, specifically using Nginx or Apache.
Audience
- Enterprise IT teams seeking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Professionals in regulated industries such as healthcare, finance, and defense.
- Advocates of decentralization and privacy-focused organizations.
14 Hours
