Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- Understanding why centralized chat poses data governance risks.
- Overview of the Matrix protocol: rooms, events, and federation.
- Comparing Synapse and Dendrite as homeserver options.
Homeserver Deployment
- Setting up a Docker Compose stack with Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxy settings using Nginx and LetsEncrypt.
- Establishing federation configuration: .well-known delegation and port 8448.
Authentication and Identity Management
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and managing guest access control.
- Setting up SSO with Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Managing cross-signing and device verification workflows.
- Performing key backup and recovery for lost devices.
- Understanding the administrative implications of encrypted rooms and export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces for departments and specific projects.
- Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
- Leveraging threading, reactions, and bots for workflow automation.
Security and Moderation
- Using the Admin API for user management, room shutdowns, and data deletion.
- Configuring privacy settings: message retention, redaction, and media purging.
- Implementing rate limiting and CAPTCHA to mitigate spam registration.
Maintenance and Scaling
- Performing Postgres maintenance: vacuuming, indexing, and long-term retention strategies.
- Managing media repository sizing and offloading to S3.
- Monitoring with Prometheus and defining logging retention policies.
Requirements
- Intermediate Linux system administration skills and a basic understanding of Docker.
- Familiarity with federated messaging protocols and HTTPS.
- Experience with web proxy configuration (Nginx/Apache).
Audience
- Enterprise IT teams seeking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Professionals in regulated industries such as healthcare, finance, and defense.
- Advocates of decentralization and privacy-focused organizations.
14 Hours
