Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- The risks centralized chat poses to data governance.
- Overview of the Matrix protocol: rooms, events, and federation.
- Comparing Synapse and Dendrite as homeserver options.
Homeserver Deployment
- Setting up a Docker Compose stack with Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxies using Nginx and LetsEncrypt.
- Establishing federation through .well-known delegation and port 8448.
Authentication and Identity
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and controlling guest access.
- Configuring Single Sign-On (SSO) with Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Workflows for cross-signing and device verification.
- Key backup and recovery procedures for lost devices.
- Administrative considerations regarding encrypted rooms and export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces to align with departments and projects.
- Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
- Leveraging threading, reactions, and bots for automation.
Security and Moderation
- Using Admin APIs for user management, room shutdowns, and data deletion.
- Configuring privacy settings: message retention, redaction, and media purging.
- Implementing rate limiting and CAPTCHA to mitigate spam registrations.
Maintenance and Scaling
- Postgres maintenance tasks: vacuuming, indexing, and long-term retention strategies.
- Determining media repository sizing and offloading to S3.
- Monitoring with Prometheus and establishing logging retention policies.
Requirements
- Intermediate knowledge of Linux system administration and foundational Docker concepts.
- Understanding of federated messaging protocols and HTTPS.
- Familiarity with web proxy configuration (e.g., Nginx/Apache).
Audience
- Enterprise IT teams seeking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Sectors in regulated industries such as healthcare, finance, and defense.
- Proponents of decentralization and organizations prioritizing privacy.
14 Hours
