Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- Understanding why centralized chat poses data governance risks.
- Overview of the Matrix protocol: rooms, events, and federation.
- Comparison of Synapse and Dendrite homeserver options.
Homeserver Deployment
- Setting up a Docker Compose stack with Synapse, PostgreSQL, and Element Web.
- Configuring reverse proxies using Nginx and LetsEncrypt.
- Federation configuration: managing .well-known delegation and port 8448.
Authentication and Identity
- Implementing local authentication, LDAP integration, and OpenID Connect.
- Defining user registration policies and guest access controls.
- Integrating SSO with tools like Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Managing cross-signing and device verification workflows.
- Setting up key backup and recovery processes for lost devices.
- Understanding administrative implications regarding encrypted rooms and export rules.
Spaces, Rooms, and Bridges
- Structuring enterprise spaces to align with departments and projects.
- Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
- Leveraging threading, reactions, and bots for automation.
Security and Moderation
- Using the Admin API for user management, room shutdowns, and data deletion.
- Configuring privacy settings: message retention, redaction, and media purging.
- Implementing rate limiting and CAPTCHA to mitigate spam registrations.
Maintenance and Scaling
- Postgres maintenance tasks: vacuuming, indexing, and long-term data retention.
- Managing media repository sizing and offloading to S3.
- Monitoring performance with Prometheus and establishing logging retention policies.
Requirements
- Intermediate Linux system administration skills and foundational knowledge of Docker.
- Understanding of federated messaging concepts and HTTPS.
- Familiarity with web proxy configuration (Nginx/Apache).
Audience
- Enterprise IT teams seeking to replace Slack, Teams, or Discord with sovereign messaging solutions.
- Regulated industries: healthcare, finance, defense.
- Proponents of decentralization and privacy-focused organizations.
14 Hours
