Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Decentralized Communication Sovereignty
- Assessment of data governance vulnerabilities associated with centralized messaging platforms.
- Technical overview of the Matrix protocol, including event structures, room management, and federated architectures.
- Evaluation of Synapse and Dendrite homeserver options for government deployment.
Homeserver Deployment
- Implementation of a Docker Compose stack integrating Synapse, PostgreSQL, and Element Web.
- Configuration of reverse proxies using Nginx and Let’s Encrypt for secure access.
- Establishment of federation protocols via .well-known delegation and port 8448 configuration.
Authentication and Identity
- Configuration of local authentication, LDAP integration, and OpenID Connect standards.
- Enforcement of user registration policies and controls for guest access within public sector environments.
- Implementation of Single Sign-On (SSO) solutions using Keycloak, Authentik, or Authelia.
End-to-End Encryption
- Management of cross-signing mechanisms and device verification workflows.
- Provisioning of key backup and recovery protocols for lost or compromised devices.
- Analysis of administrative responsibilities regarding encrypted rooms and data export compliance for government agencies.
Spaces, Rooms, and Bridges
- Structuring organizational spaces to align with departmental hierarchies and project-specific requirements.
- Deployment of IRC, Slack, and Telegram bridges to facilitate inter-departmental communication.
- Utilization of threading, reactions, and automated bots for operational efficiency.
Security and Moderation
- Administration of user management, room termination, and data deletion via the Admin API.
- Implementation of privacy controls including message retention schedules, redaction capabilities, and media purging.
- Mitigation of spam registration threats through rate limiting and CAPTCHA enforcement.
Maintenance and Scaling
- PostgreSQL maintenance procedures, including vacuuming, indexing optimization, and long-term data retention strategies.
- Sizing of media repositories and offloading strategies to S3-compatible storage.
- Monitoring infrastructure using Prometheus and enforcement of logging retention policies.
Requirements
- Intermediate proficiency in Linux system administration and Docker fundamentals.
- Comprehensive understanding of federated messaging protocols and HTTPS standards.
- Familiarity with web proxy configuration using Nginx or Apache.
Audience
- Enterprise IT teams transitioning from Slack, Teams, or Discord to sovereign messaging solutions for government.
- Personnel in regulated industries, including healthcare, finance, and defense.
- Organizations prioritizing decentralization and privacy compliance.
14 Hours