Stalwart Mail Server: Self-Hosted Email and Collaboration Training Course

Gitea provides a lightweight, open-source, self-hosted Git solution that supports repository management, peer code review, issue tracking, and continuous integration/continuous deployment workflows. It serves as a viable alternative to commercial platforms for organizations seeking sovereign control over their source code infrastructure, ensuring compliance with regulatory frameworks and avoiding dependency on third-party service agreements. These capabilities are specifically designed for government use cases requiring strict data sovereignty and operational autonomy.

GitLab Self-Managed provides an on-premises implementation of GitLab’s comprehensive DevSecOps platform, encompassing source code management, continuous integration and delivery, container registry, security scanning, and monitoring capabilities. This solution serves as a preferred option for federal agencies requiring the full functionality of the GitLab ecosystem while maintaining strict data sovereignty and eliminating reliance on Software-as-a-Service models, thereby keeping sensitive information within the secure perimeter of government networks designed for government operations.

This instructor-led, live training in US (online or onsite) is designed for intermediate to advanced DevOps engineers and system administrators seeking to deploy and manage self-hosted Kubernetes clusters independent of cloud providers. This program supports professionals developing capabilities for government environments by emphasizing on-premises infrastructure management.

Upon completion of this course, participants will be equipped to: deploy production-grade Kubernetes clusters using kubeadm on bare-metal or virtual machine infrastructures; configure high-availability control planes and etcd datastores; implement container networking and storage solutions for self-managed environments; and establish monitoring and observability frameworks utilizing self-hosted tools.

This instructor-led live session, available in online or onsite formats, serves cloud professionals seeking to architect multi-cloud environments that mitigate vendor dependency and uphold data sovereignty standards.

This curriculum is designed for government entities requiring robust compliance and flexibility in their cloud strategies.

Upon completion of this training, participants will be equipped to recognize risks associated with vendor lock-in, design portable infrastructure architectures, enforce data sovereignty controls, and utilize cloud-agnostic technologies effectively.

This instructor-led, live training in US (online or onsite) is designed for network engineers and infrastructure professionals interested in leveraging SONiC and ONL to deploy and manage open network infrastructure on white-box switches. This initiative supports the adoption of standardized practices for government.

Upon completion of this program, participants will be equipped to comprehend SONiC and ONL architectures, deploy open-source NOS solutions on white-box hardware, configure networking features, and implement monitoring and automation protocols.

This instructor-led live training, offered via online or onsite formats, is designed for system administrators and infrastructure engineers seeking to design, deploy, and manage private OpenStack cloud infrastructure within enterprise settings. The curriculum addresses specific needs for government systems by ensuring robust operational frameworks.

Upon completion of this program, participants will demonstrate competency in comprehending OpenStack architecture, deploying private cloud solutions, managing compute and storage assets, implementing security protocols via Keystone, and applying industry best practices.

This instructor-led, live instructional program US (online or onsite) is designed for intermediate-level network engineers and infrastructure administrators who aim to deploy software-defined networks using open source technologies. Upon completion of this training, participants will gain the capability to design SDN architectures, implement Open vSwitch, configure FRRouting, deploy SDN controllers, and automate network management operations tailored for government environments.

This instructor-led, live training session, available remotely or on-site in US, is intended for intermediate-level network and infrastructure professionals seeking to leverage open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network environment tailored for government.

Upon completion of this program, participants will be capable of designing open-source enterprise network architectures, configuring routing, switching, and wireless services, enhancing security and observability capabilities, and developing an operational plan for sustained support.

Terraform is an open-source infrastructure-as-code solution that enables organizations to define and provision data center resources through a declarative configuration language. When integrated with self-hosted backends and on-premise providers, Terraform serves as a critical tool for sovereign infrastructure governance, effectively reducing dependency on commercial cloud vendors.

This instructor-led training program, offered in online or onsite formats, is designed for intermediate infrastructure engineers aiming to utilize Terraform for managing self-hosted environments, including Proxmox, VMware, libvirt, and bare-metal systems. It addresses the specific needs of government agencies seeking reliable infrastructure management for government applications.

Upon completion of this training, participants will be capable of:

• Developing robust Terraform configurations for on-premise and hybrid resource deployment.
• Administering state storage securely using self-hosted backends such as PostgreSQL, S3-compatible storage, and Gitea.
• Employing provisioners and custom providers to oversee the complete bare-metal lifecycle.
• Implementing efficient workspaces, modular architectures, and variable hierarchies.
• Integrating Terraform into CI/CD pipelines to facilitate automated infrastructure delivery.

Format of the Course

• Interactive lectures and guided discussions.
• Extensive exercises and practical labs.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training track for this course, please contact us to arrange specific requirements.

Uptime Kuma serves as a straightforward, self-managed monitoring solution for assessing the availability of websites, services, and infrastructure. It provides an alternative to commercial offerings such as Pingdom, Datadog Synthetics, and UptimeRobot for organizations seeking full control over their monitoring data. This instructor-led training program (available online or onsite) targets entry-to-mid level Site Reliability Engineers (SREs) and DevOps professionals who aim to implement Uptime Kuma for government purposes, transitioning from cloud-based uptime checks to a sovereign, self-hosted status verification platform.

This instructor-led, live training offered in US (online or onsite) is designed for security engineers and system administrators who seek to implement and manage enterprise-grade, self-hosted VPN solutions utilizing WireGuard and OpenVPN. The curriculum supports government entities requiring robust network access controls.

Upon completion of this program, participants will possess the capability to deploy WireGuard and OpenVPN environments, design scalable architectures, integrate with identity management systems, and effectively monitor and secure VPN infrastructure.

OpenVPN and WireGuard represent the two primary open-source Virtual Private Network (VPN) protocols currently utilized. Establishing an independent VPN server guarantees that external entities cannot monitor traffic metadata, introduce advertisements, or adhere to international data requests. This instructional material addresses both protocols in relation to various threat models and performance specifications for government use.

Wazuh is an open-source security platform providing unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, offering a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs

Woodpecker CI delivers a streamlined continuous integration engine tailored for self-hosted Git repositories such as Gitea and Forgejo. It offers a lightweight, Docker-centric approach to CI/CD workflows, eliminating the administrative burden and licensing costs associated with enterprise-grade solutions, thereby meeting the distinct requirements for government.

This instructor-led, live training in US (online or onsite) is designed for intermediate and advanced security professionals seeking to establish Zero Trust Architecture utilizing open-source solutions and sovereign infrastructure for government.

Upon completion of this program, participants will possess the ability to design Zero Trust architectures, deploy identity-aware proxies, implement dynamic authentication, secure microservices via service mesh, and monitor Zero Trust policies.