Get in Touch

Course Outline

Federated Messaging Sovereignty

  • Analysis of data isolation and foreign jurisdiction risks associated with commercial platforms such as Slack and Teams.
  • Overview of Matrix protocol architecture, including homeservers, rooms, event handling, and federation mechanisms.
  • Evaluation of Synapse as the reference server, detailing its functional capabilities and resource utilization profile.
  • Comparative assessment with Mattermost, Rocket.Chat, and Zulip for government messaging needs.

Synapse Deployment

  • Construction of a Docker Compose environment integrating Synapse, PostgreSQL, and Element Web.
  • Execution of native package installation and configuration of systemd service management.
  • Implementation of a reverse proxy using Nginx with TLS encryption for secure communication.
  • Generation of initial configuration files and execution of database migration procedures.

Client Configuration

  • Deployment of Element Web with tailored organizational branding.
  • Configuration of desktop and mobile applications to connect to custom homeserver URLs.
  • Management of user registration, authentication, and password recovery protocols.
  • Establishment of guest access restrictions and room discovery policies for controlled environments.

Encryption and Security

  • Implementation of end-to-end encryption utilizing Olm and Megolm algorithms.
  • Configuration of device verification procedures and cross-signing protocols for trust assurance.
  • Setup of key backup and recovery systems secured by passphrases.
  • Review of administrative access limitations to encrypted content and associated risk mitigation strategies.

Bridges and Integrations

  • Implementation of interoperability bridges for Slack, Discord, IRC, and WhatsApp.
  • Configuration of email notification systems and integration with GitHub and GitLab webhooks.
  • Integration of Jitsi for secure, encrypted video conferencing capabilities.
  • Development of custom automation bots using the matrix-nio Software Development Kit (SDK).

Federation and Governance

  • Definition of federation whitelist and blacklist policies to control external interactions.
  • Management of room version upgrades and state resolution processes.
  • Enforcement of media repository limits and data retention schedules.
  • Deployment of anti-spam measures and abuse reporting tools for platform integrity.

Maintenance and Scaling

  • Optimization of database performance and execution of data purge APIs for archival management.
  • Streamlining of media storage cleanup and offloading to S3-compatible object storage.
  • Utilization of worker mode to support high-traffic operational demands.
  • Establishment of backup and disaster recovery protocols for critical homeserver state.

Requirements

  • Intermediate proficiency in Linux and Docker administration.
  • Working knowledge of instant messaging protocols and federation concepts.
  • Familiarity with PostgreSQL and the deployment of Python-based applications.

Target Audience

  • IT teams seeking a sovereign alternative to commercial platforms such as Slack, Teams, or Discord.
  • Organizations with mandates for on-premise messaging solutions featuring end-to-end encryption.
  • Government and defense agencies requiring federated, auditable, and secure communication channels for government operations.
 14 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories