Get in Touch

Course Outline

Decentralized Communication Sovereignty

  • Why centralized chat poses data governance risks.
  • Overview of the Matrix protocol: rooms, events, and federation.
  • Comparing Synapse and Dendrite as homeserver options.

Homeserver Deployment

  • Setting up a Docker Compose stack comprising Synapse, PostgreSQL, and Element Web.
  • Configuring reverse proxy setups using Nginx and LetsEncrypt.
  • Configuring federation, including .well-known delegation and port 8448.

Authentication and Identity

  • Local authentication, LDAP integration, and OpenID Connect.
  • Establishing user registration policies and controlling guest access.
  • Implementing SSO with solutions like Keycloak, Authentik, or Authelia.

End-to-End Encryption

  • Managing cross-signing and device verification workflows.
  • Setting up key backup and recovery for lost devices.
  • Understanding admin implications of encrypted rooms and export regulations.

Spaces, Rooms, and Bridges

  • Structuring enterprise spaces for various departments and projects.
  • Utilizing IRC, Slack, and Telegram bridges for inter-team communication.
  • Leveraging threading, reactions, and bots for automation.

Security and Moderation

  • Using the Admin API for user management, room shutdown, and data deletion.
  • Adjusting privacy settings: message retention, redaction, and media purging.
  • Implementing rate limiting and CAPTCHA to mitigate spam registration.

Maintenance and Scaling

  • Postgres maintenance tasks: vacuum, indexing, and long-term retention.
  • Determining media repository sizing and utilizing S3 offloading.
  • Monitoring via Prometheus and establishing logging retention policies.

Requirements

  • Intermediate Linux system administration skills and foundational knowledge of Docker.
  • Understanding of federated messaging and HTTPS protocols.
  • Familiarity with web proxy configuration, specifically using Nginx or Apache.

Audience

  • Enterprise IT teams seeking to replace Slack, Teams, or Discord with sovereign messaging solutions.
  • Regulated industries such as healthcare, finance, and defense.
  • Proponents of decentralization and privacy-focused organizations.
 14 Hours

Testimonials (3)

Related Categories