Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereign Architecture Design
- Threat modeling: identifying cloud dependencies and data egress points.
- Network topology: DMZ, internal zones, and management networks.
- Hardware selection: servers, storage, networking equipment, and UPS systems.
- Disaster recovery sites and air-gap requirements.
Identity and Access Foundation
- Deployment of Authentik for SSO across all services.
- LDAP directory setup and group policy design.
- Step CA configuration for service-to-service mTLS.
- YubiKey and hardware token enrollment processes.
Communication and Collaboration Hub
- Synapse/Element deployment for chat and federation.
- Jitsi Meet integration for video conferencing.
- Roundcube/Nextcloud Mail setup for email services.
- Nextcloud utilization for file sync, calendars, and contacts.
- OnlyOffice integration for document editing capabilities.
Development and Operations Platform
- Gitea deployment for source code management and CI/CD.
- Woodpecker CI for automated build processes.
- Nexus or Harbor setup for artifact and container registries.
- Wazuh implementation for security monitoring and compliance.
- Uptime Kuma configuration for service health dashboards.
AI and Knowledge Management
- Ollama deployment with local LLM serving capabilities.
- LibreChat setup for internal AI assistant access.
- Obsidian or Logseq implementation for personal knowledge bases.
- Hoarder/ArchiveBox usage for web content preservation.
Security and Perimeter Defense
- pfSense or OPNsense firewall deployment.
- Suricata IDS/IPS configuration with custom rules.
- WireGuard/OpenVPN setup for remote access.
- Pi-hole DNS filtering and local resolution services.
- Vaultwarden implementation for team password management.
Backup, DR, and Operations
- BorgBackup central repository deployment for all services.
- Database dump automation and off-site replication strategies.
- Runbook documentation and incident response procedures.
- Capacity planning and scaling trigger definitions.
- Quarterly sovereignty audits and dependency reviews.
Capstone Project
- Students present their fully operational sovereign stack.
- Peer review of architecture decisions and tradeoffs.
- Load testing and failure injection exercises.
- Documentation handoff and operational readiness assessment.
Requirements
- Advanced proficiency in Linux, networking, and container orchestration.
- Completion of at least two other Data Sovereignty courses or equivalent practical experience.
- Familiarity with DNS, TLS, firewall configurations, and backup concepts.
Audience
- Senior infrastructure architects designing sovereign organizational structures.
- CTOs and CISOs formulating digital independence roadmaps.
- Government and defense digital transformation teams.
35 Hours
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
