Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Sovereign Architecture Design
- Threat modeling: Identifying cloud dependencies and data egress points.
- Network topology: Establishing DMZs, internal zones, and management networks.
- Hardware selection: Server, storage, networking, and UPS specifications.
- Disaster recovery sites and air-gap requirements.
Identity and Access Foundation
- Deploying Authentik for SSO across all services.
- Designing LDAP directories and group policies.
- Utilizing Step CA for service-to-service mTLS.
- Enrolling YubiKeys and hardware tokens.
Communication and Collaboration Hub
- Synapse/Element for chat and federation capabilities.
- Jitsi Meet for video conferencing.
- Roundcube/Nextcloud Mail for email services.
- Nextcloud for file synchronization, calendars, and contacts.
- OnlyOffice integration for document editing.
Development and Operations Platform
- Gitea for source code management and CI/CD.
- Woodpecker CI for automated builds.
- Nexus or Harbor for artifact and container registries.
- Wazuh for security monitoring and compliance.
- Uptime Kuma for service health dashboards.
AI and Knowledge Management
- Deploying Ollama with local LLM serving.
- LibreChat for internal AI assistant access.
- Obsidian or Logseq for personal knowledge bases.
- Hoarder/ArchiveBox for web content preservation.
Security and Perimeter Defense
- Deploying pfSense or OPNsense firewalls.
- Configuring Suricata IDS/IPS with custom rules.
- Implementing WireGuard/OpenVPN for remote access.
- Pi-hole DNS filtering and local resolution.
- Vaultwarden for team password management.
Backup, DR, and Operations
- Central BorgBackup repository for all services.
- Automated database dumps and off-site replication.
- Runbook documentation and incident response procedures.
- Capacity planning and scaling triggers.
- Quarterly sovereignty audits and dependency reviews.
Capstone Project
- Students present their fully operational sovereign stack.
- Peer review of architecture decisions and tradeoffs.
- Load testing and failure injection scenarios.
- Documentation handoff and operational readiness assessment.
Requirements
- Advanced proficiency in Linux, networking, and container orchestration.
- Completion of at least two other Data Sovereignty courses or equivalent professional experience.
- Familiarity with DNS, TLS, firewall configurations, and backup concepts.
Target Audience
- Senior infrastructure architects responsible for designing sovereign organizations.
- CTOs and CISOs developing roadmaps for digital independence.
- Government and defense digital transformation teams.
35 Hours
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
