Infrastructure Sovereignty Training in Sofia

Gitea is a lightweight, open-source solution for self-hosted Git services. It offers repository management, code reviews, issue tracking, and continuous integration/continuous deployment (CI/CD) integration. For teams seeking complete control over their source code—free from third-party terms of service or export restrictions—Gitea has become an increasingly popular alternative to GitHub and GitLab.com.

GitLab Self-Managed represents the on-premises implementation of GitLab's all-encompassing DevSecOps platform, encompassing source code management, CI/CD, container registry, security scanning, and monitoring capabilities. It serves as the premier choice for organizations seeking the complete GitLab feature set without relying on SaaS services or allowing data to exit their internal networks.

This instructor-led, live training in Sofia (online or onsite) is aimed at intermediate to advanced DevOps engineers and system administrators who wish to deploy and manage self-hosted Kubernetes clusters without cloud dependencies.

By the end of this training, participants will be able to: deploy production-ready Kubernetes clusters using kubeadm on bare-metal or virtual machines; configure high-availability control planes and etcd clusters; implement container networking and storage for self-managed environments; set up monitoring and observability using self-hosted solutions.

This instructor-led live training (available online or onsite) is designed for cloud professionals aiming to create and implement multi-cloud architectures that mitigate vendor lock-in risks and ensure data sovereignty.

By the conclusion of this training, participants will be able to identify vendor lock-in risks, design portable architectures, enforce data sovereignty controls, and utilize cloud-agnostic tools.

This instructor-led, live training in Sofia (online or onsite) is designed for network engineers and infrastructure professionals who want to use SONiC and ONL to deploy and manage open network infrastructure on white-box switches.

By the end of this training, participants will be able to: understand the architecture of SONiC and ONL, deploy open-source NOS on white-box hardware, configure networking features, and implement monitoring and automation.

This instructor-led, live training session (available online or onsite) targets system administrators and infrastructure engineers seeking to design, deploy, and manage private OpenStack cloud infrastructure for enterprise environments.

By the end of this training, participants will be able to understand OpenStack architecture, deploy private cloud infrastructure, manage compute and storage resources, implement security with Keystone, and apply enterprise best practices.

This instructor-led live training in Sofia (available online or onsite) is designed for intermediate-level network engineers and infrastructure administrators who aim to implement software-defined networks using open source tools and technologies.

By the end of this training, participants will be able to design SDN architectures, implement Open vSwitch, configure FRRouting, deploy SDN controllers, and automate network management processes.

This instructor-led live training in Sofia (available online or onsite) is aimed at intermediate-level network and infrastructure professionals who wish to use open-source routing, switching, Wi-Fi, and management tools to design, deploy, and operate a self-managed enterprise network.

By the end of this training, participants will be able to: design an open-source enterprise network architecture, configure routing, switching, and wireless services, enhance security and observability, and develop an operational plan for ongoing support.

Terraform is an open-source infrastructure-as-code tool that enables teams to define and provision data center resources through a declarative configuration language. When combined with self-hosted backends and on-premise providers, Terraform becomes a powerful solution for managing sovereign infrastructure, effectively eliminating reliance on cloud vendors.

This instructor-led live training (available online or onsite) is designed for intermediate infrastructure engineers looking to use Terraform to manage self-hosted environments, including Proxmox, VMware, libvirt, and bare-metal provisioning.

By the end of this course, participants will be able to:

• Write robust Terraform configurations for on-premise and hybrid resources.
• Securely manage state using self-hosted backends such as PostgreSQL, S3-compatible storage, and Gitea.
• Utilize provisioners and custom providers to manage the entire bare-metal lifecycle.
• Implement efficient workspaces, modular architectures, and variable hierarchies.
• Integrate Terraform into CI/CD pipelines for automated infrastructure delivery.

Course Format

• Interactive lectures and guided discussions.
• Extensive exercises and practical labs.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training track for this course, please contact us to arrange specific requirements.

Uptime Kuma is a user-friendly, self-hosted monitoring solution that tracks the availability of websites, services, and infrastructure. It replaces Pingdom, Datadog Synthetics, and UptimeRobot for teams that prefer to keep their monitoring data under their own control. This instructor-led live training (online or onsite) targets beginner-to-intermediate SREs and DevOps engineers who wish to use Uptime Kuma to replace cloud uptime monitoring with a self-hosted, sovereign status tracking platform.

This instructor-led, live training in Sofia (online or onsite) is aimed at security engineers and system administrators who wish to deploy and manage enterprise-grade self-hosted VPN solutions using WireGuard and OpenVPN.

By the end of this training, participants will be able to deploy WireGuard and OpenVPN, design scalable architectures, integrate with identity systems, and monitor/secure VPN infrastructure.

OpenVPN and WireGuard are the two dominant open-source VPN protocols. Running your own VPN server ensures that no third-party provider can log traffic metadata, inject advertisements, or comply with foreign data requests. This training covers both protocols for different threat models and performance requirements.

Wazuh is an open-source security platform that delivers unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It consolidates endpoint telemetry into a self-managed analysis engine, serving as a reliable alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs

Woodpecker CI is a simple yet powerful continuous integration engine designed specifically for self-hosted Git forges like Gitea and Forgejo. It provides a lightweight, Docker-native CI/CD experience without the complexity or licensing overhead of enterprise CI platforms.

This instructor-led, live training in Sofia (online or onsite) is aimed at intermediate-level to advanced-level security professionals who wish to implement Zero Trust Architecture using open-source tools and sovereign infrastructure.

By the end of this training, participants will be able to design Zero Trust architectures, deploy identity-aware proxies, implement dynamic authentication, secure microservices with service mesh, and monitor zero trust policies.