https://ruadmin.root.sx/tags/element/Recent content in Element on DevOps Engineer & CloudAdminHugo -- gohugo.ioen-UShttps://ruadmin.root.sx/posts/self-hosted/matrix-messenger/Mon, 01 Jan 0001 00:00:00 +0000https://ruadmin.root.sx/posts/self-hosted/matrix-messenger/<h2 id="self-hosted-secure-messenger-for-enterprise-communications">Self-Hosted Secure Messenger for Enterprise Communications</h2> <hr> <h4 id="client">Client</h4> <p>Mid-size business with strict data privacy and security requirements</p> <hr> <h4 id="challenge">Challenge</h4> <p>The company required full control over its internal communications — no third-party servers, no data leakage risks. The solution had to support end-to-end encryption, voice and video calls, file sharing, and seamless integration with existing corporate infrastructure, all manageable by an internal team.</p> <hr> <h4 id="solution">Solution</h4> <h6 id="1-server-stack">1. Server Stack</h6> <ul> <li><strong>Matrix Synapse</strong> as the core messaging server</li> <li><strong>PostgreSQL 16</strong> for persistent data storage</li> <li><strong>Caddy</strong> as reverse proxy with automatic SSL/TLS</li> <li><strong>Docker Compose</strong> for service orchestration</li> </ul> <h6 id="2-client-applications">2. Client Applications</h6> <ul> <li><strong>Element Web</strong> for browser access</li> <li><strong>Element Desktop</strong> for Windows/macOS/Linux</li> <li><strong>Element Mobile</strong> for iOS/Android</li> <li>Consistent interface across all platforms</li> </ul> <h6 id="3-voice--video-calls">3. Voice &amp; Video Calls</h6> <ul> <li><strong>Coturn</strong> (TURN/STUN server) for NAT traversal</li> <li>Group video call support</li> <li>UDP ports 49160–49200 for media traffic</li> <li>Automatic configuration via environment variables</li> </ul> <h6 id="4-administration">4. Administration</h6> <ul> <li><strong>Synapse Admin</strong> web UI for user and room management</li> <li>Usage statistics and monitoring</li> <li>Accessible on a dedicated port (8888)</li> </ul> <h6 id="5-security">5. Security</h6> <ul> <li>End-to-end encrypted messages</li> <li>Automatic SSL/TLS certificates via Caddy</li> <li>Public registration disabled</li> <li>Optional federation with other Matrix servers</li> <li>Healthchecks on all services</li> </ul> <h6 id="6-automation">6. Automation</h6> <ul> <li>Single Bash script for full stack initialization</li> <li>Automatic Synapse config generation</li> <li>Automated admin user creation via <code>expect</code></li> <li>Docker Compose with dependency ordering and healthchecks</li> </ul> <hr> <h4 id="technologies">Technologies</h4> <div class="row"> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/docker-original.svg" alt="Docker"><div>Docker</div></div> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/postgresql.svg" alt="PostgreSQL"><div>PostgreSQL</div></div> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/caddy.svg" alt="Caddy"><div>Caddy</div></div> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/bash.svg" alt="Bash"><div>Bash</div></div> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/linux-original.svg" alt="Linux"><div>Linux</div></div> <div class="col-4 col-lg-2 pt-2" style="text-align: center;"><img src="https://ruadmin.root.sx/icons/element.svg" alt="Element"><div>Element + Matrix + Synapse</div></div> </div> <hr> <h4 id="results">Results</h4> <p>✅ <strong>Data ownership:</strong> full control over messages and user data — no third-party servers<br> ✅ <strong>Scale:</strong> 100+ concurrent users<br> ✅ <strong>Features:</strong> text, voice, video, file sharing up to 1.5 GB, E2E encryption<br> ✅ <strong>Speed:</strong> full deployment in 5 minutes with a single script<br> ✅ <strong>Reliability:</strong> automatic SSL certificates, healthchecks, auto-restart</p>