← Back
Plateforme Matrix
End-to-end DevOps deployment of a self-hosted secure messenger (Matrix / Synapse) replacing Slack and Teams. Delivered by several specialised teams, with containerisation, CI/CD, monitoring, backups, and EBIOS risk analysis.
STACK
HIGHLIGHTS
- Role-play: replace a third-party cloud messenger with an internal platform for confidentiality, GDPR compliance, and data ownership.
- Four specialised teams (Infrastructure, CI/CD, Security, Operations) on a shared Git repo, trunk-based workflow, mandatory merge-request reviews, and inter-team coordination through sync meetings with written minutes.
- Containerised stack: Synapse + PostgreSQL + Nginx with Let's Encrypt TLS termination, orchestrated via Docker Compose. The target VM is provisioned by Ansible, idempotent roles, post-deploy smoke test.
- GitLab CI/CD pipeline: YAML lint, image build and tag, container healthchecks, automatic deployment on push to main with built-in rollback.
- Security wired in: hardened containers, secret management, firewall and Fail2ban, Trivy image scans, anti-secret pre-commit hook, and a full EBIOS Risk Management analysis.
- Operations: Prometheus + Grafana monitoring, centralised logs and alerts, encrypted daily backups stored off-site, an actually tested restore procedure, validated runbook.