top-level-design

availability

• high availability
• data backup

backup

https://docs.mattermost.com/deploy/backup-disaster-recovery.html

database

• mysql/postgres
• mongodb
• redis

i18

• chinese
• english

integration

与三方工具集成

logs

• max age
• max count
• rotation

middleware

• kafka
• mqtt
• nats
• rabbitmq

monitor

• prometheus
• grafana
  • health
  • performance metric

notification

• email

object storage

• s3
• minio

plugin

扩展

provision

在新机器登录

security

• registration
  • restrict email domains
• user: deactivation
  • AD/LDAP
  • SAML
  • Github
  • Google
• password
  • reset
  • advanced requirement with minimum numbers of symbols, numbers, lower, and uppercase letters
• authentication
  • multi factor authentication
  • generic error
• group
• role
• permission
• token: revoke
• data
  • encryption at rest
  • data retention policy: daily delete job
• transmission: https, tls
• deployment: private cloud
• rate limiting
• session: Session length, session cache, and idle timeout, revoke
• audit

upgrade

references

https://docs.mattermost.com/about/security.html