Skip to main content
Persona landing

For Air-Gapped Operators

You deploy and operate Mattermost in network-isolated enclaves — air-gapped classified networks, sovereign-cloud enclaves, DoD IL4/IL5 environments, or tactical edges with DDIL connectivity. This page is a curated entry point — every link goes to the canonical guide.

No internet egress

Every page linked from here works without internet access. Stage artifacts on an operator workstation, transfer across your approved boundary, and operate offline.

Start here​

Air-gapped deployment runbook

High-level steps to deploy Mattermost in an air-gapped enclave.

Bill of Materials and Registry Mirroring

Internal package mirror + container registry.

FIPS / STIG container builds

Deploy the FIPS-compliant, STIG-hardened container image.

Common tasks​

Configure for Air-Gapped Operation

Server settings that depend on internet access.

CMMC compliance

CMMC 2.0 Level 2 requirement coverage.

Zero Trust architecture

Mattermost in a Zero Trust deployment.

Application architecture

Components and topology of a Mattermost deployment.

Other personas​

For SREs / platform operators

General deployment, scaling, operations.

For security architects

Authorization, control mappings, FIPS posture.

For compliance officers

Audit evidence and regulatory mapping.