From 689118bd30e790118a0fb4f35f599e7432962bce Mon Sep 17 00:00:00 2001 From: toitoinebzh Date: Sat, 9 Mar 2019 10:14:08 +0100 Subject: [PATCH] update to 3.7.6 --- LICENSE | 9 +- README.md | 89 ++++++++-- README_fr.md | 80 +++++++++ check_process.default => check_process | 16 +- conf/app.src | 6 +- conf/nginx.conf | 13 +- conf/php-fpm.conf | 104 ++++++++---- conf/php-fpm.ini | 10 -- conf/systemd.service | 13 ++ manifest.json | 42 +++-- scripts/_common.sh | 22 +-- scripts/backup | 36 ++-- scripts/change_url | 48 ++++-- scripts/install | 226 ++++++++++++++++++++----- scripts/remove | 74 +++++++- scripts/restore | 62 ++++--- scripts/upgrade | 57 +++++-- sources/extra_files/app/.gitignore | 2 + sources/images/blogotext_logo.png | Bin 0 -> 6171 bytes sources/images/blogotext_preview.png | Bin 0 -> 18226 bytes sources/patches/.gitignore | 2 + 21 files changed, 701 insertions(+), 210 deletions(-) create mode 100644 README_fr.md rename check_process.default => check_process (57%) delete mode 100644 conf/php-fpm.ini create mode 100644 conf/systemd.service create mode 100644 sources/extra_files/app/.gitignore create mode 100644 sources/images/blogotext_logo.png create mode 100644 sources/images/blogotext_preview.png create mode 100644 sources/patches/.gitignore diff --git a/LICENSE b/LICENSE index 731b575..f3cff84 100644 --- a/LICENSE +++ b/LICENSE @@ -1,7 +1,4 @@ -Copyright 2018 thuban +File containing the license of your package. -Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +More information here: +https://github.com/YunoHost/doc/blob/master/packaging_apps_guidelines_fr.md#yep-13---indiquer-la-licence-associ%C3%A9e-au-paquet---brouillon--auto--working- diff --git a/README.md b/README.md index 74c3a40..4941cc3 100644 --- a/README.md +++ b/README.md @@ -1,23 +1,80 @@ -# Blogotext pour YUNoHost +# BlogoText for YunoHost -- [Yunohost project](https://yunohost.org) -- [Blogotext website](https://blogotext.org) +![blogotext_logo](sources/images/blogotext_logo.png) -Blogotext is a lightweight blog engine and CMS. It also provides notes, -RSS feed reader and file upload. -## Usage -- Copy this app before work on it. -- Edit `conf/nginx.conf` file to match application prerequisites. -- Edit `manifest.json` with application specific information. -- Edit the `install`, `upgrade`, `remove`, `backup`, and `restore` scripts. -- Add a `LICENSE` file for the package. -- Edit `README.md`. +[![Integration level](https://dash.yunohost.org/integration/BlogoText.svg)](https://dash.yunohost.org/appci/app/BlogoText) +[![Install BlogoText with YunoHost](https://install-app.yunohost.org/install-with-yunohost.png)](https://install-app.yunohost.org/?app=BlogoText) -**More information on the documentation page:** +*[Lire ce readme en français.](./README_fr.md)* + +> *This package allow you to install BlogoText quickly and simply on a YunoHost server. +If you don't have YunoHost, please see [here](https://yunohost.org/#/install) to know how to install and enjoy it.* + +## Overview + +This is BlogoText, the lightweight Blog-Engine. + +**Shipped version:** 3.7.6 + +## Screenshots + +![blogotext_preview](sources/images/blogotext_preview.png) + +## Demo + +* [Official demo](https://blogotext.org/blog/) + +## Configuration + +How to configure this app: by the admin panel `https://domain.tld/admin`. + +## Documentation + + * Official documentation: https://github.com/BlogoText/blogotext/wiki + * YunoHost documentation: https://yunohost.org/#/app_blogotext + +## YunoHost specific features + +#### Multi-users support + +Are LDAP and HTTP auth supported? no +Can the app be used by multiple users? no + +#### Supported architectures + +* x86-64b - [![Build Status](https://ci-apps.yunohost.org/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-apps.yunohost.org/ci/apps/BlogoText/) +* ARMv8-A - [![Build Status](https://ci-apps-arm.yunohost.org/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-apps-arm.yunohost.org/ci/apps/BlogoText/) +* Jessie x86-64b - [![Build Status](https://ci-stretch.nohost.me/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-stretch.nohost.me/ci/apps/BlogoText/) + +## Limitations + +* Any known limitations. + +## Additional information + +* Other information you would add about this application + +**More information on the documentation page:** https://yunohost.org/packaging_apps -**Upgrade this package:** -`sudo yunohost app upgrade --verbose example -u https://github.com/YunoHost-Apps/example_ynh` +## Links -**Multi-user:** No. + * Report a bug: https://github.com/YunoHost-Apps/BlogoText_ynh/issues + * App website: https://blogotext.org/ + * YunoHost website: https://yunohost.org/ + +--- + +Developers info +---------------- + +**Only if you want to use a testing branch for coding, instead of merging directly into master.** +Please do your pull request to the [testing branch](https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing). + +To try the testing branch, please proceed like that. +``` +sudo yunohost app install https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing --debug +or +sudo yunohost app upgrade BlogoText -u https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing --debug +``` diff --git a/README_fr.md b/README_fr.md new file mode 100644 index 0000000..820cf78 --- /dev/null +++ b/README_fr.md @@ -0,0 +1,80 @@ +# BlogoText pour YunoHost + +![blogotext_logo](sources/images/blogotext_logo.png) + + +[![Integration level](https://dash.yunohost.org/integration/BlogoText.svg)](https://dash.yunohost.org/appci/app/BlogoText) +[![Install BlogoText with YunoHost](https://install-app.yunohost.org/install-with-yunohost.png)](https://install-app.yunohost.org/?app=BlogoText) + +*[Read this readme in english.](./README.md)* + +> *Ce package vous permet d'installer BlogoText rapidement et simplement sur un serveur Yunohost. +Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l'installer et en profiter.* + +## Vue d'ensemble + +Ceci est BlogoText, un moteur de blog léger. + +**Version incluse:** 3.7.6 + +## Captures d'écran + +![blogotext_preview](sources/images/blogotext_preview.png) + +## Démo + +* [Démo officielle](https://blogotext.org/blog/) + +## Configuration + +Comment configurer cette application: via le panneau d'administration `https://domain.tld/admin`. + +## Documentation + + * Documentation officielle: https://github.com/BlogoText/blogotext/wiki + * Documentation YunoHost: https://yunohost.org/#/app_blogotext + +## Caractéristiques spécifiques YunoHost + +#### Support multi-utilisateurs + +L'authentification LDAP et HTTP est-elle prise en charge? non +L'application peut-elle être utilisée par plusieurs utilisateurs? non + +#### Supported architectures + +* x86-64b - [![Build Status](https://ci-apps.yunohost.org/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-apps.yunohost.org/ci/apps/BlogoText/) +* ARMv8-A - [![Build Status](https://ci-apps-arm.yunohost.org/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-apps-arm.yunohost.org/ci/apps/BlogoText/) +* Jessie x86-64b - [![Build Status](https://ci-stretch.nohost.me/ci/logs/BlogoText%20%28Community%29.svg)](https://ci-stretch.nohost.me/ci/apps/BlogoText/) + +## Limitations + +* Limitations connues. + +## Informations additionnelles + +* Autres informations à ajouter sur cette application + +**Plus d'informations sur la page de documentation:** +https://yunohost.org/packaging_apps + +## Links + + * Signaler un bug: https://github.com/YunoHost-Apps/BlogoText_ynh/issues + * Site de l'application: https://blogotext.org/ + * Site web YunoHost: https://yunohost.org/ + +--- + +Informations pour les développeurs +---------------- + +**Seulement si vous voulez utiliser une branche de test pour le codage, au lieu de fusionner directement dans la banche principale.** +Merci de faire vos pull request sur la [branche testing](https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing). + +Pour essayer la branche testing, procédez comme suit. +``` +sudo yunohost app install https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing --debug +ou +sudo yunohost app upgrade BlogoText -u https://github.com/YunoHost-Apps/BlogoText_ynh/tree/testing --debug +``` diff --git a/check_process.default b/check_process similarity index 57% rename from check_process.default rename to check_process index d7e2812..40958ed 100644 --- a/check_process.default +++ b/check_process @@ -1,4 +1,4 @@ -# See here for more informations +# See here for more information # https://github.com/YunoHost/package_check#syntax-check_process-file # Move this file from check_process.default to check_process when you have filled it. @@ -10,7 +10,7 @@ admin="john" (USER) language="fr" is_public=1 (PUBLIC|public=1|private=0) - password="pass" + password="password1234" port="666" (PORT) ; Checks pkg_linter=1 @@ -20,18 +20,19 @@ setup_private=1 setup_public=1 upgrade=1 + #upgrade=1 from_commit=CommitHash backup_restore=1 multi_instance=1 incorrect_path=1 port_already_use=0 - change_url=0 + change_url=1 ;;; Levels Level 1=auto Level 2=auto Level 3=auto -# Level 4: +# Level 4: If the app supports LDAP and SSOwat, turn level 4 to '1' and add a link to an issue or a part of your code to show it. +# If the app does not use LDAP nor SSOwat, and can't use them, turn level 4 to 'na' and explain as well. Level 4=0 -# Level 5: Level 5=auto Level 6=auto Level 7=auto @@ -41,3 +42,8 @@ ;;; Options Email= Notification=none +;;; Upgrade options + ; commit=CommitHash + name=Name and date of the commit. + manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=666& + diff --git a/conf/app.src b/conf/app.src index 801ff88..1602dde 100644 --- a/conf/app.src +++ b/conf/app.src @@ -1,6 +1,6 @@ -SOURCE_URL=https://api.github.com/repos/Blogotext/blogotext/tarball -SOURCE_SUM=a6e72874fb0266847802a611312f93f83da56dec334e16c3fe5c3838d636279d +SOURCE_URL=https://api.github.com/repos/BlogoText/blogotext/tarball/3.7.6 +SOURCE_SUM=6f2e769ed62589cf56a9d26785916d5147c6ca0e60befeeaa709b077e0185f5a SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=tar.gz SOURCE_IN_SUBDIR=true -SOURCE_FILENAME=blogotext.tar.gz +SOURCE_FILENAME= diff --git a/conf/nginx.conf b/conf/nginx.conf index 41fd55e..f2277ea 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,22 +1,24 @@ -location __PATH__ { +#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; +location __PATH__/ { # Path to source alias __FINALPATH__/ ; + # Force usage of https if ($scheme = http) { rewrite ^ https://$server_name$request_uri? permanent; } - # Example PHP configuration (remove if not used) +### Example PHP configuration (remove it if not used) index index.php; - # Common parameter to increase upload size limit in conjuction with dedicated php-fpm file - client_max_body_size 50M; + # Common parameter to increase upload size limit in conjunction with dedicated php-fpm file + #client_max_body_size 50M; try_files $uri $uri/ index.php; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+?\.php)(/.*)$; - fastcgi_pass unix:/var/run/php5-fpm-__NAME__.sock; + fastcgi_pass unix:/var/run/php/php7.0-fpm-__NAME__.sock; fastcgi_index index.php; include fastcgi_params; @@ -24,6 +26,7 @@ location __PATH__ { fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param SCRIPT_FILENAME $request_filename; } +### End of PHP configuration part # Include SSOWAT user panel. include conf.d/yunohost_panel.conf.inc; diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 8affbc2..ab5dca9 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -1,10 +1,11 @@ ; Start a new pool named 'www'. -; the variable $pool can we used in any directive and will be replaced by the +; the variable $pool can be used in any directive and will be replaced by the ; pool name ('www' here) [__NAMETOCHANGE__] ; Per pool prefix ; It only applies on the following directives: +; - 'access.log' ; - 'slowlog' ; - 'listen' (unixsocket) ; - 'chroot' @@ -24,28 +25,35 @@ group = __USER__ ; The address on which to accept FastCGI requests. ; Valid syntaxes are: -; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific address on +; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on ; a specific port; -; 'port' - to listen on a TCP socket to all addresses on a -; specific port; +; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on +; a specific port; +; 'port' - to listen on a TCP socket to all addresses +; (IPv6 and IPv4-mapped) on a specific port; ; '/path/to/unix/socket' - to listen on a unix socket. ; Note: This value is mandatory. -listen = /var/run/php5-fpm-__NAMETOCHANGE__.sock +listen = /var/run/php/php7.0-fpm-__NAMETOCHANGE__.sock -; Set listen(2) backlog. A value of '-1' means unlimited. -; Default Value: 128 (-1 on FreeBSD and OpenBSD) -;listen.backlog = 128 +; Set listen(2) backlog. +; Default Value: 511 (-1 on FreeBSD and OpenBSD) +;listen.backlog = 511 ; Set permissions for unix socket, if one is used. In Linux, read/write ; permissions must be set in order to allow connections from a web server. Many -; BSD-derived systems allow connections regardless of permissions. +; BSD-derived systems allow connections regardless of permissions. ; Default Values: user and group are set as the running user ; mode is set to 0660 listen.owner = www-data listen.group = www-data ;listen.mode = 0660 - -; List of ipv4 addresses of FastCGI clients which are allowed to connect. +; When POSIX Access Control Lists are supported you can set them using +; these options, value is a comma separated list of user/group names. +; When set, listen.owner and listen.group are ignored +;listen.acl_users = +;listen.acl_groups = + +; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. ; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original ; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address ; must be separated by a comma. If this value is left blank, connections will be @@ -59,7 +67,13 @@ listen.group = www-data ; - The pool processes will inherit the master process priority ; unless it specified otherwise ; Default Value: no set -; priority = -19 +; process.priority = -19 + +; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user +; or group is differrent than the master process user. It allows to create process +; core dump and ptrace the process for the pool user. +; Default Value: no +; process.dumpable = yes ; Choose how the process manager will control the number of child processes. ; Possible Values: @@ -96,7 +110,7 @@ pm = dynamic ; forget to tweak pm.* to fit your needs. ; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' ; Note: This value is mandatory. -pm.max_children = 10 +pm.max_children = 5 ; The number of child processes created on startup. ; Note: Used only when pm is set to 'dynamic' @@ -117,12 +131,12 @@ pm.max_spare_servers = 3 ; Note: Used only when pm is set to 'ondemand' ; Default Value: 10s ;pm.process_idle_timeout = 10s; - + ; The number of requests each child process should execute before respawning. ; This can be useful to work around memory leaks in 3rd party libraries. For ; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. ; Default Value: 0 -pm.max_requests = 500 +;pm.max_requests = 500 ; The URI to view the FPM status page. If this value is not set, no URI will be ; recognized as a status page. It shows the following informations: @@ -170,7 +184,7 @@ pm.max_requests = 500 ; ; By default the status page only outputs short status. Passing 'full' in the ; query string will also return status for each pool process. -; Example: +; Example: ; http://www.foo.bar/status?full ; http://www.foo.bar/status?json&full ; http://www.foo.bar/status?html&full @@ -215,7 +229,7 @@ pm.max_requests = 500 ; last request memory: 0 ; ; Note: There is a real-time FPM status monitoring sample web page available -; It's available in: ${prefix}/share/fpm/status.html +; It's available in: /usr/share/php/7.0/fpm/status.html ; ; Note: The value must start with a leading slash (/). The value can be ; anything, but it may not be a good idea to use the .php extension or it @@ -275,7 +289,7 @@ pm.max_requests = 500 ; - %{megabytes}M ; - %{mega}M ; %n: pool name -; %o: ouput header +; %o: output header ; it must be associated with embraces to specify the name of the header: ; - %{Content-Type}o ; - %{X-Powered-By}o @@ -283,7 +297,7 @@ pm.max_requests = 500 ; - .... ; %p: PID of the child that serviced the request ; %P: PID of the parent of the child that serviced the request -; %q: the query string +; %q: the query string ; %Q: the '?' character if query string exists ; %r: the request URI (without the query string, see %q and %Q) ; %R: remote IP address @@ -291,47 +305,51 @@ pm.max_requests = 500 ; %t: server time the request was received ; it can accept a strftime(3) format: ; %d/%b/%Y:%H:%M:%S %z (default) +; The strftime(3) format must be encapsuled in a %{}t tag +; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t ; %T: time the log has been written (the request has finished) ; it can accept a strftime(3) format: ; %d/%b/%Y:%H:%M:%S %z (default) +; The strftime(3) format must be encapsuled in a %{}t tag +; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t ; %u: remote user ; ; Default: "%R - %u %t \"%m %r\" %s" ;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%" - + ; The log file for slow requests ; Default Value: not set ; Note: slowlog is mandatory if request_slowlog_timeout is set -slowlog = /var/log/nginx/__NAMETOCHANGE__.slow.log - +;slowlog = log/$pool.log.slow + ; The timeout for serving a single request after which a PHP backtrace will be ; dumped to the 'slowlog' file. A value of '0s' means 'off'. ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) ; Default Value: 0 -request_slowlog_timeout = 5s - +;request_slowlog_timeout = 0 + ; The timeout for serving a single request after which the worker process will ; be killed. This option should be used when the 'max_execution_time' ini option ; does not stop script execution for some reason. A value of '0' means 'off'. ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) ; Default Value: 0 request_terminate_timeout = 1d - + ; Set open file descriptor rlimit. ; Default Value: system defined value ;rlimit_files = 1024 - + ; Set max core size rlimit. ; Possible Values: 'unlimited' or an integer greater or equal to 0 ; Default Value: system defined value ;rlimit_core = 0 - + ; Chroot to this directory at the start. This value must be defined as an ; absolute path. When this value is not set, chroot is not used. ; Note: you can prefix with '$prefix' to chroot to the pool prefix or one ; of its subdirectories. If the pool prefix is not set, the global prefix ; will be used instead. -; Note: chrooting is a great security feature and should be used whenever +; Note: chrooting is a great security feature and should be used whenever ; possible. However, all PHP paths will be relative to the chroot ; (error_log, sessions.save_path, ...). ; Default Value: not set @@ -347,16 +365,25 @@ chdir = __FINALPATH__ ; Note: on highloaded environement, this can cause some delay in the page ; process time (several ms). ; Default Value: no -catch_workers_output = yes +;catch_workers_output = yes + +; Clear environment in FPM workers +; Prevents arbitrary environment variables from reaching FPM worker processes +; by clearing the environment in workers before env vars specified in this +; pool configuration are added. +; Setting to "no" will make all environment variables available to PHP code +; via getenv(), $_ENV and $_SERVER. +; Default Value: yes +;clear_env = no ; Limits the extensions of the main script FPM will allow to parse. This can ; prevent configuration mistakes on the web server side. You should only limit ; FPM to .php extensions to prevent malicious users to use other extensions to -; exectute php code. +; execute php code. ; Note: set an empty value to allow all extensions. ; Default Value: .php -;security.limit_extensions = .php .php3 .php4 .php5 - +;security.limit_extensions = .php .php3 .php4 .php5 .php7 + ; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from ; the current environment. ; Default Value: clean env @@ -370,7 +397,7 @@ catch_workers_output = yes ; overwrite the values previously defined in the php.ini. The directives are the ; same as the PHP SAPI: ; php_value/php_flag - you can set classic ini defines which can -; be overwritten from PHP call 'ini_set'. +; be overwritten from PHP call 'ini_set'. ; php_admin_value/php_admin_flag - these directives won't be overwritten by ; PHP call 'ini_set' ; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. @@ -390,3 +417,14 @@ catch_workers_output = yes ;php_admin_value[error_log] = /var/log/fpm-php.www.log ;php_admin_flag[log_errors] = on ;php_admin_value[memory_limit] = 32M + +; Common values to change to increase file upload limit +; php_admin_value[upload_max_filesize] = 50M +; php_admin_value[post_max_size] = 50M +; php_admin_flag[mail.add_x_header] = Off + +; Other common parameters +; php_admin_value[max_execution_time] = 600 +; php_admin_value[max_input_time] = 300 +; php_admin_value[memory_limit] = 256M +; php_admin_flag[short_open_tag] = On diff --git a/conf/php-fpm.ini b/conf/php-fpm.ini deleted file mode 100644 index 212240d..0000000 --- a/conf/php-fpm.ini +++ /dev/null @@ -1,10 +0,0 @@ -; Common values to change to increase file upload limit -upload_max_filesize = 50M -post_max_size = 50M -; mail.add_x_header = Off - -; Other common parameters -; max_execution_time = 600 -; max_input_time = 300 -; memory_limit = 256M -; short_open_tag = On diff --git a/conf/systemd.service b/conf/systemd.service new file mode 100644 index 0000000..76cdf64 --- /dev/null +++ b/conf/systemd.service @@ -0,0 +1,13 @@ +[Unit] +Description=Small description of the service +After=network.target + +[Service] +Type=simple +User=__APP__ +Group=__APP__ +WorkingDirectory=__FINALPATH__/ +ExecStart=__FINALPATH__/script >> /var/log/__APP__/__APP__.log 2>&1 + +[Install] +WantedBy=multi-user.target diff --git a/manifest.json b/manifest.json index b3c7fe6..f96f742 100644 --- a/manifest.json +++ b/manifest.json @@ -1,26 +1,27 @@ { - "name": "Blogotext", + "name": "BlogoText", "id": "blogotext", "packaging_format": 1, "description": { - "en": "The lightweight SQLite Blog-Engine and CMS.", - "fr": "Un moteur de contenu et de blog léger basé sur SQLite" + "en": "This is BlogoText, the lightweight Blog-Engine.", + "fr": "Ceci est BlogoText, un moteur de blog léger." }, - "version": "1.0", + "version": "3.7.6", "url": "https://blogotext.org/", "license": "MIT", "maintainer": { - "name": "thuban", - "email": "thuban@yeuxdelibad.net", - "url": "https://yeuxdelibad.net" + "name": "antoine", + "email": "antoine@miaou.org", + "url": "https://miaou.org" }, "requirements": { - "yunohost": ">= 2.7.2" + "yunohost": ">= 3.4" }, "multi_instance": true, "services": [ "nginx", - "php5-fpm" + "php7.0-fpm", + "mysql" ], "arguments": { "install" : [ @@ -28,8 +29,8 @@ "name": "domain", "type": "domain", "ask": { - "en": "Choose a domain name for blogotext", - "fr": "Choisissez un nom de domaine pour blogotext" + "en": "Choose a domain name for BlogoText", + "fr": "Choisissez un nom de domaine pour BlogoText" }, "example": "example.com" }, @@ -37,11 +38,11 @@ "name": "path", "type": "path", "ask": { - "en": "Choose a path for blogotext", - "fr": "Choisissez un chemin pour blogotext" + "en": "Choose a path for BlogoText", + "fr": "Choisissez un chemin pour BlogoText" }, - "example": "/example", - "default": "/example" + "example": "/blog", + "default": "/blog" }, { "name": "admin", @@ -50,7 +51,7 @@ "en": "Choose an admin user", "fr": "Choisissez l’administrateur" }, - "example": "batman" + "example": "johndoe" }, { "name": "is_public", @@ -63,12 +64,21 @@ }, { "name": "language", + "type": "string", "ask": { "en": "Choose the application language", "fr": "Choisissez la langue de l'application" }, "choices": ["fr", "en"], "default": "fr" + }, + { + "name": "password", + "type": "password", + "ask": { + "en": "Set the administrator password", + "fr": "Définissez le mot de passe administrateur" + } } ] } diff --git a/scripts/_common.sh b/scripts/_common.sh index bb04a03..b905339 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -1,13 +1,13 @@ #!/bin/bash -# ============= FUTURE YUNOHOST HELPER ============= -# Delete a file checksum from the app settings -# -# $app should be defined when calling this helper -# -# usage: ynh_remove_file_checksum file -# | arg: file - The file for which the checksum will be deleted -ynh_delete_file_checksum () { - local checksum_setting_name=checksum_${1//[\/ ]/_} # Replace all '/' and ' ' by '_' - ynh_app_setting_delete $app $checksum_setting_name -} \ No newline at end of file +#================================================= +# PERSONAL HELPERS +#================================================= + +#================================================= +# EXPERIMENTAL HELPERS +#================================================= + +#================================================= +# FUTURE OFFICIAL HELPERS +#================================================= diff --git a/scripts/backup b/scripts/backup index 7c88c04..9e175ac 100755 --- a/scripts/backup +++ b/scripts/backup @@ -6,24 +6,25 @@ # IMPORT GENERIC HELPERS #================================================= -if [ ! -e _common.sh ]; then - # Get the _common.sh file if it's not in the current directory - cp ../settings/scripts/_common.sh ./_common.sh - chmod a+rx _common.sh -fi -source _common.sh +#Keep this path for calling _common.sh inside the execution's context of backup and restore scripts +source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers #================================================= # MANAGE SCRIPT FAILURE #================================================= +ynh_clean_setup () { + ### Remove this function if there's nothing to clean before calling the remove script. + true +} # Exit if an error occurs during the execution of the script ynh_abort_if_errors #================================================= # LOAD SETTINGS #================================================= +ynh_print_info "Loading installation settings..." app=$YNH_APP_INSTANCE_NAME @@ -36,25 +37,28 @@ db_name=$(ynh_app_setting_get $app db_name) #================================================= # BACKUP THE APP MAIN DIR #================================================= +ynh_print_info "Backing up the main app directory..." ynh_backup "$final_path" #================================================= # BACKUP THE NGINX CONFIGURATION #================================================= +ynh_print_info "Backing up nginx web server configuration..." ynh_backup "/etc/nginx/conf.d/$domain.d/$app.conf" #================================================= # BACKUP THE PHP-FPM CONFIGURATION #================================================= +ynh_print_info "Backing up php-fpm configuration..." -ynh_backup "/etc/php5/fpm/pool.d/$app.conf" -ynh_backup "/etc/php5/fpm/conf.d/20-$app.ini" +ynh_backup "/etc/php/7.0/fpm/pool.d/$app.conf" #================================================= # BACKUP THE MYSQL DATABASE #================================================= +ynh_print_info "Backing up the MySQL database..." ynh_mysql_dump_db "$db_name" > db.sql @@ -63,17 +67,25 @@ ynh_mysql_dump_db "$db_name" > db.sql #================================================= # BACKUP LOGROTATE #================================================= +ynh_print_info "Backing up logrotate configuration..." -ynh_backup "/etc/logrotate.d/$app" +#ynh_backup "/etc/logrotate.d/$app" #================================================= # BACKUP SYSTEMD #================================================= +ynh_print_info "Backing up systemd configuration..." -ynh_backup "/etc/systemd/system/$app.service" +#ynh_backup "/etc/systemd/system/$app.service" #================================================= -# BACKUP THE CRON FILE +# BACKUP A CRON FILE #================================================= -ynh_backup "/etc/cron.d/$app" +#ynh_backup "/etc/cron.d/$app" + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Backup script completed for $app. (YunoHost will then actually copy those files to the archive)." diff --git a/scripts/change_url b/scripts/change_url index 51b3b36..8828dbf 100644 --- a/scripts/change_url +++ b/scripts/change_url @@ -21,6 +21,18 @@ new_path=$YNH_APP_NEW_PATH app=$YNH_APP_INSTANCE_NAME +#================================================= +# LOAD SETTINGS +#================================================= +ynh_print_info "Loading installation settings..." + +# Needed for helper "ynh_add_nginx_config" +final_path=$(ynh_app_setting_get $app final_path) + +# Add settings here as needed by your application +#db_name=$(ynh_app_setting_get "$app" db_name) +#db_pwd=$(ynh_app_setting_get $app db_pwd) + #================================================= # CHECK THE SYNTAX OF THE PATHS #================================================= @@ -51,31 +63,30 @@ fi #================================================= # MODIFY URL IN NGINX CONF #================================================= +ynh_print_info "Updating nginx web server configuration..." nginx_conf_path=/etc/nginx/conf.d/$old_domain.d/$app.conf # Change the path in the nginx config file if [ $change_path -eq 1 ] then - # Make a backup of the original nginx config file if modified - ynh_backup_if_checksum_is_different "$nginx_conf_path" - # Replace locations starting with old_path - # Look for every location possible patterns (see https://nginx.org/en/docs/http/ngx_http_core_module.html#location) - ynh_replace_string "location\( \(=\|~\|~\*\|\^~\)\)\? $old_path" "location\1 $new_path" "$nginx_conf_path" - # Replace path in "return" directives - ynh_replace_string "return \([[:digit:]]\{3\}\) $old_path" "return \1 $new_path" "$nginx_conf_path" - # Calculate and store the nginx config file checksum - ynh_store_file_checksum "$nginx_conf_path" + # Make a backup of the original nginx config file if modified + ynh_backup_if_checksum_is_different "$nginx_conf_path" + # Set global variables for nginx helper + domain="$old_domain" + path_url="$new_path" + # Create a dedicated nginx config + ynh_add_nginx_config fi # Change the domain for nginx if [ $change_domain -eq 1 ] then - # Delete file checksum for the old conf file location - ynh_delete_file_checksum "$nginx_conf_path" + # Delete file checksum for the old conf file location + ynh_delete_file_checksum "$nginx_conf_path" mv $nginx_conf_path /etc/nginx/conf.d/$new_domain.d/$app.conf - # Store file checksum for the new config file location - ynh_store_file_checksum "/etc/nginx/conf.d/$new_domain.d/$app.conf" + # Store file checksum for the new config file location + ynh_store_file_checksum "/etc/nginx/conf.d/$new_domain.d/$app.conf" fi #================================================= @@ -84,10 +95,21 @@ fi # ... #================================================= +# ========= modif perso ======== +ynh_replace_string "$old_domain$old_path" "$new_domain$new_path" "$final_path/config/settings.php" +# ========= modif perso ======== + #================================================= # GENERIC FINALISATION #================================================= # RELOAD NGINX #================================================= +ynh_print_info "Reloading nginx web server..." systemctl reload nginx + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Change of URL completed for $app" diff --git a/scripts/install b/scripts/install index 56ee68c..99f0314 100755 --- a/scripts/install +++ b/scripts/install @@ -13,6 +13,10 @@ source /usr/share/yunohost/helpers # MANAGE SCRIPT FAILURE #================================================= +ynh_clean_setup () { + ### Remove this function if there's nothing to clean before calling the remove script. + true +} # Exit if an error occurs during the execution of the script ynh_abort_if_errors @@ -25,37 +29,40 @@ path_url=$YNH_APP_ARG_PATH admin=$YNH_APP_ARG_ADMIN is_public=$YNH_APP_ARG_IS_PUBLIC language=$YNH_APP_ARG_LANGUAGE +password=$YNH_APP_ARG_PASSWORD -# This is a multi-instance app, meaning it can be installed several times independently -# The id of the app as stated in the manifest is available as $YNH_APP_ID -# The instance number is available as $YNH_APP_INSTANCE_NUMBER (equals "1", "2", ...) -# The app instance name is available as $YNH_APP_INSTANCE_NAME -# - the first time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample -# - the second time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample__2 -# - ynhexample__{N} for the subsequent installations, with N=3,4, ... -# The app instance name is probably what you are interested the most, since this is -# guaranteed to be unique. This is a good unique identifier to define installation path, -# db names, ... +### If it's a multi-instance app, meaning it can be installed several times independently +### The id of the app as stated in the manifest is available as $YNH_APP_ID +### The instance number is available as $YNH_APP_INSTANCE_NUMBER (equals "1", "2", ...) +### The app instance name is available as $YNH_APP_INSTANCE_NAME +### - the first time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample +### - the second time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample__2 +### - ynhexample__{N} for the subsequent installations, with N=3,4, ... +### The app instance name is probably what interests you most, since this is +### guaranteed to be unique. This is a good unique identifier to define installation path, +### db names, ... app=$YNH_APP_INSTANCE_NAME #================================================= # CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS #================================================= +ynh_print_info "Validating installation parameters..." +### If the app uses nginx as web server (written in HTML/PHP in most cases), the final path should be "/var/www/$app". +### If the app provides an internal web server (or uses another application server such as uwsgi), the final path should be "/opt/yunohost/$app" final_path=/var/www/$app test ! -e "$final_path" || ynh_die "This path already contains a folder" # Normalize the url path syntax path_url=$(ynh_normalize_url_path $path_url) -# Check web path availability -ynh_webpath_available $domain $path_url # Register (book) web path ynh_webpath_register $app $domain $path_url #================================================= # STORE SETTINGS FROM MANIFEST #================================================= +ynh_print_info "Storing installation settings..." ynh_app_setting_set $app domain $domain ynh_app_setting_set $app path $path_url @@ -66,15 +73,62 @@ ynh_app_setting_set $app language $language #================================================= # STANDARD MODIFICATIONS #================================================= +# FIND AND OPEN A PORT +#================================================= +ynh_print_info "Configuring firewall..." + +### Use these lines if you have to open a port for the application +### `ynh_find_port` will find the first available port starting from the given port. +### If you're not using these lines: +### - Remove the section "CLOSE A PORT" in the remove script + +# Find a free port +port=$(ynh_find_port 8095) +# Open this port +ynh_exec_warn_less yunohost firewall allow --no-upnp TCP $port +ynh_app_setting_set $app port $port + #================================================= # INSTALL DEPENDENCIES #================================================= +ynh_print_info "Installing dependencies..." -ynh_install_app_dependencies php-gd php-db php-curl +### `ynh_install_app_dependencies` allows you to add any "apt" dependencies to the package. +### Those deb packages will be installed as dependencies of this package. +### If you're not using this helper: +### - Remove the section "REMOVE DEPENDENCIES" in the remove script +### - As well as the section "REINSTALL DEPENDENCIES" in the restore script +### - And the section "UPGRADE DEPENDENCIES" in the upgrade script + +#ynh_install_app_dependencies deb1 deb2 + +#================================================= +# CREATE A MYSQL DATABASE +#================================================= +ynh_print_info "Creating a MySQL database..." + +### Use these lines if you need a database for the application. +### `ynh_mysql_setup_db` will create a database, an associated user and a ramdom password. +### The password will be stored as 'mysqlpwd' into the app settings, +### and will be available as $db_pwd +### If you're not using these lines: +### - Remove the section "BACKUP THE MYSQL DATABASE" in the backup script +### - Remove also the section "REMOVE THE MYSQL DATABASE" in the remove script +### - As well as the section "RESTORE THE MYSQL DATABASE" in the restore script + +db_name=$(ynh_sanitize_dbid $app) +db_user=$db_name +ynh_app_setting_set $app db_name $db_name +ynh_mysql_setup_db $db_user $db_name #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= +ynh_print_info "Setting up source files..." + +### `ynh_setup_source` is used to install an app from a zip or tar.gz file, +### downloaded from an upstream source, like a git repository. +### `ynh_setup_source` use the file conf/app.src ynh_app_setting_set $app final_path $final_path # Download, check integrity, uncompress and patch the source from app.src @@ -83,47 +137,80 @@ ynh_setup_source "$final_path" #================================================= # NGINX CONFIGURATION #================================================= +ynh_print_info "Configuring nginx web server..." + +### `ynh_add_nginx_config` will use the file conf/nginx.conf # Create a dedicated nginx config ynh_add_nginx_config -# Configure nginx settings -folder_path=${path%/} -sudo sed -i "s@YNH_EXAMPLE_PATH@$path@g" ../conf/nginx.conf -# If path is only / (without subfolder), add trailing slash to alias -alias_path=$src_path -nginx_conf="../conf/nginx.conf" -[ "$path" == '/' ] && alias_path=$alias_path'/' -sudo sed -i "s@YNH_EXAMPLE_ALIAS@$alias_path@g" $nginx_conf -sudo sed -i "s@YNH_EXAMPLE_FOLDER@$folder_path@g" $nginx_conf -sudo cp $nginx_conf /etc/nginx/conf.d/$domain.d/$app.conf - - #================================================= # CREATE DEDICATED USER #================================================= +ynh_print_info "Configuring system user..." # Create a system user ynh_system_user_create $app -# Save app settings -ynh_app_setting_set "$app" admin "$admin" -ynh_app_setting_set "$app" is_public "$is_public" - #================================================= # PHP-FPM CONFIGURATION #================================================= +ynh_print_info "Configuring php-fpm..." + +### `ynh_add_fpm_config` is used to set up a PHP config. +### You can remove it if your app doesn't use PHP. +### `ynh_add_fpm_config` will use the files conf/php-fpm.conf and conf/php-fpm.ini +### If you're not using these lines: +### - You can remove these files in conf/. +### - Remove the section "BACKUP THE PHP-FPM CONFIGURATION" in the backup script +### - Remove also the section "REMOVE PHP-FPM CONFIGURATION" in the remove script +### - As well as the section "RESTORE THE PHP-FPM CONFIGURATION" in the restore script +### With the reload at the end of the script. +### - And the section "PHP-FPM CONFIGURATION" in the upgrade script # Create a dedicated php-fpm config ynh_add_fpm_config -# FINAL INSTALL? +#================================================= +# SPECIFIC SETUP +#================================================= +# ... +#================================================= + +#================================================= +# SETUP SYSTEMD +#================================================= +ynh_print_info "Configuring a systemd service..." + +### `ynh_systemd_config` is used to configure a systemd script for an app. +### It can be used for apps that use sysvinit (with adaptation) or systemd. +### Have a look at the app to be sure this app needs a systemd script. +### `ynh_systemd_config` will use the file conf/systemd.service +### If you're not using these lines: +### - You can remove those files in conf/. +### - Remove the section "BACKUP SYSTEMD" in the backup script +### - Remove also the section "STOP AND REMOVE SERVICE" in the remove script +### - As well as the section "RESTORE SYSTEMD" in the restore script +### - And the section "SETUP SYSTEMD" in the upgrade script + +# Create a dedicated systemd config +#ynh_add_systemd_config + +#================================================= +# SETUP APPLICATION WITH CURL +#================================================= + +### Use these lines only if the app installation needs to be finalized through +### web forms. We generally don't want to ask the final user, +### so we're going to use curl to automatically fill the fields and submit the +### forms. + # Set right permissions for curl install -#chown -R $app: $final_path +chown -R $app: $final_path # Set the app as temporarily public for curl call +ynh_print_info "Configuring SSOwat..." ynh_app_setting_set $app skipped_uris "/" - # Reload SSOwat config yunohost app ssowatconf @@ -131,16 +218,42 @@ yunohost app ssowatconf systemctl reload nginx # Installation with curl -# FIXME -# Blogotext needs to use a browser because of security, it seems to at least +ynh_print_info "Finalizing installation..." #ynh_local_curl "/INSTALL_PATH" "key1=value1" "key2=value2" "key3=value3" +# =========== modif perso =========== +#page 1 +ynh_local_curl "/admin/install.php" "install_form_1_sended=1" "langue=$language" +#page 2 +ynh_local_curl "/admin/install.php?s=2&l=$language" "identifiant=$admin" "mdp=$password" "racine=https://$domain$path_url/" "comm_defaut_status=1" "langue=$language" "install_form_2_sended=1" +#page 3 +ynh_local_curl "/admin/install.php?s=3&l=$language" "sgdb=mysql" "mysql_user=$db_user" "mysql_passwd=$db_pwd" "mysql_db=$db_name" "mysql_host=localhost" "langue=$language" "install_form_3_sended=1" +# =========== modif perso =========== + +# Remove the public access +if [ $is_public -eq 0 ] +then + ynh_app_setting_delete $app skipped_uris +fi #================================================= -# STORE THE CHECKSUM OF THE CONFIG FILE +# MODIFY A CONFIG FILE #================================================= +### `ynh_replace_string` is used to replace a string in a file. +### (It's compatible with sed regular expressions syntax) + +#ynh_replace_string "match_string" "replace_string" "$final_path/CONFIG_FILE" + +#================================================= +# STORE THE CONFIG FILE CHECKSUM +#================================================= + +### `ynh_store_file_checksum` is used to store the checksum of a file. +### That way, during the upgrade script, by using `ynh_backup_if_checksum_is_different`, +### you can make a backup of this file before modifying it again if the admin had modified it. + # Calculate and store the config file checksum into the app settings -ynh_store_file_checksum "$final_path/CONFIG_FILE" +#ynh_store_file_checksum "$final_path/CONFIG_FILE" #================================================= # GENERIC FINALIZATION @@ -148,33 +261,51 @@ ynh_store_file_checksum "$final_path/CONFIG_FILE" # SECURE FILES AND DIRECTORIES #================================================= -# Allow only allowed users to access admin panel -ynh_app_setting_set "$app" protected_uris "/admin/" +### For security reason, any app should set the permissions to root: before anything else. +### Then, if write authorization is needed, any access should be given only to directories +### that really need such authorization. # Set permissions to app files chown -R root: $final_path +chown -R $app:$app $final_path #modif perso #================================================= # SETUP LOGROTATE #================================================= +ynh_print_info "Configuring log rotation..." + +### `ynh_use_logrotate` is used to configure a logrotate configuration for the logs of this app. +### Use this helper only if there is effectively a log file for this app. +### If you're not using this helper: +### - Remove the section "BACKUP LOGROTATE" in the backup script +### - Remove also the section "REMOVE LOGROTATE CONFIGURATION" in the remove script +### - As well as the section "RESTORE THE LOGROTATE CONFIGURATION" in the restore script +### - And the section "SETUP LOGROTATE" in the upgrade script # Use logrotate to manage application logfile(s) -ynh_use_logrotate +#ynh_use_logrotate #================================================= # ADVERTISE SERVICE IN ADMIN PANEL #================================================= -yunohost service add NAME_INIT.D --log "/var/log/FILE.log" +### `yunohost service add` is a CLI yunohost command to add a service in the admin panel. +### You'll find the service in the 'services' section of YunoHost admin panel. +### This CLI command would be useless if the app does not have any services (systemd or sysvinit) +### If you're not using these lines: +### - You can remove these files in conf/. +### - Remove the section "REMOVE SERVICE FROM ADMIN PANEL" in the remove script +### - As well as the section "ADVERTISE SERVICE IN ADMIN PANEL" in the restore script + +#yunohost service add $app --log "/var/log/$app/$app.log" +# if using yunohost version 3.2 or more in the 'manifest.json', a description can be added +#yunohost service add $app --description "$app daemon for XXX" --log "/var/log/$app/$app.log" #================================================= # SETUP SSOWAT #================================================= +ynh_print_info "Configuring SSOwat..." -if [ $is_public -eq 0 ] -then # Remove the public access - ynh_app_setting_delete $app skipped_uris -fi # Make app public if necessary if [ $is_public -eq 1 ] then @@ -185,5 +316,12 @@ fi #================================================= # RELOAD NGINX #================================================= +ynh_print_info "Reloading nginx web server..." systemctl reload nginx + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Installation of $app completed" diff --git a/scripts/remove b/scripts/remove index 29ba8ad..36ca41c 100755 --- a/scripts/remove +++ b/scripts/remove @@ -12,36 +12,57 @@ source /usr/share/yunohost/helpers #================================================= # LOAD SETTINGS #================================================= +ynh_print_info "Loading installation settings..." app=$YNH_APP_INSTANCE_NAME domain=$(ynh_app_setting_get $app domain) +port=$(ynh_app_setting_get $app port) +db_name=$(ynh_app_setting_get $app db_name) +db_user=$db_name final_path=$(ynh_app_setting_get $app final_path) #================================================= # STANDARD REMOVE -#================================================= - #================================================= # REMOVE SERVICE FROM ADMIN PANEL #================================================= -if yunohost service status | grep -q $app +# Remove a service from the admin panel, added by `yunohost service add` +if yunohost service status $app >/dev/null 2>&1 then - echo "Remove $app service" + ynh_print_info "Removing $app service" yunohost service remove $app fi +#================================================= +# STOP AND REMOVE SERVICE +#================================================= +ynh_print_info "Stopping and removing the systemd service" + +# Remove the dedicated systemd config +#ynh_remove_systemd_config + +#================================================= +# REMOVE THE MYSQL DATABASE +#================================================= +ynh_print_info "Removing the MySQL database" + +# Remove a database if it exists, along with the associated user +ynh_mysql_remove_db $db_user $db_name + #================================================= # REMOVE DEPENDENCIES #================================================= +ynh_print_info "Removing dependencies" # Remove metapackage and its dependencies -ynh_remove_app_dependencies +#ynh_remove_app_dependencies #================================================= # REMOVE APP MAIN DIR #================================================= +ynh_print_info "Removing app main directory" # Remove the app directory securely ynh_secure_remove "$final_path" @@ -49,6 +70,7 @@ ynh_secure_remove "$final_path" #================================================= # REMOVE NGINX CONFIGURATION #================================================= +ynh_print_info "Removing nginx web server configuration" # Remove the dedicated nginx config ynh_remove_nginx_config @@ -56,6 +78,7 @@ ynh_remove_nginx_config #================================================= # REMOVE PHP-FPM CONFIGURATION #================================================= +ynh_print_info "Removing php-fpm configuration" # Remove the dedicated php-fpm config ynh_remove_fpm_config @@ -63,9 +86,48 @@ ynh_remove_fpm_config #================================================= # REMOVE LOGROTATE CONFIGURATION #================================================= +ynh_print_info "Removing logrotate configuration" # Remove the app-specific logrotate config -ynh_remove_logrotate +#ynh_remove_logrotate + +#================================================= +# CLOSE A PORT +#================================================= + +if yunohost firewall list | grep -q "\- $port$" +then + ynh_print_info "Closing port $port" + ynh_exec_warn_less yunohost firewall disallow TCP $port +fi + +#================================================= +# SPECIFIC REMOVE +#================================================= +# REMOVE THE CRON FILE +#================================================= + +# Remove a cron file +#ynh_secure_remove "/etc/cron.d/$app" + +# Remove a directory securely +#ynh_secure_remove "/etc/$app/" + +# Remove the log files +#ynh_secure_remove "/var/log/$app/" + +#================================================= +# GENERIC FINALIZATION +#================================================= +# REMOVE DEDICATED USER +#================================================= +ynh_print_info "Removing the dedicated system user" # Delete a system user ynh_system_user_delete $app + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Removal of $app completed" diff --git a/scripts/restore b/scripts/restore index 0a1fa6f..ba6575c 100755 --- a/scripts/restore +++ b/scripts/restore @@ -6,24 +6,25 @@ # IMPORT GENERIC HELPERS #================================================= -if [ ! -e _common.sh ]; then - # Get the _common.sh file if it's not in the current directory - cp ../settings/scripts/_common.sh ./_common.sh - chmod a+rx _common.sh -fi -source _common.sh +#Keep this path for calling _common.sh inside the execution's context of backup and restore scripts +source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers #================================================= # MANAGE SCRIPT FAILURE #================================================= +ynh_clean_setup () { + #### Remove this function if there's nothing to clean before calling the remove script. + true +} # Exit if an error occurs during the execution of the script ynh_abort_if_errors #================================================= # LOAD SETTINGS #================================================= +ynh_print_info "Loading settings..." app=$YNH_APP_INSTANCE_NAME @@ -35,6 +36,7 @@ db_name=$(ynh_app_setting_get $app db_name) #================================================= # CHECK IF THE APP CAN BE RESTORED #================================================= +ynh_print_info "Validating restoration parameters..." ynh_webpath_available $domain $path_url \ || ynh_die "Path not available: ${domain}${path_url}" @@ -52,12 +54,14 @@ ynh_restore_file "/etc/nginx/conf.d/$domain.d/$app.conf" #================================================= # RESTORE THE APP MAIN DIR #================================================= +ynh_print_info "Restoring the app main directory..." ynh_restore_file "$final_path" #================================================= # RECREATE THE DEDICATED USER #================================================= +ynh_print_info "Recreating the dedicated system user..." # Create the dedicated user (if not existing) ynh_system_user_create $app @@ -68,53 +72,71 @@ ynh_system_user_create $app # Restore permissions on app files chown -R root: $final_path +chown -R $app:$app $final_path # modif perso #================================================= # RESTORE THE PHP-FPM CONFIGURATION #================================================= -ynh_restore_file "/etc/php5/fpm/pool.d/$app.conf" -ynh_restore_file "/etc/php5/fpm/conf.d/20-$app.ini" +ynh_restore_file "/etc/php/7.0/fpm/pool.d/$app.conf" #================================================= # SPECIFIC RESTORATION #================================================= # REINSTALL DEPENDENCIES #================================================= +ynh_print_info "Reinstalling dependencies..." # Define and install dependencies -ynh_install_app_dependencies php-gd php-db php-curl +#ynh_install_app_dependencies deb1 deb2 + +#================================================= +# RESTORE THE MYSQL DATABASE +#================================================= +ynh_print_info "Restoring the MySQL database..." + +db_pwd=$(ynh_app_setting_get $app mysqlpwd) +ynh_mysql_setup_db $db_name $db_name $db_pwd +ynh_mysql_connect_as $db_name $db_pwd $db_name < ./db.sql + +#================================================= +# RESTORE SYSTEMD +#================================================= +ynh_print_info "Restoring the systemd configuration..." + +#ynh_restore_file "/etc/systemd/system/$app.service" +#systemctl enable $app.service #================================================= # ADVERTISE SERVICE IN ADMIN PANEL #================================================= -yunohost service add $app --log "/var/log/$app/APP.log" - -#================================================= -# RESTORE SYSTEMD -#================================================= - -ynh_restore_file "/etc/systemd/system/$app.service" -systemctl enable $app.service +#yunohost service add $app --log "/var/log/$app/$app.log" #================================================= # RESTORE THE CRON FILE #================================================= -ynh_restore_file "/etc/cron.d/$app" +#ynh_restore_file "/etc/cron.d/$app" #================================================= # RESTORE THE LOGROTATE CONFIGURATION #================================================= -ynh_restore_file "/etc/logrotate.d/$app" +#ynh_restore_file "/etc/logrotate.d/$app" #================================================= # GENERIC FINALIZATION #================================================= # RELOAD NGINX AND PHP-FPM #================================================= +ynh_print_info "Reloading nginx web server and php-fpm..." -systemctl reload php5-fpm +systemctl reload php7.0-fpm systemctl reload nginx + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Restoration completed for $app" diff --git a/scripts/upgrade b/scripts/upgrade index 03bc4cc..c317c5c 100755 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -12,6 +12,7 @@ source /usr/share/yunohost/helpers #================================================= # LOAD SETTINGS #================================================= +ynh_print_info "Loading installation settings..." app=$YNH_APP_INSTANCE_NAME @@ -20,10 +21,13 @@ path_url=$(ynh_app_setting_get $app path) admin=$(ynh_app_setting_get $app admin) is_public=$(ynh_app_setting_get $app is_public) final_path=$(ynh_app_setting_get $app final_path) +language=$(ynh_app_setting_get $app language) +db_name=$(ynh_app_setting_get $app db_name) #================================================= # ENSURE DOWNWARD COMPATIBILITY #================================================= +ynh_print_info "Ensuring downward compatibility..." # Fix is_public as a boolean value if [ "$is_public" = "Yes" ]; then @@ -34,6 +38,12 @@ elif [ "$is_public" = "No" ]; then is_public=0 fi +# If db_name doesn't exist, create it +if [ -z $db_name ]; then + db_name=$(ynh_sanitize_dbid $app) + ynh_app_setting_set $app db_name $db_name +fi + # If final_path doesn't exist, create it if [ -z $final_path ]; then final_path=/var/www/$app @@ -43,6 +53,7 @@ fi #================================================= # BACKUP BEFORE UPGRADE THEN ACTIVE TRAP #================================================= +ynh_print_info "Backing up the app before upgrading (may take a while)..." # Backup the current version of the app ynh_backup_before_upgrade @@ -65,6 +76,7 @@ path_url=$(ynh_normalize_url_path $path_url) #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= +ynh_print_info "Upgrading source files..." # Download, check integrity, uncompress and patch the source from app.src ynh_setup_source "$final_path" @@ -72,20 +84,30 @@ ynh_setup_source "$final_path" #================================================= # NGINX CONFIGURATION #================================================= +ynh_print_info "Upgrading nginx web server configuration..." # Create a dedicated nginx config ynh_add_nginx_config +#================================================= +# UPGRADE DEPENDENCIES +#================================================= +ynh_print_info "Upgrading dependencies..." + +#ynh_install_app_dependencies deb1 deb2 + #================================================= # CREATE DEDICATED USER #================================================= +ynh_print_info "Making sure dedicated system user exists..." -# Create a system user +# Create a dedicated user (if not existing) ynh_system_user_create $app #================================================= # PHP-FPM CONFIGURATION #================================================= +ynh_print_info "Upgrading php-fpm configuration..." # Create a dedicated php-fpm config ynh_add_fpm_config @@ -96,17 +118,27 @@ ynh_add_fpm_config # ... #================================================= -# Verify the checksum and backup the file if it's different +### Verify the checksum of a file, stored by `ynh_store_file_checksum` in the install script. +### And create a backup of this file if the checksum is different. So the file will be backed up if the admin had modified it. ynh_backup_if_checksum_is_different "$final_path/CONFIG_FILE" -# Recalculate and store the config file checksum into the app settings -ynh_store_file_checksum "$final_path/CONFIG_FILE" +# Recalculate and store the checksum of the file for the next upgrade. +#ynh_store_file_checksum "$final_path/CONFIG_FILE" #================================================= # SETUP LOGROTATE #================================================= +ynh_print_info "Upgrading logrotate configuration..." # Use logrotate to manage app-specific logfile(s) -ynh_use_logrotate --non-append +#ynh_use_logrotate --non-append + +#================================================= +# SETUP SYSTEMD +#================================================= +ynh_print_info "Upgrading systemd configuration..." + +# Create a dedicated systemd config +#ynh_add_systemd_config #================================================= # GENERIC FINALIZATION @@ -114,17 +146,15 @@ ynh_use_logrotate --non-append # SECURE FILES AND DIRECTORIES #================================================= -# Set right permissions for curl installation +# Set permissions on app files chown -R root: $final_path +chown -R $app:$app $final_path # modif perso #================================================= # SETUP SSOWAT #================================================= +ynh_print_info "Upgrading SSOwat configuration..." -if [ $is_public -eq 0 ] -then # Remove the public access - ynh_app_setting_delete $app skipped_uris -fi # Make app public if necessary if [ $is_public -eq 1 ] then @@ -135,5 +165,12 @@ fi #================================================= # RELOAD NGINX #================================================= +ynh_print_info "Reloading nginx web server..." systemctl reload nginx + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info "Upgrade of $app completed" diff --git a/sources/extra_files/app/.gitignore b/sources/extra_files/app/.gitignore new file mode 100644 index 0000000..783a4ae --- /dev/null +++ b/sources/extra_files/app/.gitignore @@ -0,0 +1,2 @@ +*~ +*.sw[op] diff --git a/sources/images/blogotext_logo.png b/sources/images/blogotext_logo.png new file mode 100644 index 0000000000000000000000000000000000000000..9a6752f09567e0df530f175b070565ce19cdef1e GIT binary patch literal 6171 zcmW-l1yqyo7sp3BaC9Rz5TqFm(ql-cNH+sPknZl3?vRp{ZjjL}EiK(5Ag#!c_`m+o z*}M1bobB23-h02F`+aV-hMGJcE;TL)1j18PKxhGX947^RR}ct) z;NOLo#)1C~1frNwM964+<(?ROyOF;6^7zJaeogTOGE~~5C9zHgJs2~Lfx&__RJ;$Y z`AUY8iVns)_ALC9q;wu@|E#97hL9Ci@aC=}A1s7{kr0A5LXbKT-44UGxu3 zttj?U|F&j3nYAG*dU$*5;2-GTdK&PjgH&}Ele?#JN;3A7d;%_#fL;>O9dK`y)Hzmn z-#{)_Ypc3T8gy4;BD52mtHIKEc6B9?w70j{&hDELY(CMw(KOI?)2TFaveIgt);VTY zH@z`3m}-2Eg&IZjLFgq{EzIEHD<6r+s@cPW`FDjnl`~6AtT&UC>}g*SIvN^gx=?y% zSe18sCl`XSD)8~4&FxUD6&DVcQB=f8w~w z_V@D0cZZxrpf2sJRjX4|>SyCH2(Y`)pFh(Whna*^yzgRWE$*CyBl)uQy*Il2v8G;r z#0P2U>mUALykhs;B?s5LLh4C>e2^avD690mzJJ9B#e z;sukWTI!vA)1APk4Ze*dHlW_r$7KT%F&lg)AxC>x2-EHSt{nxc3hV4KZ?8y@n* z?WIgxb~ZJ9R$#fqvsSuh@o4m!BT6P!iTV8Oi~&d~%g%7Zi-3TDuu|KLm5qn=xy41p zaj6$CB0o^_hD-~n!r}0dfoKv%B=UKoZT8jaMt*Tg2@xE;++>@gXcXEj-D1BC*JdZv zWKVm}!V>X;UMde06O%BzbhJvpQ9)HTZhj-MGZ`u?Whe00@G6%Z=vd<|H6xB!Pi}#Psy)**Q6?-%xIc z#OLSdP^MQO7&ZbQCCv5HAGvvW5}q?N6SW(u{XSWdx3IKS-R{2qS^4jghNT{o#Qkm( zGmhL|x@`8K5mQnsyh@;Ze;r4T#v^ z?N}bp(!l#$cVa?9>2ywg#zbKOfkYsGeAeTXTDrP#g}D1+$legFfw8gJkv$ig%KM8k z9vs!#-4u1n`piEQIl_u&W(@juX2F9n?DWJfF;$#puk|>v_usvY|NooUxdj{yrH+fh z#KKCFizQzk-`VU9MQ~@N7`8f`H*guY5c2TwxExH>-Y-RB8Z0fW2DxCYJv=b8(pdb$28nd&_UP=L*#EB~e zBT=5;g`!crOSt+DkQc9?6=lclQy-}KL7?mFYrpm0-rlJA_!g>+B37C8eZraH2^=aR z`^@Mnf1fIyN;D9#TQDA8v)IJ+w8q@r90=6i_8}^&j>F+Ux7LaZ9FT^waa>&;tm6_N z2d7@d_(_n=FO?`g&K3o*oF*zlkCWU}F|H2=+4x$l#m3Vp%nfR4YI5Un4DIbXu*H}4 zQ>CCyPmLdPdI=4ELeNsKcF0M9hbJc^g9fg5#Nd~b%6HTZ4h~KnMS7gp?j9Uq{IL0G zZf?%X$_g6$u4~uoxY6>xDB?CoCG~@k@-yaF05pcA*jZSHEc8mWM!RjJqod2Ks+yGV zYjrA}FLo6HaiDJ+7{cM`-)3h|*mpJ_A3Q;{KXV2K5P;-%j+YySc3PU7p-fDnQ!6y$ zR-|xL*qciJr8fe@Bo-(|L7yv|So1gRWVK(TVq;}hR3HnrrjCvOd7XCtF@sT_-Ca&y zHVnp6FflP~?zJ<)qX;*H& z!UT6z3zcRVC>R>%Y@ykDvF zzO=qNoQ=#VD=s$M9*EAA3Y2tMN7)KFynoLHu&Y3;;^w@JcBR!(-ob&JoX2FmmBx}r z!iV&<>p$*w?*m$Z4|;dTAlT=8n16GpZ0aY9h!daZ*`?7+C5+T@dsvz-E_{D)b`r1} z?*IEkQlh0u=X=cSa(CmbWooKE_fGKd--G;7j#?BPsQF6WTA>^hD=TIo-q5bDF67Qo z+;e~j0zyK`MMaDki`@@t2m~S#4Ffw7_%3mplAPq@ovX}UeOoZpEPD$TUs*d*IQs|R%nN`0Yn?m;*TVypdf*Rlg9RT0bR13 zH#Rhk00>vPz{kU5_WgZa-$B;|QGOM$E;Di^Tlz)VwczE7Rd{&#^$0PdcCmkDC5L`# z!)pf*b^m*Xynk_FA=}=_eFy-I^Ue^S$-ShZ%dY8-U2Tv7LIL+>GL?_-bk|QZ+~PkpaTZ{4`(a zT^=9&dpYgCH`(g+8!};liavchF_6fS&6o7&tXW-o!?G|GY~CM{Wh~{6g(G8;mq<=4 z(-<#pW$Cz97<$`mw|FzPzP|49o<$TF@B<#FlH?Q=7$AUIAN3f`Eb7kuyA2(EKkjJ2 zxsBR-0s}5aUv#Vv_@YZmNuh4GWA9cR@fK^0LxH`{PUuBGiNX?#(&ez{c}1f%;<@2J z9GE9)m(G;Zf|FfJL`xeN7KSM!Iu4bPpiN;>b@9nUkirB}pVEw2nNiYsxdIYPZ-V^2p%M>8e;Uw-@cZTkCncChQ!56wHE^1QafDU7sAsW8NR zqVvb71m0Ei5Yh^jpRTkfJl?IkPGvP~y9ogyb^bZW#%bC`v*CA%H<>R*kfjnq#Po`R zl@%Np7bg<VfP29PR#m!f?xn`mt`V5yfbQS#*&q6@>@1XPZ^Gn@3dfRpXK*kB-FU;m+Ide30Vq^5=Zz$BWUNW<7uU1 zzBXnMI?@8y0yi~9U&K*UZ6O}Rcdg(YMK+P8bn4c%~rC> zw)23p#g%lyeZa*H&SQj}lWoD?Q%AT&2zj%gL%i|r`E60P#Hf#%cwZ=Rv!)c@fXp}R!$vFG+ytZ+W zNTgd~)Iy;Z`19PVXXu0E#ftKtunNR7`@BN?2g2KaQxx8mqb2j8B zJMX((aJz7E18|AZQ%Ql>t#=eBwT35|J9S9KlbpiCs}Q-{=sNcpbj^p=*wqr=;;JeL z&_)r~)}^DKS{0=3?(S#T*C+ZFfmmFHgxhk^fu|t*)|U~?HVbI)BzjBpzdNRbQ)TB7@BEY?8*M%+-j#kF1iqt%1Wg(H2P)1N>E710wBD#@JF>=kziiS zq0QBHR|$4EPbiVIqj#bb(t?6)iz_4{H$>~ZFVfFfK0%JEdYal+ofS0mVBs}ON+*!= zi{K}KrKJu}9*>jngDb*lxmd#s)rR$ce_bN)5`S%evgh*Hb)!)Y@Q5N^DP{91;q*!0 z?2I*_X@jnYLo~D$Xu12371(ZlJy6nXbaPMeX`%ov78VqMo(b6pX;onMWQ_n05WBYX zH+A4{&wQeCl~e~V-h0fa{B!7hC?x5FfJywR>DfR7Z&MJY2aUr$O(`7jnb0Os!kK(l zxIB-?jZ<}Iz38$3%}$2Rm769ndp}=JDz`D`mFgs0-lOH&y8^SRjbHZkZH!18vZnN> z#%^tGjf{^E02GH3JC6nc7AceeExrJC+^2^6r&^yxgXXNt&PBy-ERwRtX$wzxri)?_j8%rM_`~tEJ87|HY9C!h*@nu7jYJbOgzELq-gA64Y%5%r zSKF$5D{RIG{*Wo=$=zh|nx0`Yh!<_hII~fs+WOojf|{&5 zd1fP}ZzJzg+P>gE)~ZZ!zut0~k)JrJ)tKKc1JHmH7SejknqKF_XsfiQ6Ndll}}~JU^W8 z3}b9oO}>8p8jIsjp6Jg{eS48bUSAbD#z8-hmB!yaR$&UyiI3MhGX8{LZ1!T@Z4m@I zz4?tFnGV%+SDLVM2<=38`6mB$g&7AcXQ%+lTl(V8@tB*J7hl_T`!!9@iL%9bp{O7} zM^h8jqL#FBaz0FLgo?l-=Qd)ki#BMq##2&Orp=BV80}`S{LuTb8t-iR;6$~3EB4BK z-v!PZ(`Wi{LGhsH_WCu6PLjYj(d|tPdC3H=(3i@cJt4gEjt~v{NL1Z(#xCq1`mYyF5Av0jmCp~P9@|@EEGdK@i^;rbjY-tSjGUM4!azL@ zR%4jHXY>I#P$>kF_Suh!QOvY`12EIG|IuQYa(o zu*sJm8qZ)yf$`3(((6>6N?;JD@fU5g%udG*$@Q3Zrw+ zhXd#4e>!@|GN<%A>wVIx#|VXRo-M!GlAHvj^9A{Qk?iUv6r`ff3W!+R+uNHb?NwAD z`Jv|O(#*?SAB{}jX>T182N?z6=*Xg;H!cMn!TfFy%R2Rn@Q?pyOeJRHk2pfd&7j^8E!{_H&Xp`X{(r(!79^rO7#mKw9$HkxQ(f{wzl+KhViqAuQ5hh57!r54H!oe5W>bfu{1=6uc12vmsP>Z+}w=2pT{+tSM1Z(UFOX zle7lp`ux*lCo2mxpRh|+hP9Z)Vfw(;fsX!Qj3)rC9(5V)X-Ptu@!v2SgcuSrCMlea z^G|`1^6@nFE3-MDG`wL7pm9gtz6Bf*SjU!VdX11LkmU($&J68DN)7dP> z)(x~YXvP?p{)=rjIT3JtB&OYOCv%;Bx;W9eslAV>_IV<{O&-P2ptU|nu%tk_xz!jt zoVG$#DQYC-0;+ol4At$W7Mt;VRB_N$*2Y>|TDEVmkJgmN)XKh%2<@2JBR2v`(1XOj zntiCMs&Xi?ns`)vyQ`h~&hkI4EUalna{?^|%HHIq9lXnrdaG zr0g`^eKyb+w6NsIGB%R!bPHJ#0tPc~ZUWqJ?nH^2uB9EFO+^lGB3qX#>JLa zDAB9YG)BjL@!ri7c`el|&Q~#&&l4ikcv&4;reTSTJ(ONgI9o9Z28oB)ym!nInq`sUt9~;<-jYqfdXCUydX)_1~Y<%ZB}ZYXLz)9F>SKp+XU6 znx)vP?>WEidzoeC*P&CyCvR=y(F&Q`^tYiAfB4Dq>MM*bIiaN}zpM{2?B0^udoBj~ z{epvQf0VMVUv}mpog&9UVhmlS_8xnakbjm|^ku35b=?tF2@chXmw6aOF|-)PFHn-& zcOgRE{TN9t{8`LenIK#5?yw5mQN1C+1cB&9)(%oS098}qxY5PZ0LIO9scGT9`{tD%eh6l?>NUR`U`kb$6OS z-Qyc7o7rbN3m$>}_9RxYKH!luT`bm@>A&^02Z>NLx7$9@`AdYR3lQWL)q^-kVEg)q>KRui~>|E`feBtBmn8y|M zp_%AHDyciSvKR}G1;M@OZ0+;dsOwMIk3`Fb+%rFLB)=|fhgP`sPGFy^B+HHw(sWw2 zAHDm->xdTuEd{JDlYD&Bf$%k@Pp64lT>0WrZv&@ZI#xey`sjN4(9N3m?aMw2CyOXd zyKP(hjw(4Tj@}_edym{-fN}vst8A?s3Ii6PW3<0j3@z(&kTDA61wN53G>+5? zGB7K}Yz%wk$_Gvlz^91E=^Y+E+?vr7r4Nia?MsFh%akgObSV+tx`!vqW5qX3Wz(_^ z7Hi<(uT5`Ru!VNGV?!>8cCNjsQ)I*EXN#HjNF3J`moI1dc6D;{Im3K3&)(?KGe6KL XO?8P(3O4{#eh^4eP7P55Hw*b6JgK{{ literal 0 HcmV?d00001 diff --git a/sources/images/blogotext_preview.png b/sources/images/blogotext_preview.png new file mode 100644 index 0000000000000000000000000000000000000000..c6668b0acbb452612f631083a0f3a6f1c9b1bcfb GIT binary patch literal 18226 zcmZsDbyyTp!!HT~(gM;A(%lWx4bn(SgLEw*EFs;}(gFe^xpa3UAS~ToOV`re@%_GA z&%OJ{&OWneXU>^9@vGTL4K;a8G!irf1O!Y)1sP2Qgcsj{&rhhxz&k#_7O(>W$z4iO z8x?r@p;|^DAW$JF%DmV1&N^K7@*{(T*B;0JT(_gM3Zn+nN#Z(C_0fMAt+rHTug>lT z;VurnYp3%9B`Uk6xxu&2jo8y#eA)Hfgm#TI$0ElSvj(F!a1HAnN^7E%=g=jqe$4h= zbMtiUV&mXQvPyn>je~Ft?l4IPanYvsLFBGoEE?Va7n76Mf$5y@T` z`S0G7jJi7e38oP#=#@`JnYH86<(*$lY-|F@*5AK>uQp&zubQ2D)?Jc6S^_oOoikH9 z)rgX!4j(y^g7UhRd>Au6$oow&Q&~cl&Eqofc^*oZUe}q?9a=J_6i*{ z)Xu=NM(AZ1LNoHdC5bZh%qN>Jk@&%%qbToha!}#?-@3E46qfIo^``k>V4$!3vNQ>u z+h=Aw?w2MlVJ+2I#mqQZ$W{2g{pQ-bGV5~2b{-zd8jOQ;`dJEeQa{UL^19ypiBsz6 zq|~&(v9NGu9g)g)Uc;4&@Ldw&!;xf)mZ5oXY)qa}WJV&Cm@cZ*S(3!?T4%=X(TyP% z25VeckyeA_O$`vm6xuG= zEC-o+yWocraUCMnzN9VSlGCD((=uH} zU`!mM^AA7>G!h@jHt|onUsymu4e#;r^jyFCqF4;|Zd=KB4w;2fQ>br%d{ghl2&GsN zJsV;$KE9{tXh_i{l6#TdeFRdUQKBaSJ7mx#{8_uWFDb`BBvHlW3wfY;*@Z)$OJ2Ab ziRm@rQ;6L#JJP&E?^eP~qVd7ty$@$#p%Jd0TBy0sG6}*On!sFh$WEOF9CM=As^_fqhOcRd+L40;w`vw-1fHhhYYvKK-Dq z9FTT*zetwVQlIgvwuYP{a8a_6e%w1cl4c5(<`BYUeo@$0aXvsbD z;a5wBSmr1$Tf8O(8%lqsZ&A~w z(MY^Wx4OB*Ve^I8Lg^}+rh3uK{<}M1RB9O}WMt%>whF6J*AJ{p+_Xw_9;Bca@{#Jj z!$TRU$M7&sNRJsp^*(+EGlcVwy^fhRs$J#k{eA`7Z8)_5H5^c27yY2Qz zfA-je%hTi&ds>gr1*X&TmgOn*Wg~uN8=Kv&Sf=01EKDpMra51i zX^XPn4J?Myt96E%eQH>A70%8Q^+~L+=al2GU2!4u!ZIb;Q$%MzFJM*;T~Xd{E^E~0Gd zBt^yLRwmDy4lO6`cvT11`G;({LulUg%Z0h#O5cd7vDQfXu_~^7RrssuY)Y0k^4^M9 z#hms1n6^y88wYMQjfl6hP+nd~(ahe#Jx2L>GUWboYr_Vo6ol&DA`Dd`2_dz%uN?Sj zH;?|H!?~`twY9C)d*QK9a-WCdJY0{Ln9RRKWVlgEgO@L3V_eq;7ZETRE*xwtwvUn+ zd|*-x<)fZig5bo>Vv%2!72Pn;nsy&@lW?hl_kJER+RSo#;|PxhiVy6hVF?9Zg0aiP zoEch{8(f<6WMD+Z#s@Q8h?(XPl1Y3xtSxv8%7u)4r1X`r=0k}+FzV8 z$%sF52#Qd-08@_Cm$bQ7oH;!w+L!S~gTzti-=bH#%)W#thP3kEg>QK6;JuOhvp98; zVn>95iOs_+`sehNGhGEV95tfR=-U|safFKFKzlh=cvW-xyVRIMD`0!gVO9on4*a~v zyGnYLj)np+Um^Tv9&v4IOPY7#QJbSV1;v{`LIgP@;UHh;v+qpWU&(tGyd4e6RNfRnuo&@TePnt6Ru!De1CnE z`7m2sZzmKDQvY7}8vRFcakvA2c!hmZByz!Yos5`Cv+x4s)$jQ^{hsMKWe?1o`K9Kd zID7EnTo|Kcc^ibk}358nsWoFVj#1r<2D3xzeLf_xXfQiYY2uQ zBS}%W;#D%0_7YJbFGpGtF=9FlQ>B75v_8nOJHG(Ym`U6|3DQQ2>U=0cLx)VNIO@d3 z$GWa}hYszk6-PHW-<>hIJvPwQ+T?=Oj#>gJw*?l^+~+aYU5E<%-BnawT9yT~$F`Yw z6RTB%zYfL3xfiOq`QSCcjzyiQb$JT$BQ0^md%Bj0Bkv5xs^U3Yc(Y1Zl9vnu;ECtvOqaq=dAo^-O}Gk9)enyycJO)%yUPd zDay4nJn}i-h;#~cT)bQjxSif+j|R#|8apn|*AzH5MZ3;I5HT?0U3MP&{`;$g-^|yn zUew1@iTRqqjHXBzh)Ny87>R^K9fI>N0f8n2C!a3SO&2(UPKCiZ$K%pC#Md2fIgR6# zA>fIDtnDwYH0b1qkUbSvaV}i^kq-OVRu*xl(z!ox`O8#Y51u(#`YH>?>%6QuW#6+M zU*&tzY?!7UG`rcq9j{5)lt5$RKG9sUGgFzJZ`Q-lU%_N^4{mwwv!kFG5L{UncQh&+ zCtLI8{C;j_CTz36MZXP1YtQoXf?3|c6Y<37@J;v1B*XirrDLZ3eZCA57~?yep5wOo z)2S9ptNR^-C4rSh4Oy{iYV02n&}as(Qt?EyKN~`9to>i5Kkp!}BkVc;4_qG`9P-#T zMQJ<1Eyueh0~GWd?ltz~kD^uOp$fHO43q(cZ{Mp=%tlO)k{a~n`W?Hsw(t#BKI}Y8 z3orf21+QN?lw_}-sI$fam%+)I_-zhvUVU3_zbeICL#Q)@*5N{1(pb%|#z&Hth71>< z~qt*D|HLmYE!r*oKi~;1-VrpJSHqzy3Cl9BX z4^~&Acb%ZIR&W@(h~a#*9lGiBF*dbWe|;P2-sg_tN0HyJwfQ!=|Cly)huwvJ0YUHI?x|ig{oyP3 zIIDL%%7=D~N@E6LTr;8jr9XtX7!0e3THSK?`j5QJM3ubUE<0Hq=C2SQ(>SV%JkfRC zk{8%o1g|F1wfX8?uDY3)63{-@ALqk1gfcQ`FRmju9p-%~jS1D=eizuxjQd>N$>o5b z>}#DI3iF#2vK>hyx0enbTrTcNQCyKqT~nt2;%L$(hx<814ByFBWC`^**$3A+=xpZQ zgIp@wl7@#Fhsrkc?mr4G`p1@&k~FzBAqL3OGSBzG2FAxt>ew$7;GWh`vGh8lf-SnYriGbnR9bS7T2x zKZz@!k}0rcK6w4g+&kY9=`bp(;I*5cu=i|BZc&A}lDZ!1EGfg_=y^iPA=Oj0^+y-( zZ~QldP}02v5~?WyCE39^d8V)1e2rq$qPH$WkRW%X&nHyYUv5v6M0_?w1Lz!e*IsL1 zJPqXc-i0*^>i_6Y7|4_E%6k01fQPKU)Id>rO-uG=AGPCV+&^k!!k<;050NRlm@+7@ z45dTsgK+|#=OdrPF)G|~MW%;Vgjl6#_xaL!-l#yU0VL+Tz<(ObAu(`gj9m?0P2w$M z+x=1)8_XaQJ)k}sx2(V|IHm0C!RBi(UsdPScLH%;(~hxi4raq%inrS8igDR9Vvu-B zqU7JR*|5F)6}%fCE=4sJB`t^S{Y;so--GJ;Wp}UdqqoL;QJ{?TUfcVTkR-J zY%0XD7w?WXf{w5iN}N9T+ODpIfWv$%j7bWK zr^)&7O3oFV86aCk^7i<|9=LJLa+umIwtG!zlD;D#UHj}6qkNRj*waalwFw&Y*KbnE zIFW$su)}SHe9mdq!E3MMTF->9s|iR7*iHPeP-Cvn+Yp`e&h5r>PN-7YKEb^sLc}aD zd^QRSFtDyRW3&slwOXgednIlm*lWBsM$O(C2{Jh~Htc^~;cGu3)k(#9142n@b z&pKrJHEx9byIjUt&I`@-m(wXJ?*6a8RGMy(a_^@(+i5Egne`Xn_O|MQb zG@Np5awp8r#hD?Km!Mi)@;leJ<+%D|j?bMdnQqQ?v>sK`j|(@-A?+v!etCWy4Fdzd zUH**%u-_)7=?{q(yP(4_ zFN&ql>6T;T+I}_tgSMM79j>n&}R&NBJGiJxH-L^()M~rKIqplBY#!G6B$RDO_ z0y>tg04{zz;ox_W=AVRpWWO;OiC*ilB2|4s^n5PiU$GYo+l&|g6Q1j@S$)RNO&t0z zL?4_y^n805uztVlVD0XXxO&sS>Rz$Q+)q|cVSc8F@J6aklVG;OXlvo^&}M^?B~2cV zR79czupjjU?rSPQh){AHzY02BfMkzm^0VFgCzjxk2V795`AGoMfzcrXDKN7JF;MQB zeE-!Huu1`PTCLx@k7U5zs!4yh8jrIvQ}4XY%rlV|Nd9Ty+VOCuDOmHIF>>Q;5JJbz zMefIAb5v@ChJlfEsEuXJ2~7>6V78i6*BPB9_o6APYs2?4k3kY2u?)#9L{mcfe)-^;4T3S0)69B}j$c)C6wC&Pv^Tp8loVG$yG-6HS>ZS+k)m zLLb+GV7c{WMC*xE#3J7tPCz7J0(6OAr18!+nN1D^(AvMeN7?Qv{Wpj2kNTxwh5BI? zCZoHo?&K{+<9|}SmEasl$hU(AD~OZtYVLX>JoroShi9HwVTX@IFVoWohvM`Zq{?=2 z4qDY%RvVl*iKbemis~$Bep8|EZ+Hv+wlJu=uA4 ziMs-c<_~y5i>kcl2A@q98S&A6Lie9XZiX~iRX9%3JE=I)ej?QTM95z}Y+Pn{0HLsl z%L!ZHV4*NwG&Pbb5{T{6=@`>}j>O#Ltc6bo0y(cn7|${hAp<(pzDE^rUP%GCKW7)Jir_bB*&o?y)t+zXwhs!O5nWJHL8T?c)lV6xP{p?~E3f$ut zaaz2wXs~bP1PzG1=s7w|ZMLKCHMTXcO{p%kVjpTNZE8v%9!5LAo&Oy4ndTG14_JNV zxT=Myi%K*xH?|C*>%E}79h3*;glu=38WF z>U(wZO!TZ*ZFS?8P6FgGK>^7)ZK%R4Lldosvug23rqsT~c(!^;78m{7xOJ1;bvbcB znrY&{@%Kk0B@#ypm20}yo=PhdlB|hw4WC?`9T+@CeWm}?N2m9bEm@CZtfbQ=Ct9e%&w;wckTwF6xi0(;gRHS z2CT+CCvfxc-y#?o<3k9V_N0;rxfSUwetvc0PG?QuA`&FCln-aBte{C6%3t(w6T&lP zlriXRSb9fbF3a46ErY0mR=BUNEjMJvO;jYyo!(nLABhY$qKx{WW30-aX3~m_4nZBx zPl>t4{x)iPiZr4z+)Ij)G)~9$7cx&SNXDOjSsyhuJ%jUlwDss(sZw#ps9nUsq+@&p z?6_#KI;B79uZ&K`FTh`o5z~L>4c^O$8`zZ6LMtALOi<*>8mww>{@UK|-)hp7)~qkY zn@Qdj+;Qk7L7%zc=PXH%xS-3u2F9M=+cM2*?S zi3yQzeI8<1NiV5f)5^VxEWx`;?X|#`7>qW3CIKd1iIFsMc*jl8^8@8+BO$0XInmk9 z@B^1vp+B7_R>B!JOO66A8ZyG^%|qd#RK&Xik);qa1Se4h0lrFP#Le+&qd!saETNuK zK?tDCSPiPco@1&t_^R7+oMu$OZFKHVW&2%&zIBiSWABQwh>-s|KIYXGz&I;RTGWgk z*{Ybe4?OnK*w`8s- ze7HVY?CHD4GE!rB43_4tG>o<*sWokv8oBfIFgo4}0{eR3PZ3irbmXQ1Ttu5*9u`LM zn>n9M^p4)}qrf^y_-54fp6~${0H@qLg3%ITR0Y7<vEEX&+{cvIWi0OYAe6qXxeBH5Qes3lIyla{P*N&CVjjXU+usj9E z!tLp@N-alEM za$%hEVSN0&H22m<^#00uqP{TYdL-My!9ZPA=dHvu%X5^cDyHaF&HynvxwIC2i`Vi% z=NgWZLF+?5wf}AIBN<1>ov_69I`$-VQQ0(rQUb1(yLJREzMX;lcXr$rs=MFJW!9EC zny;>iVZ_I5cnIDkV7I2Va*6LRY>; zcwp`d%%vSz-B}8aj*06Na@m^O`hpTq1{^s_rO5jlw%T3GssioZ_E`52mVB?LPD#jK zw|REw~N835cL^U^ZSeW;d z;cB`H#rD;gxfYoCpe1wP-$7J_yibAB^6{<*hdz?DA1SD_ht6lm zpC0q!eSPK@mhM9SFfaeK)#u9R;DD#nj=Z&o;`4K;kvW*DokEZ$mIsr(Xip0 z0ESvCI0^z06sdQlP8<1Gb)cnnI$q=YI?+=D?I~kBA=dYu9y6lzF4Lh2M<9J+!r6M%Lbz z$vnFppP;-_T~y0$ZGQKCl;>xZ_nd?aB1F*)H}}r|nW}8C52+jFP#c1)8X__h>-$tT zOE)3mN}~cAl5L1QB>3*f?a@_EhI{ zYc?0|Yh{EtrKvx;4aD(ERQme?L`C=%Qz`y@MGSNJY%-oE{%qiXwEAH9v>5Op_H+?& zFD-s?k-Jfu`{?_0Fu$9cH{~VJF+L#ixUXL2YeNb+I_;NwrrUFo4N*C(7xND1!}AR} zh*&Sf1J$U+Ptx~T{OGc9%u`yto08yuHw6Iv%6XcgWXK#jJ10dM8X?C>li^O;2=G6S zP8wG(A^X#UXUt446;WtuKrl4rZ5SN}M-|}(0-5(F~ zQ6apnBO4o`(KnB7&KW7@g{$v0R0I}xJq??xk~NdG){Dj2>mB?=&`bMSElCAV0{Bu~ zA@vfgj(@K1QuO;5m!InFXHV~1@ngDM>#0`@Z=Egb;h!qFg|pSV*H6D*v!u>C5SpSN z50Q|O8BLL9qC%#OD$Wew?lr5Kn&w(2nIPlMdvBg0QN*J(K8mVrjD3fhTfKiF!z4?E z^X;G*$NWA0OH`Hd8|L?x+nF%G4(9&J(YG&Dp}p2D;=P9;xR9V=NYQ&1? z%5k;2YzS`a;DC`kF3@y5dh)^4lrm4_yPr5p;HY(GeLIf1&z~#O)^Y@MgD7-Dj!)_I zv9YnTi$lqp9w1QSkmX#XD=p~$(zpmp?AAoqEbcGWH&i0$%lfjr@`) zb@f4%AUa{lx}>}$y>N-3vhA8AT?IK1h0^a^r|KejKb(V0l>4hx>}oj-GEj76ao`_M z?wb^Mt&E_pt5f5&EIdgdm<9-{uS7xVWVsaX*;)=Nt`g_pAQ^ zfUQ-$gtG?#Wzo0=%)?=_QSM}j=TQ^7Nxk9J*?5=i3^@*q(c0F+ceXi z33~Bee`T| zpx=he?SEzggxq&n{X4KnsuhZ%wRLq9Gc(A6X5WEz1~7+S#Go{~+l;HCQ>hi>b*#oO zuXpada0&_vI#L3y!NA7G!;)vjKmTW)71i0leigksKe_Mm118*DR8X7F5T!z|%$`P@ zu3~OLP{d@%e*CJZr^my?2pQkX%8Id&Fv9VVM`=b48yXqga1(EwLC!YM zzEmx1iyP0nHm%HuL-$*mzJI>)don;Ak!k{X@<{Iq+#-V@QpQd0o3@fFRv06wnqM`E z!*3mZuQ_h{7`VIXp0F8JcDT3bUh|l(Lvk3O{h)P?;4Wi8PX;ng0_yhmHUji>enwG( zTJdY72ZyD`H--58i@$A+-xhv9*Fp=ELXv(j7bgF!tZeIGy3}uzbak!k@qT}QKd-$# zr{dTtgM`%1!NI7Vd$lLE?6vZ&r}*g~6yUP(R+>s!G-*a%$6n$xD#T|`iw3OD z1(kL9xI^`?k`gmZ%Mfyr1@F_YN1lw%qWy9Ahd!j0dia}_zoUKEyAjQ~T@+5=jrumv zPAk0H?5pLp%XEJx)1)Y!4YO3L<=F22Hqq13$%Ac<9Kc{Dzkg@cFIm@o`0#-%UA-tj z|7FW#c2arKdn>C~78a19bHVHirV+lEFC?0lMBd-+&^MISJIqUIY2i6FkQU+t%&l@( zq-klrDrsovW`nR}a0PsiVB5Sukgik+GzZ8(oZpH*J|aR>!+U^W22PlndBY;0ZvZ2a z-KaHU*{owCgzqUw)iM79<)tOJU2}6YgcYxHR$eP9i}P4XOYId_3wivam`@NC3YF$0 z`YB4Xy>xr=3ubJ|O+1z(#`41Q)npF%TByz*&fcB3p^A;is{95kd~o+7S{RKbX-I{C zpwXzpj-mPXJ3qUaeS+e?r61a8I`xl22(gLBKzBn4Jx~0LU&L^96T722bhdaiqMuOW zuU#8Kj44X0%0G(iNV-0qrjCYdjqsc`n~z7Q?C!*Qy28H`h4S$e$U}J#4n8vkXz5j$ zSlPNnV3K|m^ggAsCE=T%zP!Ay@?ZXNV0RxUopvGn)Qw{|s9s(P#I+jvVM9W;0ye0oC@y()+B)*K$Bmj$v>DwmjXs?4*D20-g=uVMeLhpwA@ALWa`T#s0CQTN`^)#c<+eDZ5_a&$bZ-Nq|uP=T7exU?GB z@?pYM>2UQ^LwmS#(8rEIh+gWHii$5}03f>VHThXv=dCjg9p5MT!Cl=OkaVPRBay^& zvBP`btE*$rR(h?&?<4xm=Z-*VuMnZ!XZH_V7e3|?E+9WKVtnYMT&Nk-w<$9+GGtvt z6eg4-?c@=1ehv^HtjcjO+T2gKSxiy7`O|pAz#Ytv^qo{$5-DnLkDHh{OMV)%#5JBR ziI5{EBm0?Wh8Zd2*A(6Q$^HPge{evbprEOx6>FCfB1OG%#sx?jpiJ_X<$7iwjd7Mh zh1^gab0#2M0I1V|e629=T`EV1`+n9_DvxvDBg0#CY@tpSi1m~=C#d>&P!>ZK!C-Pv z&pHeY48R_D5zNxo(J}itvvv5;H{1_qVDqML2AtSb^GAvVg%AbH)^uhf3^nV06UR}J z&MnM2dM67`SHL;;Uii{wa9mI`sfd?~W8TLMibjFB{a-3C%?m)B`v3d1xRL;*O_q5X z@qcKpL;r;-H4*;_#fd(zzO`J|_W^3LQ}ERPr}Tdb$^Y*u^kpJtzG^eq0g@H1<$qd| zn2_)W&{k(pV(s1U-3TQC9w`Di+A=SVXD2+#k0{c?VwHf9s)_zainSsyFK?T@J71|7 zYMT*O0RsdEWE7ON7KLaaT_z_lAI+Xb5`klG0EDAj4wRO6FW9`^q=xjYQ{kh%H3m8J zPQ9k?Wz$df9DtW3OO^lF$qsEt`PZN&o@C9MnJ-HF54uWbHS*Wjl_uLMdL~`# z9_L*)IbA34@sCA7E=)K($7si`35a4rXF8fJ`3kvUGLkUt}5~384wyz z+OtK^2Wg>Shl3DNyzk2!6bqq0@FmWYB;EsKa_ijL|02_<)!Xj;HiPfV@3MfBt%RNq z=rEAOWKF-#%+;;P0m|b1eDfIuHz1_70&j7!d!0&{88YIZ#{`Z6QWPuFVAV^-bAbnaGlG2==UN;K!}^r177Zjb6j`#_pU9=JgEQ& z2VjYFtLqP2t?|(~3NfjXFzfsY#?l-4q?dK_# z8is}fyW+*wtmsf)8-w3P4=nAb8UngZ^@KsyEVuO#W{Y78jLcks-sza6oCLK!;OubMFlum z%!K-cZ8ESUQ6Waa%yFUCPHxn8wH*vVQ@85tjn)!m+(?-sK0Q_5?O4j^Zn-|Yaq;`C zg*sot^}kC;L8*liGTl7FpF(gpbdxoS!n)?>h~&C{RR2y?p{LzV)ahJz`8zR@;Na*8 z#u7v&dnp{$$ZPic|HylY<52hhwjn|eGgGVhEf1(i;yn^KR}f~4m}k(3 znf)PJ_o)0A4$=R>tD4EhkXKx6^HID=l1frqx@YSGTC8qiFk{K!$x2|c-0V3ut$K2) ztMn#*z(#eHYke@Gz`KpYO+YT>_R$}}d<@+IZvRxU26s=-H#4TR*6o&qdF zfhvBTHJ)Eb`8M6fVN0Lyy?)0u)I8ogSyaqcUUF9?kK6GjpMm}{+_HW+6-E4oR{-2= zYPQl0P~6Exy}!-Os2(mhIJ;%r&sIPj7wd<18Ps#K2qX~zNcVNwX~4Q>Vs=&@V2`@> z%11}ZvNV@hSJ35URaI5Y1cjfr>7VWGfsCH5fQj!#E8a*oJs!h?16=KTIg?E=u-6&RaIab1QQrw7M23Pzwl*rT zx&^R1lphd?tD6CR(z_Iue0!1!TOkVz3xJ4>lSpFp$jquHS4SPIGs$wN-&Yv7sA)kjld7TnTh32A&c8}a zdp6JTM^QWhzG)62TD@O^1N$;T=I}3Khf7UKmfVrEuy-V}YS&))Je-1ovpj9DORKBh z7M^g=kg~J01v095>z!BWRrRG%U5lsH_e*W<>~bJ}199X?U*FI0^SwPHa&~aY(v|+8 zq^dTU2@G;Gh@(om)!}>_>EEjPD6j4oBlaBc4cG2RwF)iGj%G)>gln2ZIZ~I;(A6JGDd5eGF?8JUlwTF)Jx5h}i{!S$ zy_|2c!efmp0tYtVe{2oG5nxHh`A{b6u7l-N`g(*A^^Jl>p>Pxv=3z9s(9A{Gp? zy=FNXuQhjN<#Zf#;g)6g$CA=cBZ2gf$smT(Z_+}odx2Ipn{L7`jgL23-^NH9{Mvx^ zbK1t_g=PJHjBSS8Pu8!a`(3apfatyUK8%SiJoU}~o|;s>)+VN<1+05DO`jthmg~3L zxl$xF`B#E;24R9mFZ?J3UW~W#{ZvJTa2DB3LZQJ{Oe7>Tf4+z2DA1uIz2tdfS2gt- zGxB22(nFZ2owuhJa2GTd{OPQM%7qQ!7J#QN9u;+Tx2HGhbJ4Gx1V^<+40RosO3YKgO=XbD9?u$~$Dq zZCPV5Q)VEor$-nhiI6!8pc(2Er41KBXHo1Vr9w^&#F6HGpBy~0 zJ-B_&{d|bkctl@TLT~K`+-NC$v{%V5?UmTYRG~$Ms3oPPuU67&xn1jI`#(Ze#SIM+}#Tv)|Mm(umyk_Ml4a*_#a@%k=Kni#>2k-v% zPU`=7zDA+|t_lBFLOBE7zMXX>Uqk=F;IO$uwJ4My0}*PJqZpULpCb@JQ!bUK(Rh?z ztrf2tvCYl(`t-Ved~=Z~m#WcL7SF3QUyY7c2Pm;^+^)oRWHJ&Kx!itp|D6NM3z>Id z1cWPCef(@SevzG01tp}6ev)t$%-CXa-IJm4Equ(sJor81=S?V*W?350~nYLr%T(CgL&B%fI|HIcS{ zdy+pqLj5-U{OWW+*W_>+m3n808~+uiQT@JNB4DXic07@c!o>y`h6lM*)XJ=*O%eA` zdX`!UYkbH*kDL6(v$a0cQKuB?gqsR=){X4?tlx7a{V{Cyyd>Ih?Sjmj?yQ~F@R$@N zZvg1UsM*7ABD!6JmX?-G>`U^*#Dq^-xuE|RgvR zNJ<767+7zYkNc8PZja&Z1NQQ2YBTEWCW7I4Yae%g#=Ja}_}0(2$3(oUHsTB)Rtz!` zGv9_ElPwenytq2rwJt$m`JFK{;d{ebNd{YQYsnP+^1v!)Gp12PKgbe3US-#U_iAbB zC48GBART;vJux}SZS&zA^1l6U+WFg1=1sR5e`V#yp5bmuC3+I*j<|WL@2NO9ue_=L zr!*Tr+QYT;Gr#HWuwE2vw#k8?aMymrxJCzkXBQr!-TX$nt3yW78DYQ~;Xeq*D%alRa)Ac=SVv@9AciuXE#Wnq}%};p@QW&x;4974IVi`}+EI=2CfS zX)k&uPnoqggs_wyT9%?wgQpFniy4porDw^p9+qPx>kLP2eLdR_afP2|9LL(2%{}stP?9ozfmF@8B99H* zjDF{berFu4@lEs+*3Tao1_$n{MDUB*L5WeZiBZTtrxV6xB%~V~+xG8JzWx5qEDmoP zS5=l5J3=US`4U_PET}t|AD~l#LX)9|pFWp<1whe^^CJPEc)d%JkH~bipVmOZU)>LX zzO;+=$n8ro(}&IO_sCs@#UhDOXm_nm7221Tlp`<8@u$DUmlH=ZS&cb50Ac%5_=PAn z1n)i_l*V8%K;*j}enp>7mWX$oaRdi1&#{KujZPv_>xv!C+vIAsfKF)0(8ikbt(a&M z40CIzhot|mND%WSJIUX7-VeTY;|VJO88@lSOqGPiSz+QSFg4=j-dSxbz!u6>x&bMJN8;ohQ zi3(esBP1KiGOgCG=7=d&wRAto38xoT=Vy7-1T7xP0X(C?buyC6CH9DG*gWk~4F!#TWkoG-3 z9LM{|D)8_{BuZ#HY(}6w({E`H9bv7_wcva8@Z{%L&|&kMO}M&PFM?L(5sWm`$(ItH z%hh4xpjo8Z)YTcvhq)U|nZI15$}i%L_~zqFsK_|D>&!G_750jX2qSTP*Tw-#imECe zCsX=;PU)r}@g#QFK69sC0kYi;e=C zG`4@lx$Nq#YC5d*<0YZI9>%#UEu0s8?nm$)&!P&E+<{GC7i&@xSNvw%6-1E)53=OI zzqs}IXBWQ6_B6+dfzk8LNZ%_#gh=u*iD53Z@s=-DM>Kv+CMVmRVJTAtmdwm1J18}L z;?_ja3Z~Zmy+}TomrT+z=Pvw#o7rB+;LW`E#jW3K21iWe02};C@A~D*c0W7@kHV?g zm>=jZ7@A4|jZ;SZDpjU?VwuwZ=m7xQPxxq>hz3@=GI%pGm}YrJ$QUDI^9mo3+M3__4mV`2@$A&K@yhcCBnFfXhf+cF*oX zx?6XL;HQ6*u+O(89`O=G&0lGdiCrUCk_irOv+N3a+)!md_9fwBVa5Mx?pR?V6!cs3 zTxgL~!1OvhqNHGHHsL2`NXb5mi=gLtK9yY&cF!3hR6je9UR^)<^jXd)RA1@Qnu8F{ z*oe`?wZbLay(y{Hm7Y%Ca0cBX*~%cYHvV3Y$L{!xZVB-bTJ=wXbHuDf=&0?6&3>B_m>bO~bUW;Y0OZ_aYpK6(+F z-i}lT3Ix*fD6yw?yQHnhPjS0FF$!hIo>%1-9r-r-?clGUQ<3jhu4BsotpSUkhGe@B z#I67O_4CL4?Yeuw$jrT$d-;WM9p7};$)3e7BK)E=4l_$^cI?g*lV|w*e#hYR<2n4M zN&T7Ec-FUb(EWVwJ%62}#SiD?oiO3%u+2TJY(LTW(;0P_9$Ec{6ADh3!YL`906<#0 z70^rGs%OAu|9Ri(Xh4Tf06%GsKWV?g?Kwkwl7#r_lF)+FTy=TZU2Or?&X~o7%pxv9 z4}_N0PGaFWN0U_NdbPlZCc6=vVRge1s7WFMUkW!-_@+3ZF@}0ge3H&<7FqbVZub6|4JvqlE6M$?5@A3?9V33tFA~-Wn*jI zg@|PZTrh%NqZQ~BjA7QFrC)r`;K$K0kgJYbX=iu4eW~LK8;l193#j~HRgv}iX2~6^ z`FCW6Vg5|AcYLrpK|cL(I=wknX;073J*>~&S9med z$op;kBb+bMLJ^}t!GsoKzC7_kpVI%}!_%d^spaz%*td#hb|>CKqCdhuH|zKN$43Jn=&<%dC>bWAsJ6}7`lbRE zlCR|Wr7yxfWoHuUSs}F)*W#UlT!Vo^D}KN2_s>{FGc)DAoHxQN+lJcZDK^i~f`9F( z@`~`$Y*QG;QFS?%>jy3uY@(z1+zi1d!TT6i6T-tRhjZvYt?Wq{P6ws5NX#seA+&Qf zLK!6atzXtune7jVVU+o1s+bwbvz2g7Jw3jHth#b|O<`TSR`Ga3d_3ntX+C60QO%C5 z9cMEg-iEGDCkZRU!~l8X8ABDc04K-*gpEv3YFK_&rW#x=2;L+6IBK&y9 zvsa0e-&7pAnLSDSeh(KG$-LPx(L8XjAnM`dQjtD52PR_z$t<v5+FNf96M)}6}tTXO=iI4)J?RP`?CnR3HdN<}Ck{tc~bVR6J0nvOeGP74_ zj%-RFX(6}@l>bYhWNqqGEMnHp00KJf0GCUm-<-A&{b#gO_kMO?ypY`5c#rBT^7A$9 zn2rySCK8kA%clQRaX{wOOb5i86kfCC?0?U!{1-Er4Ec|P{-2Hc#J|)mDi;gj?3=$b z7{jvK|3iT8DSr~l-m3&LB5%NxXjEC*+HKFaqU$)Xg!&(e$1-Ft1D-o%7*Jfj%D1to z_Kkvi9!W~qolmicyI|q5Kj!#^daEvn4xxka4;l zwojt;x7J4h`_MMsHF`!s{ zx$HWlfGd<%kByhjqv3p)^vFave+81#j8q6|I9xMl-Qz|2x)5MyGQQeL#$c% zhiS^Ss2LZ&q6Evx=P&2=!rn~er8vAV;ux{3MR zZr%FS`eBS&`L`eW$CNoJyY+O{___W7smq8$On%4ZuI4*8vK7?(g_+HZd&Zd#R}sBM z3*x@%m~N-8*^10ESNm4i={0GXqhH5>rDWHDzf9UWL9W$PVBWIpQq zX(do0zcx(*PSf9)kgk3{*VDUtuU2;vus)UK9Nl-wY}%^)$D_lsn};~QnFl|A8}=i% z!5}xnhb2dB2$o+0@B?_ZP@a_Y;%$*Vx%7RwO#8q}v)#}wuWLvrvb|po$kE;h8cw;03f`3{&xG!g zh?pq9wzo(`qTx>gydZ?;W?yIU>@4*5>U@R>!S|yG!d$!kDJ-{eH?AH~YTGBCMqgiU zpMq~3=o>d%CLHR@N9GUUR`RY+?agE5lEeso^XYu4T)jn9?^vm&Ko=d3s)!ckS>5QL zY*`l7namtjxL>{@)x|+tZJR**93y*kp^mndIx`p2Ys{;A!5ljX3nB?hXEiJ9Br{*}y%)>q3@h z4q*&Hm5R78O76Z89p2^+V-JnLqDzKJsz85gFosN0Q}^!V<2UBWi>J}%M9j8`(9o@l z1QCU)iL#5Bpt?RMYc^KI!SIiVmn(2+j!2e>QnZNdF$Rqi6aj#_ALNXM>szG%Ey$Pwez)DHMl>mD2C@ zMX`Erg_l4t_?IUGND;6rbUdFrc75Q>Ua)1%H!uJD*Tg{%E_(fANrvZ<3>kAXEw4hu z;%GFc8C029w;!6^zn7?iu8Urfs|IU=u=1IfCRz1(q8(Q2G7qO;TaUc(MMi1l2E7

J_oUhhEt)AO{PFL$sr8V|;?0xpsGkB*O6tu2a-Vg)2ChM|LOt zJ=AI1F_;Q?m^3+`N#Ew+ z37%)_AMr-A;V_>ir396VuO{EOM?z)Me8P=NWR#g@r!>6PBCAt7(Tt3WRiu>#q!C9S zj&f~ml?oMzNZO>;tGFx_ zTp3+mWPE&@_?BIK^~LARxe50Da3^Oz`ZpC{Cu$mazRz5)KxccJmX1~i`nven@Cd1N znxI@{p=^+7ZXmc`X6niqvpI*K9oSDq#^queEXyJqjc%$Zw@L!p;9~JO$_&t~I5FL& zTxrUWUQq1Sc=4WYYY$BU2 z5YsAnQJYBAW=n_7f>*++%wQ**Y3)iAF-($rK%vq|r`?3-dAQ{qO>Jq6s6lUUKX$T# zRD(&NAQ^8UQ}W3cN?3-2t0yq6C{aVlh{iB*`C@#Ef&M;}??Swp{yrB&1G}l2?EDfa zAFH8}Xf%fAlxS~nC0TTdnLZvGplEGxLo-Yi0anbW(N5A}H=vZl?yxa+1=K$4M65lg zX|jL+env({@O^*P<9By=^YqhClTLRM1OcA!aq845KL6~q74OdrFZ>GIPSjlg=9_PR z>vbFtN_+3U_tns2Lo_!vu2>MUwk*z0Qw}V)Jk%Cin|`It_|+Nu`ud0%YySZ3FBK{J z7EKAO-d))gZa&gBm(TIakt4kEmp4Ld`_Q37OiWDh$tR!G+$IQu(Bc6^qYXUu)Kd&S zHpExc(|q{hDJCbc5Cj3u&CNXdUv(e-Z*nSI~q z@ZsNb?AWVeC9xv#K5!cN2$%r!G6LCzQte%<=ND#@R8@A9AZJ$7rx=s&^;E1G6lP zXP^B!mo8u8nP;B4=QfRvjhr}ff-`5%gckSFNB5HMO!LaiFXMUM9qY2$EGJK%Yt7himlBS(&e7JJ{mAM^b4&ymSw?zw*J)~y^p`YN91h8D9HNgzUqb<1%aUVr^H z_U_%wTW`H}&vK1rS-kYpOQ9wZfd5TSej|C@ZE|ul^wAF}jvqf>^IDpN2M+@3TQ2|% zizE;s#JYC&>{%uzCTgxvrBYNXmC)mUpSgvVoPYQ(Z@>NaiqFAF0ue&2dy9*Ux0Vka zIKbfG?pvQ-&*hzW-U&6{!omX2J^xD{fBZ-HKIh`*xflw@#zsSpJu@@I!Gi}G8XBs( z&Bq^qOtDxDHSWDg0ue%ND8s|U3=a>lXpGU(QC@jDym^iLF+M)dv17;T68mntqJBdx zA%qa?msu*6C>D$4a`}4qMF_D`DTVL56beQ1#m#e}-3H^pog)tO55NE2pZ4teL7n;| zgxD;UQkv_!(F+$Z>;eV>i)tBt?O!+~3PAqG>(=?fvg3pht3?BBAWb!a?7p#VBlEFq znL{;kOabSCQ6K|cmz^erSWUMdjC|lK5J&C|zLxn^uSA~*rm2ob9FP%+5Mp&1K$L3I zuz?uWQkGb|6xFg-iE1J#-S`|x0ue&2HsiLJ%z>;A0o9R+cjKi%cAOBReze=(Z@&%l qcij@X*0!tBMm=NKyA5^MJO2l6Hhq$%JoWbg0000