From cc43055739d722846c9d340b508529495a76593c Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:34:21 +0100 Subject: [PATCH 01/58] Update manifest.json to right licence https://www.zabbix.com/license --- manifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index 1efefd3..48daedf 100644 --- a/manifest.json +++ b/manifest.json @@ -8,7 +8,7 @@ }, "version": "4.4~ynh1", "url": "https://www.zabbix.com", - "license": "free", + "license": " LGPL-2.0-or-later", "maintainer": { "name": "Mickael Martin", "email": "mickael@librement-votre.fr", From 659240cd1e54e29a7fc5a56a3b7332f329e2cae6 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:35:35 +0100 Subject: [PATCH 02/58] Update manifest.json to require 3.8.1 min yunohost version --- manifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index 48daedf..3ea3116 100644 --- a/manifest.json +++ b/manifest.json @@ -15,7 +15,7 @@ "url": "http://www.librement-votre.fr" }, "requirements": { - "yunohost": ">= 3.6.5" + "yunohost": ">= 3.8.1" }, "multi_instance": false, "services": [ From 32e536c22e5ba30d681a2e8d7c8d82f014c93ba2 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:36:06 +0100 Subject: [PATCH 03/58] delete ynh_delete_file_checksum -> helper official in 3.3.1 --- scripts/_common.sh | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/scripts/_common.sh b/scripts/_common.sh index 53ef3b2..deecdd9 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -1,17 +1,5 @@ #!/bin/bash -# ============= FUTURE YUNOHOST HELPER ============= -# Delete a file checksum from the app settings -# -# $app should be defined when calling this helper -# -# usage: ynh_remove_file_checksum file -# | arg: file - The file for which the checksum will be deleted -ynh_delete_file_checksum () { - local checksum_setting_name=checksum_${1//[\/ ]/_} # Replace all '/' and ' ' by '_' - ynh_app_setting_delete $app $checksum_setting_name -} - #Zabbix part #===================GET GUEST DEFAULT USER STATE============== #return 0 if enable, else 1 From 3e1d9d16b3c07ff3fe34ce6a7d67ad1f330e5397 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:41:26 +0100 Subject: [PATCH 04/58] clean url parameters --- scripts/install | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/scripts/install b/scripts/install index bf67a30..2f263d9 100644 --- a/scripts/install +++ b/scripts/install @@ -46,13 +46,10 @@ app="$YNH_APP_INSTANCE_NAME" final_path=/var/www/zabbix test ! -e "$final_path" || ynh_die "This path already contains a folder" -# Normalize the url path syntax -path_url=$(ynh_normalize_url_path "$path_url") - # Check web path availability -ynh_webpath_available "$domain" "$path_url" +ynh_webpath_available --domain="$domain" --path_url="$path_url" # Register (book) web path -ynh_webpath_register "$app" "$domain" "$path_url" +ynh_webpath_register --app="$app" --domain="$domain" --path_url="$path_url" #================================================= # STORE SETTINGS FROM MANIFEST From c9f9bf45fdb20ad120ac88a6604eeb5bb073897a Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:43:36 +0100 Subject: [PATCH 05/58] Update install to php 7.3 --- scripts/install | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/install b/scripts/install index 2f263d9..21e6dad 100644 --- a/scripts/install +++ b/scripts/install @@ -101,7 +101,7 @@ install_zabbix_repo ynh_script_progression --message="Update and install dependencies" -w 5 #ynh_package_update no need cause ynh_install_app_dependencies after -ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php +ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php dpkg -i --force-confmiss /var/cache/apt/archives/zabbix-server-mysql* ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen @@ -368,7 +368,7 @@ ynh_app_setting_set "$app" unprotected_uris "/" #================================================= systemctl reload nginx -systemctl reload php7.0-fpm +systemctl reload php7.3-fpm # Reload SSOwat config yunohost app ssowatconf @@ -405,7 +405,7 @@ fi #================================================= systemctl reload nginx -systemctl reload php7.0-fpm +systemctl reload php7.3-fpm # Reload SSOwat config yunohost app ssowatconf From 224eb0d63290dc57c88d95e291a6081bcb47c81d Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:45:24 +0100 Subject: [PATCH 06/58] Update dependencies --- scripts/upgrade | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/upgrade b/scripts/upgrade index eaf8e5f..5f2fe72 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -152,7 +152,7 @@ then ynh_package_remove zabbix-server-mysql zabbix-frontend-php ynh_print_info "Update zabbix via apt package" - ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php + ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php ynh_secure_remove /usr/share/zabbix/conf/zabbix.conf.php cp -rpf /tmp/zabbix /etc/ From 19abe8e8cb4df2e5eb3681ec7baf0f737eac5c01 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:45:49 +0100 Subject: [PATCH 07/58] Update dependcies --- scripts/restore | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/restore b/scripts/restore index 939df04..5cce2b6 100644 --- a/scripts/restore +++ b/scripts/restore @@ -56,7 +56,7 @@ install_zabbix_repo ynh_print_info "Update and install dependencies" ynh_package_update -ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.0 php-bcmath php7.0-bcmath ttf-dejavu-core php7.0-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php +ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php From f176b6f5aa690f17eefee22c4cefb772bbc2f9da Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:47:06 +0100 Subject: [PATCH 08/58] delete ynh_normalize_url_path --- scripts/upgrade | 7 ------- 1 file changed, 7 deletions(-) diff --git a/scripts/upgrade b/scripts/upgrade index 5f2fe72..369df3f 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -86,13 +86,6 @@ disable_admin_user #================================================= disable_guest_user -#================================================= -# CHECK THE PATH -#================================================= - -# Normalize the URL path syntax -path_url=$(ynh_normalize_url_path "$path_url") - #Patch timeout too short for zabbix agent if needed change_timeoutAgent From 3c5355da49f5a0cbb62f020aab0f5ed040f2a612 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:49:47 +0100 Subject: [PATCH 09/58] add --quiet to systemctl enable --- scripts/restore | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/restore b/scripts/restore index 5cce2b6..7a6bb3e 100644 --- a/scripts/restore +++ b/scripts/restore @@ -119,9 +119,9 @@ ynh_restore_file "/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_confi if [ ! -L /etc/zabbix/zabbix_agentd.d ];then ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d fi -systemctl enable zabbix-agent && systemctl restart zabbix-agent +systemctl enable --quiet zabbix-agent && systemctl restart zabbix-agent change_timeoutAgent -systemctl enable zabbix-server && systemctl restart zabbix-server +systemctl enable --quiet zabbix-server && systemctl restart zabbix-server yunohost service add snmpd -d "Management of SNMP Daemon" yunohost service add zabbix-server -d "Management Zabbix server daemon : Collect, agregate, compute and notify" From 30e4a8583c23e7d012e7865724becd24bbfb50e0 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:53:32 +0100 Subject: [PATCH 10/58] add pkg_dependencies variable --- scripts/_common.sh | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/scripts/_common.sh b/scripts/_common.sh index deecdd9..d48999c 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -1,5 +1,11 @@ #!/bin/bash +#================================================= +# COMMON VARIABLES +#================================================= + +pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" + #Zabbix part #===================GET GUEST DEFAULT USER STATE============== #return 0 if enable, else 1 From d0a1caebcf8eacd70df3ea214a259010e4e8d9d9 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:54:41 +0100 Subject: [PATCH 11/58] ynh_install_app_dependencies $pkg_dependencies --- scripts/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index 21e6dad..9c120c1 100644 --- a/scripts/install +++ b/scripts/install @@ -101,7 +101,7 @@ install_zabbix_repo ynh_script_progression --message="Update and install dependencies" -w 5 #ynh_package_update no need cause ynh_install_app_dependencies after -ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php +ynh_install_app_dependencies $pkg_dependencies dpkg -i --force-confmiss /var/cache/apt/archives/zabbix-server-mysql* ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen From 579a451c414ab7c88cb5b0d9befeabb7f09c7b14 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:55:01 +0100 Subject: [PATCH 12/58] ynh_install_app_dependencies $pkg_dependencies --- scripts/restore | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/scripts/restore b/scripts/restore index 7a6bb3e..1fb9ff3 100644 --- a/scripts/restore +++ b/scripts/restore @@ -56,8 +56,7 @@ install_zabbix_repo ynh_print_info "Update and install dependencies" ynh_package_update -ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php - +ynh_install_app_dependencies $pkg_dependencies DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen From 0c5873183916d40c166bca256af3232c417a0325 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Wed, 9 Dec 2020 13:55:13 +0100 Subject: [PATCH 13/58] ynh_install_app_dependencies $pkg_dependencies --- scripts/upgrade | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/scripts/upgrade b/scripts/upgrade index 369df3f..a6351f3 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -145,8 +145,7 @@ then ynh_package_remove zabbix-server-mysql zabbix-frontend-php ynh_print_info "Update zabbix via apt package" - ynh_install_app_dependencies libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php - + ynh_install_app_dependencies $pkg_dependencies ynh_secure_remove /usr/share/zabbix/conf/zabbix.conf.php cp -rpf /tmp/zabbix /etc/ cp -pf /tmp/zabbix.conf.php /usr/share/zabbix/conf/ From f179293442e8c4f830924d8446e252f51abf016d Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 13:30:45 +0100 Subject: [PATCH 14/58] Update php-fpm.conf to php7.3 --- conf/php-fpm.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 1d45298..28fdf93 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -1,7 +1,7 @@ [__NAMETOCHANGE__] user = www-data group = www-data -listen = /var/run/php/php7.0-fpm-__NAMETOCHANGE__.sock +listen = /var/run/php/php7.3-fpm-__NAMETOCHANGE__.sock listen.owner = www-data listen.group = www-data pm = dynamic From 1191b4041fe5094a7b127b3a4a43f0dc082eb402 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 13:37:52 +0100 Subject: [PATCH 15/58] test if /var/cache/apt/archives/zabbix-server-mysql* exists --- scripts/install | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index 9c120c1..dc50a14 100644 --- a/scripts/install +++ b/scripts/install @@ -94,7 +94,9 @@ ynh_app_setting_set "$app" language "$language" ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script ynh_script_progression --message="Remove Zabbix if already installed" -w 1 apt-get purge zabbix* -y -ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* +if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then + ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* +fi ynh_script_progression --message="Install Zabbix repository" -w 3 install_zabbix_repo From 3c90ddbbff3c76f01f5b14d0760d6a27d9aa19fb Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 13:59:31 +0100 Subject: [PATCH 16/58] debug Warning: - E: Could not get lock /var/lib/dpkg/lock-frontend - open (11: Resource temporarily unavailable) Warning: - E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), is another process using it? --- scripts/install | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/install b/scripts/install index dc50a14..7758120 100644 --- a/scripts/install +++ b/scripts/install @@ -93,6 +93,7 @@ ynh_app_setting_set "$app" language "$language" ### - As well as the section "REINSTALL DEPENDENCIES" in the restore script ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script ynh_script_progression --message="Remove Zabbix if already installed" -w 1 +ps -p "$(lsof /var/lib/dpkg/lock-frontend | tail -1 | awk '{print $2}')" apt-get purge zabbix* -y if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* From 8ebe059f9808172e1c1eea78e2830d9d138de417 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 14:06:43 +0100 Subject: [PATCH 17/58] Update install --- scripts/install | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index 7758120..c47668c 100644 --- a/scripts/install +++ b/scripts/install @@ -93,7 +93,8 @@ ynh_app_setting_set "$app" language "$language" ### - As well as the section "REINSTALL DEPENDENCIES" in the restore script ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script ynh_script_progression --message="Remove Zabbix if already installed" -w 1 -ps -p "$(lsof /var/lib/dpkg/lock-frontend | tail -1 | awk '{print $2}')" +lsof /var/lib/dpkg/lock-frontend | tail -1 | awk '{print $2}' +ps aux apt-get purge zabbix* -y if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* From e070975e620557dc6554b2bb0d00d191d68fe468 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 19:01:37 +0100 Subject: [PATCH 18/58] check if unattended-upgrade active --- scripts/install | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/scripts/install b/scripts/install index c47668c..1bbfee9 100644 --- a/scripts/install +++ b/scripts/install @@ -92,9 +92,14 @@ ynh_app_setting_set "$app" language "$language" ### - Remove the section "REMOVE DEPENDENCIES" in the remove script ### - As well as the section "REINSTALL DEPENDENCIES" in the restore script ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script + +pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only') +if [ ! -z $pid ] ;then + ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" -w 1 + tail --pid=$pid -f /dev/null +fi + ynh_script_progression --message="Remove Zabbix if already installed" -w 1 -lsof /var/lib/dpkg/lock-frontend | tail -1 | awk '{print $2}' -ps aux apt-get purge zabbix* -y if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* From e66bfd6340873cbb23618a37ce7eee5ce4e5c37a Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Fri, 11 Dec 2020 19:05:57 +0100 Subject: [PATCH 19/58] Update install --- scripts/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index 1bbfee9..c284506 100644 --- a/scripts/install +++ b/scripts/install @@ -94,7 +94,7 @@ ynh_app_setting_set "$app" language "$language" ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only') -if [ ! -z $pid ] ;then +if [ ! -z "$pid" ] ;then ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" -w 1 tail --pid=$pid -f /dev/null fi From dd213ff00bfd8ab64f92e0b2979d489e378232c4 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Thu, 17 Dec 2020 12:57:50 +0100 Subject: [PATCH 20/58] try pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) to avoid exit 1 pgrep --- scripts/install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index c284506..1f924ac 100644 --- a/scripts/install +++ b/scripts/install @@ -93,7 +93,7 @@ ynh_app_setting_set "$app" language "$language" ### - As well as the section "REINSTALL DEPENDENCIES" in the restore script ### - And the section "UPGRADE DEPENDENCIES" in the upgrade script -pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only') +pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) if [ ! -z "$pid" ] ;then ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" -w 1 tail --pid=$pid -f /dev/null From 7cb8487652f7e052c453dfb25286a8989c56b385 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Thu, 17 Dec 2020 14:03:16 +0100 Subject: [PATCH 21/58] remove level=5 auto like this : https://github.com/YunoHost/example_ynh/commit/a01520f5097c9b1f4de7c1ff457aa96fa34b951b --- check_process | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/check_process b/check_process index 4b39161..5b437be 100644 --- a/check_process +++ b/check_process @@ -26,8 +26,7 @@ port_already_use=1 change_url=1 ;;; Levels -# https://framagit.org/Mickael-Martin/zabbix_ynh/blob/master/scripts/install#L141 - Level 5=auto +# https://framagit.org/Mickael-Martin/zabbix_ynh/blob/master/scripts/install#L156 ;;; Options Email= Notification=none From eac5ddf585884f86195fd1bcaae4b7e9f8224465 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Thu, 17 Dec 2020 16:44:51 +0100 Subject: [PATCH 22/58] check to level 8 --- check_process | 1 + 1 file changed, 1 insertion(+) diff --git a/check_process b/check_process index 5b437be..6589238 100644 --- a/check_process +++ b/check_process @@ -27,6 +27,7 @@ change_url=1 ;;; Levels # https://framagit.org/Mickael-Martin/zabbix_ynh/blob/master/scripts/install#L156 + Level 8=auto ;;; Options Email= Notification=none From 09fc6c4ac1259bf8983b57bc747ace53c73faf53 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Tue, 22 Dec 2020 13:41:16 +0100 Subject: [PATCH 23/58] update to php 7.4 --- conf/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 47ce140..32dd1cb 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -18,7 +18,7 @@ location __PATH__/ { try_files $uri $uri/ index.php; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+?\.php)(/.*)$; - fastcgi_pass unix:/var/run/php/php7.0-fpm-__NAME__.sock; + fastcgi_pass unix:/var/run/php/php7.4-fpm-__NAME__.sock; fastcgi_index index.php; include fastcgi_params; From f255469a22e781bbe97ac0d23de783f6e4802794 Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Tue, 22 Dec 2020 13:41:37 +0100 Subject: [PATCH 24/58] Update to php7.3 --- conf/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 32dd1cb..6074650 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -18,7 +18,7 @@ location __PATH__/ { try_files $uri $uri/ index.php; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+?\.php)(/.*)$; - fastcgi_pass unix:/var/run/php/php7.4-fpm-__NAME__.sock; + fastcgi_pass unix:/var/run/php/php7.3-fpm-__NAME__.sock; fastcgi_index index.php; include fastcgi_params; From a548c24d93cab04b88cc5203e11c91a56d6a80fa Mon Sep 17 00:00:00 2001 From: Mickael-Martin Date: Tue, 22 Dec 2020 13:50:46 +0100 Subject: [PATCH 25/58] change to new "rights" (private) disable unprotected_uris --- scripts/install | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) diff --git a/scripts/install b/scripts/install index 1f924ac..00ebbae 100644 --- a/scripts/install +++ b/scripts/install @@ -267,12 +267,6 @@ ynh_add_fpm_config ### so we're going to use curl to automatically fill the fields and submit the ### forms. -# Set right permissions for curl install -#chown -R www-data: $final_path - -# Set the app as temporarily public for curl call -#ynh_app_setting_set $app skipped_uris "/" - # Reload SSOwat config yunohost app ssowatconf @@ -370,7 +364,7 @@ yunohost service add zabbix-agent -d "Management Zabbix agent daemon : send info # Make app public if for importing template # unprotected_uris allows SSO credentials to be passed anyway -ynh_app_setting_set "$app" unprotected_uris "/" +#ynh_app_setting_set "$app" unprotected_uris "/" #================================================= # RELOAD NGINX AND PHP-FPM @@ -403,12 +397,14 @@ disable_admin_user # SETUP SSOWAT #================================================= -# Make app private if necessary -if [ "$is_public" -eq 0 ] +# Make app public if necessary +if [ $is_public -eq 1 ] then - # unprotected_uris allows SSO credentials to be passed anyway. - ynh_app_setting_delete "$app" unprotected_uris + # Everyone can access the app. + # The "main" permission is automatically created before the install script. + ynh_permission_update --permission "main" --add "visitors" fi + #================================================= # RELOAD NGINX AND PHP-FPM #================================================= From 5ca0e91add9cb951fc0993f01e6176ade5b8e4e4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Tue, 5 Jan 2021 23:51:50 +0100 Subject: [PATCH 26/58] Set badge to SVG --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 5ee4f8e..c55d500 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # Zabbix for YunoHost [![Integration level](https://dash.yunohost.org/integration/zabbix.svg)](https://dash.yunohost.org/appci/app/zabbix) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.status.svg) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.maintain.svg) -[![Install zabbix with YunoHost](https://install-app.yunohost.org/install-with-yunohost.png)](https://install-app.yunohost.org/?app=zabbix) +[![Install zabbix with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=zabbix) > *This package allow you to install Zabbix quickly and simply on a YunoHost server. If you don't have YunoHost, please see [here](https://yunohost.org/#/install) to know how to install and enjoy it.* From 94b238e09cc178740b4e8db34a0198d9e587ab1e Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Mon, 15 Mar 2021 00:23:09 +0100 Subject: [PATCH 27/58] [autopatch] Missing ynh_abort_if_errors in change_url scripts --- scripts/change_url | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/change_url b/scripts/change_url index f71fc77..e727aa9 100644 --- a/scripts/change_url +++ b/scripts/change_url @@ -8,6 +8,7 @@ source _common.sh source /usr/share/yunohost/helpers +ynh_abort_if_errors #================================================= # RETRIEVE ARGUMENTS From f2171940cbf32cc2ba1df498c657843d137ded74 Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Mon, 15 Mar 2021 00:28:00 +0100 Subject: [PATCH 28/58] [autopatch] Autopatch to migrate to new permission system --- scripts/install | 18 +++++++++--------- scripts/upgrade | 10 ++++++++++ 2 files changed, 19 insertions(+), 9 deletions(-) diff --git a/scripts/install b/scripts/install index bf67a30..2f7d074 100644 --- a/scripts/install +++ b/scripts/install @@ -62,7 +62,6 @@ ynh_script_progression --message="Get infos from manifest" -w 1 ynh_app_setting_set "$app" domain "$domain" ynh_app_setting_set "$app" path "$path_url" ynh_app_setting_set "$app" admin "$admin" -ynh_app_setting_set "$app" is_public "$is_public" ynh_app_setting_set "$app" language "$language" #================================================= @@ -265,7 +264,7 @@ ynh_add_fpm_config #chown -R www-data: $final_path # Set the app as temporarily public for curl call -#ynh_app_setting_set $app skipped_uris "/" + # Reload SSOwat config yunohost app ssowatconf @@ -362,9 +361,9 @@ yunohost service add snmpd -d "Management of SNMP Daemon" yunohost service add zabbix-server -d "Management Zabbix server daemon : Collect, agregate, compute and notify" yunohost service add zabbix-agent -d "Management Zabbix agent daemon : send informations about this host to the server" -# Make app public if for importing template -# unprotected_uris allows SSO credentials to be passed anyway -ynh_app_setting_set "$app" unprotected_uris "/" + + + #================================================= # RELOAD NGINX AND PHP-FPM @@ -397,11 +396,12 @@ disable_admin_user # SETUP SSOWAT #================================================= -# Make app private if necessary -if [ "$is_public" -eq 0 ] + + +# Make app public if necessary +if [ "$is_public" -eq 1 ] then - # unprotected_uris allows SSO credentials to be passed anyway. - ynh_app_setting_delete "$app" unprotected_uris + ynh_permission_update --permission="main" --add="visitors" fi #================================================= # RELOAD NGINX AND PHP-FPM diff --git a/scripts/upgrade b/scripts/upgrade index eaf8e5f..db4887e 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -141,6 +141,16 @@ then } # Exit if an error occurs during the execution of the script ynh_abort_if_errors + +#================================================= +# Migrate legacy permissions to new system +#================================================= +if ynh_legacy_permissions_exists +then + ynh_legacy_permissions_delete_all + + ynh_app_setting_delete --app=$app --key=is_public +fi yunohost service stop zabbix-server yunohost service stop zabbix-agent From 3732833c17d45545326459aaa5f8f0df66895247 Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Thu, 13 May 2021 17:54:26 +0200 Subject: [PATCH 29/58] [autopatch] Update issue and PR templates --- .github/ISSUE_TEMPLATE.md | 55 ++++++++++++++++++++++++++++++++ .github/PULL_REQUEST_TEMPLATE.md | 16 ++++++++++ 2 files changed, 71 insertions(+) create mode 100644 .github/ISSUE_TEMPLATE.md create mode 100644 .github/PULL_REQUEST_TEMPLATE.md diff --git a/.github/ISSUE_TEMPLATE.md b/.github/ISSUE_TEMPLATE.md new file mode 100644 index 0000000..2729a6b --- /dev/null +++ b/.github/ISSUE_TEMPLATE.md @@ -0,0 +1,55 @@ +--- +name: Bug report +about: When creating a bug report, please use the following template to provide all the relevant information and help debugging efficiently. + +--- + +**How to post a meaningful bug report** +1. *Read this whole template first.* +2. *Determine if you are on the right place:* + - *If you were performing an action on the app from the webadmin or the CLI (install, update, backup, restore, change_url...), you are on the right place!* + - *Otherwise, the issue may be due to the app itself. Refer to its documentation or repository for help.* + - *When in doubt, post here and we will figure it out together.* +3. *Delete the italic comments as you write over them below, and remove this guide.* +--- + +### Describe the bug + +*A clear and concise description of what the bug is.* + +### Context + +- Hardware: *VPS bought online / Old laptop or computer / Raspberry Pi at home / Internet Cube with VPN / Other ARM board / ...* +- YunoHost version: x.x.x +- I have access to my server: *Through SSH | through the webadmin | direct access via keyboard / screen | ...* +- Are you in a special context or did you perform some particular tweaking on your YunoHost instance?: *no / yes* + - If yes, please explain: +- Using, or trying to install package version/branch: +- If upgrading, current package version: *can be found in the admin, or with `yunohost app info $app_id`* + +### Steps to reproduce + +- *If you performed a command from the CLI, the command itself is enough. For example:* + ```sh + sudo yunohost app install the_app + ``` +- *If you used the webadmin, please perform the equivalent command from the CLI first.* +- *If the error occurs in your browser, explain what you did:* + 1. *Go to '...'* + 2. *Click on '...'* + 3. *Scroll down to '...'* + 4. *See error* + +### Expected behavior + +*A clear and concise description of what you expected to happen. You can remove this section if the command above is enough to understand your intent.* + +### Logs + +*When an operation fails, YunoHost provides a simple way to share the logs.* +- *In the webadmin, the error message contains a link to the relevant log page. On that page, you will be able to 'Share with Yunopaste'. If you missed it, the logs of previous operations are also available under Tools > Logs.* +- *In command line, the command to share the logs is displayed at the end of the operation and looks like `yunohost log display [log name] --share`. If you missed it, you can find the log ID of a previous operation using `yunohost log list`.* + +*After sharing the log, please copypaste directly the link provided by YunoHost (to help readability, no need to copypaste the entire content of the log here, just the link is enough...)* + +*If applicable and useful, add screenshots to help explain your problem.* diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md new file mode 100644 index 0000000..ef70e18 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -0,0 +1,16 @@ +## Problem + +- *Description of why you made this PR* + +## Solution + +- *And how do you fix that problem* + +## PR Status + +- [ ] Code finished and ready to be reviewed/tested +- [ ] The fix/enhancement were manually tested (if applicable) + +## Automatic tests + +Automatic tests can be triggered on https://ci-apps-dev.yunohost.org/ *after creating the PR*, by commenting "!testme", "!gogogadgetoci" or "By the power of systemd, I invoke The Great App CI to test this Pull Request!". (N.B. : for this to work you need to be a member of the Yunohost-Apps organization) From a81f0be175b3be683364e6b3c733724d0d14edad Mon Sep 17 00:00:00 2001 From: yalh76 Date: Thu, 12 Aug 2021 22:15:09 +0200 Subject: [PATCH 30/58] Apply example_ynh --- manifest.json | 31 +---- scripts/_common.sh | 27 +++-- scripts/backup | 82 +++++++------- scripts/install | 276 ++++++++++++--------------------------------- scripts/remove | 72 ++++++------ scripts/restore | 177 +++++++++++++---------------- 6 files changed, 244 insertions(+), 421 deletions(-) diff --git a/manifest.json b/manifest.json index 3ea3116..0e408d9 100644 --- a/manifest.json +++ b/manifest.json @@ -15,61 +15,40 @@ "url": "http://www.librement-votre.fr" }, "requirements": { - "yunohost": ">= 3.8.1" + "yunohost": ">= 4.1.3" }, "multi_instance": false, "services": [ "nginx", - "mysql", - "php7.0-fpm", - "snmpd" + "php7.3-fpm", + "mysql" ], "arguments": { "install" : [ { "name": "domain", "type": "domain", - "ask": { - "en": "Choose a domain name for Zabbix", - "fr": "Choisissez un nom de domaine pour Zabbix" - }, "example": "example.com" }, { "name": "path", "type": "path", - "ask": { - "en": "Choose a path for Zabbix", - "fr": "Choisissez un chemin pour Zabbix" - }, "example": "/zabbix", "default": "/zabbix" }, { "name": "admin", "type": "user", - "ask": { - "en": "Choose an admin user", - "fr": "Choisissez l’administrateur" - }, - "example": "mickael" + "example": "johndoe" }, { "name": "is_public", "type": "boolean", - "ask": { - "en": "Is it a public application?", - "fr": "Est-ce une application publique ?" - }, - "help": { - "en": "A public app doesn't need SSO auth : the auth page is opened for everyone", - "fr": "Une application publique ne nécessite pas une authentification SSO : sa page d'authentication est ouverte au monde entier" - }, "default": false }, { "name": "language", - "type": "string", + "type": "string", "ask": { "en": "Choose the application language", "fr": "Choisissez la langue de l'application" diff --git a/scripts/_common.sh b/scripts/_common.sh index d48999c..d0e917a 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -4,8 +4,13 @@ # COMMON VARIABLES #================================================= +# dependencies used by the app pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" +#================================================= +# PERSONAL HELPERS +#================================================= + #Zabbix part #===================GET GUEST DEFAULT USER STATE============== #return 0 if enable, else 1 @@ -35,27 +40,27 @@ disable_admin_user(){ lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`") lastid=$((lastid + 1 )) $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);" - ynh_print_info "Default admin disabled" + ynh_print_info --message="Default admin disabled" else - ynh_print_info "Default admin already disabled" + ynh_print_info --message="Default admin already disabled" fi } enable_admin_user(){ if [ $(get_state_admin_user) = "1" ] ;then - ynh_print_info "Enable default admin" + ynh_print_info --message="Enable default admin" #enable default admin temporaly $mysqlconn -e "DELETE FROM users_groups where usrgrpid=9 and userid=1;" - ynh_print_info "Default admin enabled" + ynh_print_info --message="Default admin enabled" else - ynh_print_info "Default admin already enable" + ynh_print_info --message="Default admin already enable" fi } import_template(){ - ynh_print_info "Import yunohost template" + ynh_print_info --message="Import yunohost template" zabbixFullpath=https://$domain$path_url localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml") sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix") @@ -119,7 +124,7 @@ import_template(){ | grep -c "Imported successfully") if [ "$importState" -eq "1" ];then - ynh_print_info "Template Yunohost imported !" + ynh_print_info --message="Template Yunohost imported !" else ynh_print_warn "Template Yunohost not imported !" fi @@ -135,7 +140,7 @@ link_template(){ zabbixTemplateID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].templateid') applyTemplate=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'"$zabbixHostID"'"}],"templates":[{"templateid":"'"$zabbixTemplateID"'"}]},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result.hostids[]') if [ "$applyTemplate" -eq "$zabbixHostID" ];then - ynh_print_info "Template Yunohost linked to Zabbix server !" + ynh_print_info --message="Template Yunohost linked to Zabbix server !" else ynh_print_warn "Template Yunohost no linked to Zabbix server !" fi @@ -145,7 +150,7 @@ link_template(){ check_proc_zabbixserver(){ pgrep zabbix_server >/dev/null if [ $? -eq 0 ];then - ynh_print_info "zabbix server is started !" + ynh_print_info --message="zabbix server is started !" else ynh_print_err "Zabbix Server not started, try to start it with the yunohost interface." ynh_print_err "If Zabbix Server can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" @@ -155,7 +160,7 @@ check_proc_zabbixserver(){ check_proc_zabbixagent(){ pgrep zabbix_agentd >/dev/null if [ $? -eq 0 ];then - ynh_print_info "zabbix agent is started" + ynh_print_info --message="zabbix agent is started" else ynh_print_err "Zabbix agent not started, try to start it with the yunohost interface." ynh_print_err "If Zabbix agent can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" @@ -204,7 +209,7 @@ set_mediatype_default_yunohost(){ set -x if [ $($mysqlconn -BN -e "SELECT count(*) FROM media_type WHERE smtp_server LIKE 'mail.example.com' AND status=1;") -eq 1 ] ; then $mysqlconn -BN -e "UPDATE media_type SET smtp_server = 'localhost', smtp_helo = '"$domain"', smtp_email = 'zabbix@"$domain"', smtp_port = '587', status=0 , smtp_security=1 WHERE smtp_server LIKE 'mail.example.com' AND status=1;" - ynh_print_info "Default Media type added !" + ynh_print_info --message="Default Media type added !" fi set +x } diff --git a/scripts/backup b/scripts/backup index 0d2ea7f..8a593bf 100644 --- a/scripts/backup +++ b/scripts/backup @@ -6,6 +6,7 @@ # IMPORT GENERIC HELPERS #================================================= +# Keep this path for calling _common.sh inside the execution's context of backup and restore scripts source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers @@ -14,7 +15,6 @@ source /usr/share/yunohost/helpers #================================================= ynh_clean_setup () { - ### Remove this function if there's nothing to clean before calling the remove script. true } # Exit if an error occurs during the execution of the script @@ -23,58 +23,60 @@ ynh_abort_if_errors #================================================= # LOAD SETTINGS #================================================= +ynh_print_info --message="Loading installation settings..." -app="zabbix" - -final_path=$(ynh_app_setting_get $app final_path) -domain=$(ynh_app_setting_get $app domain) -db_name=$(ynh_app_setting_get $app db_name) -nonfree=$(ynh_app_setting_get $app nonfree) +app=$YNH_APP_INSTANCE_NAME +final_path=$(ynh_app_setting_get --app=$app --key=final_path) +domain=$(ynh_app_setting_get --app=$app --key=domain) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) +nonfree=$(ynh_app_setting_get --app=$app --key=nonfree) #================================================= -# STANDARD BACKUP STEPS +# DECLARE DATA AND CONF FILES TO BACKUP #================================================= -# BACKUP THE APP MAIN DIR -#================================================= - -#backup frontend config -ynh_print_info "Backup $final_path conf/zabbix.conf.php" -ynh_backup "$final_path/conf/zabbix.conf.php" -ynh_print_info "Backup /etc/zabbix/web" -ynh_backup "/etc/zabbix/web" -#ynh_print_info "Backup /etc/zabbix/web/init.zabbix.conf.php.sh" -#ynh_backup "/etc/zabbix/web/init.zabbix.conf.php.sh" -ynh_print_info "Backup /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" -ynh_backup "/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" - -#backup server confif -ynh_print_info "Backup /etc/zabbix/zabbix_server.conf" -ynh_backup "/etc/zabbix/zabbix_server.conf" - -#backup agent config -ynh_print_info "Backup /etc/zabbix/zabbix_agentd.conf" -ynh_backup "/etc/zabbix/zabbix_agentd.conf" -ynh_print_info "Backup /etc/zabbix/zabbix_agentd.d" -ynh_backup "/etc/zabbix/zabbix_agentd.d" - -#backup sudo file -ynh_print_info "Backup /etc/sudoers.d/zabbix" -ynh_backup "/etc/sudoers.d/zabbix" +ynh_print_info --message="Declaring files to be backed up..." #================================================= # BACKUP THE NGINX CONFIGURATION #================================================= -ynh_print_info "Backup /etc/nginx/conf.d/$domain.d/$app.conf" -ynh_backup "/etc/nginx/conf.d/$domain.d/$app.conf" + +ynh_backup --src_path="/etc/nginx/conf.d/$domain.d/$app.conf" + #================================================= # BACKUP THE PHP-FPM CONFIGURATION #================================================= -ynh_print_info "Backup /etc/php/7.0/fpm/pool.d/$app.conf" -ynh_backup "/etc/php/7.0/fpm/pool.d/$app.conf" + +ynh_backup --src_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" + +#================================================= +# BACKUP VARIOUS FILES +#================================================= + +#backup frontend config +ynh_backup --src_path="$final_path/conf/zabbix.conf.php" +ynh_backup --src_path="/etc/zabbix/web" +ynh_backup --src_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" + +#backup server confif +ynh_backup --src_path="/etc/zabbix/zabbix_server.conf" + +#backup agent config +ynh_backup --src_path="/etc/zabbix/zabbix_agentd.conf" +ynh_backup --src_path="/etc/zabbix/zabbix_agentd.d" + +#backup sudo file +ynh_backup --src_path="/etc/sudoers.d/zabbix" #================================================= # BACKUP THE MYSQL DATABASE #================================================= -ynh_print_info "Backup Zabbix database" -ynh_mysql_dump_db "$db_name" > db.sql \ No newline at end of file +ynh_print_info --message="Backing up the MySQL database..." + +ynh_mysql_dump_db --database="$db_name" > db.sql + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_print_info --message="Backup script completed for $app. (YunoHost will then actually copy those files to the archive)." diff --git a/scripts/install b/scripts/install index 0b56e8b..506a56c 100644 --- a/scripts/install +++ b/scripts/install @@ -1,5 +1,6 @@ #!/bin/bash -##================================================= + +#================================================= # GENERIC START #================================================= # IMPORT GENERIC HELPERS @@ -19,78 +20,41 @@ ynh_abort_if_errors # RETRIEVE ARGUMENTS FROM THE MANIFEST #================================================= -export domain="$YNH_APP_ARG_DOMAIN" -export path_url="$YNH_APP_ARG_PATH" -admin="$YNH_APP_ARG_ADMIN" -is_public="$YNH_APP_ARG_IS_PUBLIC" -language="$YNH_APP_ARG_LANGUAGE" +export domain=$YNH_APP_ARG_DOMAIN +export path_url=$YNH_APP_ARG_PATH +admin=$YNH_APP_ARG_ADMIN +is_public=$YNH_APP_ARG_IS_PUBLIC +language=$YNH_APP_ARG_LANGUAGE -### If it's a multi-instance app, meaning it can be installed several times independently -### The id of the app as stated in the manifest is available as $YNH_APP_ID -### The instance number is available as $YNH_APP_INSTANCE_NUMBER (equals "1", "2", ...) -### The app instance name is available as $YNH_APP_INSTANCE_NAME -### - the first time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample -### - the second time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample__2 -### - ynhexample__{N} for the subsequent installations, with N=3,4, ... -### The app instance name is probably what interests you most, since this is -### guaranteed to be unique. This is a good unique identifier to define installation path, -### db names, ... -app="$YNH_APP_INSTANCE_NAME" +app=$YNH_APP_INSTANCE_NAME #================================================= # CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS #================================================= +ynh_script_progression --message="Validating installation parameters..." -### If the app uses nginx as web server (written in HTML/PHP in most cases), the final path should be "/var/www/$app". -### If the app provides an internal web server (or uses another application server such as uwsgi), the final path should be "/opt/yunohost/$app" -final_path=/var/www/zabbix -test ! -e "$final_path" || ynh_die "This path already contains a folder" +final_path=/var/www/$app +test ! -e "$final_path" || ynh_die --message="This path already contains a folder" -# Check web path availability -ynh_webpath_available --domain="$domain" --path_url="$path_url" # Register (book) web path -ynh_webpath_register --app="$app" --domain="$domain" --path_url="$path_url" +ynh_webpath_register --app=$app --domain=$domain --path_url=$path_url #================================================= # STORE SETTINGS FROM MANIFEST #================================================= -ynh_script_progression --message="Get infos from manifest" -w 1 +ynh_script_progression --message="Storing installation settings..." -ynh_app_setting_set "$app" domain "$domain" -ynh_app_setting_set "$app" path "$path_url" -ynh_app_setting_set "$app" admin "$admin" -ynh_app_setting_set "$app" language "$language" +ynh_app_setting_set --app=$app --key=domain --value=$domain +ynh_app_setting_set --app=$app --key=path --value=$path_url +ynh_app_setting_set --app=$app --key=admin --value=$admin +ynh_app_setting_set --app=$app --key=language --value=$language #================================================= # STANDARD MODIFICATIONS -#================================================= -# FIND AND OPEN A PORT -#================================================= - -### Use these lines if you have to open a port for the application -### `ynh_find_port` will find the first available port starting from the given port. -### If you're not using these lines: -### - Remove the section "CLOSE A PORT" in the remove script - -### Zabbix server is not opened by default for external usage. -### if you want use zabbix server with external agent (in active mode), setup the listen address in server configuration and open port on firewall via the cmd yunohost firewall - -# Find a free port -#port=$(ynh_find_port 8095) -# Open this port -#yunohost firewall allow --no-upnp TCP $port 2>&1 -#ynh_app_setting_set $app port $port - #================================================= # INSTALL DEPENDENCIES #================================================= - -### `ynh_install_app_dependencies` allows you to add any "apt" dependencies to the package. -### Those deb packages will be installed as dependencies of this package. -### If you're not using this helper: -### - Remove the section "REMOVE DEPENDENCIES" in the remove script -### - As well as the section "REINSTALL DEPENDENCIES" in the restore script -### - And the section "UPGRADE DEPENDENCIES" in the upgrade script +ynh_script_progression --message="Installing dependencies..." pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) if [ ! -z "$pid" ] ;then @@ -117,29 +81,19 @@ locale-gen ln -s /usr/share/zabbix "$final_path" if [ -f "$final_path/conf/zabbix.conf.php" ];then - ynh_secure_remove "$final_path/conf/zabbix.conf.php" + ynh_secure_remove --file="$final_path/conf/zabbix.conf.php" fi #================================================= # CREATE A MYSQL DATABASE #================================================= -ynh_script_progression --message="Creation of database " -w 10 - -### Use these lines if you need a database for the application. -### `ynh_mysql_setup_db` will create a database, an associated user and a ramdom password. -### The password will be stored as 'mysqlpwd' into the app settings, -### and will be available as $db_pwd -### If you're not using these lines: -### - Remove the section "BACKUP THE MYSQL DATABASE" in the backup script -### - Remove also the section "REMOVE THE MYSQL DATABASE" in the remove script -### - As well as the section "RESTORE THE MYSQL DATABASE" in the restore script +ynh_script_progression --message="Creating a MySQL database..." declare db_pwd -db_name=$(ynh_sanitize_dbid "$app") -db_user="$db_name" -ynh_app_setting_set "$app" db_name "$db_name" -ynh_app_setting_set "$app" db_user "$db_user" -ynh_mysql_setup_db "$db_user" "$db_name" +db_name=$(ynh_sanitize_dbid --db_name=$app) +db_user=$db_name +ynh_app_setting_set --app=$app --key=db_name --value=$db_name +ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" @@ -184,51 +138,24 @@ set_mediatype_default_yunohost #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= +ynh_script_progression --message="Setting up source files..." -### `ynh_setup_source` is used to install an app from a zip or tar.gz file, -### downloaded from an upstream source, like a git repository. -### `ynh_setup_source` use the file conf/app.src - -ynh_app_setting_set "$app" final_path "$final_path" -# Download, check integrity, uncompress and patch the source from app.src -#ynh_setup_source "$final_path" - -ynh_script_progression --message="Generate web config" -w 5 +ynh_app_setting_set --app=$app --key=final_path --value=$final_path #================================================= # NGINX CONFIGURATION #================================================= +ynh_script_progression --message="Configuring NGINX web server..." -### `ynh_add_nginx_config` will use the file conf/nginx.conf - -# Create a dedicated nginx config +# Create a dedicated NGINX config ynh_add_nginx_config -#================================================= -# CREATE DEDICATED USER -#================================================= - -# Create a system user -#ynh_system_user_create $app -# -### zabbix user created in zabbix server dpkg install - #================================================= # PHP-FPM CONFIGURATION #================================================= +ynh_script_progression --message="Configuring PHP-FPM..." -### `ynh_add_fpm_config` is used to set up a PHP config. -### You can remove it if your app doesn't use PHP. -### `ynh_add_fpm_config` will use the files conf/php-fpm.conf and conf/php-fpm.ini -### If you're not using these lines: -### - You can remove these files in conf/. -### - Remove the section "BACKUP THE PHP-FPM CONFIGURATION" in the backup script -### - Remove also the section "REMOVE PHP-FPM CONFIGURATION" in the remove script -### - As well as the section "RESTORE THE PHP-FPM CONFIGURATION" in the restore script -### With the reload at the end of the script. -### - And the section "PHP-FPM CONFIGURATION" in the upgrade script - -# Create a dedicated php-fpm config +# Create a dedicated PHP-FPM config ynh_add_fpm_config #================================================= @@ -237,52 +164,20 @@ ynh_add_fpm_config # ... #================================================= -#================================================= -# SETUP SYSTEMD -#================================================= - -### `ynh_systemd_config` is used to configure a systemd script for an app. -### It can be used for apps that use sysvinit (with adaptation) or systemd. -### Have a look at the app to be sure this app needs a systemd script. -### `ynh_systemd_config` will use the file conf/systemd.service -### If you're not using these lines: -### - You can remove those files in conf/. -### - Remove the section "BACKUP SYSTEMD" in the backup script -### - Remove also the section "STOP AND REMOVE SERVICE" in the remove script -### - As well as the section "RESTORE SYSTEMD" in the restore script -### - And the section "SETUP SYSTEMD" in the upgrade script - -# Create a dedicated systemd config -#ynh_add_systemd_config - -### Systemd service created when dpkg install - #================================================= # SETUP APPLICATION WITH CURL #================================================= -### Use these lines only if the app installation needs to be finalized through -### web forms. We generally don't want to ask the final user, -### so we're going to use curl to automatically fill the fields and submit the -### forms. - # Reload SSOwat config yunohost app ssowatconf # Reload Nginx systemctl reload nginx -# Installation with curl -#ynh_local_curl "/INSTALL_PATH" "key1=value1" "key2=value2" "key3=value3" - #================================================= -# MODIFY A CONFIG FILE +# ADD A CONFIGURATION #================================================= - -### `ynh_replace_string` is used to replace a string in a file. -### (It's compatible with sed regular expressions syntax) - -ynh_script_progression -m "Generate zabbix config files" -w 5 +ynh_script_progression --message="Adding a configuration file..." confServerPath=$(find /var/cache/yunohost/ -name "usr_share_zabbix_conf_zabbix.conf.php") cp --remove-destination "$confServerPath" /usr/share/zabbix/conf/zabbix.conf.php @@ -303,70 +198,15 @@ systemctl enable zabbix-server --quiet && systemctl restart zabbix-server #================================================= # INSTALL hook to verify if conf file is broken (after an update for example) #================================================= + update_initZabbixConf -#================================================= -# STORE THE CONFIG FILE CHECKSUM -#================================================= - -### `ynh_store_file_checksum` is used to store the checksum of a file. -### That way, during the upgrade script, by using `ynh_backup_if_checksum_is_different`, -### you can make a backup of this file before modifying it again if the admin had modified it. - -# Calculate and store the config file checksum into the app settings -#ynh_store_file_checksum "$final_path/CONFIG_FILE" - -#================================================= -# GENERIC FINALIZATION -#================================================= -# SECURE FILES AND DIRECTORIES -#================================================= - -### For security reason, any app should set the permissions to root: before anything else. -### Then, if write authorization is needed, any access should be given only to directories -### that really need such authorization. - -# Set permissions to app files -#chown -R root: $final_path - -#================================================= -# SETUP LOGROTATE -#================================================= - -### `ynh_use_logrotate` is used to configure a logrotate configuration for the logs of this app. -### Use this helper only if there is effectively a log file for this app. -### If you're not using this helper: -### - Remove the section "BACKUP LOGROTATE" in the backup script -### - Remove also the section "REMOVE LOGROTATE CONFIGURATION" in the remove script -### - As well as the section "RESTORE THE LOGROTATE CONFIGURATION" in the restore script -### - And the section "SETUP LOGROTATE" in the upgrade script - -# Use logrotate to manage application logfile(s) -#native logrotate because install officials packages. -#ynh_use_logrotate - -#================================================= -# ADVERTISE SERVICE IN ADMIN PANEL -#================================================= - -### `yunohost service add` is a CLI yunohost command to add a service in the admin panel. -### You'll find the service in the 'services' section of YunoHost admin panel. -### This CLI command would be useless if the app does not have any services (systemd or sysvinit) -### If you're not using these lines: -### - You can remove these files in conf/. -### - Remove the section "REMOVE SERVICE FROM ADMIN PANEL" in the remove script -### - As well as the section ADVERTISE SERVICE IN ADMIN PANEL" in the restore script - -yunohost service add snmpd -d "Management of SNMP Daemon" -yunohost service add zabbix-server -d "Management Zabbix server daemon : Collect, agregate, compute and notify" -yunohost service add zabbix-agent -d "Management Zabbix agent daemon : send informations about this host to the server" - #================================================= # RELOAD NGINX AND PHP-FPM #================================================= systemctl reload nginx -systemctl reload php7.3-fpm +ynh_systemd_action --service_name=php$phpversion-fpm --action=reload # Reload SSOwat config yunohost app ssowatconf @@ -374,36 +214,40 @@ yunohost app ssowatconf #================================================= # Import Yunohost template #================================================= -ynh_script_progression -m "Importing last template Yunohost in Zabbix" -w 5 +ynh_script_progression --message="Importing last template Yunohost in Zabbix" -w 5 + import_template #================================================= # Link Yunohost template to the ZAbbix Server Host #================================================= -ynh_script_progression -m "Importing last template Yunohost in Zabbix" -w 5 +ynh_script_progression --message="Importing last template Yunohost in Zabbix" -w 5 + link_template #================================================= # disable default admin #================================================= + disable_admin_user #================================================= -# SETUP SSOWAT +# GENERIC FINALIZATION #================================================= +# INTEGRATE SERVICE IN YUNOHOST +#================================================= +ynh_script_progression --message="Integrating service in YunoHost..." -# Make app public if necessary -if [ "$is_public" -eq 1 ] -then - ynh_permission_update --permission="main" --add="visitors" -fi +yunohost service add snmpd --description="Management of SNMP Daemon" +yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" #================================================= -# RELOAD NGINX AND PHP-FPM +# START SYSTEMD SERVICE #================================================= +ynh_script_progression --message="Starting a systemd service..." -systemctl reload nginx -systemctl reload php7.3-fpm +ynh_systemd_action --service_name=php$phpversion-fpm --action=reload # Reload SSOwat config yunohost app ssowatconf @@ -414,8 +258,28 @@ check_proc_zabbixagent #test if zabbix agent is started check_proc_zabbixserver +#================================================= +# SETUP SSOWAT +#================================================= +ynh_script_progression --message="Configuring permissions..." + +# Make app public if necessary +if [ $is_public -eq 1 ] +then + # Everyone can access the app. + # The "main" permission is automatically created before the install script. + ynh_permission_update --permission="main" --add="visitors" +fi + +#================================================= +# RELOAD NGINX +#================================================= +ynh_script_progression --message="Reloading NGINX web server..." + +ynh_systemd_action --service_name=nginx --action=reload + #================================================= # END OF SCRIPT #================================================= -ynh_script_progression --message="Installation of $app completed" --last \ No newline at end of file +ynh_script_progression --message="Installation of $app completed" diff --git a/scripts/remove b/scripts/remove index a1ac0e5..d4d9735 100644 --- a/scripts/remove +++ b/scripts/remove @@ -12,34 +12,38 @@ source /usr/share/yunohost/helpers #================================================= # LOAD SETTINGS #================================================= +ynh_script_progression --message="Loading installation settings..." app=$YNH_APP_INSTANCE_NAME -domain=$(ynh_app_setting_get "$app" domain) -port=$(ynh_app_setting_get "$app" port) -db_name=$(ynh_app_setting_get "$app" db_name) +domain=$(ynh_app_setting_get --app=$app --key=domain) +port=$(ynh_app_setting_get --app=$app --key=port) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name -#final_path=$(ynh_app_setting_get "$app" final_path) #not used #================================================= -# REMOVE SERVICE FROM ADMIN PANEL +# STANDARD REMOVE +#================================================= +# REMOVE SERVICE INTEGRATION IN YUNOHOST #================================================= -# Remove a service from the admin panel, added by `yunohost service add` +# Remove the service from the list of services known by YunoHost (added from `yunohost service add`) yunohost service remove snmpd yunohost service remove zabbix-server yunohost service remove zabbix-agent #================================================= -# REMOVE PHP-FPM CONFIGURATION +# REMOVE THE MYSQL DATABASE #================================================= +ynh_script_progression --message="Removing the MySQL database..." -# Remove the dedicated php-fpm config -ynh_remove_fpm_config +# Remove a database if it exists, along with the associated user +ynh_mysql_remove_db --db_user=$db_user --db_name=$db_name #================================================= # REMOVE DEPENDENCIES #================================================= +ynh_script_progression --message="Removing dependencies..." timeout 5 systemctl stop zabbix-server || killall zabbix_server systemctl disable zabbix-server --quiet @@ -61,64 +65,50 @@ do DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y done -#================================================= -# REMOVE THE MYSQL DATABASE -#================================================= - -# Remove a database if it exists, along with the associated user -ynh_mysql_remove_db "$db_user" "$db_name" - #================================================= # REMOVE NGINX CONFIGURATION #================================================= +ynh_script_progression --message="Removing NGINX web server configuration..." -# Remove the dedicated nginx config +# Remove the dedicated NGINX config ynh_remove_nginx_config #================================================= -# REMOVE LOGROTATE CONFIGURATION +# REMOVE PHP-FPM CONFIGURATION #================================================= +ynh_script_progression --message="Removing PHP-FPM configuration..." -# Remove the app-specific logrotate config -ynh_remove_logrotate - -#================================================= -# CLOSE A PORT -#================================================= - -if yunohost firewall list | grep -q "\- $port$" -then - echo "Close port $port" >&2 - yunohost firewall disallow TCP "$port" 2>&1 -fi +# Remove the dedicated PHP-FPM config +ynh_remove_fpm_config #================================================= # SPECIFIC REMOVE #================================================= -# REMOVE THE CRON FILE +# REMOVE VARIOUS FILES #================================================= +ynh_script_progression --message="Removing various files..." remove_zabbix_repo if [ -d /var/www/zabbix ] ;then ynh_secure_remove /var/www/zabbix;fi # Remove a directory securely -if [ -d /etc/zabbix ] ;then ynh_secure_remove "/etc/zabbix";fi +if [ -d /etc/zabbix ] ;then ynh_secure_remove --file="/etc/zabbix";fi # Remove the log files -if [ -d /var/log/zabbix ] ;then ynh_secure_remove "/var/log/zabbix";fi +if [ -d /var/log/zabbix ] ;then ynh_secure_remove --file="/var/log/zabbix";fi # Remove the pid/socket files -if [ -d /run/zabbix ] ;then ynh_secure_remove "/run/zabbix";fi +if [ -d /run/zabbix ] ;then ynh_secure_remove --file="/run/zabbix";fi # Remove the sudoers file -if [ -f /etc/sudoers.d/zabbix ] ;then ynh_secure_remove "/etc/sudoers.d/zabbix";fi +if [ -f /etc/sudoers.d/zabbix ] ;then ynh_secure_remove --file="/etc/sudoers.d/zabbix";fi #REMOVE NONFREE PART PATCH IF NEEDED (snmp-mibs-downloader (non-free) installed in version 1) nonfreepackagelist=$(dpkg-query -W -f='${Section}\t${Package}\n' | grep ^non-free) if [ $(echo $nonfreepackagelist | wc -l) -eq 1 ] && [ $(echo $nonfreepackagelist | grep -c "snmp-mibs-downloader") -eq 1 ] ;then - ynh_print_info "Removing snmp-mibs-downloader (non-free package)" + ynh_print_info --message="Removing snmp-mibs-downloader (non-free package)" cp /var/lib/dpkg/status{,.$(date "+%m%d%y")} ynh_replace_string --match_string=" snmp-mibs-downloader," --replace_string="" --target_file=/var/lib/dpkg/status DEBIAN_FRONTEND=noninteractive apt purge snmp-mibs-downloader -y @@ -127,12 +117,18 @@ if [ $(echo $nonfreepackagelist | wc -l) -eq 1 ] && [ $(echo $nonfreepackagelist fi fi - #================================================= # GENERIC FINALIZATION #================================================= # REMOVE DEDICATED USER #================================================= +ynh_script_progression --message="Removing the dedicated system user..." # Delete a system user -ynh_system_user_delete zabbix +ynh_system_user_delete --username=$app + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_script_progression --message="Removal of $app completed" diff --git a/scripts/restore b/scripts/restore index 1fb9ff3..83f02cb 100644 --- a/scripts/restore +++ b/scripts/restore @@ -1,10 +1,12 @@ #!/bin/bash + #================================================= # GENERIC START #================================================= # IMPORT GENERIC HELPERS #================================================= +# Keep this path for calling _common.sh inside the execution's context of backup and restore scripts source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers @@ -15,46 +17,52 @@ source /usr/share/yunohost/helpers # Exit if an error occurs during the execution of the script ynh_abort_if_errors -### If it's a multi-instance app, meaning it can be installed several times independently -### The id of the app as stated in the manifest is available as $YNH_APP_ID -### The instance number is available as $YNH_APP_INSTANCE_NUMBER (equals "1", "2", ...) -### The app instance name is available as $YNH_APP_INSTANCE_NAME -### - the first time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample -### - the second time the app is installed, YNH_APP_INSTANCE_NAME = ynhexample__2 -### - ynhexample__{N} for the subsequent installations, with N=3,4, ... -### The app instance name is probably what interests you most, since this is -### guaranteed to be unique. This is a good unique identifier to define installation path, -### db names, ... -app="zabbix" -final_path="/var/www/zabbix" #================================================= -# CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS +# LOAD SETTINGS #================================================= +ynh_script_progression --message="Loading installation settings..." + +app=$YNH_APP_INSTANCE_NAME + +domain=$(ynh_app_setting_get $app --key=domain) +final_path=$(ynh_app_setting_get --app=$app --key=final_path) +is_public=$(ynh_app_setting_get --app=$app --key=is_public) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) +db_user=$db_name +nonfree=$(ynh_app_setting_get --app=$app --key=nonfree) + +#================================================= +# CHECK IF THE APP CAN BE RESTORED +#================================================= +ynh_script_progression --message="Validating restoration parameters..." -### If the app uses nginx as web server (written in HTML/PHP in most cases), the final path should be "/var/www/$app". -### If the app provides an internal web server (or uses another application server such as uwsgi), the final path should be "/opt/yunohost/$app" ynh_secure_remove $final_path #================================================= -# STORE SETTINGS FROM MANIFEST +# STANDARD RESTORATION STEPS #================================================= +# RESTORE THE NGINX CONFIGURATION +#================================================= +ynh_script_progression --message="Restoring the NGINX web server configuration..." -domain=$(ynh_app_setting_get $app domain) -#path_url=$(ynh_app_setting_get $app path) #not used -#admin=$(ynh_app_setting_get $app admin) #not used -is_public=$(ynh_app_setting_get $app is_public) -#language=$(ynh_app_setting_get $app language) #not used -nonfree=$(ynh_app_setting_get $app nonfree) - +ynh_restore_file --origin_path="/etc/nginx/conf.d/$domain.d/$app.conf" #================================================= -# INSTALL DEPENDENCIES +# RESTORE THE PHP-FPM CONFIGURATION #================================================= +ynh_script_progression --message="Restoring the PHP-FPM configuration..." + +ynh_restore_file --origin_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" + +#================================================= +# SPECIFIC RESTORATION +#================================================= +# REINSTALL DEPENDENCIES +#================================================= +ynh_script_progression --message="Reinstalling dependencies..." -ynh_print_info "Install Zabbix repository" install_zabbix_repo -ynh_print_info "Update and install dependencies" ynh_package_update ynh_install_app_dependencies $pkg_dependencies DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php @@ -65,100 +73,53 @@ locale-gen ln -s /usr/share/zabbix /var/www/zabbix ynh_secure_remove $final_path/conf/zabbix.conf.php -ynh_app_setting_set $app final_path $final_path +#================================================= +# RESTORE THE MYSQL DATABASE +#================================================= +ynh_script_progression --message="Restoring the MySQL database..." + +db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) +ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name --db_pwd=$db_pwd +convert_ZabbixDB +ynh_mysql_connect_as --user=$db_user --password=$db_pwd --database=$db_name < ./db.sql #================================================= -# NGINX CONFIGURATION +# RESTORE VARIOUS FILES #================================================= - -### `ynh_add_nginx_config` will use the file conf/nginx.conf - -# Create a dedicated nginx config - -ynh_restore_file "/etc/nginx/conf.d/$domain.d/$app.conf" - -#================================================= -# PHP-FPM CONFIGURATION -#================================================= - -ynh_restore_file "/etc/php/7.0/fpm/pool.d/$app.conf" +ynh_script_progression --message="Restoring various files..." # Restore sudo file -ynh_restore_file "/etc/sudoers.d/zabbix" +ynh_restore_file --origin_path="/etc/sudoers.d/zabbix" -#================================================= -# Restore db -#================================================= - -db_name=$(ynh_app_setting_get $app db_name) -db_user=$(ynh_app_setting_get $app db_user) -db_pwd=$(ynh_app_setting_get $app mysqlpwd) - -ynh_mysql_setup_db "$db_user" "$db_name" "$db_pwd" -convert_ZabbixDB -ynh_mysql_connect_as "$db_name" "$db_pwd" "$db_name" < ./db.sql - - -#================================================= -# Restore configs files -#================================================= - -### `ynh_replace_string` is used to replace a string in a file. -### (It's compatible with sed regular expressions syntax) - -ynh_restore_file "/usr/share/zabbix/conf/zabbix.conf.php" +ynh_restore_file --origin_path="/usr/share/zabbix/conf/zabbix.conf.php" chown -R www-data. /usr/share/zabbix -ynh_restore_file "/etc/zabbix" +ynh_restore_file --origin_path="/etc/zabbix" ls -Rail "/etc/zabbix" -#ynh_restore_file "/etc/zabbix/web" -#ynh_restore_file "/etc/zabbix/web/init.zabbix.conf.php.sh" -ynh_restore_file "/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" + +ynh_restore_file --origin_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" if [ ! -L /etc/zabbix/zabbix_agentd.d ];then ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d fi + systemctl enable --quiet zabbix-agent && systemctl restart zabbix-agent change_timeoutAgent systemctl enable --quiet zabbix-server && systemctl restart zabbix-server -yunohost service add snmpd -d "Management of SNMP Daemon" -yunohost service add zabbix-server -d "Management Zabbix server daemon : Collect, agregate, compute and notify" -yunohost service add zabbix-agent -d "Management Zabbix agent daemon : send informations about this host to the server" +#================================================= +# INTEGRATE SERVICE IN YUNOHOST +#================================================= +ynh_script_progression --message="Integrating service in YunoHost..." + +yunohost service add snmpd --description="Management of SNMP Daemon" +yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" #================================================= -# SETUP LOGROTATE +# START SYSTEMD SERVICE #================================================= - -### `ynh_use_logrotate` is used to configure a logrotate configuration for the logs of this app. -### Use this helper only if there is effectively a log file for this app. -### If you're not using this helper: -### - Remove the section "BACKUP LOGROTATE" in the backup script -### - Remove also the section "REMOVE LOGROTATE CONFIGURATION" in the remove script -### - As well as the section "RESTORE THE LOGROTATE CONFIGURATION" in the restore script -### - And the section "SETUP LOGROTATE" in the upgrade script - -# Use logrotate to manage application logfile(s) -#ynh_use_logrotate -#no need, use native logrotate in zabbix packages - -#================================================= -# SETUP SSOWAT -#================================================= - -# Make app public if necessary -if [ "$is_public" -eq 1 ] -then - # unprotected_uris allows SSO credentials to be passed anyway. - ynh_app_setting_set $app unprotected_uris "/" -fi - -#================================================= -# RELOAD NGINX -#================================================= - -systemctl reload nginx -systemctl reload php7.0-fpm +ynh_script_progression --message="Starting a systemd service..." # Reload SSOwat config yunohost app ssowatconf @@ -168,3 +129,19 @@ check_proc_zabbixagent #test if zabbix agent is started check_proc_zabbixserver + +#================================================= +# GENERIC FINALIZATION +#================================================= +# RELOAD NGINX AND PHP-FPM +#================================================= +ynh_script_progression --message="Reloading NGINX web server and PHP-FPM..." + +ynh_systemd_action --service_name=php$phpversion-fpm --action=reload +ynh_systemd_action --service_name=nginx --action=reload + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_script_progression --message="Restoration completed for $app" From 119dfc3369be69b283b7edeb292d5585258f1424 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 13 Aug 2021 01:37:23 +0200 Subject: [PATCH 31/58] second example_ynh --- scripts/_common.sh | 3 ++- scripts/install | 50 +++++++++++++++++----------------------------- scripts/remove | 32 ++++++++++++++--------------- scripts/restore | 1 + 4 files changed, 37 insertions(+), 49 deletions(-) diff --git a/scripts/_common.sh b/scripts/_common.sh index d0e917a..5a519ef 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -5,7 +5,7 @@ #================================================= # dependencies used by the app -pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php7.3 php7.3-bcmath ttf-dejavu-core php7.3-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" +pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php$YNH_DEFAULT_PHP_VERSION php$YNH_DEFAULT_PHP_VERSION-bcmath ttf-dejavu-core php$YNH_DEFAULT_PHP_VERSION-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" #================================================= # PERSONAL HELPERS @@ -61,6 +61,7 @@ enable_admin_user(){ import_template(){ ynh_print_info --message="Import yunohost template" + zabbixFullpath=https://$domain$path_url localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml") sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix") diff --git a/scripts/install b/scripts/install index 506a56c..3823ef9 100644 --- a/scripts/install +++ b/scripts/install @@ -47,6 +47,7 @@ ynh_script_progression --message="Storing installation settings..." ynh_app_setting_set --app=$app --key=domain --value=$domain ynh_app_setting_set --app=$app --key=path --value=$path_url ynh_app_setting_set --app=$app --key=admin --value=$admin +ynh_app_setting_set --app=$app --key=is_public --value=$is_public ynh_app_setting_set --app=$app --key=language --value=$language #================================================= @@ -58,20 +59,20 @@ ynh_script_progression --message="Installing dependencies..." pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) if [ ! -z "$pid" ] ;then - ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" -w 1 + ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" tail --pid=$pid -f /dev/null fi -ynh_script_progression --message="Remove Zabbix if already installed" -w 1 +ynh_script_progression --message="Remove Zabbix if already installed" apt-get purge zabbix* -y if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* fi -ynh_script_progression --message="Install Zabbix repository" -w 3 +ynh_script_progression --message="Install Zabbix repository" install_zabbix_repo -ynh_script_progression --message="Update and install dependencies" -w 5 +ynh_script_progression --message="Update and install dependencies" #ynh_package_update no need cause ynh_install_app_dependencies after ynh_install_app_dependencies $pkg_dependencies dpkg -i --force-confmiss /var/cache/apt/archives/zabbix-server-mysql* @@ -97,7 +98,7 @@ ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" -ynh_script_progression --message="Import default data in database..." -w 25 +ynh_script_progression --message="Import default data in database..." zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | $mysqlconn @@ -157,23 +158,10 @@ ynh_script_progression --message="Configuring PHP-FPM..." # Create a dedicated PHP-FPM config ynh_add_fpm_config +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # SPECIFIC SETUP -#================================================= -# ... -#================================================= - -#================================================= -# SETUP APPLICATION WITH CURL -#================================================= - -# Reload SSOwat config -yunohost app ssowatconf - -# Reload Nginx -systemctl reload nginx - #================================================= # ADD A CONFIGURATION #================================================= @@ -202,26 +190,26 @@ systemctl enable zabbix-server --quiet && systemctl restart zabbix-server update_initZabbixConf #================================================= -# RELOAD NGINX AND PHP-FPM +# SETUP APPLICATION WITH CURL #================================================= +ynh_script_progression --message="Setuping application with CURL..." -systemctl reload nginx -ynh_systemd_action --service_name=php$phpversion-fpm --action=reload - -# Reload SSOwat config -yunohost app ssowatconf +# Set the app as temporarily public for curl call +ynh_script_progression --message="Configuring SSOwat..." +# Making the app public for curl +ynh_permission_update --permission="main" --add="visitors" #================================================= # Import Yunohost template #================================================= -ynh_script_progression --message="Importing last template Yunohost in Zabbix" -w 5 +ynh_script_progression --message="Importing last template Yunohost in Zabbix" import_template #================================================= # Link Yunohost template to the ZAbbix Server Host #================================================= -ynh_script_progression --message="Importing last template Yunohost in Zabbix" -w 5 +ynh_script_progression --message="Importing last template Yunohost in Zabbix" link_template @@ -231,6 +219,9 @@ link_template disable_admin_user +# Remove the public access +ynh_permission_update --permission="main" --remove="visitors" + #================================================= # GENERIC FINALIZATION #================================================= @@ -247,11 +238,6 @@ yunohost service add zabbix-agent --description="Management Zabbix agent daemon #================================================= ynh_script_progression --message="Starting a systemd service..." -ynh_systemd_action --service_name=php$phpversion-fpm --action=reload - -# Reload SSOwat config -yunohost app ssowatconf - #test if zabbix server is started check_proc_zabbixagent diff --git a/scripts/remove b/scripts/remove index d4d9735..df69f1f 100644 --- a/scripts/remove +++ b/scripts/remove @@ -40,6 +40,22 @@ ynh_script_progression --message="Removing the MySQL database..." # Remove a database if it exists, along with the associated user ynh_mysql_remove_db --db_user=$db_user --db_name=$db_name +#================================================= +# REMOVE NGINX CONFIGURATION +#================================================= +ynh_script_progression --message="Removing NGINX web server configuration..." + +# Remove the dedicated NGINX config +ynh_remove_nginx_config + +#================================================= +# REMOVE PHP-FPM CONFIGURATION +#================================================= +ynh_script_progression --message="Removing PHP-FPM configuration..." + +# Remove the dedicated PHP-FPM config +ynh_remove_fpm_config + #================================================= # REMOVE DEPENDENCIES #================================================= @@ -65,22 +81,6 @@ do DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y done -#================================================= -# REMOVE NGINX CONFIGURATION -#================================================= -ynh_script_progression --message="Removing NGINX web server configuration..." - -# Remove the dedicated NGINX config -ynh_remove_nginx_config - -#================================================= -# REMOVE PHP-FPM CONFIGURATION -#================================================= -ynh_script_progression --message="Removing PHP-FPM configuration..." - -# Remove the dedicated PHP-FPM config -ynh_remove_fpm_config - #================================================= # SPECIFIC REMOVE #================================================= diff --git a/scripts/restore b/scripts/restore index 83f02cb..1dfff09 100644 --- a/scripts/restore +++ b/scripts/restore @@ -29,6 +29,7 @@ final_path=$(ynh_app_setting_get --app=$app --key=final_path) is_public=$(ynh_app_setting_get --app=$app --key=is_public) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) nonfree=$(ynh_app_setting_get --app=$app --key=nonfree) #================================================= From 014f6182b733e128eb3de40a62278e6d135a166e Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 13 Aug 2021 03:59:54 +0200 Subject: [PATCH 32/58] Still applying example_ynh --- ...00update_force_init_zabbix_frontend_config | 0 .../app => conf}/Template_Yunohost.xml | 0 .../init.zabbix.conf.php.sh | 6 +- .../userP_yunohost.conf | 0 .../yunohost.sh | 0 .../app/etc_sudoers.d_zabbix => conf/zabbix | 0 .../zabbix.conf.php | 6 +- hooks/post_user_create | 8 +- manifest.json | 4 +- scripts/_common.sh | 67 ++-- scripts/backup | 11 +- scripts/change_url | 53 ++- scripts/install | 138 +++----- scripts/remove | 89 ++--- scripts/restore | 40 ++- scripts/upgrade | 313 ++++++++---------- sources/extra_files/app/.gitignore | 2 - sources/patches/.gitignore | 2 - 18 files changed, 339 insertions(+), 400 deletions(-) rename sources/extra_files/app/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config => conf/100update_force_init_zabbix_frontend_config (100%) rename {sources/extra_files/app => conf}/Template_Yunohost.xml (100%) rename sources/extra_files/app/etc_zabbix_web_init.zabbix.conf.php.sh => conf/init.zabbix.conf.php.sh (79%) rename sources/extra_files/app/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf => conf/userP_yunohost.conf (100%) rename sources/extra_files/app/etc_zabbix_zabbix_agentd.d_yunohost.sh => conf/yunohost.sh (100%) rename sources/extra_files/app/etc_sudoers.d_zabbix => conf/zabbix (100%) rename sources/extra_files/app/usr_share_zabbix_conf_zabbix.conf.php => conf/zabbix.conf.php (68%) delete mode 100644 sources/extra_files/app/.gitignore delete mode 100644 sources/patches/.gitignore diff --git a/sources/extra_files/app/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config b/conf/100update_force_init_zabbix_frontend_config similarity index 100% rename from sources/extra_files/app/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config rename to conf/100update_force_init_zabbix_frontend_config diff --git a/sources/extra_files/app/Template_Yunohost.xml b/conf/Template_Yunohost.xml similarity index 100% rename from sources/extra_files/app/Template_Yunohost.xml rename to conf/Template_Yunohost.xml diff --git a/sources/extra_files/app/etc_zabbix_web_init.zabbix.conf.php.sh b/conf/init.zabbix.conf.php.sh similarity index 79% rename from sources/extra_files/app/etc_zabbix_web_init.zabbix.conf.php.sh rename to conf/init.zabbix.conf.php.sh index 196c850..cc118fb 100644 --- a/sources/extra_files/app/etc_zabbix_web_init.zabbix.conf.php.sh +++ b/conf/init.zabbix.conf.php.sh @@ -14,9 +14,9 @@ global \$DB, \$HISTORY; \$DB['TYPE'] = 'MYSQL'; \$DB['SERVER'] = 'localhost'; \$DB['PORT'] = '0'; -\$DB['DATABASE'] = '"$(yunohost app setting zabbix db_name)"'; -\$DB['USER'] = '"$(yunohost app setting zabbix db_user)"'; -\$DB['PASSWORD'] = '"$(yunohost app setting zabbix mysqlpwd)"'; +\$DB['DATABASE'] = '__DB_NAME__'; +\$DB['USER'] = '__DB_USER__'; +\$DB['PASSWORD'] = '__DB_PWD__'; // Schema name. Used for IBM DB2 and PostgreSQL. \$DB['SCHEMA'] = ''; diff --git a/sources/extra_files/app/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf b/conf/userP_yunohost.conf similarity index 100% rename from sources/extra_files/app/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf rename to conf/userP_yunohost.conf diff --git a/sources/extra_files/app/etc_zabbix_zabbix_agentd.d_yunohost.sh b/conf/yunohost.sh similarity index 100% rename from sources/extra_files/app/etc_zabbix_zabbix_agentd.d_yunohost.sh rename to conf/yunohost.sh diff --git a/sources/extra_files/app/etc_sudoers.d_zabbix b/conf/zabbix similarity index 100% rename from sources/extra_files/app/etc_sudoers.d_zabbix rename to conf/zabbix diff --git a/sources/extra_files/app/usr_share_zabbix_conf_zabbix.conf.php b/conf/zabbix.conf.php similarity index 68% rename from sources/extra_files/app/usr_share_zabbix_conf_zabbix.conf.php rename to conf/zabbix.conf.php index 67b13e6..3232a8f 100644 --- a/sources/extra_files/app/usr_share_zabbix_conf_zabbix.conf.php +++ b/conf/zabbix.conf.php @@ -5,9 +5,9 @@ global $DB; $DB['TYPE'] = 'MYSQL'; $DB['SERVER'] = 'localhost'; $DB['PORT'] = '0'; -$DB['DATABASE'] = 'db_name'; -$DB['USER'] = 'db_user'; -$DB['PASSWORD'] = 'db_pwd'; +$DB['DATABASE'] = '__DB_NAME__'; +$DB['USER'] = '__DB_USER__'; +$DB['PASSWORD'] = '__DB_PWD__'; // Schema name. Used for IBM DB2 and PostgreSQL. $DB['SCHEMA'] = ''; diff --git a/hooks/post_user_create b/hooks/post_user_create index 925adeb..4e3c78c 100644 --- a/hooks/post_user_create +++ b/hooks/post_user_create @@ -11,12 +11,6 @@ db_user=$(ynh_app_setting_get $app db_user) db_pwd=$(ynh_app_setting_get $app mysqlpwd) language=$(ynh_app_setting_set $app language) -if [ "$language" == "fr" ];then - lang="fr_FR" -else - lang="en_GB" -fi - lastid=$(mysql -u$db_user -p$db_pwd $db_name -NB -e "select userid from users order by userid desc limit 1") lastid=$((lastid+1)) -mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ("$lastid",'"$user"', '"$name"', '"$surname"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$lang"', '30s', 1, 'default', 0, '', 0, 50);" \ No newline at end of file +mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ("$lastid",'"$user"', '"$name"', '"$surname"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$language"', '30s', 1, 'default', 0, '', 0, 50);" diff --git a/manifest.json b/manifest.json index 0e408d9..ad15253 100644 --- a/manifest.json +++ b/manifest.json @@ -53,8 +53,8 @@ "en": "Choose the application language", "fr": "Choisissez la langue de l'application" }, - "choices": ["fr", "en"], - "default": "en" + "choices": ["fr_FR", "en_GB"], + "default": "en_GB" } ] } diff --git a/scripts/_common.sh b/scripts/_common.sh index 5a519ef..244d2dc 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -5,7 +5,11 @@ #================================================= # dependencies used by the app -pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 php$YNH_DEFAULT_PHP_VERSION php$YNH_DEFAULT_PHP_VERSION-bcmath ttf-dejavu-core php$YNH_DEFAULT_PHP_VERSION-bcmath patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" +pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.2-0 ttf-dejavu-core patch smistrip unzip wget fping libcap2-bin libiksemel3 libopenipmi0 libpam-cap libsnmp-base libsnmp30 snmptrapd snmpd libjs-prototype jq zabbix-server-mysql zabbix-agent zabbix-frontend-php" + +YNH_PHP_VERSION="7.3" + +extra_php_dependencies="php${YNH_PHP_VERSION}-bcmath" #================================================= # PERSONAL HELPERS @@ -41,10 +45,8 @@ disable_admin_user(){ lastid=$((lastid + 1 )) $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);" ynh_print_info --message="Default admin disabled" - else ynh_print_info --message="Default admin already disabled" - fi } @@ -60,16 +62,13 @@ enable_admin_user(){ } import_template(){ - ynh_print_info --message="Import yunohost template" - + ynh_permission_update --permission="main" --add="visitors" + + enable_admin_user + zabbixFullpath=https://$domain$path_url - localpath=$(find /var/cache/yunohost/ -name "Template_Yunohost.xml") - sudoUserPpath=$(find /var/cache/yunohost/ -name "etc_sudoers.d_zabbix") - confUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_userP_yunohost.conf") - bashUserPpath=$(find /var/cache/yunohost/ -name "etc_zabbix_zabbix_agentd.d_yunohost.sh") - - - cp "$sudoUserPpath" /etc/sudoers.d/zabbix + + cp "../conf/zabbix" /etc/sudoers.d/zabbix if [ -d /etc/zabbix/zabbix_agentd.d ];then mv /etc/zabbix/zabbix_agentd.d /etc/zabbix/zabbix_agentd.conf.d @@ -78,8 +77,8 @@ import_template(){ ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d fi - cp "$confUserPpath" /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf - cp "$bashUserPpath" /etc/zabbix/zabbix_agentd.d/yunohost.sh + cp "../conf/userP_yunohost.conf" /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf + cp "../conf/yunohost.sh" /etc/zabbix/zabbix_agentd.d/yunohost.sh chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh systemctl restart zabbix-agent @@ -98,7 +97,7 @@ import_template(){ importState=$(curl $curlOptions \ --form "config=1" \ - --form "import_file=@$localpath" \ + --form "import_file=@../conf/Template_Yunohost.xml" \ --form "rules[groups][createMissing]=1" \ --form "rules[templates][updateExisting]=1" \ --form "rules[templates][createMissing]=1" \ @@ -127,14 +126,12 @@ import_template(){ if [ "$importState" -eq "1" ];then ynh_print_info --message="Template Yunohost imported !" else - ynh_print_warn "Template Yunohost not imported !" + ynh_print_warn --message="Template Yunohost not imported !" fi else - ynh_print_warn "Admin user cannot connect interface !" + ynh_print_warn --message="Admin user cannot connect interface !" fi -} -link_template(){ #apply template to host tokenapi=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result') zabbixHostID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].hostid') @@ -143,9 +140,12 @@ link_template(){ if [ "$applyTemplate" -eq "$zabbixHostID" ];then ynh_print_info --message="Template Yunohost linked to Zabbix server !" else - ynh_print_warn "Template Yunohost no linked to Zabbix server !" + ynh_print_warn --message="Template Yunohost no linked to Zabbix server !" fi + + disable_admin_user + ynh_permission_update --permission="main" --remove="visitors" } check_proc_zabbixserver(){ @@ -159,13 +159,13 @@ check_proc_zabbixserver(){ } check_proc_zabbixagent(){ - pgrep zabbix_agentd >/dev/null - if [ $? -eq 0 ];then - ynh_print_info --message="zabbix agent is started" - else - ynh_print_err "Zabbix agent not started, try to start it with the yunohost interface." - ynh_print_err "If Zabbix agent can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" - fi + pgrep zabbix_agentd >/dev/null + if [ $? -eq 0 ];then + ynh_print_info --message="zabbix agent is started" + else + ynh_print_err "Zabbix agent not started, try to start it with the yunohost interface." + ynh_print_err "If Zabbix agent can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" + fi } install_zabbix_repo(){ @@ -177,14 +177,15 @@ remove_zabbix_repo(){ } update_initZabbixConf(){ - if [ ! -d /etc/zabbix/web ] ;then mkdir -p /etc/zabbix/web ;fi - cp $(find /var/cache/yunohost/ -name "etc_zabbix_web_init.zabbix.conf.php.sh") /etc/zabbix/web/init.zabbix.conf.php.sh - chmod 700 /etc/zabbix/web/init.zabbix.conf.php.sh - cp $(find /var/cache/yunohost/ -name "etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config") /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config + if [ ! -d /etc/zabbix/web ] ;then mkdir -p /etc/zabbix/web ;fi + ynh_add_config --template="../conf/init.zabbix.conf.php.sh" --destination="/etc/zabbix/web/init.zabbix.conf.php.sh" + chmod 700 /etc/zabbix/web/init.zabbix.conf.php.sh + ynh_add_config --template="../conf/100update_force_init_zabbix_frontend_config" --destination="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" } + delete_initZabbixConf(){ - if [ -f /etc/zabbix/web/init.zabbix.conf.php.sh ] ; then ynh_secure_remove /etc/zabbix/web/init.zabbix.conf.php.sh;fi - if [ -f /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config ] ;then ynh_secure_remove /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config ;fi + if [ -f /etc/zabbix/web/init.zabbix.conf.php.sh ] ; then ynh_secure_remove --file="/etc/zabbix/web/init.zabbix.conf.php.sh" ;fi + if [ -f /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config ] ;then ynh_secure_remove --file="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" ;fi } #Patch timeout too short for zabbix agent if needed diff --git a/scripts/backup b/scripts/backup index 8a593bf..325c5a8 100644 --- a/scripts/backup +++ b/scripts/backup @@ -30,7 +30,6 @@ app=$YNH_APP_INSTANCE_NAME final_path=$(ynh_app_setting_get --app=$app --key=final_path) domain=$(ynh_app_setting_get --app=$app --key=domain) db_name=$(ynh_app_setting_get --app=$app --key=db_name) -nonfree=$(ynh_app_setting_get --app=$app --key=nonfree) #================================================= # DECLARE DATA AND CONF FILES TO BACKUP @@ -53,19 +52,19 @@ ynh_backup --src_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" # BACKUP VARIOUS FILES #================================================= -#backup frontend config +# Backup frontend config ynh_backup --src_path="$final_path/conf/zabbix.conf.php" -ynh_backup --src_path="/etc/zabbix/web" +ynh_backup --src_path="/etc/zabbix" ynh_backup --src_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" -#backup server confif +# Backup server config ynh_backup --src_path="/etc/zabbix/zabbix_server.conf" -#backup agent config +# Backup agent config ynh_backup --src_path="/etc/zabbix/zabbix_agentd.conf" ynh_backup --src_path="/etc/zabbix/zabbix_agentd.d" -#backup sudo file +# Backup sudo file ynh_backup --src_path="/etc/sudoers.d/zabbix" #================================================= diff --git a/scripts/change_url b/scripts/change_url index e727aa9..213ce6c 100644 --- a/scripts/change_url +++ b/scripts/change_url @@ -8,7 +8,6 @@ source _common.sh source /usr/share/yunohost/helpers -ynh_abort_if_errors #================================================= # RETRIEVE ARGUMENTS @@ -25,22 +24,32 @@ app=$YNH_APP_INSTANCE_NAME #================================================= # LOAD SETTINGS #================================================= +ynh_script_progression --message="Loading installation settings..." # Needed for helper "ynh_add_nginx_config" -final_path=$(ynh_app_setting_get $app final_path) +final_path=$(ynh_app_setting_get --app=$app --key=final_path) # Add settings here as needed by your application -#db_name=$(ynh_app_setting_get "$app" db_name) -#db_pwd=$(ynh_app_setting_get $app db_pwd) +#db_name=$(ynh_app_setting_get --app=$app --key=db_name) +#db_user=$db_name +#db_pwd=$(ynh_app_setting_get --app=$app --key=db_pwd) #================================================= -# CHECK THE SYNTAX OF THE PATHS +# BACKUP BEFORE CHANGE URL THEN ACTIVE TRAP #================================================= +ynh_script_progression --message="Backing up the app before changing its URL (may take a while)..." -test -n "$old_path" || old_path="/" -test -n "$new_path" || new_path="/" -new_path=$(ynh_normalize_url_path $new_path) -old_path=$(ynh_normalize_url_path $old_path) +# Backup the current version of the app +ynh_backup_before_upgrade +ynh_clean_setup () { + # Remove the new domain config file, the remove script won't do it as it doesn't know yet its location. + ynh_secure_remove --file="/etc/nginx/conf.d/$new_domain.d/$app.conf" + + # Restore it if the upgrade fails + ynh_restore_upgradebackup +} +# Exit if an error occurs during the execution of the script +ynh_abort_if_errors #================================================= # CHECK WHICH PARTS SHOULD BE CHANGED @@ -63,29 +72,30 @@ fi #================================================= # MODIFY URL IN NGINX CONF #================================================= +ynh_script_progression --message="Updating NGINX web server configuration..." nginx_conf_path=/etc/nginx/conf.d/$old_domain.d/$app.conf -# Change the path in the nginx config file +# Change the path in the NGINX config file if [ $change_path -eq 1 ] then - # Make a backup of the original nginx config file if modified - ynh_backup_if_checksum_is_different "$nginx_conf_path" - # Set global variables for nginx helper + # Make a backup of the original NGINX config file if modified + ynh_backup_if_checksum_is_different --file="$nginx_conf_path" + # Set global variables for NGINX helper domain="$old_domain" path_url="$new_path" - # Create a dedicated nginx config + # Create a dedicated NGINX config ynh_add_nginx_config fi -# Change the domain for nginx +# Change the domain for NGINX if [ $change_domain -eq 1 ] then # Delete file checksum for the old conf file location - ynh_delete_file_checksum "$nginx_conf_path" + ynh_delete_file_checksum --file="$nginx_conf_path" mv $nginx_conf_path /etc/nginx/conf.d/$new_domain.d/$app.conf # Store file checksum for the new config file location - ynh_store_file_checksum "/etc/nginx/conf.d/$new_domain.d/$app.conf" + ynh_store_file_checksum --file="/etc/nginx/conf.d/$new_domain.d/$app.conf" fi #================================================= @@ -99,5 +109,12 @@ fi #================================================= # RELOAD NGINX #================================================= +ynh_script_progression --message="Reloading NGINX web server..." -systemctl reload nginx +ynh_systemd_action --service_name=nginx --action=reload + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_script_progression --message="Change of URL completed for $app" diff --git a/scripts/install b/scripts/install index 3823ef9..f0cba25 100644 --- a/scripts/install +++ b/scripts/install @@ -59,14 +59,14 @@ ynh_script_progression --message="Installing dependencies..." pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) if [ ! -z "$pid" ] ;then - ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" - tail --pid=$pid -f /dev/null + ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" + tail --pid=$pid -f /dev/null fi ynh_script_progression --message="Remove Zabbix if already installed" apt-get purge zabbix* -y if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then - ynh_secure_remove /var/cache/apt/archives/zabbix-server-mysql* + ynh_secure_remove --file="/var/cache/apt/archives/zabbix-server-mysql*" fi ynh_script_progression --message="Install Zabbix repository" @@ -80,61 +80,15 @@ dpkg -i --force-confmiss /var/cache/apt/archives/zabbix-server-mysql* ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen locale-gen -ln -s /usr/share/zabbix "$final_path" -if [ -f "$final_path/conf/zabbix.conf.php" ];then - ynh_secure_remove --file="$final_path/conf/zabbix.conf.php" -fi - #================================================= # CREATE A MYSQL DATABASE #================================================= ynh_script_progression --message="Creating a MySQL database..." -declare db_pwd db_name=$(ynh_sanitize_dbid --db_name=$app) db_user=$db_name ynh_app_setting_set --app=$app --key=db_name --value=$db_name ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name -export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" -mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" - -ynh_script_progression --message="Import default data in database..." - -zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | $mysqlconn - -convert_ZabbixDB - -#sso integration -$mysqlconn -e "UPDATE \`config\` SET \`http_auth_enabled\` = '1', \`http_login_form\` = '1' WHERE \`config\`.\`configid\` = 1;" - -if [ "$language" == "fr" ];then - lang="fr_FR" -else - lang="en_GB" -fi - -#admin creation -surname=$(ynh_user_get_info "$admin" lastname) -name=$(ynh_user_get_info "$admin" firstname) - -$mysqlconn -e "INSERT INTO \`users\` (\`userid\`,\`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES (3,'$admin', '$admin', '$admin', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$lang', '30s', 3, 'default', 0, '', 0, 50);" -$mysqlconn -e "INSERT INTO \`users_groups\` (\`id\`, \`usrgrpid\`, \`userid\`) VALUES (5, 7, 3);" - -#users creation in zabbix database -i=4 -for user in $(ynh_user_list); -do - if [ "$user" != "$admin" ];then - surname=$(ynh_user_get_info "$user" lastname) - name=$(ynh_user_get_info "$user" firstname) - $mysqlconn -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ($i,'$user', '$name', '$surname', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$lang', '30s', 1, 'default', 0, '', 0, 50);" - i=$((i+1)) - fi -done - -disable_guest_user - -set_mediatype_default_yunohost #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE @@ -142,6 +96,8 @@ set_mediatype_default_yunohost ynh_script_progression --message="Setting up source files..." ynh_app_setting_set --app=$app --key=final_path --value=$final_path +# Download, check integrity, uncompress and patch the source from app.src +ln -s /usr/share/zabbix "$final_path" #================================================= # NGINX CONFIGURATION @@ -157,21 +113,55 @@ ynh_add_nginx_config ynh_script_progression --message="Configuring PHP-FPM..." # Create a dedicated PHP-FPM config -ynh_add_fpm_config +ynh_add_fpm_config --package="$extra_php_dependencies" phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # SPECIFIC SETUP +#================================================= +# IMPORT DEFAULT DATA +#================================================= +ynh_script_progression --message="Import default data in database..." + +export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" +mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" + +zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | $mysqlconn + +convert_ZabbixDB + +#sso integration +$mysqlconn -e "UPDATE \`config\` SET \`http_auth_enabled\` = '1', \`http_login_form\` = '1' WHERE \`config\`.\`configid\` = 1;" + +#admin creation +surname=$(ynh_user_get_info "$admin" lastname) +name=$(ynh_user_get_info "$admin" firstname) + +$mysqlconn -e "INSERT INTO \`users\` (\`userid\`,\`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES (3,'$admin', '$admin', '$admin', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$language', '30s', 3, 'default', 0, '', 0, 50);" +$mysqlconn -e "INSERT INTO \`users_groups\` (\`id\`, \`usrgrpid\`, \`userid\`) VALUES (5, 7, 3);" + +#users creation in zabbix database +i=4 +for user in $(ynh_user_list); +do + if [ "$user" != "$admin" ];then + surname=$(ynh_user_get_info "$user" lastname) + name=$(ynh_user_get_info "$user" firstname) + $mysqlconn -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ($i,'$user', '$name', '$surname', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$language', '30s', 1, 'default', 0, '', 0, 50);" + i=$((i+1)) + fi +done + +disable_guest_user + +set_mediatype_default_yunohost + #================================================= # ADD A CONFIGURATION #================================================= ynh_script_progression --message="Adding a configuration file..." -confServerPath=$(find /var/cache/yunohost/ -name "usr_share_zabbix_conf_zabbix.conf.php") -cp --remove-destination "$confServerPath" /usr/share/zabbix/conf/zabbix.conf.php -ynh_replace_string --match_string="db_name" --replace_string="$db_name" --target_file=/usr/share/zabbix/conf/zabbix.conf.php -ynh_replace_string --match_string="db_user" --replace_string="$db_user" --target_file=/usr/share/zabbix/conf/zabbix.conf.php -ynh_replace_string --match_string="db_pwd" --replace_string="$db_pwd" --target_file=/usr/share/zabbix/conf/zabbix.conf.php +ynh_add_config --template="../conf/zabbix.conf.php" --destination="/usr/share/zabbix/conf/zabbix.conf.php" chown -R www-data. /usr/share/zabbix @@ -179,10 +169,6 @@ ynh_replace_string --match_string="DBName=zabbix" --replace_string="DBName=$db_n ynh_replace_string --match_string="DBUser=zabbix" --replace_string="DBUser=$db_user" --target_file=/etc/zabbix/zabbix_server.conf ynh_replace_string --match_string="# DBPassword=" --replace_string="# DBPassword=\nDBPassword=$db_pwd" --target_file=/etc/zabbix/zabbix_server.conf -systemctl enable zabbix-agent --quiet && systemctl restart zabbix-agent -change_timeoutAgent -systemctl enable zabbix-server --quiet && systemctl restart zabbix-server - #================================================= # INSTALL hook to verify if conf file is broken (after an update for example) #================================================= @@ -190,38 +176,12 @@ systemctl enable zabbix-server --quiet && systemctl restart zabbix-server update_initZabbixConf #================================================= -# SETUP APPLICATION WITH CURL +# IMPORT YUNOHOST TEMPLATE #================================================= -ynh_script_progression --message="Setuping application with CURL..." - -# Set the app as temporarily public for curl call -ynh_script_progression --message="Configuring SSOwat..." -# Making the app public for curl -ynh_permission_update --permission="main" --add="visitors" - -#================================================= -# Import Yunohost template -#================================================= -ynh_script_progression --message="Importing last template Yunohost in Zabbix" +ynh_script_progression --message="Importing YunoHost template in Zabbix" import_template -#================================================= -# Link Yunohost template to the ZAbbix Server Host -#================================================= -ynh_script_progression --message="Importing last template Yunohost in Zabbix" - -link_template - -#================================================= -# disable default admin -#================================================= - -disable_admin_user - -# Remove the public access -ynh_permission_update --permission="main" --remove="visitors" - #================================================= # GENERIC FINALIZATION #================================================= @@ -238,6 +198,10 @@ yunohost service add zabbix-agent --description="Management Zabbix agent daemon #================================================= ynh_script_progression --message="Starting a systemd service..." +systemctl enable zabbix-agent --quiet && systemctl restart zabbix-agent +change_timeoutAgent +systemctl enable zabbix-server --quiet && systemctl restart zabbix-server + #test if zabbix server is started check_proc_zabbixagent diff --git a/scripts/remove b/scripts/remove index df69f1f..6d25654 100644 --- a/scripts/remove +++ b/scripts/remove @@ -32,6 +32,20 @@ yunohost service remove snmpd yunohost service remove zabbix-server yunohost service remove zabbix-agent +#================================================= +# STOP AND REMOVE SERVICE +#================================================= +ynh_script_progression --message="Stopping and removing the systemd service..." + +# Remove the dedicated systemd config +timeout 5 systemctl stop zabbix-server || killall zabbix_server +systemctl disable zabbix-server --quiet +killall zabbix_server + +timeout 5 systemctl stop zabbix-agent || killall zabbix_agentd +systemctl disable zabbix-agent --quiet +killall zabbix_agentd + #================================================= # REMOVE THE MYSQL DATABASE #================================================= @@ -40,6 +54,35 @@ ynh_script_progression --message="Removing the MySQL database..." # Remove a database if it exists, along with the associated user ynh_mysql_remove_db --db_user=$db_user --db_name=$db_name +#================================================= +# REMOVE DEPENDENCIES +#================================================= +ynh_script_progression --message="Removing dependencies..." + +# Remove config file detection +delete_initZabbixConf + +DEBIAN_FRONTEND=noninteractive apt-get purge zabbix-release -y + +# Remove metapackage and its dependencies +ynh_remove_app_dependencies + +# Force removing if ynh_remove_app_dependencies not work (old zabbix version) +for zabbix_pkg in $(apt list --installed | grep -Po "\K(zabbix-.*)(?=/)") +do + DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y +done + +remove_zabbix_repo + +#================================================= +# REMOVE APP MAIN DIR +#================================================= +ynh_script_progression --message="Removing app main directory..." + +# Remove the app directory securely +ynh_secure_remove --file="$final_path" + #================================================= # REMOVE NGINX CONFIGURATION #================================================= @@ -56,31 +99,6 @@ ynh_script_progression --message="Removing PHP-FPM configuration..." # Remove the dedicated PHP-FPM config ynh_remove_fpm_config -#================================================= -# REMOVE DEPENDENCIES -#================================================= -ynh_script_progression --message="Removing dependencies..." - -timeout 5 systemctl stop zabbix-server || killall zabbix_server -systemctl disable zabbix-server --quiet -killall zabbix_server - -timeout 5 systemctl stop zabbix-agent || killall zabbix_agentd -systemctl disable zabbix-agent --quiet -killall zabbix_agentd - -#Remove config file detection -delete_initZabbixConf - -DEBIAN_FRONTEND=noninteractive apt-get purge zabbix-release -y -ynh_remove_app_dependencies - -#force removing if ynh_remove_app_dependencies not work (old zabbix version) -for zabbix_pkg in $(apt list --installed | grep -Po "\K(zabbix-.*)(?=/)") -do - DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y -done - #================================================= # SPECIFIC REMOVE #================================================= @@ -88,15 +106,11 @@ done #================================================= ynh_script_progression --message="Removing various files..." -remove_zabbix_repo - -if [ -d /var/www/zabbix ] ;then ynh_secure_remove /var/www/zabbix;fi - # Remove a directory securely -if [ -d /etc/zabbix ] ;then ynh_secure_remove --file="/etc/zabbix";fi +if [ -d /etc/zabbix ] ;then ynh_secure_remove --file="/etc/$app";fi # Remove the log files -if [ -d /var/log/zabbix ] ;then ynh_secure_remove --file="/var/log/zabbix";fi +if [ -d /var/log/zabbix ] ;then ynh_secure_remove --file="/var/log/$app";fi # Remove the pid/socket files if [ -d /run/zabbix ] ;then ynh_secure_remove --file="/run/zabbix";fi @@ -104,19 +118,6 @@ if [ -d /run/zabbix ] ;then ynh_secure_remove --file="/run/zabbix";fi # Remove the sudoers file if [ -f /etc/sudoers.d/zabbix ] ;then ynh_secure_remove --file="/etc/sudoers.d/zabbix";fi - -#REMOVE NONFREE PART PATCH IF NEEDED (snmp-mibs-downloader (non-free) installed in version 1) -nonfreepackagelist=$(dpkg-query -W -f='${Section}\t${Package}\n' | grep ^non-free) -if [ $(echo $nonfreepackagelist | wc -l) -eq 1 ] && [ $(echo $nonfreepackagelist | grep -c "snmp-mibs-downloader") -eq 1 ] ;then - ynh_print_info --message="Removing snmp-mibs-downloader (non-free package)" - cp /var/lib/dpkg/status{,.$(date "+%m%d%y")} - ynh_replace_string --match_string=" snmp-mibs-downloader," --replace_string="" --target_file=/var/lib/dpkg/status - DEBIAN_FRONTEND=noninteractive apt purge snmp-mibs-downloader -y - if [ -f /etc/apt/sources.list.d/non-free.list ];then - ynh_secure_remove /etc/apt/sources.list.d/non-free.list - fi -fi - #================================================= # GENERIC FINALIZATION #================================================= diff --git a/scripts/restore b/scripts/restore index 1dfff09..96c3d42 100644 --- a/scripts/restore +++ b/scripts/restore @@ -30,7 +30,6 @@ is_public=$(ynh_app_setting_get --app=$app --key=is_public) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) -nonfree=$(ynh_app_setting_get --app=$app --key=nonfree) #================================================= # CHECK IF THE APP CAN BE RESTORED @@ -48,6 +47,13 @@ ynh_script_progression --message="Restoring the NGINX web server configuration.. ynh_restore_file --origin_path="/etc/nginx/conf.d/$domain.d/$app.conf" +#================================================= +# RESTORE THE APP MAIN DIR +#================================================= +ynh_script_progression --message="Restoring the app main directory..." + +ln -s /usr/share/zabbix /var/www/zabbix + #================================================= # RESTORE THE PHP-FPM CONFIGURATION #================================================= @@ -71,9 +77,6 @@ DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen locale-gen -ln -s /usr/share/zabbix /var/www/zabbix -ynh_secure_remove $final_path/conf/zabbix.conf.php - #================================================= # RESTORE THE MYSQL DATABASE #================================================= @@ -81,32 +84,32 @@ ynh_script_progression --message="Restoring the MySQL database..." db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name --db_pwd=$db_pwd -convert_ZabbixDB ynh_mysql_connect_as --user=$db_user --password=$db_pwd --database=$db_name < ./db.sql +convert_ZabbixDB #================================================= # RESTORE VARIOUS FILES #================================================= ynh_script_progression --message="Restoring various files..." -# Restore sudo file -ynh_restore_file --origin_path="/etc/sudoers.d/zabbix" - -ynh_restore_file --origin_path="/usr/share/zabbix/conf/zabbix.conf.php" - +# Restore frontend config +ynh_restore_file --origin_path="$final_path/conf/zabbix.conf.php" chown -R www-data. /usr/share/zabbix - ynh_restore_file --origin_path="/etc/zabbix" ls -Rail "/etc/zabbix" - ynh_restore_file --origin_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" + +# Restore server config +ynh_restore_file --origin_path="/etc/zabbix/zabbix_server.conf" + +# Restore agent config +ynh_restore_file --origin_path="/etc/zabbix/zabbix_agentd.conf" if [ ! -L /etc/zabbix/zabbix_agentd.d ];then - ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d + ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d fi -systemctl enable --quiet zabbix-agent && systemctl restart zabbix-agent -change_timeoutAgent -systemctl enable --quiet zabbix-server && systemctl restart zabbix-server +# Restore sudo file +ynh_restore_file --origin_path="/etc/sudoers.d/zabbix" #================================================= # INTEGRATE SERVICE IN YUNOHOST @@ -122,8 +125,9 @@ yunohost service add zabbix-agent --description="Management Zabbix agent daemon #================================================= ynh_script_progression --message="Starting a systemd service..." -# Reload SSOwat config -yunohost app ssowatconf +systemctl enable --quiet zabbix-agent && systemctl restart zabbix-agent +change_timeoutAgent +systemctl enable --quiet zabbix-server && systemctl restart zabbix-server #test if zabbix server is started check_proc_zabbixagent diff --git a/scripts/upgrade b/scripts/upgrade index 9a14fe2..4e33283 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -12,221 +12,184 @@ source /usr/share/yunohost/helpers #================================================= # LOAD SETTINGS #================================================= +ynh_script_progression --message="Loading installation settings..." app=$YNH_APP_INSTANCE_NAME -trustedversion="4.4-1+stretch" -forceupdate=0 -export domain=$(ynh_app_setting_get "$app" domain) -export path_url=$(ynh_app_setting_get "$app" path) -#admin=$(ynh_app_setting_get "$app" admin) #not used -is_public=$(ynh_app_setting_get "$app" is_public) -final_path=$(ynh_app_setting_get "$app" final_path) -#language=$(ynh_app_setting_get "$app" language) #not used -db_name=$(ynh_app_setting_get "$app" db_name) -db_user=$(ynh_app_setting_get "$app" db_user) -db_pwd=$(ynh_app_setting_get "$app" mysqlpwd) + +domain=$(ynh_app_setting_get --app=$app --key=domain) +path_url=$(ynh_app_setting_get --app=$app --key=path) +is_public=$(ynh_app_setting_get --app=$app --key=is_public) +final_path=$(ynh_app_setting_get --app=$app --key=final_path) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) +db_user=$db_name +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) + +#================================================= +# CHECK VERSION +#================================================= +ynh_script_progression --message="Checking version..." + +upgrade_type=$(ynh_check_app_version_changed) + +#================================================= +# BACKUP BEFORE UPGRADE THEN ACTIVE TRAP +#================================================= +ynh_script_progression --message="Backing up the app before upgrading (may take a while)..." + +# Backup the current version of the app +ynh_backup_before_upgrade +ynh_clean_setup () { + # Restore it if the upgrade fails + ynh_restore_upgradebackup +} +# Exit if an error occurs during the execution of the script +ynh_abort_if_errors + +#================================================= +# STANDARD UPGRADE STEPS +#================================================= +# STOP SYSTEMD SERVICE +#================================================= +ynh_script_progression --message="Stopping a systemd service..." + +yunohost service stop zabbix-server +yunohost service stop zabbix-agent #================================================= # ENSURE DOWNWARD COMPATIBILITY #================================================= - -# Fix is_public as a boolean value -if [ "$is_public" = "Yes" ]; then - ynh_app_setting_set "$app" is_public 1 - is_public=1 -elif [ "$is_public" = "No" ]; then - ynh_app_setting_set "$app" is_public 0 - is_public=0 -fi - -# If db_name doesn't exist, create it -if [ -z "$db_name" ]; then - db_name=$(ynh_sanitize_dbid "$app") - ynh_app_setting_set "$app" db_name "$db_name" -fi - -# If final_path doesn't exist, create it -if [ -z "$final_path" ]; then - final_path=/var/www/$app - ynh_app_setting_set "$app" final_path "$final_path" -fi +ynh_script_progression --message="Ensuring downward compatibility..." export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" -#================================================= -# DISABLED SSOWAT -#================================================= -ynh_print_info "disable SSOWAT temporaly" -ynh_app_setting_set "$app" unprotected_uris "/" -systemctl reload nginx -yunohost app ssowatconf - -#================================================= -# Enable default admin temporaly -#================================================= -enable_admin_user - -#================================================= -# Import Yunohost template -#================================================= -import_template - -#================================================= -# Link Yunohost template to the ZAbbix Server Host -#================================================= -link_template - -#================================================= -# Disable default admin for security issue -#================================================= -disable_admin_user - -#================================================= -# Disable default guest for security issue -#================================================= disable_guest_user #Patch timeout too short for zabbix agent if needed change_timeoutAgent -#patch if zabbix-release installed -if [ "$(dpkg -l zabbix-release 2>/dev/null | wc -l)" -ne 0 ];then - DEBIAN_FRONTEND=noninteractive apt purge zabbix-release -y - install_zabbix_repo -fi - -#patch if zabbix-release has Candidate version but no Installed version -if [ -f "/etc/apt/sources.list.d/zabbix.list" ];then - if [ "$(grep -c "4.2" /etc/apt/sources.list.d/zabbix.list)" -eq 1 ];then - install_zabbix_repo - forceupdate=1 - fi -fi - -#patch to remove old zabbix-client service -if [ ! -z "$(yunohost service status | grep zabbix-client)" ];then - ynh_print_info "remove zabbix-client old service" - yunohost service remove zabbix-client -fi - -#================================================= -# STANDARD UPGRADE STEPS -#================================================= -#REMOVE DUPLICATE LOG ENTRY IN LOGROTATE PATCH IF NEEDED ynh_remove_logrotate -ynh_print_info "Check if new zabbix version is available on repo" -ynh_package_update - -zabbixReleaseInstalledVersion=$(apt-cache policy zabbix-release | sed -n '2p' | grep -Po ".* \K(.*)") - -if [[ "$trustedversion" > "$zabbixReleaseInstalledVersion" ]] || [[ "$forceupdate" == "1" ]] -then - #================================================= - # BACKUP BEFORE UPGRADE THEN ACTIVE TRAP - #================================================= - - # Backup the current version of the app - ynh_backup_before_upgrade - ynh_clean_setup () { - # restore it if the upgrade fails - ynh_restore_upgradebackup - } - # Exit if an error occurs during the execution of the script - ynh_abort_if_errors - -#================================================= -# Migrate legacy permissions to new system -#================================================= -if ynh_legacy_permissions_exists -then +# Cleaning legacy permissions +if ynh_legacy_permissions_exists; then ynh_legacy_permissions_delete_all - - ynh_app_setting_delete --app=$app --key=is_public -fi - - yunohost service stop zabbix-server - yunohost service stop zabbix-agent - - cp -rp /etc/zabbix /tmp/ - cp -p /usr/share/zabbix/conf/zabbix.conf.php /tmp/ - - DEBIAN_FRONTEND=noninteractive apt-mark unhold zabbix-server-mysql zabbix-frontend-php - ynh_package_remove zabbix-server-mysql zabbix-frontend-php - - ynh_print_info "Update zabbix via apt package" - ynh_install_app_dependencies $pkg_dependencies - ynh_secure_remove /usr/share/zabbix/conf/zabbix.conf.php - cp -rpf /tmp/zabbix /etc/ - cp -pf /tmp/zabbix.conf.php /usr/share/zabbix/conf/ - - ynh_secure_remove /tmp/zabbix* - - #If needed. - yunohost service add snmpd -d "Management of SNMP Daemon" - yunohost service add zabbix-server -d "Management Zabbix server daemon : Collect, agregate, compute and notify" - yunohost service add zabbix-agent -d "Management Zabbix agent daemon : send informations about this host to the server" - - yunohost service start zabbix-server - yunohost service start zabbix-agent - - #test if zabbix server is started - check_proc_zabbixagent - - #test if zabbix agent is started - check_proc_zabbixserver - -else - ynh_print_info "No repo update ! (Trusted version)" fi +#================================================= +# NGINX CONFIGURATION +#================================================= +ynh_script_progression --message="Upgrading NGINX web server configuration..." + +# Create a dedicated NGINX config +ynh_add_nginx_config + +#================================================= +# UPGRADE DEPENDENCIES +#================================================= +ynh_script_progression --message="Upgrading dependencies..." + +if [ "$upgrade_type" == "UPGRADE_APP" ] +then + cp -rp /etc/zabbix /tmp/ + cp -p /usr/share/zabbix/conf/zabbix.conf.php /tmp/ + + DEBIAN_FRONTEND=noninteractive apt-mark unhold zabbix-server-mysql zabbix-frontend-php + ynh_package_remove zabbix-server-mysql zabbix-frontend-php + + ynh_script_progression --message="Install Zabbix repository" + install_zabbix_repo + + ynh_print_info "Update zabbix via apt package" + ynh_install_app_dependencies $pkg_dependencies + ynh_secure_remove --file="/usr/share/zabbix/conf/zabbix.conf.php" + cp -rpf /tmp/zabbix /etc/ + cp -pf /tmp/zabbix.conf.php /usr/share/zabbix/conf/ + + ynh_secure_remove --file="/tmp/zabbix*" +fi + +#================================================= +# PHP-FPM CONFIGURATION +#================================================= +ynh_script_progression --message="Upgrading PHP-FPM configuration..." + +# Create a dedicated PHP-FPM config +ynh_add_fpm_config --package="$extra_php_dependencies" + +#================================================= +# SPECIFIC UPGRADE #================================================= # INSTALL hook to verify if conf file is broken (after an update for example) #================================================= + update_initZabbixConf #================================================= # Update db to utf8 #================================================= + convert_ZabbixDB #================================================= # Add settings for yunohost mail server #================================================= + set_mediatype_default_yunohost #================================================= -# Update php-fpm confi +# IMPORT YUNOHOST TEMPLATE #================================================= -ynh_print_info "Update php-fpm config" -# Remove the dedicated php-fpm config -ynh_remove_fpm_config -# Create a dedicated php-fpm config -ynh_add_fpm_config +ynh_script_progression --message="Importing YunoHost template in Zabbix" + +import_template #================================================= -# Update nginx config +# GENERIC FINALIZATION #================================================= -ynh_print_info "Update nginx config" -# Remove the dedicated nginx config -ynh_remove_nginx_config -# Create a dedicated nginx config -ynh_add_nginx_config +# SETUP SSOWAT +#================================================= +ynh_script_progression --message="Configuring permissions..." - -#================================================= -# RE-ENABLE SSOWAT -#================================================= -ynh_print_info "re-enable SSOWAT" -# Make app private if necessary -if [ $is_public -eq 0 ] +# Make app public if necessary +if [ $is_public -eq 1 ] then - # unprotected_uris allows SSO credentials to be passed anyway. - ynh_app_setting_delete "$app" unprotected_uris -else - ynh_app_setting_set "$app" unprotected_uris "/" + # Everyone can access the app. + # The "main" permission is automatically created before the install script. + ynh_permission_update --permission="main" --add="visitors" fi -ynh_add_nginx_config -systemctl reload nginx -yunohost app ssowatconf +#================================================= +# INTEGRATE SERVICE IN YUNOHOST +#================================================= +ynh_script_progression --message="Integrating service in YunoHost..." + +yunohost service add snmpd --description="Management of SNMP Daemon" +yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" + +#================================================= +# START SYSTEMD SERVICE +#================================================= +ynh_script_progression --message="Starting a systemd service..." + +systemctl enable zabbix-agent --quiet && systemctl restart zabbix-agent +change_timeoutAgent +systemctl enable zabbix-server --quiet && systemctl restart zabbix-server + +#test if zabbix server is started +check_proc_zabbixagent + +#test if zabbix agent is started +check_proc_zabbixserver + +#================================================= +# RELOAD NGINX +#================================================= +ynh_script_progression --message="Reloading NGINX web server..." + +ynh_systemd_action --service_name=nginx --action=reload + +#================================================= +# END OF SCRIPT +#================================================= + +ynh_script_progression --message="Upgrade of $app completed" diff --git a/sources/extra_files/app/.gitignore b/sources/extra_files/app/.gitignore deleted file mode 100644 index 783a4ae..0000000 --- a/sources/extra_files/app/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -*~ -*.sw[op] diff --git a/sources/patches/.gitignore b/sources/patches/.gitignore deleted file mode 100644 index 783a4ae..0000000 --- a/sources/patches/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -*~ -*.sw[op] From 7acaca3dbc22b204388d4314d11e508e48d27462 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 13 Aug 2021 04:06:25 +0200 Subject: [PATCH 33/58] more apply example_ynh --- conf/nginx.conf | 4 +- conf/php-fpm.conf | 416 +++++++++++++++++++++++++++++++++++++++++++++- 2 files changed, 416 insertions(+), 4 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 6074650..3b51ed0 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -9,7 +9,6 @@ location __PATH__/ { rewrite ^ https://$server_name$request_uri? permanent; } -### Example PHP configuration (remove it if not used) index index_http.php; # Common parameter to increase upload size limit in conjunction with dedicated php-fpm file @@ -18,7 +17,7 @@ location __PATH__/ { try_files $uri $uri/ index.php; location ~ [^/]\.php(/|$) { fastcgi_split_path_info ^(.+?\.php)(/.*)$; - fastcgi_pass unix:/var/run/php/php7.3-fpm-__NAME__.sock; + fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; fastcgi_index index.php; include fastcgi_params; @@ -26,7 +25,6 @@ location __PATH__/ { fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param SCRIPT_FILENAME $request_filename; } -### End of PHP configuration part # Include SSOWAT user panel. include conf.d/yunohost_panel.conf.inc; diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 28fdf93..14a3eb6 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -1,20 +1,434 @@ +; Start a new pool named 'www'. +; the variable $pool can be used in any directive and will be replaced by the +; pool name ('www' here) [__NAMETOCHANGE__] + +; Per pool prefix +; It only applies on the following directives: +; - 'access.log' +; - 'slowlog' +; - 'listen' (unixsocket) +; - 'chroot' +; - 'chdir' +; - 'php_values' +; - 'php_admin_values' +; When not set, the global prefix (or /usr) applies instead. +; Note: This directive can also be relative to the global prefix. +; Default Value: none +;prefix = /path/to/pools/$pool + +; Unix user/group of processes +; Note: The user is mandatory. If the group is not set, the default user's group +; will be used. user = www-data group = www-data -listen = /var/run/php/php7.3-fpm-__NAMETOCHANGE__.sock + +; The address on which to accept FastCGI requests. +; Valid syntaxes are: +; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on +; a specific port; +; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on +; a specific port; +; 'port' - to listen on a TCP socket to all addresses +; (IPv6 and IPv4-mapped) on a specific port; +; '/path/to/unix/socket' - to listen on a unix socket. +; Note: This value is mandatory. +listen = /var/run/php/php__PHPVERSION__-fpm-__NAMETOCHANGE__.sock + +; Set listen(2) backlog. +; Default Value: 511 (-1 on FreeBSD and OpenBSD) +;listen.backlog = 511 + +; Set permissions for unix socket, if one is used. In Linux, read/write +; permissions must be set in order to allow connections from a web server. Many +; BSD-derived systems allow connections regardless of permissions. +; Default Values: user and group are set as the running user +; mode is set to 0660 listen.owner = www-data listen.group = www-data +;listen.mode = 0660 +; When POSIX Access Control Lists are supported you can set them using +; these options, value is a comma separated list of user/group names. +; When set, listen.owner and listen.group are ignored +;listen.acl_users = +;listen.acl_groups = + +; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. +; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original +; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address +; must be separated by a comma. If this value is left blank, connections will be +; accepted from any ip address. +; Default Value: any +;listen.allowed_clients = 127.0.0.1 + +; Specify the nice(2) priority to apply to the pool processes (only if set) +; The value can vary from -19 (highest priority) to 20 (lower priority) +; Note: - It will only work if the FPM master process is launched as root +; - The pool processes will inherit the master process priority +; unless it specified otherwise +; Default Value: no set +; process.priority = -19 + +; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user +; or group is differrent than the master process user. It allows to create process +; core dump and ptrace the process for the pool user. +; Default Value: no +; process.dumpable = yes + +; Choose how the process manager will control the number of child processes. +; Possible Values: +; static - a fixed number (pm.max_children) of child processes; +; dynamic - the number of child processes are set dynamically based on the +; following directives. With this process management, there will be +; always at least 1 children. +; pm.max_children - the maximum number of children that can +; be alive at the same time. +; pm.start_servers - the number of children created on startup. +; pm.min_spare_servers - the minimum number of children in 'idle' +; state (waiting to process). If the number +; of 'idle' processes is less than this +; number then some children will be created. +; pm.max_spare_servers - the maximum number of children in 'idle' +; state (waiting to process). If the number +; of 'idle' processes is greater than this +; number then some children will be killed. +; ondemand - no children are created at startup. Children will be forked when +; new requests will connect. The following parameter are used: +; pm.max_children - the maximum number of children that +; can be alive at the same time. +; pm.process_idle_timeout - The number of seconds after which +; an idle process will be killed. +; Note: This value is mandatory. pm = dynamic + +; The number of child processes to be created when pm is set to 'static' and the +; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. +; This value sets the limit on the number of simultaneous requests that will be +; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. +; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP +; CGI. The below defaults are based on a server without much resources. Don't +; forget to tweak pm.* to fit your needs. +; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' +; Note: This value is mandatory. pm.max_children = 10 + +; The number of child processes created on startup. +; Note: Used only when pm is set to 'dynamic' +; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2 pm.start_servers = 2 + +; The desired minimum number of idle server processes. +; Note: Used only when pm is set to 'dynamic' +; Note: Mandatory when pm is set to 'dynamic' pm.min_spare_servers = 1 + +; The desired maximum number of idle server processes. +; Note: Used only when pm is set to 'dynamic' +; Note: Mandatory when pm is set to 'dynamic' pm.max_spare_servers = 3 + +; The number of seconds after which an idle process will be killed. +; Note: Used only when pm is set to 'ondemand' +; Default Value: 10s +;pm.process_idle_timeout = 10s; + +; The number of requests each child process should execute before respawning. +; This can be useful to work around memory leaks in 3rd party libraries. For +; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. +; Default Value: 0 pm.max_requests = 500 + +; The URI to view the FPM status page. If this value is not set, no URI will be +; recognized as a status page. It shows the following informations: +; pool - the name of the pool; +; process manager - static, dynamic or ondemand; +; start time - the date and time FPM has started; +; start since - number of seconds since FPM has started; +; accepted conn - the number of request accepted by the pool; +; listen queue - the number of request in the queue of pending +; connections (see backlog in listen(2)); +; max listen queue - the maximum number of requests in the queue +; of pending connections since FPM has started; +; listen queue len - the size of the socket queue of pending connections; +; idle processes - the number of idle processes; +; active processes - the number of active processes; +; total processes - the number of idle + active processes; +; max active processes - the maximum number of active processes since FPM +; has started; +; max children reached - number of times, the process limit has been reached, +; when pm tries to start more children (works only for +; pm 'dynamic' and 'ondemand'); +; Value are updated in real time. +; Example output: +; pool: www +; process manager: static +; start time: 01/Jul/2011:17:53:49 +0200 +; start since: 62636 +; accepted conn: 190460 +; listen queue: 0 +; max listen queue: 1 +; listen queue len: 42 +; idle processes: 4 +; active processes: 11 +; total processes: 15 +; max active processes: 12 +; max children reached: 0 +; +; By default the status page output is formatted as text/plain. Passing either +; 'html', 'xml' or 'json' in the query string will return the corresponding +; output syntax. Example: +; http://www.foo.bar/status +; http://www.foo.bar/status?json +; http://www.foo.bar/status?html +; http://www.foo.bar/status?xml +; +; By default the status page only outputs short status. Passing 'full' in the +; query string will also return status for each pool process. +; Example: +; http://www.foo.bar/status?full +; http://www.foo.bar/status?json&full +; http://www.foo.bar/status?html&full +; http://www.foo.bar/status?xml&full +; The Full status returns for each process: +; pid - the PID of the process; +; state - the state of the process (Idle, Running, ...); +; start time - the date and time the process has started; +; start since - the number of seconds since the process has started; +; requests - the number of requests the process has served; +; request duration - the duration in µs of the requests; +; request method - the request method (GET, POST, ...); +; request URI - the request URI with the query string; +; content length - the content length of the request (only with POST); +; user - the user (PHP_AUTH_USER) (or '-' if not set); +; script - the main script called (or '-' if not set); +; last request cpu - the %cpu the last request consumed +; it's always 0 if the process is not in Idle state +; because CPU calculation is done when the request +; processing has terminated; +; last request memory - the max amount of memory the last request consumed +; it's always 0 if the process is not in Idle state +; because memory calculation is done when the request +; processing has terminated; +; If the process is in Idle state, then informations are related to the +; last request the process has served. Otherwise informations are related to +; the current request being served. +; Example output: +; ************************ +; pid: 31330 +; state: Running +; start time: 01/Jul/2011:17:53:49 +0200 +; start since: 63087 +; requests: 12808 +; request duration: 1250261 +; request method: GET +; request URI: /test_mem.php?N=10000 +; content length: 0 +; user: - +; script: /home/fat/web/docs/php/test_mem.php +; last request cpu: 0.00 +; last request memory: 0 +; +; Note: There is a real-time FPM status monitoring sample web page available +; It's available in: /usr/share/php/7.0/fpm/status.html +; +; Note: The value must start with a leading slash (/). The value can be +; anything, but it may not be a good idea to use the .php extension or it +; may conflict with a real PHP file. +; Default Value: not set +;pm.status_path = /status + +; The ping URI to call the monitoring page of FPM. If this value is not set, no +; URI will be recognized as a ping page. This could be used to test from outside +; that FPM is alive and responding, or to +; - create a graph of FPM availability (rrd or such); +; - remove a server from a group if it is not responding (load balancing); +; - trigger alerts for the operating team (24/7). +; Note: The value must start with a leading slash (/). The value can be +; anything, but it may not be a good idea to use the .php extension or it +; may conflict with a real PHP file. +; Default Value: not set +;ping.path = /ping + +; This directive may be used to customize the response of a ping request. The +; response is formatted as text/plain with a 200 response code. +; Default Value: pong +;ping.response = pong + +; The access log file +; Default: not set +;access.log = log/$pool.access.log + +; The access log format. +; The following syntax is allowed +; %%: the '%' character +; %C: %CPU used by the request +; it can accept the following format: +; - %{user}C for user CPU only +; - %{system}C for system CPU only +; - %{total}C for user + system CPU (default) +; %d: time taken to serve the request +; it can accept the following format: +; - %{seconds}d (default) +; - %{miliseconds}d +; - %{mili}d +; - %{microseconds}d +; - %{micro}d +; %e: an environment variable (same as $_ENV or $_SERVER) +; it must be associated with embraces to specify the name of the env +; variable. Some exemples: +; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e +; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e +; %f: script filename +; %l: content-length of the request (for POST request only) +; %m: request method +; %M: peak of memory allocated by PHP +; it can accept the following format: +; - %{bytes}M (default) +; - %{kilobytes}M +; - %{kilo}M +; - %{megabytes}M +; - %{mega}M +; %n: pool name +; %o: output header +; it must be associated with embraces to specify the name of the header: +; - %{Content-Type}o +; - %{X-Powered-By}o +; - %{Transfert-Encoding}o +; - .... +; %p: PID of the child that serviced the request +; %P: PID of the parent of the child that serviced the request +; %q: the query string +; %Q: the '?' character if query string exists +; %r: the request URI (without the query string, see %q and %Q) +; %R: remote IP address +; %s: status (response code) +; %t: server time the request was received +; it can accept a strftime(3) format: +; %d/%b/%Y:%H:%M:%S %z (default) +; The strftime(3) format must be encapsuled in a %{}t tag +; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t +; %T: time the log has been written (the request has finished) +; it can accept a strftime(3) format: +; %d/%b/%Y:%H:%M:%S %z (default) +; The strftime(3) format must be encapsuled in a %{}t tag +; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t +; %u: remote user +; +; Default: "%R - %u %t \"%m %r\" %s" +;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%" + +; The log file for slow requests +; Default Value: not set +; Note: slowlog is mandatory if request_slowlog_timeout is set slowlog = /var/log/nginx/__NAMETOCHANGE__.slow.log + +; The timeout for serving a single request after which a PHP backtrace will be +; dumped to the 'slowlog' file. A value of '0s' means 'off'. +; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) +; Default Value: 0 request_slowlog_timeout = 5s + +; The timeout for serving a single request after which the worker process will +; be killed. This option should be used when the 'max_execution_time' ini option +; does not stop script execution for some reason. A value of '0' means 'off'. +; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) +; Default Value: 0 request_terminate_timeout = 1d + +; Set open file descriptor rlimit. +; Default Value: system defined value +;rlimit_files = 1024 + +; Set max core size rlimit. +; Possible Values: 'unlimited' or an integer greater or equal to 0 +; Default Value: system defined value +;rlimit_core = 0 + +; Chroot to this directory at the start. This value must be defined as an +; absolute path. When this value is not set, chroot is not used. +; Note: you can prefix with '$prefix' to chroot to the pool prefix or one +; of its subdirectories. If the pool prefix is not set, the global prefix +; will be used instead. +; Note: chrooting is a great security feature and should be used whenever +; possible. However, all PHP paths will be relative to the chroot +; (error_log, sessions.save_path, ...). +; Default Value: not set +;chroot = + +; Chdir to this directory at the start. +; Note: relative path can be used. +; Default Value: current directory or / when chroot chdir = __FINALPATH__ + +; Redirect worker stdout and stderr into main error log. If not set, stdout and +; stderr will be redirected to /dev/null according to FastCGI specs. +; Note: on highloaded environement, this can cause some delay in the page +; process time (several ms). +; Default Value: no catch_workers_output = yes + +; Clear environment in FPM workers +; Prevents arbitrary environment variables from reaching FPM worker processes +; by clearing the environment in workers before env vars specified in this +; pool configuration are added. +; Setting to "no" will make all environment variables available to PHP code +; via getenv(), $_ENV and $_SERVER. +; Default Value: yes +;clear_env = no + +; Limits the extensions of the main script FPM will allow to parse. This can +; prevent configuration mistakes on the web server side. You should only limit +; FPM to .php extensions to prevent malicious users to use other extensions to +; execute php code. +; Note: set an empty value to allow all extensions. +; Default Value: .php +;security.limit_extensions = .php .php3 .php4 .php5 .php7 + +; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from +; the current environment. +; Default Value: clean env +;env[HOSTNAME] = $HOSTNAME +;env[PATH] = /usr/local/bin:/usr/bin:/bin +;env[TMP] = /tmp +;env[TMPDIR] = /tmp +;env[TEMP] = /tmp + +; Additional php.ini defines, specific to this pool of workers. These settings +; overwrite the values previously defined in the php.ini. The directives are the +; same as the PHP SAPI: +; php_value/php_flag - you can set classic ini defines which can +; be overwritten from PHP call 'ini_set'. +; php_admin_value/php_admin_flag - these directives won't be overwritten by +; PHP call 'ini_set' +; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. + +; Defining 'extension' will load the corresponding shared extension from +; extension_dir. Defining 'disable_functions' or 'disable_classes' will not +; overwrite previously defined php.ini values, but will append the new value +; instead. + +; Note: path INI options can be relative and will be expanded with the prefix +; (pool, global or /usr) + +; Default Value: nothing is defined by default except the values in php.ini and +; specified at startup with the -d argument +;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com +;php_flag[display_errors] = off +;php_admin_value[error_log] = /var/log/fpm-php.www.log +;php_admin_flag[log_errors] = on +;php_admin_value[memory_limit] = 32M + +; Common values to change to increase file upload limit +; php_admin_value[upload_max_filesize] = 50M +; php_admin_value[post_max_size] = 50M +; php_admin_flag[mail.add_x_header] = Off + +; Other common parameters +; php_admin_value[max_execution_time] = 600 +; php_admin_value[max_input_time] = 300 +; php_admin_value[memory_limit] = 256M +; php_admin_flag[short_open_tag] = On + php_value[post_max_size] = 16M php_value[max_execution_time] = 300 php_value[max_input_time] = 300 From af15cb952fe79d85f3796eae68bfb78b4d362fc8 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sat, 14 Aug 2021 18:54:32 +0200 Subject: [PATCH 34/58] Update check_process --- check_process | 12 ++---------- 1 file changed, 2 insertions(+), 10 deletions(-) diff --git a/check_process b/check_process index 6589238..a472206 100644 --- a/check_process +++ b/check_process @@ -1,14 +1,9 @@ -# See here for more information -# https://github.com/YunoHost/package_check#syntax-check_process-file - -# Move this file from check_process.default to check_process when you have filled it. - ;; Test complet ; Manifest domain="domain.tld" (DOMAIN) path="/path" (PATH) admin="john" (USER) - language="fr" + language="fr_FR" is_public=1 (PUBLIC|public=1|private=0) password="pass" port="666" (PORT) @@ -20,14 +15,11 @@ setup_private=1 setup_public=1 upgrade=1 + upgrade=1 from_commit=5cd502c98fdf4731938503541cf64a59aa43eda7 backup_restore=1 multi_instance=0 - incorrect_path=1 port_already_use=1 change_url=1 -;;; Levels -# https://framagit.org/Mickael-Martin/zabbix_ynh/blob/master/scripts/install#L156 - Level 8=auto ;;; Options Email= Notification=none From 69e07727dcd13c3c7f554f3a6fb2c8eb3c69e15e Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sat, 14 Aug 2021 23:05:01 +0200 Subject: [PATCH 35/58] Update php-fpm.conf --- conf/php-fpm.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 14a3eb6..647e660 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -195,7 +195,7 @@ pm.max_requests = 500 ; start time - the date and time the process has started; ; start since - the number of seconds since the process has started; ; requests - the number of requests the process has served; -; request duration - the duration in µs of the requests; +; request duration - the duration in µs of the requests; ; request method - the request method (GET, POST, ...); ; request URI - the request URI with the query string; ; content length - the content length of the request (only with POST); @@ -433,4 +433,4 @@ php_value[post_max_size] = 16M php_value[max_execution_time] = 300 php_value[max_input_time] = 300 php_value[open_basedir] = /var/www/zabbix/:/usr/share/fonts/:/tmp:/etc/zabbix/web -php_value[date.timezone] = Europe/Paris \ No newline at end of file +php_value[date.timezone] = Europe/Paris From 73b4cdf3fa61b6e97a853131c5132be4cc606773 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sat, 14 Aug 2021 23:07:29 +0200 Subject: [PATCH 36/58] Update remove --- scripts/remove | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/scripts/remove b/scripts/remove index 6d25654..9b5910b 100644 --- a/scripts/remove +++ b/scripts/remove @@ -38,13 +38,13 @@ yunohost service remove zabbix-agent ynh_script_progression --message="Stopping and removing the systemd service..." # Remove the dedicated systemd config -timeout 5 systemctl stop zabbix-server || killall zabbix_server +timeout 5 systemctl stop zabbix-server || killall zabbix-server systemctl disable zabbix-server --quiet -killall zabbix_server +killall zabbix-server -timeout 5 systemctl stop zabbix-agent || killall zabbix_agentd +timeout 5 systemctl stop zabbix-agent || killall zabbix-agentd systemctl disable zabbix-agent --quiet -killall zabbix_agentd +killall zabbix-agentd #================================================= # REMOVE THE MYSQL DATABASE From 47cfc1c721c450c1c07e4b36f91941acfa08e1b8 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sun, 15 Aug 2021 14:40:30 +0200 Subject: [PATCH 37/58] Reorder steps --- scripts/remove | 42 +++++++++++++++++++++--------------------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/scripts/remove b/scripts/remove index 9b5910b..bc9d73f 100644 --- a/scripts/remove +++ b/scripts/remove @@ -54,27 +54,6 @@ ynh_script_progression --message="Removing the MySQL database..." # Remove a database if it exists, along with the associated user ynh_mysql_remove_db --db_user=$db_user --db_name=$db_name -#================================================= -# REMOVE DEPENDENCIES -#================================================= -ynh_script_progression --message="Removing dependencies..." - -# Remove config file detection -delete_initZabbixConf - -DEBIAN_FRONTEND=noninteractive apt-get purge zabbix-release -y - -# Remove metapackage and its dependencies -ynh_remove_app_dependencies - -# Force removing if ynh_remove_app_dependencies not work (old zabbix version) -for zabbix_pkg in $(apt list --installed | grep -Po "\K(zabbix-.*)(?=/)") -do - DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y -done - -remove_zabbix_repo - #================================================= # REMOVE APP MAIN DIR #================================================= @@ -99,6 +78,27 @@ ynh_script_progression --message="Removing PHP-FPM configuration..." # Remove the dedicated PHP-FPM config ynh_remove_fpm_config +#================================================= +# REMOVE DEPENDENCIES +#================================================= +ynh_script_progression --message="Removing dependencies..." + +# Remove config file detection +delete_initZabbixConf + +DEBIAN_FRONTEND=noninteractive apt-get purge zabbix-release -y + +# Remove metapackage and its dependencies +ynh_remove_app_dependencies + +# Force removing if ynh_remove_app_dependencies not work (old zabbix version) +for zabbix_pkg in $(apt list --installed | grep -Po "\K(zabbix-.*)(?=/)") +do + DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y +done + +remove_zabbix_repo + #================================================= # SPECIFIC REMOVE #================================================= From 07b3839c76beb41fc2af21c42befe67ea3d032a3 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sun, 15 Aug 2021 16:18:21 +0200 Subject: [PATCH 38/58] Fix rights --- scripts/install | 4 ++++ scripts/restore | 8 ++++++-- scripts/upgrade | 16 ++++++++++++++++ 3 files changed, 26 insertions(+), 2 deletions(-) diff --git a/scripts/install b/scripts/install index f0cba25..54ec914 100644 --- a/scripts/install +++ b/scripts/install @@ -99,6 +99,10 @@ ynh_app_setting_set --app=$app --key=final_path --value=$final_path # Download, check integrity, uncompress and patch the source from app.src ln -s /usr/share/zabbix "$final_path" +chmod 750 "$final_path" +chmod -R o-rwx "$final_path" +chown -R $app:www-data "$final_path" + #================================================= # NGINX CONFIGURATION #================================================= diff --git a/scripts/restore b/scripts/restore index 96c3d42..0b6bb27 100644 --- a/scripts/restore +++ b/scripts/restore @@ -36,7 +36,7 @@ phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= ynh_script_progression --message="Validating restoration parameters..." -ynh_secure_remove $final_path +ynh_secure_remove --file="$final_path" #================================================= # STANDARD RESTORATION STEPS @@ -52,7 +52,11 @@ ynh_restore_file --origin_path="/etc/nginx/conf.d/$domain.d/$app.conf" #================================================= ynh_script_progression --message="Restoring the app main directory..." -ln -s /usr/share/zabbix /var/www/zabbix +ln -s /usr/share/zabbix "$final_path" + +chmod 750 "$final_path" +chmod -R o-rwx "$final_path" +chown -R $app:www-data "$final_path" #================================================= # RESTORE THE PHP-FPM CONFIGURATION diff --git a/scripts/upgrade b/scripts/upgrade index 4e33283..95dc2a6 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -74,6 +74,22 @@ if ynh_legacy_permissions_exists; then ynh_legacy_permissions_delete_all fi +#================================================= +# DOWNLOAD, CHECK AND UNPACK SOURCE +#================================================= + +if [ "$upgrade_type" == "UPGRADE_APP" ] +then + ynh_script_progression --message="Upgrading source files..." + + # Download, check integrity, uncompress and patch the source from app.src + ln -s /usr/share/zabbix "$final_path" +fi + +chmod 750 "$final_path" +chmod -R o-rwx "$final_path" +chown -R $app:www-data "$final_path" + #================================================= # NGINX CONFIGURATION #================================================= From dba4f23f0e0c532fc17d8d925ed6d80615422f58 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Sun, 15 Aug 2021 18:12:40 +0200 Subject: [PATCH 39/58] Fix backup --- scripts/backup | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/backup b/scripts/backup index 325c5a8..be410f2 100644 --- a/scripts/backup +++ b/scripts/backup @@ -30,6 +30,7 @@ app=$YNH_APP_INSTANCE_NAME final_path=$(ynh_app_setting_get --app=$app --key=final_path) domain=$(ynh_app_setting_get --app=$app --key=domain) db_name=$(ynh_app_setting_get --app=$app --key=db_name) +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # DECLARE DATA AND CONF FILES TO BACKUP From 35c345d7d05edb1f8e2fed32c86b747bb4f87ed0 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Mon, 16 Aug 2021 21:25:48 +0200 Subject: [PATCH 40/58] Fix restore --- scripts/restore | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/scripts/restore b/scripts/restore index 0b6bb27..d19d814 100644 --- a/scripts/restore +++ b/scripts/restore @@ -24,9 +24,8 @@ ynh_script_progression --message="Loading installation settings..." app=$YNH_APP_INSTANCE_NAME -domain=$(ynh_app_setting_get $app --key=domain) +domain=$(ynh_app_setting_get --app=$app --key=domain) final_path=$(ynh_app_setting_get --app=$app --key=final_path) -is_public=$(ynh_app_setting_get --app=$app --key=is_public) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) From 7d7e1d2750958053930a652b66630568a3fd33cb Mon Sep 17 00:00:00 2001 From: yalh76 Date: Mon, 16 Aug 2021 21:27:39 +0200 Subject: [PATCH 41/58] Update upgrade --- scripts/upgrade | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/upgrade b/scripts/upgrade index 95dc2a6..8f13728 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -22,6 +22,7 @@ is_public=$(ynh_app_setting_get --app=$app --key=is_public) final_path=$(ynh_app_setting_get --app=$app --key=final_path) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name +db_pwd=$(ynh_app_setting_get --app=$app --key=db_pwd) phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= From 5b620e769768268a7d7be13ce78e582b8c070919 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 17 Aug 2021 01:29:13 +0200 Subject: [PATCH 42/58] Fix remove --- scripts/remove | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/remove b/scripts/remove index bc9d73f..586838e 100644 --- a/scripts/remove +++ b/scripts/remove @@ -20,6 +20,7 @@ domain=$(ynh_app_setting_get --app=$app --key=domain) port=$(ynh_app_setting_get --app=$app --key=port) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name +final_path=$(ynh_app_setting_get --app=$app --key=final_path) #================================================= # STANDARD REMOVE From 6e233aca1effac637ae31a5b6e42240e08589aad Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 17 Aug 2021 01:45:43 +0200 Subject: [PATCH 43/58] Fix missing db_pwd --- scripts/upgrade | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/upgrade b/scripts/upgrade index 8f13728..aefdd77 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -22,7 +22,7 @@ is_public=$(ynh_app_setting_get --app=$app --key=is_public) final_path=$(ynh_app_setting_get --app=$app --key=final_path) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name -db_pwd=$(ynh_app_setting_get --app=$app --key=db_pwd) +db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= From 5c1c58b64c2919dec1f372d8b3a92ca750983f11 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 17 Aug 2021 09:25:23 +0200 Subject: [PATCH 44/58] FIx chmod: cannot operate on dangling symlink '/var/www/zabbix' --- scripts/install | 4 ---- scripts/restore | 4 ---- scripts/upgrade | 4 ---- 3 files changed, 12 deletions(-) diff --git a/scripts/install b/scripts/install index 54ec914..f0cba25 100644 --- a/scripts/install +++ b/scripts/install @@ -99,10 +99,6 @@ ynh_app_setting_set --app=$app --key=final_path --value=$final_path # Download, check integrity, uncompress and patch the source from app.src ln -s /usr/share/zabbix "$final_path" -chmod 750 "$final_path" -chmod -R o-rwx "$final_path" -chown -R $app:www-data "$final_path" - #================================================= # NGINX CONFIGURATION #================================================= diff --git a/scripts/restore b/scripts/restore index d19d814..e3f0315 100644 --- a/scripts/restore +++ b/scripts/restore @@ -53,10 +53,6 @@ ynh_script_progression --message="Restoring the app main directory..." ln -s /usr/share/zabbix "$final_path" -chmod 750 "$final_path" -chmod -R o-rwx "$final_path" -chown -R $app:www-data "$final_path" - #================================================= # RESTORE THE PHP-FPM CONFIGURATION #================================================= diff --git a/scripts/upgrade b/scripts/upgrade index aefdd77..7ca7718 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -87,10 +87,6 @@ then ln -s /usr/share/zabbix "$final_path" fi -chmod 750 "$final_path" -chmod -R o-rwx "$final_path" -chown -R $app:www-data "$final_path" - #================================================= # NGINX CONFIGURATION #================================================= From 4475774adb48dcadf948e179f39100ffc4d918d3 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 17 Aug 2021 09:25:28 +0200 Subject: [PATCH 45/58] Update check_process --- check_process | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/check_process b/check_process index a472206..9156b21 100644 --- a/check_process +++ b/check_process @@ -23,3 +23,7 @@ ;;; Options Email= Notification=none +;;; Upgrade options + ; commit=5cd502c98fdf4731938503541cf64a59aa43eda7 + name=Name and date of the commit. + manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=666& From d40736b382bbf1dc3fff49b0c4cfeebef32394f2 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 20 Aug 2021 02:58:40 +0200 Subject: [PATCH 46/58] Apply example_ynh --- LICENSE | 896 ++++++------------ README.md | 60 +- README_fr.md | 53 ++ check_process | 8 +- ...0update_force_init_zabbix_frontend_config} | 0 conf/{zabbix => etc_sudoers.d_zabbix} | 0 conf/etc_zabbix_web_init.zabbix.conf.php.sh | 34 + ...onf.php => etc_zabbix_web_zabbix.conf.php} | 0 ...abbix_zabbix_agentd.d_userP_yunohost.conf} | 0 ...=> etc_zabbix_zabbix_agentd.d_yunohost.sh} | 15 +- conf/init.zabbix.conf.php.sh | 30 - conf/php-fpm.conf | 18 +- doc/.gitkeep | 0 doc/DISCLAIMER.md | 8 + doc/DISCLAIMER_fr.md | 8 + doc/screenshots/.gitkeep | 0 doc/screenshots/screenshot1.png | Bin 0 -> 240579 bytes hooks/post_user_create | 20 +- hooks/post_user_delete | 12 +- manifest.json | 20 +- scripts/_common.sh | 410 ++++---- scripts/backup | 3 +- scripts/change_url | 1 + scripts/install | 94 +- scripts/remove | 94 +- scripts/restore | 108 ++- scripts/upgrade | 220 +++-- 27 files changed, 1042 insertions(+), 1070 deletions(-) create mode 100644 README_fr.md rename conf/{100update_force_init_zabbix_frontend_config => etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config} (100%) rename conf/{zabbix => etc_sudoers.d_zabbix} (100%) create mode 100644 conf/etc_zabbix_web_init.zabbix.conf.php.sh rename conf/{zabbix.conf.php => etc_zabbix_web_zabbix.conf.php} (100%) rename conf/{userP_yunohost.conf => etc_zabbix_zabbix_agentd.d_userP_yunohost.conf} (100%) rename conf/{yunohost.sh => etc_zabbix_zabbix_agentd.d_yunohost.sh} (89%) delete mode 100644 conf/init.zabbix.conf.php.sh create mode 100644 doc/.gitkeep create mode 100644 doc/DISCLAIMER.md create mode 100644 doc/DISCLAIMER_fr.md create mode 100644 doc/screenshots/.gitkeep create mode 100644 doc/screenshots/screenshot1.png diff --git a/LICENSE b/LICENSE index 6fae7d0..c1002d5 100644 --- a/LICENSE +++ b/LICENSE @@ -1,624 +1,286 @@ - GNU AFFERO GENERAL PUBLIC LICENSE - Version 3, 19 November 2007 ! - Copyright (C) 2007 Free Software Foundation, Inc. + GNU GENERAL PUBLIC LICENSE + Version 2, June 1991 + + Copyright (C) 1989, 1991 Free Software Foundation, Inc. + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. - Preamble + Preamble - The GNU Affero General Public License is a free, copyleft license for -software and other kinds of works, specifically designed to ensure -cooperation with the community in the case of network server software. - - The licenses for most software and other practical works are designed -to take away your freedom to share and change the works. By contrast, -our General Public Licenses are intended to guarantee your freedom to -share and change all versions of a program--to make sure it remains free -software for all its users. + The licenses for most software are designed to take away your +freedom to share and change it. By contrast, the GNU General Public +License is intended to guarantee your freedom to share and change free +software--to make sure the software is free for all its users. This +General Public License applies to most of the Free Software +Foundation's software and to any other program whose authors commit to +using it. (Some other Free Software Foundation software is covered by +the GNU Library General Public License instead.) You can apply it to +your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for -them if you wish), that you receive source code or can get it if you -want it, that you can change the software or use pieces of it in new -free programs, and that you know you can do these things. +this service if you wish), that you receive source code or can get it +if you want it, that you can change the software or use pieces of it +in new free programs; and that you know you can do these things. - Developers that use our General Public Licenses protect your rights -with two steps: (1) assert copyright on the software, and (2) offer -you this License which gives you legal permission to copy, distribute -and/or modify the software. + To protect your rights, we need to make restrictions that forbid +anyone to deny you these rights or to ask you to surrender the rights. +These restrictions translate to certain responsibilities for you if you +distribute copies of the software, or if you modify it. - A secondary benefit of defending all users' freedom is that -improvements made in alternate versions of the program, if they -receive widespread use, become available for other developers to -incorporate. Many developers of free software are heartened and -encouraged by the resulting cooperation. However, in the case of -software used on network servers, this result may fail to come about. -The GNU General Public License permits making a modified version and -letting the public access it on a server without ever releasing its -source code to the public. + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must give the recipients all the rights that +you have. You must make sure that they, too, receive or can get the +source code. And you must show them these terms so they know their +rights. - The GNU Affero General Public License is designed specifically to -ensure that, in such cases, the modified source code becomes available -to the community. It requires the operator of a network server to -provide the source code of the modified version running there to the -users of that server. Therefore, public use of a modified version, on -a publicly accessible server, gives the public access to the source -code of the modified version. + We protect your rights with two steps: (1) copyright the software, and +(2) offer you this license which gives you legal permission to copy, +distribute and/or modify the software. - An older license, called the Affero General Public License and -published by Affero, was designed to accomplish similar goals. This is -a different license, not a version of the Affero GPL, but Affero has -released a new version of the Affero GPL which permits relicensing under -this license. + Also, for each author's protection and ours, we want to make certain +that everyone understands that there is no warranty for this free +software. If the software is modified by someone else and passed on, we +want its recipients to know that what they have is not the original, so +that any problems introduced by others will not reflect on the original +authors' reputations. + + Finally, any free program is threatened constantly by software +patents. We wish to avoid the danger that redistributors of a free +program will individually obtain patent licenses, in effect making the +program proprietary. To prevent this, we have made it clear that any +patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. - TERMS AND CONDITIONS - - 0. Definitions. - - "This License" refers to version 3 of the GNU Affero General Public License. - - "Copyright" also means copyright-like laws that apply to other kinds of -works, such as semiconductor masks. - - "The Program" refers to any copyrightable work licensed under this -License. Each licensee is addressed as "you". "Licensees" and -"recipients" may be individuals or organizations. - - To "modify" a work means to copy from or adapt all or part of the work -in a fashion requiring copyright permission, other than the making of an -exact copy. The resulting work is called a "modified version" of the -earlier work or a work "based on" the earlier work. - - A "covered work" means either the unmodified Program or a work based -on the Program. - - To "propagate" a work means to do anything with it that, without -permission, would make you directly or secondarily liable for -infringement under applicable copyright law, except executing it on a -computer or modifying a private copy. Propagation includes copying, -distribution (with or without modification), making available to the -public, and in some countries other activities as well. - - To "convey" a work means any kind of propagation that enables other -parties to make or receive copies. Mere interaction with a user through -a computer network, with no transfer of a copy, is not conveying. - - An interactive user interface displays "Appropriate Legal Notices" -to the extent that it includes a convenient and prominently visible -feature that (1) displays an appropriate copyright notice, and (2) -tells the user that there is no warranty for the work (except to the -extent that warranties are provided), that licensees may convey the -work under this License, and how to view a copy of this License. If -the interface presents a list of user commands or options, such as a -menu, a prominent item in the list meets this criterion. - - 1. Source Code. - - The "source code" for a work means the preferred form of the work -for making modifications to it. "Object code" means any non-source -form of a work. - - A "Standard Interface" means an interface that either is an official -standard defined by a recognized standards body, or, in the case of -interfaces specified for a particular programming language, one that -is widely used among developers working in that language. - - The "System Libraries" of an executable work include anything, other -than the work as a whole, that (a) is included in the normal form of -packaging a Major Component, but which is not part of that Major -Component, and (b) serves only to enable use of the work with that -Major Component, or to implement a Standard Interface for which an -implementation is available to the public in source code form. A -"Major Component", in this context, means a major essential component -(kernel, window system, and so on) of the specific operating system -(if any) on which the executable work runs, or a compiler used to -produce the work, or an object code interpreter used to run it. - - The "Corresponding Source" for a work in object code form means all -the source code needed to generate, install, and (for an executable -work) run the object code and to modify the work, including scripts to -control those activities. However, it does not include the work's -System Libraries, or general-purpose tools or generally available free -programs which are used unmodified in performing those activities but -which are not part of the work. For example, Corresponding Source -includes interface definition files associated with source files for -the work, and the source code for shared libraries and dynamically -linked subprograms that the work is specifically designed to require, -such as by intimate data communication or control flow between those -subprograms and other parts of the work. - - The Corresponding Source need not include anything that users -can regenerate automatically from other parts of the Corresponding -Source. - - The Corresponding Source for a work in source code form is that -same work. - - 2. Basic Permissions. - - All rights granted under this License are granted for the term of -copyright on the Program, and are irrevocable provided the stated -conditions are met. This License explicitly affirms your unlimited -permission to run the unmodified Program. The output from running a -covered work is covered by this License only if the output, given its -content, constitutes a covered work. This License acknowledges your -rights of fair use or other equivalent, as provided by copyright law. - - You may make, run and propagate covered works that you do not -convey, without conditions so long as your license otherwise remains -in force. You may convey covered works to others for the sole purpose -of having them make modifications exclusively for you, or provide you -with facilities for running those works, provided that you comply with -the terms of this License in conveying all material for which you do -not control copyright. Those thus making or running the covered works -for you must do so exclusively on your behalf, under your direction -and control, on terms that prohibit them from making any copies of -your copyrighted material outside their relationship with you. - - Conveying under any other circumstances is permitted solely under -the conditions stated below. Sublicensing is not allowed; section 10 -makes it unnecessary. - - 3. Protecting Users' Legal Rights From Anti-Circumvention Law. - - No covered work shall be deemed part of an effective technological -measure under any applicable law fulfilling obligations under article -11 of the WIPO copyright treaty adopted on 20 December 1996, or -similar laws prohibiting or restricting circumvention of such -measures. - - When you convey a covered work, you waive any legal power to forbid -circumvention of technological measures to the extent such circumvention -is effected by exercising rights under this License with respect to -the covered work, and you disclaim any intention to limit operation or -modification of the work as a means of enforcing, against the work's -users, your or third parties' legal rights to forbid circumvention of -technological measures. - - 4. Conveying Verbatim Copies. - - You may convey verbatim copies of the Program's source code as you -receive it, in any medium, provided that you conspicuously and -appropriately publish on each copy an appropriate copyright notice; -keep intact all notices stating that this License and any -non-permissive terms added in accord with section 7 apply to the code; -keep intact all notices of the absence of any warranty; and give all -recipients a copy of this License along with the Program. - - You may charge any price or no price for each copy that you convey, -and you may offer support or warranty protection for a fee. - - 5. Conveying Modified Source Versions. - - You may convey a work based on the Program, or the modifications to -produce it from the Program, in the form of source code under the -terms of section 4, provided that you also meet all of these conditions: - - a) The work must carry prominent notices stating that you modified - it, and giving a relevant date. - - b) The work must carry prominent notices stating that it is - released under this License and any conditions added under section - 7. This requirement modifies the requirement in section 4 to - "keep intact all notices". - - c) You must license the entire work, as a whole, under this - License to anyone who comes into possession of a copy. This - License will therefore apply, along with any applicable section 7 - additional terms, to the whole of the work, and all its parts, - regardless of how they are packaged. This License gives no - permission to license the work in any other way, but it does not - invalidate such permission if you have separately received it. - - d) If the work has interactive user interfaces, each must display - Appropriate Legal Notices; however, if the Program has interactive - interfaces that do not display Appropriate Legal Notices, your - work need not make them do so. - - A compilation of a covered work with other separate and independent -works, which are not by their nature extensions of the covered work, -and which are not combined with it such as to form a larger program, -in or on a volume of a storage or distribution medium, is called an -"aggregate" if the compilation and its resulting copyright are not -used to limit the access or legal rights of the compilation's users -beyond what the individual works permit. Inclusion of a covered work -in an aggregate does not cause this License to apply to the other -parts of the aggregate. - - 6. Conveying Non-Source Forms. - - You may convey a covered work in object code form under the terms -of sections 4 and 5, provided that you also convey the -machine-readable Corresponding Source under the terms of this License, -in one of these ways: - - a) Convey the object code in, or embodied in, a physical product - (including a physical distribution medium), accompanied by the - Corresponding Source fixed on a durable physical medium - customarily used for software interchange. - - b) Convey the object code in, or embodied in, a physical product - (including a physical distribution medium), accompanied by a - written offer, valid for at least three years and valid for as - long as you offer spare parts or customer support for that product - model, to give anyone who possesses the object code either (1) a - copy of the Corresponding Source for all the software in the - product that is covered by this License, on a durable physical - medium customarily used for software interchange, for a price no - more than your reasonable cost of physically performing this - conveying of source, or (2) access to copy the - Corresponding Source from a network server at no charge. - - c) Convey individual copies of the object code with a copy of the - written offer to provide the Corresponding Source. This - alternative is allowed only occasionally and noncommercially, and - only if you received the object code with such an offer, in accord - with subsection 6b. - - d) Convey the object code by offering access from a designated - place (gratis or for a charge), and offer equivalent access to the - Corresponding Source in the same way through the same place at no - further charge. You need not require recipients to copy the - Corresponding Source along with the object code. If the place to - copy the object code is a network server, the Corresponding Source - may be on a different server (operated by you or a third party) - that supports equivalent copying facilities, provided you maintain - clear directions next to the object code saying where to find the - Corresponding Source. Regardless of what server hosts the - Corresponding Source, you remain obligated to ensure that it is - available for as long as needed to satisfy these requirements. - - e) Convey the object code using peer-to-peer transmission, provided - you inform other peers where the object code and Corresponding - Source of the work are being offered to the general public at no - charge under subsection 6d. - - A separable portion of the object code, whose source code is excluded -from the Corresponding Source as a System Library, need not be -included in conveying the object code work. - - A "User Product" is either (1) a "consumer product", which means any -tangible personal property which is normally used for personal, family, -or household purposes, or (2) anything designed or sold for incorporation -into a dwelling. In determining whether a product is a consumer product, -doubtful cases shall be resolved in favor of coverage. For a particular -product received by a particular user, "normally used" refers to a -typical or common use of that class of product, regardless of the status -of the particular user or of the way in which the particular user -actually uses, or expects or is expected to use, the product. A product -is a consumer product regardless of whether the product has substantial -commercial, industrial or non-consumer uses, unless such uses represent -the only significant mode of use of the product. - - "Installation Information" for a User Product means any methods, -procedures, authorization keys, or other information required to install -and execute modified versions of a covered work in that User Product from -a modified version of its Corresponding Source. The information must -suffice to ensure that the continued functioning of the modified object -code is in no case prevented or interfered with solely because -modification has been made. - - If you convey an object code work under this section in, or with, or -specifically for use in, a User Product, and the conveying occurs as -part of a transaction in which the right of possession and use of the -User Product is transferred to the recipient in perpetuity or for a -fixed term (regardless of how the transaction is characterized), the -Corresponding Source conveyed under this section must be accompanied -by the Installation Information. But this requirement does not apply -if neither you nor any third party retains the ability to install -modified object code on the User Product (for example, the work has -been installed in ROM). - - The requirement to provide Installation Information does not include a -requirement to continue to provide support service, warranty, or updates -for a work that has been modified or installed by the recipient, or for -the User Product in which it has been modified or installed. Access to a -network may be denied when the modification itself materially and -adversely affects the operation of the network or violates the rules and -protocols for communication across the network. - - Corresponding Source conveyed, and Installation Information provided, -in accord with this section must be in a format that is publicly -documented (and with an implementation available to the public in -source code form), and must require no special password or key for -unpacking, reading or copying. - - 7. Additional Terms. - - "Additional permissions" are terms that supplement the terms of this -License by making exceptions from one or more of its conditions. -Additional permissions that are applicable to the entire Program shall -be treated as though they were included in this License, to the extent -that they are valid under applicable law. If additional permissions -apply only to part of the Program, that part may be used separately -under those permissions, but the entire Program remains governed by -this License without regard to the additional permissions. - - When you convey a copy of a covered work, you may at your option -remove any additional permissions from that copy, or from any part of -it. (Additional permissions may be written to require their own -removal in certain cases when you modify the work.) You may place -additional permissions on material, added by you to a covered work, -for which you have or can give appropriate copyright permission. - - Notwithstanding any other provision of this License, for material you -add to a covered work, you may (if authorized by the copyright holders of -that material) supplement the terms of this License with terms: - - a) Disclaiming warranty or limiting liability differently from the - terms of sections 15 and 16 of this License; or - - b) Requiring preservation of specified reasonable legal notices or - author attributions in that material or in the Appropriate Legal - Notices displayed by works containing it; or - - c) Prohibiting misrepresentation of the origin of that material, or - requiring that modified versions of such material be marked in - reasonable ways as different from the original version; or - - d) Limiting the use for publicity purposes of names of licensors or - authors of the material; or - - e) Declining to grant rights under trademark law for use of some - trade names, trademarks, or service marks; or - - f) Requiring indemnification of licensors and authors of that - material by anyone who conveys the material (or modified versions of - it) with contractual assumptions of liability to the recipient, for - any liability that these contractual assumptions directly impose on - those licensors and authors. - - All other non-permissive additional terms are considered "further -restrictions" within the meaning of section 10. If the Program as you -received it, or any part of it, contains a notice stating that it is -governed by this License along with a term that is a further -restriction, you may remove that term. If a license document contains -a further restriction but permits relicensing or conveying under this -License, you may add to a covered work material governed by the terms -of that license document, provided that the further restriction does -not survive such relicensing or conveying. - - If you add terms to a covered work in accord with this section, you -must place, in the relevant source files, a statement of the -additional terms that apply to those files, or a notice indicating -where to find the applicable terms. - - Additional terms, permissive or non-permissive, may be stated in the -form of a separately written license, or stated as exceptions; -the above requirements apply either way. - - 8. Termination. - - You may not propagate or modify a covered work except as expressly -provided under this License. Any attempt otherwise to propagate or -modify it is void, and will automatically terminate your rights under -this License (including any patent licenses granted under the third -paragraph of section 11). - - However, if you cease all violation of this License, then your -license from a particular copyright holder is reinstated (a) -provisionally, unless and until the copyright holder explicitly and -finally terminates your license, and (b) permanently, if the copyright -holder fails to notify you of the violation by some reasonable means -prior to 60 days after the cessation. - - Moreover, your license from a particular copyright holder is -reinstated permanently if the copyright holder notifies you of the -violation by some reasonable means, this is the first time you have -received notice of violation of this License (for any work) from that -copyright holder, and you cure the violation prior to 30 days after -your receipt of the notice. - - Termination of your rights under this section does not terminate the -licenses of parties who have received copies or rights from you under -this License. If your rights have been terminated and not permanently -reinstated, you do not qualify to receive new licenses for the same -material under section 10. - - 9. Acceptance Not Required for Having Copies. - - You are not required to accept this License in order to receive or -run a copy of the Program. Ancillary propagation of a covered work -occurring solely as a consequence of using peer-to-peer transmission -to receive a copy likewise does not require acceptance. However, -nothing other than this License grants you permission to propagate or -modify any covered work. These actions infringe copyright if you do -not accept this License. Therefore, by modifying or propagating a -covered work, you indicate your acceptance of this License to do so. - - 10. Automatic Licensing of Downstream Recipients. - - Each time you convey a covered work, the recipient automatically -receives a license from the original licensors, to run, modify and -propagate that work, subject to this License. You are not responsible -for enforcing compliance by third parties with this License. - - An "entity transaction" is a transaction transferring control of an -organization, or substantially all assets of one, or subdividing an -organization, or merging organizations. If propagation of a covered -work results from an entity transaction, each party to that -transaction who receives a copy of the work also receives whatever -licenses to the work the party's predecessor in interest had or could -give under the previous paragraph, plus a right to possession of the -Corresponding Source of the work from the predecessor in interest, if -the predecessor has it or can get it with reasonable efforts. - - You may not impose any further restrictions on the exercise of the -rights granted or affirmed under this License. For example, you may -not impose a license fee, royalty, or other charge for exercise of -rights granted under this License, and you may not initiate litigation -(including a cross-claim or counterclaim in a lawsuit) alleging that -any patent claim is infringed by making, using, selling, offering for -sale, or importing the Program or any portion of it. - - 11. Patents. - - A "contributor" is a copyright holder who authorizes use under this -License of the Program or a work on which the Program is based. The -work thus licensed is called the contributor's "contributor version". - - A contributor's "essential patent claims" are all patent claims -owned or controlled by the contributor, whether already acquired or -hereafter acquired, that would be infringed by some manner, permitted -by this License, of making, using, or selling its contributor version, -but do not include claims that would be infringed only as a -consequence of further modification of the contributor version. For -purposes of this definition, "control" includes the right to grant -patent sublicenses in a manner consistent with the requirements of + GNU GENERAL PUBLIC LICENSE + TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION + + 0. This License applies to any program or other work which contains +a notice placed by the copyright holder saying it may be distributed +under the terms of this General Public License. The "Program", below, +refers to any such program or work, and a "work based on the Program" +means either the Program or any derivative work under copyright law: +that is to say, a work containing the Program or a portion of it, +either verbatim or with modifications and/or translated into another +language. (Hereinafter, translation is included without limitation in +the term "modification".) Each licensee is addressed as "you". + +Activities other than copying, distribution and modification are not +covered by this License; they are outside its scope. The act of +running the Program is not restricted, and the output from the Program +is covered only if its contents constitute a work based on the +Program (independent of having been made by running the Program). +Whether that is true depends on what the Program does. + + 1. You may copy and distribute verbatim copies of the Program's +source code as you receive it, in any medium, provided that you +conspicuously and appropriately publish on each copy an appropriate +copyright notice and disclaimer of warranty; keep intact all the +notices that refer to this License and to the absence of any warranty; +and give any other recipients of the Program a copy of this License +along with the Program. + +You may charge a fee for the physical act of transferring a copy, and +you may at your option offer warranty protection in exchange for a fee. + + 2. You may modify your copy or copies of the Program or any portion +of it, thus forming a work based on the Program, and copy and +distribute such modifications or work under the terms of Section 1 +above, provided that you also meet all of these conditions: + + a) You must cause the modified files to carry prominent notices + stating that you changed the files and the date of any change. + + b) You must cause any work that you distribute or publish, that in + whole or in part contains or is derived from the Program or any + part thereof, to be licensed as a whole at no charge to all third + parties under the terms of this License. + + c) If the modified program normally reads commands interactively + when run, you must cause it, when started running for such + interactive use in the most ordinary way, to print or display an + announcement including an appropriate copyright notice and a + notice that there is no warranty (or else, saying that you provide + a warranty) and that users may redistribute the program under + these conditions, and telling the user how to view a copy of this + License. (Exception: if the Program itself is interactive but + does not normally print such an announcement, your work based on + the Program is not required to print an announcement.) + +These requirements apply to the modified work as a whole. If +identifiable sections of that work are not derived from the Program, +and can be reasonably considered independent and separate works in +themselves, then this License, and its terms, do not apply to those +sections when you distribute them as separate works. But when you +distribute the same sections as part of a whole which is a work based +on the Program, the distribution of the whole must be on the terms of +this License, whose permissions for other licensees extend to the +entire whole, and thus to each and every part regardless of who wrote it. + +Thus, it is not the intent of this section to claim rights or contest +your rights to work written entirely by you; rather, the intent is to +exercise the right to control the distribution of derivative or +collective works based on the Program. + +In addition, mere aggregation of another work not based on the Program +with the Program (or with a work based on the Program) on a volume of +a storage or distribution medium does not bring the other work under +the scope of this License. + + 3. You may copy and distribute the Program (or a work based on it, +under Section 2) in object code or executable form under the terms of +Sections 1 and 2 above provided that you also do one of the following: + + a) Accompany it with the complete corresponding machine-readable + source code, which must be distributed under the terms of Sections + 1 and 2 above on a medium customarily used for software interchange; or, + + b) Accompany it with a written offer, valid for at least three + years, to give any third party, for a charge no more than your + cost of physically performing source distribution, a complete + machine-readable copy of the corresponding source code, to be + distributed under the terms of Sections 1 and 2 above on a medium + customarily used for software interchange; or, + + c) Accompany it with the information you received as to the offer + to distribute corresponding source code. (This alternative is + allowed only for noncommercial distribution and only if you + received the program in object code or executable form with such + an offer, in accord with Subsection b above.) + +The source code for a work means the preferred form of the work for +making modifications to it. For an executable work, complete source +code means all the source code for all modules it contains, plus any +associated interface definition files, plus the scripts used to +control compilation and installation of the executable. However, as a +special exception, the source code distributed need not include +anything that is normally distributed (in either source or binary +form) with the major components (compiler, kernel, and so on) of the +operating system on which the executable runs, unless that component +itself accompanies the executable. + +If distribution of executable or object code is made by offering +access to copy from a designated place, then offering equivalent +access to copy the source code from the same place counts as +distribution of the source code, even though third parties are not +compelled to copy the source along with the object code. + + 4. You may not copy, modify, sublicense, or distribute the Program +except as expressly provided under this License. Any attempt +otherwise to copy, modify, sublicense or distribute the Program is +void, and will automatically terminate your rights under this License. +However, parties who have received copies, or rights, from you under +this License will not have their licenses terminated so long as such +parties remain in full compliance. + + 5. You are not required to accept this License, since you have not +signed it. However, nothing else grants you permission to modify or +distribute the Program or its derivative works. These actions are +prohibited by law if you do not accept this License. Therefore, by +modifying or distributing the Program (or any work based on the +Program), you indicate your acceptance of this License to do so, and +all its terms and conditions for copying, distributing or modifying +the Program or works based on it. + + 6. Each time you redistribute the Program (or any work based on the +Program), the recipient automatically receives a license from the +original licensor to copy, distribute or modify the Program subject to +these terms and conditions. You may not impose any further +restrictions on the recipients' exercise of the rights granted herein. +You are not responsible for enforcing compliance by third parties to this License. - Each contributor grants you a non-exclusive, worldwide, royalty-free -patent license under the contributor's essential patent claims, to -make, use, sell, offer for sale, import and otherwise run, modify and -propagate the contents of its contributor version. - - In the following three paragraphs, a "patent license" is any express -agreement or commitment, however denominated, not to enforce a patent -(such as an express permission to practice a patent or covenant not to -sue for patent infringement). To "grant" such a patent license to a -party means to make such an agreement or commitment not to enforce a -patent against the party. - - If you convey a covered work, knowingly relying on a patent license, -and the Corresponding Source of the work is not available for anyone -to copy, free of charge and under the terms of this License, through a -publicly available network server or other readily accessible means, -then you must either (1) cause the Corresponding Source to be so -available, or (2) arrange to deprive yourself of the benefit of the -patent license for this particular work, or (3) arrange, in a manner -consistent with the requirements of this License, to extend the patent -license to downstream recipients. "Knowingly relying" means you have -actual knowledge that, but for the patent license, your conveying the -covered work in a country, or your recipient's use of the covered work -in a country, would infringe one or more identifiable patents in that -country that you have reason to believe are valid. - - If, pursuant to or in connection with a single transaction or -arrangement, you convey, or propagate by procuring conveyance of, a -covered work, and grant a patent license to some of the parties -receiving the covered work authorizing them to use, propagate, modify -or convey a specific copy of the covered work, then the patent license -you grant is automatically extended to all recipients of the covered -work and works based on it. - - A patent license is "discriminatory" if it does not include within -the scope of its coverage, prohibits the exercise of, or is -conditioned on the non-exercise of one or more of the rights that are -specifically granted under this License. You may not convey a covered -work if you are a party to an arrangement with a third party that is -in the business of distributing software, under which you make payment -to the third party based on the extent of your activity of conveying -the work, and under which the third party grants, to any of the -parties who would receive the covered work from you, a discriminatory -patent license (a) in connection with copies of the covered work -conveyed by you (or copies made from those copies), or (b) primarily -for and in connection with specific products or compilations that -contain the covered work, unless you entered into that arrangement, -or that patent license was granted, prior to 28 March 2007. - - Nothing in this License shall be construed as excluding or limiting -any implied license or other defenses to infringement that may -otherwise be available to you under applicable patent law. - - 12. No Surrender of Others' Freedom. - - If conditions are imposed on you (whether by court order, agreement or + 7. If, as a consequence of a court judgment or allegation of patent +infringement or for any other reason (not limited to patent issues), +conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not -excuse you from the conditions of this License. If you cannot convey a -covered work so as to satisfy simultaneously your obligations under this -License and any other pertinent obligations, then as a consequence you may -not convey it at all. For example, if you agree to terms that obligate you -to collect a royalty for further conveying from those to whom you convey -the Program, the only way you could satisfy both those terms and this -License would be to refrain entirely from conveying the Program. +excuse you from the conditions of this License. If you cannot +distribute so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you +may not distribute the Program at all. For example, if a patent +license would not permit royalty-free redistribution of the Program by +all those who receive copies directly or indirectly through you, then +the only way you could satisfy both it and this License would be to +refrain entirely from distribution of the Program. - 13. Remote Network Interaction; Use with the GNU General Public License. +If any portion of this section is held invalid or unenforceable under +any particular circumstance, the balance of the section is intended to +apply and the section as a whole is intended to apply in other +circumstances. - Notwithstanding any other provision of this License, if you modify the -Program, your modified version must prominently offer all users -interacting with it remotely through a computer network (if your version -supports such interaction) an opportunity to receive the Corresponding -Source of your version by providing access to the Corresponding Source -from a network server at no charge, through some standard or customary -means of facilitating copying of software. This Corresponding Source -shall include the Corresponding Source for any work covered by version 3 -of the GNU General Public License that is incorporated pursuant to the -following paragraph. +It is not the purpose of this section to induce you to infringe any +patents or other property right claims or to contest validity of any +such claims; this section has the sole purpose of protecting the +integrity of the free software distribution system, which is +implemented by public license practices. Many people have made +generous contributions to the wide range of software distributed +through that system in reliance on consistent application of that +system; it is up to the author/donor to decide if he or she is willing +to distribute software through any other system and a licensee cannot +impose that choice. - Notwithstanding any other provision of this License, you have -permission to link or combine any covered work with a work licensed -under version 3 of the GNU General Public License into a single -combined work, and to convey the resulting work. The terms of this -License will continue to apply to the part which is the covered work, -but the work with which it is combined will remain governed by version -3 of the GNU General Public License. +This section is intended to make thoroughly clear what is believed to +be a consequence of the rest of this License. - 14. Revised Versions of this License. + 8. If the distribution and/or use of the Program is restricted in +certain countries either by patents or by copyrighted interfaces, the +original copyright holder who places the Program under this License +may add an explicit geographical distribution limitation excluding +those countries, so that distribution is permitted only in or among +countries not thus excluded. In such case, this License incorporates +the limitation as if written in the body of this License. - The Free Software Foundation may publish revised and/or new versions of -the GNU Affero General Public License from time to time. Such new versions -will be similar in spirit to the present version, but may differ in detail to + 9. The Free Software Foundation may publish revised and/or new versions +of the General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to address new problems or concerns. - Each version is given a distinguishing version number. If the -Program specifies that a certain numbered version of the GNU Affero General -Public License "or any later version" applies to it, you have the -option of following the terms and conditions either of that numbered -version or of any later version published by the Free Software -Foundation. If the Program does not specify a version number of the -GNU Affero General Public License, you may choose any version ever published -by the Free Software Foundation. +Each version is given a distinguishing version number. If the Program +specifies a version number of this License which applies to it and "any +later version", you have the option of following the terms and conditions +either of that version or of any later version published by the Free +Software Foundation. If the Program does not specify a version number of +this License, you may choose any version ever published by the Free Software +Foundation. - If the Program specifies that a proxy can decide which future -versions of the GNU Affero General Public License can be used, that proxy's -public statement of acceptance of a version permanently authorizes you -to choose that version for the Program. + 10. If you wish to incorporate parts of the Program into other free +programs whose distribution conditions are different, write to the author +to ask for permission. For software which is copyrighted by the Free +Software Foundation, write to the Free Software Foundation; we sometimes +make exceptions for this. Our decision will be guided by the two goals +of preserving the free status of all derivatives of our free software and +of promoting the sharing and reuse of software generally. - Later license versions may give you additional or different -permissions. However, no additional obligations are imposed on any -author or copyright holder as a result of your choosing to follow a -later version. + NO WARRANTY - 15. Disclaimer of Warranty. + 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY +FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN +OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES +PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED +OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS +TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE +PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, +REPAIR OR CORRECTION. - THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY -APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT -HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY -OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, -THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR -PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM -IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF -ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR +REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, +INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING +OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED +TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY +YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER +PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. - 16. Limitation of Liability. + END OF TERMS AND CONDITIONS - IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING -WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS -THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY -GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE -USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF -DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD -PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), -EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF -SUCH DAMAGES. - - 17. Interpretation of Sections 15 and 16. - - If the disclaimer of warranty and limitation of liability provided -above cannot be given local legal effect according to their terms, -reviewing courts shall apply local law that most closely approximates -an absolute waiver of all civil liability in connection with the -Program, unless a warranty or assumption of liability accompanies a -copy of the Program in return for a fee. - - END OF TERMS AND CONDITIONS - - How to Apply These Terms to Your New Programs + How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it @@ -626,36 +288,54 @@ free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively -state the exclusion of warranty; and each file should have at least +convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. - Copyright (C) + Copyright (C) 19yy - This program is free software: you can redistribute it and/or modify - it under the terms of the GNU Affero General Public License as published by - the Free Software Foundation, either version 3 of the License, or + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - GNU Affero General Public License for more details. + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA - You should have received a copy of the GNU Affero General Public License - along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. - If your software can interact with users remotely through a computer -network, you should also make sure that it provides a way for users to -get its source. For example, if your program is a web application, its -interface could display a "Source" link that leads users to an archive -of the code. There are many ways you could offer source, and different -solutions will be better for different programs; see section 13 for the -specific requirements. +If the program is interactive, make it output a short notice like this +when it starts in an interactive mode: - You should also get your employer (if you work as a programmer) or school, -if any, to sign a "copyright disclaimer" for the program, if necessary. -For more information on this, and how to apply and follow the GNU AGPL, see -. \ No newline at end of file + Gnomovision version 69, Copyright (C) 19yy name of author + Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, the commands you use may +be called something other than `show w' and `show c'; they could even be +mouse-clicks or menu items--whatever suits your program. + +You should also get your employer (if you work as a programmer) or your +school, if any, to sign a "copyright disclaimer" for the program, if +necessary. Here is a sample; alter the names: + + Yoyodyne, Inc., hereby disclaims all copyright interest in the program + `Gnomovision' (which makes passes at compilers) written by James Hacker. + + , 1 April 1989 + Ty Coon, President of Vice + +This General Public License does not permit incorporating your program into +proprietary programs. If your program is a subroutine library, you may +consider it more useful to permit linking proprietary applications with the +library. If this is what you want to do, use the GNU Library General +Public License instead of this License. diff --git a/README.md b/README.md index c55d500..85ebb21 100644 --- a/README.md +++ b/README.md @@ -1,50 +1,48 @@ + + # Zabbix for YunoHost [![Integration level](https://dash.yunohost.org/integration/zabbix.svg)](https://dash.yunohost.org/appci/app/zabbix) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.status.svg) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.maintain.svg) -[![Install zabbix with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=zabbix) +[![Install Zabbix with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=zabbix) -> *This package allow you to install Zabbix quickly and simply on a YunoHost server. -If you don't have YunoHost, please see [here](https://yunohost.org/#/install) to know how to install and enjoy it.* +*[Lire ce readme en français.](./README_fr.md)* + +> *This package allows you to install Zabbix quickly and simply on a YunoHost server. +If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/install) to learn how to install it.* ## Overview -Zabbix is a great product to monitor your equipement, include your YunoHost server. -## Configuration +A monitoring tool for diverse IT components, including networks, servers, VMs and cloud services. -Configuration at install. SSO works. You can add your users in a group in Zabbix (for permissions/rights). +**Shipped version:** 4.4~ynh2 -## Documentation -* Official documentation: https://www.zabbix.com/manuals -#### Multi-users support +## Screenshots -* Are LDAP auth supported +![](./doc/screenshots/screenshot1.png) -#### Supported architectures +## Disclaimers / important information -Only Debian - Stretch 64b supported actually. +* Any known limitations, constrains or stuff not working, such as (but not limited to): + * Only x86_64 architecture is supported + * Do not change the default admin user password. The user is disabled just after the install but he’s used to update templates. + * The Zabbix server port is not opened by default for external monitoring (active agent). -## Limitations -Do not change admin password. +* Other infos that people should be aware of, such as: + * Configuration at install. SSO works. You can add your users in a group in Zabbix (for permissions/rights). + * A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. -## Additional information +## Documentation and resources -* Do not change the default admin user password. The user is disabled juste after the install but used to update templates. -* The Zabbix server port is not opened by default for external monitoring (active agent). -* A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. -* If you want more information about Yunohost in the template, please open an issue on git. - -## LICENSE -GNU AFFERO GENERAL PUBLIC LICENSE Version 3 - -got to https://framagit.org/Mickael-Martin/zabbix_ynh/blob/master/LICENSE - -## Links - * Report a bug: https://framagit.org/Mickael-Martin/zabbix_ynh/issues - * YunoHost website: https://yunohost.org/ - - --- +* Official app website: https://www.zabbix.com/ +* Official admin documentation: https://www.zabbix.com/manuals +* Upstream app code repository: https://github.com/zabbix/zabbix +* YunoHost documentation for this app: https://yunohost.org/app_zabbix +* Report a bug: https://github.com/YunoHost-Apps/zabbix_ynh/issues ## Developer info @@ -56,3 +54,5 @@ sudo yunohost app install https://github.com/YunoHost-Apps/zabbix_ynh/tree/testi or sudo yunohost app upgrade zabbix -u https://github.com/YunoHost-Apps/zabbix_ynh/tree/testing --debug ``` + +**More info regarding app packaging:** https://yunohost.org/packaging_apps \ No newline at end of file diff --git a/README_fr.md b/README_fr.md new file mode 100644 index 0000000..fc9d390 --- /dev/null +++ b/README_fr.md @@ -0,0 +1,53 @@ +# Zabbix pour YunoHost + +[![Niveau d'intégration](https://dash.yunohost.org/integration/zabbix.svg)](https://dash.yunohost.org/appci/app/zabbix) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.status.svg) ![](https://ci-apps.yunohost.org/ci/badges/zabbix.maintain.svg) +[![Installer Zabbix avec YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=zabbix) + +*[Read this readme in english.](./README.md)* +*[Lire ce readme en français.](./README_fr.md)* + +> *Ce package vous permet d'installer Zabbix rapidement et simplement sur un serveur YunoHost. +Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l'installer et en profiter.* + +## Vue d'ensemble + +Un outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne + +**Version incluse :** 4.4~ynh2 + + + +## Captures d'écran + +![](./doc/screenshots/screenshot1.png) + +## Avertissements / informations importantes + +* Toutes les limitations, contraintes ou éléments ne fonctionnant pas, tels que (mais sans s'y limiter) : + * Seule l'architecture x86_64 est prise en charge + * Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. + * Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). + +* D'autres informations que les gens devraient connaître, telles que : + * Configuration à l'installation. L'authentification SSO fonctionne. Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). + * Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. +## Documentations et ressources + +* Site officiel de l'app : https://www.zabbix.com/ +* Documentation officielle de l'admin : https://www.zabbix.com/manuals +* Dépôt de code officiel de l'app : https://github.com/zabbix/zabbix +* Documentation YunoHost pour cette app : https://yunohost.org/app_zabbix +* Signaler un bug : https://github.com/YunoHost-Apps/zabbix_ynh/issues + +## Informations pour les développeurs + +Merci de faire vos pull request sur la [branche testing](https://github.com/YunoHost-Apps/zabbix_ynh/tree/testing). + +Pour essayer la branche testing, procédez comme suit. +``` +sudo yunohost app install https://github.com/YunoHost-Apps/zabbix_ynh/tree/testing --debug +ou +sudo yunohost app upgrade zabbix -u https://github.com/YunoHost-Apps/zabbix_ynh/tree/testing --debug +``` + +**Plus d'infos sur le packaging d'applications :** https://yunohost.org/packaging_apps \ No newline at end of file diff --git a/check_process b/check_process index 9156b21..ae592f3 100644 --- a/check_process +++ b/check_process @@ -5,8 +5,8 @@ admin="john" (USER) language="fr_FR" is_public=1 (PUBLIC|public=1|private=0) - password="pass" - port="666" (PORT) + password="1Strong-Password" + port="10051" (PORT) ; Checks pkg_linter=1 setup_sub_dir=1 @@ -25,5 +25,5 @@ Email= Notification=none ;;; Upgrade options ; commit=5cd502c98fdf4731938503541cf64a59aa43eda7 - name=Name and date of the commit. - manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=666& + name=4.4~ynh1. + manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=PORT& diff --git a/conf/100update_force_init_zabbix_frontend_config b/conf/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config similarity index 100% rename from conf/100update_force_init_zabbix_frontend_config rename to conf/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config diff --git a/conf/zabbix b/conf/etc_sudoers.d_zabbix similarity index 100% rename from conf/zabbix rename to conf/etc_sudoers.d_zabbix diff --git a/conf/etc_zabbix_web_init.zabbix.conf.php.sh b/conf/etc_zabbix_web_init.zabbix.conf.php.sh new file mode 100644 index 0000000..dc3e2e3 --- /dev/null +++ b/conf/etc_zabbix_web_init.zabbix.conf.php.sh @@ -0,0 +1,34 @@ +#!/bin/bash + +app="zabbix" + +if [ ! -L "/usr/share/zabbix/conf/zabbix.conf.php" ] +then + ln -s /etc/zabbix/web/zabbix.conf.php /usr/share/zabbix/conf/zabbix.conf.php +fi + +if [ ! -f /etc/zabbix/web/zabbix.conf.php ] +then + source /usr/share/yunohost/helpers + echo "/etc/zabbix/web/zabbix.conf.php + + chown $app:www-data "/etc/zabbix/web/zabbix.conf.php" +fi diff --git a/conf/zabbix.conf.php b/conf/etc_zabbix_web_zabbix.conf.php similarity index 100% rename from conf/zabbix.conf.php rename to conf/etc_zabbix_web_zabbix.conf.php diff --git a/conf/userP_yunohost.conf b/conf/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf similarity index 100% rename from conf/userP_yunohost.conf rename to conf/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf diff --git a/conf/yunohost.sh b/conf/etc_zabbix_zabbix_agentd.d_yunohost.sh similarity index 89% rename from conf/yunohost.sh rename to conf/etc_zabbix_zabbix_agentd.d_yunohost.sh index 4a9f88a..dec5338 100644 --- a/conf/yunohost.sh +++ b/conf/etc_zabbix_zabbix_agentd.d_yunohost.sh @@ -1,4 +1,5 @@ #!/bin/bash + yunobin=$(which yunohost) if [ "$1" == "yunohost.users.discover" ];then @@ -22,12 +23,12 @@ if [ "$1" == "yunohost.services.discover" ] ;then fi if [ "$1" == "yunohost.service.status" ] ;then - service=$($yunobin service status "$2" --output-as json 2>/dev/null) - if [[ "$(echo $service | jq -r '.description')" == *"doesn't exists for systemd"* ]] ;then - echo "$service" | jq -c '.active = "disabled"' - else - echo "$service" - fi + service=$($yunobin service status "$2" --output-as json 2>/dev/null) + if [[ "$(echo $service | jq -r '.description')" == *"doesn't exists for systemd"* ]] ;then + echo "$service" | jq -c '.active = "disabled"' + else + echo "$service" + fi fi if [ "$1" == "yunohost.backups.number" ] ;then @@ -57,4 +58,4 @@ fi if [ "$1" == "yunohost.migrations.lastavailable" ] ;then $yunobin tools migrations list | tail -n 1 | grep -Po " number: \K(.*)" -fi \ No newline at end of file +fi diff --git a/conf/init.zabbix.conf.php.sh b/conf/init.zabbix.conf.php.sh deleted file mode 100644 index cc118fb..0000000 --- a/conf/init.zabbix.conf.php.sh +++ /dev/null @@ -1,30 +0,0 @@ -#!/bin/bash - -if [ ! -e "/var/www/zabbix/conf/zabbix.conf.php" ] ; then - if [ ! -f /etc/zabbix/web/zabbix.conf.php ];then - cp /usr/share/zabbix/conf/zabbix.conf.php.example /etc/zabbix/web/zabbix.conf.php - fi - - ln -s /etc/zabbix/web/zabbix.conf.php /usr/share/zabbix/conf/zabbix.conf.php - source /usr/share/yunohost/helpers - echo "/etc/zabbix/web/zabbix.conf.php - - echo "Frontend Zabbix Configuration fixed !" -fi \ No newline at end of file diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 647e660..ac20148 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -20,8 +20,8 @@ ; Unix user/group of processes ; Note: The user is mandatory. If the group is not set, the default user's group ; will be used. -user = www-data -group = www-data +user = __USER__ +group = __USER__ ; The address on which to accept FastCGI requests. ; Valid syntaxes are: @@ -420,17 +420,13 @@ catch_workers_output = yes ; Common values to change to increase file upload limit ; php_admin_value[upload_max_filesize] = 50M -; php_admin_value[post_max_size] = 50M +php_admin_value[post_max_size] = 50M ; php_admin_flag[mail.add_x_header] = Off ; Other common parameters -; php_admin_value[max_execution_time] = 600 -; php_admin_value[max_input_time] = 300 +php_admin_value[max_execution_time] = 300 +php_admin_value[max_input_time] = 300 ; php_admin_value[memory_limit] = 256M ; php_admin_flag[short_open_tag] = On - -php_value[post_max_size] = 16M -php_value[max_execution_time] = 300 -php_value[max_input_time] = 300 -php_value[open_basedir] = /var/www/zabbix/:/usr/share/fonts/:/tmp:/etc/zabbix/web -php_value[date.timezone] = Europe/Paris +php_admin_value[open_basedir] = /var/www/zabbix/:/usr/share/fonts/:/tmp:/etc/zabbix/web +php_admin_value[date.timezone] = Europe/Paris diff --git a/doc/.gitkeep b/doc/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/doc/DISCLAIMER.md b/doc/DISCLAIMER.md new file mode 100644 index 0000000..7b173be --- /dev/null +++ b/doc/DISCLAIMER.md @@ -0,0 +1,8 @@ +* Any known limitations, constrains or stuff not working, such as (but not limited to): + * Only x86_64 architecture is supported + * Do not change the default admin user password. The user is disabled just after the install but he’s used to update templates. + * The Zabbix server port is not opened by default for external monitoring (active agent). + +* Other infos that people should be aware of, such as: + * Configuration at install. SSO works. You can add your users in a group in Zabbix (for permissions/rights). + * A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. diff --git a/doc/DISCLAIMER_fr.md b/doc/DISCLAIMER_fr.md new file mode 100644 index 0000000..8782f3a --- /dev/null +++ b/doc/DISCLAIMER_fr.md @@ -0,0 +1,8 @@ +* Toutes les limitations, contraintes ou éléments ne fonctionnant pas, tels que (mais sans s'y limiter) : + * Seule l'architecture x86_64 est prise en charge + * Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. + * Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). + +* D'autres informations que les gens devraient connaître, telles que : + * Configuration à l'installation. L'authentification SSO fonctionne. Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). + * Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. \ No newline at end of file diff --git a/doc/screenshots/.gitkeep b/doc/screenshots/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/doc/screenshots/screenshot1.png b/doc/screenshots/screenshot1.png new file mode 100644 index 0000000000000000000000000000000000000000..716b57e1b1747847af034ede28eafb850b66b3c2 GIT binary patch literal 240579 zcmc$_Wm{a`vIV+2jeCMS2^t`{I|Kp*cXxMp4TL}-NN{&|cMb0DPH@-8;r2e~-TUnO z2kxC8`sp>hdV1BY8a38Wd0BB(BmyJ=08k|*L=^!5-W~v8=n&pOYc4yA8vy|1Z1MTC zyoHew0MPt4($}Yzq^B7$FwoZ@7^VA&(3_X`e3MUtZ`B~RncH;~&`O9vJ(m>fPTEmbi!71?+X zSmYUm6{8e_ppa=bwB`am0wCisED$k*@j9q#`u#CFnd`g6(VjP|nD4exjHQ6ZH;gvS_W za%XB}qG3v8#bZ)u*=OO3&sB}}$Ku(;RmL&NH;bj=dh?k>rHfmzA+wgEPC~qkl~F@Z zylbFy0?0+fGQ-Fbg#RXEhQ%9+F|0Sxsb4hG*|`#kA(hZ{-*Vos!{nyuyux}9X z-(w*(fWpmUtg_Ye?k5}E)mF8dJ&)p$ zMMXb+7*gzlwe0<-LZpvv*~PC}{8Bg@F#C1(LtMT0o~zPgd)dn_ZPqrwR9zhj8}`=eIuz=qTR z|DG{K1_Z&dv55aK8RY+;DoSove_KSpq`N+0dL-WZEX$Dnd*lO0!{g(A(27@DPft&~ z7R2wZ4mL3VHSCw(1#8H%?VJ0A!s232sNnXQkd*F!&lABS0c}Kn&i9NTuH@vYdTT3s z-OsKHgOd|3MMpQc-+-YASU)^u}$-uuE$`2;* z(yvV_)1+uF$zMBW7~fR~3wtx| zB~D^lpIV%n8UTLFt>>%p>D{c{nbR>%Z0y&ubQwRl>JMUW5c<{oD-fSfGriw@dEW`Q zr?OQs-S%beTk@2$kpEtQ7hGrkL1YaFhdPOwDZwVu>;bBZQtKj^ZpOL!=M{2usiWD! zUPBAr^sS82Mm$GuB{j9zZj<-`@voMaGFNJ0qAvF(Qc~{|YEV&IDl}GKeJyJ?4<1-> z85E_>IM&+3i^_ET68i2gG?jEfSWlNy_u+(P3IDYg14jn6MzqxL?R4NxX{ZnO>$Opa z51XP)^noTmqk8cgjaX&nnd1|X#MPCCrzZg>b-k{RgR=6E$B||kxUgAX7RBY&@S>b) zt93a!Q+D0m51ee*_eM^NqKhJC;HxUceV!ETn*l_<;VE)rlGu1&l?pa-SQ8GF-6g{<)+nBr6 zFrUqk)$5kHZ)}x0SU!ZQE8wJfzVy7wJDOoWS~lbZDQ%@^Wac>yM~8>s8zji{6BirZ z(2%R=91D-MY;sJ$G7cLl+=s08@a+xOH~mzQ{1ltt>t@d;Z0)>4h-Yo1Ec4INdPTFe zw1hw)-NEP$wYAc+vhA)Xn%>^6>hz~ens_Kbl9H0z{-@N}yMFyTRA)7Ry3#bggZ-Rl zI+D1#yF2&w2PU;Fk)ZFBot2!~FCy-#p?{U)=4PJv@87eqD9+e_`p(d0SoP%>-sbT! z3Km(eJSPEPJCRIu5t!1+nS&9kVi%9JSmY5pTr zrN3Ps%_EbOyYTVP{y?3+xuk`5HnBJGHb0+g`||pLRbFRxEWbXitpAH2BQ{x^+-8fO zcA=DRGbBas%b^767ozscdv+vmg7&-PR#hNo|D})Kvx{CgI_hfNw2y@+mU7dxv^2`!4|_*EIXx z^k;BBg{@94a6pKI47Q@>k5W^A**4d0xMOagli^^c>g|{E8<;0c4#T zIkWp(`>X=*{XN^{IBeqiKV19gTpli*bt>%tnCT~E8ag_7I5^1u6JA zCdZu|@yNLfJ;s>9=F05bbw9t6MCJzD)uj$UKMRY4iLB3iBT1|-hck>FPu0~;CIIxL zXfvGsfonx96OREwg>w{y?mO!Bq!Ji>9dPmAcX&OSmgCfKbr^T{LYd>hOtgNvIVAzPut8z!47?_@ub z%uFmaSWq)(8N5#eoxHkT#SlT~L{A-eGi%RE8RB8xJVYPV zreU|bSL#Ir&o*+k?(bx3@c_FC1f%jLy(A#o7X`_~3A=9SfS69ENMeMAggLn3NWW%Y zpg|kOL4|i1QyT&4Efz%`-c(z);C_*+$?)5Cw8$7WHzh3<%>TWt2Rb@yEvDW1bmiqI z%Cs7=K7Rgza&dK)!sl^m*YP~3Qinp!Gc!2&k&H};ru6>v#l_!#v$0e}6cq2Xwp%P# z$)kP3TU5j+k&CO}=M&SD4b8>);g!lWTo?&zu3adLXC1FE_g8x^DapynzP`Swj!bxT z^L8Xt4Y)w2^JG9|uga_svCc@80|Ufhk8r}HtE+2pa1dzJKJ|OK%J>F`Z~v+JC6Z*- zyapLOgaT&-)p1-#-BLnR7k9q3o}ZYvC(H9$=Dud&q2{v=yYnh^K=MnU(R|S-6Q#O( zQ$m6_?p5q~Lc(`1r!T&=@$vNh{1(1mG&-2n<52m8x8w+o50~SAmer3nlT?0df+8AEO^yXQ7n*XB+6%JnedB1cQvbA zFXR!@!2Vfme(IX)*DbyM1>#Wy&rIO>8~S=uB;NC)amn|7g9+__ zOMj{RH&Xl^K_^7-!=|$wm#R3nGx;TAko3cMY%!|t5i7=~Z2s)xEXmjXAU-DTID31R z^L;4nWDCidBYt^K4m<*=c7Zq-*IeVm1?13ogIN-QjsAPL8EAi%6(kmJj&ExNm1Jx8 zse(7Ee8&9;#MXBz(66gmr(novF`nveMt{rp0r$3N=S`G@zpdQFW^)n#*29pZ>hLS~ zD8Pr-m74jSvc}nU!bZ_G64X<%6$O<99vpFcEIR;4V&afrJg@SvX=~#VeUykGX+3-{ zr&?HC43nPzFfT1tF~(KUK?+oz>GK@`pBdu1BTk4VHI1~=L3-d)Q z?MT6rs?GEgVuNOGwhQyH8Ppf1GAuvt7V0y^?>>3&`RoODP1boq4TFxMT`_V9NlyVd zRIceB`ezG@-kM|aD|QVGvy2x5YN|5(x(V1G^sy6-7CHjH$0kx4KZp|~zDIa;Re1j| zn^%#GuB&u3pjo5p$K1UZ+x@185)l_-yOhx8J5D8F**BOKkabn2&e-Fb|7GR)$jir7 zrF?zg!mJb-*oua)dTZ64O+DX{@`f=&O_`X|+*g{zPs#0t{@p*eWZmrP?!xVCtt^ZR z+~{&Nx7y-HEuA0H84J^l^N+rm!UmQQf+38Wuv@7ZnW+!o61-b)m7c;YE43i}Xy1i&S=`MTc7?Yy;oG%yslJ*Znw;9s7lJ)*yms z92>#5B^;oZ&6&v5OG9ntX9(AC-J;WtosIx>p_-J?i1u&I8<0A$CPfLSiqy8`Z+RW3 zH~8kt4(~tEZ~fuV`KAQXU9<%NA{`fUc=(#V139NFJ?As4Y}-uqOx(x;oiKq8jf&KR3HPuV~H1ETF8H9q+_2gOt?g^bl;G z>{)ugCmeMxU24Vb*c|^M^2(eStRdSB$Yw3$YT`>)WJK_}-h7J)x|(Am{nT0MRr~buv5xwSSVriPPm?zHMz~VU6+AKyaR`zqH=n;c<18q$J(n? zvu{^ga0nTrM3UpK=k*ZBU7VZXcr1a^J?k41n{U7F1_qq&`H#i5@Cu8nLFVR;Soi>7 zO&k%COiQ5MzU7UXAr!g!O9}ThDW%3Ed`Gq^3?jqsS(k8ER8)KGr3++xzwUV4ogwe#m9BR5qO*=#(}?j-?>}71m6J zafIeKpGBoHOnt26r8Ek!7D*iDJJisy1%z5W5?ChVjE(V!V#;QOG3paEJ-{_WXd?xD zWaT@n>@Sjg!I}BPlQWaM_4e>t36kjL5oo~LwH)7%ly+$Ww~fxK?RVvAN0*dyO>QsE zN}RIS&2D>#1Stf{rY3v4{EQIvn<`dS$q)fovPI#u0{8Lj?$@%LYetH@j8hUyi3_)2vFviuE+`zz2 z2EF>7g!&t%b~I#V@820k*_&)VDE=k4D}ylwLE@sKqQ{CmOer!Trco~i=#!|ZJGu`l z(CW)EO(lmI8G^@cJWxPV{@$R4T{$uBY$KXd3hKai81{x99$Mmr)tOIb_nCDr(Cmq2 zZSA#|*2cB#y(ug%z1D8_9G;5`2|<8A5(sUZi}?HDe~K!-4?3VE=2PCVH*dfzaC-y8 zWO*qq=GNR6O5#ij7szb4#)pj^7emd}bVvuYQ%h&L_MhdK-4W3T|H_|K^>zlHp;x=xAjd8y7ylYJp1& z2!;(OC$Gof@eiUG7aGHA$`llAqwA~d9W5PxIXzSR!{e%@QG8x=W3r%u#1n(GjQ*J! z7MNpyL3!_)z_h`i&vN*7?= zRGV>bn$>DWE$xkc+wp>KMR~?@h7Y^3iaCn^hqd>SYdoGpGeuTTC)!`6s{}llescQ6 zzO`pR47o`y>x=pVKY}dv#(w+jTEp@xalv_aF(Bk^do`sa3E0~4znf@T_s`XNEDv|y zwQA?XsFxc^sri$rg3;l&6Hfz(+wMNM&iX{pmj<=~WVe=ya^`FRHL0(knH8r11d+)h z8a2v6p!n)Y(O&zhzGY?^2Nwa&ZXLGMGs3E5^)0TG5;5b!`rR9h%817Zj+&jUL27s6 z?i3?CpsPv`M8xOWy=r&8eel#6^X5FCi=fJ}BDf4S9PS(;%Xe(m63yTZ?7WXE94f)&L z=|^-T8pc5=GO<9a_EKD042SoS%-;!Y>oaM5S*-&S(Q17>ZU*=m8BN$v+Pq%=?$otf zggzUilT^31w&F=c($6#EN3XWb_eZYrYRo4;{1m1C$rtBzWo=%Fi=!-rSyQ3wmGo#FQQ{@l#p}K4N`625+{swe1xh;`?n|RJcd3 zsJ(sr5G;%R74L7Koc89GgJjddlE;!zn<674BU7v^@xtq*Hlu~wxE&OladmWj*h$c{ zU29$J6$1kiq=M-&F-os_-a6{;XKQU0+D%i(**K0(d>=nrKqGHr+VdOm(DRlp?e4j$ z4|FQCl9LZo2`sU3Ama)>y@WeMEBiA&G!_@<8S!x1$E$Huw3y+Yo3+4xeHKt58o`WB z?`471sY*gZLv%)$zK|rMfAe37=RB#P64gQ8Yr~$UtCHN}rEfVr5u<}Y`P{~b%?9`c z0*DK4L^k6$)c4Q<|1;|{Gz(=>cbU1Ku%fsyI0tT^Q)DNnCpk*@t0}&|@x(?qGnzUu z1G;KoC6kFL_1Rkw;`fUkWnw*;MQ`YObIF=gPV^_>`sE^d!C4~?Yl@b6eNhuOPK{jl zqoNUcMZAlPP!eLS*}MQ_E|B{HkW?6?WN^({>*~rKJi89&;-*FWTyP7hM_Bzi!R}&- zU;t9Gp0xBuk{z0Md2c=xp|B*u__HJe%AoW%Zrmxs97|kFj1_6zmRmIwI!nf}F=dMW z)Yj&iMWX@Z0-vm{-#FR|j?(?>Z1b^f+z-lM-=aLA5ZIUvy+f|2*UT|5n)Qb`7jWH3 zcG-g?B!_hXGT)a<4$Xq0H=T3f=&`kdYCIcU`=`c2vPXkIvl$|h&JccoYn;v#qjhip zx`dw$xdB&o1@x!JsRN4(6B86QK_y@p4!{JQsavz)U%O!;bI^OM8)~p*8Fr}GUO1sr zg*L5LfzHM@b7WxL2@+*N1XN4_ea_+#L6P@VWsv8ActVZwpdtgU0up>MVzrpcHFX^>j(7K{;!16Qrk{tiRp~`$tdLuzr44pHjU5JQsED|7 z01CQu!NU!%tj7j@XI2OjCXW6Jy3va2ig5bb%ejZS9dPLQfBfG8HZD7@(dFKD^PS(o z{o#aem)nC*dt)vJRX37(Q-ZHgP;E2HP3tpeIhvCd?(TvUqQ_xPB2Ec^NtV*R7Pt=k z`uYMO`3fZ7{*5d%JB9pY1T1WApX+`hqZ1dGm%>a;72}Fg%TiP?xV)ZfY2ar3G^F`> z(E94zac7$C%@`1H$U@DeVL?tjT&`%AC`F%=F*ny*<93kG&)xjybb**Hx<%R1+ zvtC3eW_f#n(|^<^nu5>o6Ed7?%zX?zVU44m_B){q#1I-fepYC?x*r~y`F{8Pu0?Ly z_b9!Xg)mBm{g*}CLuOgI>*oEPHr^s?jVp-_igx5-v>o%nlq?CK!nBh0}Tew@l*Pl{NkG4|I5F&b7;s3k?W z+qj@?Q_!!)(NX2EoK5qwo177!kL>g4(lF<$pmj#Ztv#=jOYG{;_T*1uN0Fa#3K-nO zzW&Cl8=}wlFg>GqXVXsIPx!it2)jEktEGza>=%T11k( zId(3cPFhjg7}M1odi6N8>+f;V@`7nheLYTg?sZT=w)Zcotv*LXt&w6WT6q zMe%Sx56ckN0Bv3EM8ECMbXb9QJ(%+H3=Nrvl*V0lPZolH{Uk)Cv%pTmZak84Vds`Agu8ZzCA#$;l*?AcS>Ddxk(*8r6vm_W#?wn z1yb9=v$*8g^ZqntoEVT$nX8y8jy)sgj)Uhz40YuE!^3WZs|g#ve^L^@KOv{BvrUy> z%JH$a7;dtOscF0pCv~ZhE_J4LrD0G+FueazZ0yL7_b2)4t1V6s5LkJS*Y@%RwP(NR z{zy<^I37rK88eUWY}M=dQ1kps7@&QAwE9Ij@A-0RHBS=mQ9#duI7qk^q}L!z?m(q7ZX6Lnu}R52jknkbJL=f-EL`Nwa*9XUbHR!4hAk8&by zleZhl7R)gO_^@%nBQ5JT3zY`lKkBSFQ~mODx{7ISjot?%3EA)c#v@v;s*{@k(-Spq zy|z^-2s=@$vCo09wSA?-EQs&UUczdzp1g1Uv47!ySmQ~xg&ZtZqIWWh^P@Q`l(en^ zITW2l6tEjiSob7YTdD2a3)HYRP^;-WoEy$`B9?5B8r#ZvvO4UO;_|T zaMnoPrZn12&>wkw+t{`62Q9vOGr#5EH7ZTi2X)M>-P@fkhP%hm8w6f*W4*Mq-KH5c z75fDji@?3m(&B?XG}>erL9`n7pzEDB&PtlV_$yIlG?@N5XaaOBncXVBpkQy;{9|KI zfedb6!E8sqX1$MQV{Y0Oo1f4A-kd?o9K&0zRAtat>^b#_o1E7 zZmqSv*knANpOTVt^wjg|&OujKch$7ZX|vcxYevQLPwD5>KAnz2^?a42!6>l1-OCDX z6`qhsQ%^G^IuKa)Cs0E3lU;Oxmt^FZr6e$bH@rJ4Eo+4(r#!Xc%7iu>K#T{i_9Gu;q9Up>s*~KfcC4%z_(b0}jaN0EC*FGO5Wu9;#oQH?U{o`XW6s-yh zf`0Mx@IWPCE4&#eTw>(lsP}t)d49ODYA(_1@O^%~jSLUBX)eJg*1Z(5=?O`HzYdDR z#uX&uDII;{e*?xQ4JwQz$P=(so<>2zDS0f&Xh%S@lsn;0;W+U00fg)>wx)JfqireN zmR()M#es+6cqBoc)i1WNCci%Zn+rfmIgQy58VC&|?ckIecKMotNu5YQkS`v=m(HBS zKkCK*8<%86olPEok@pWKXgPVNhqVE@?aSEOWf_Lxnz9aY>l{L({kEu1Pm}C)9Uqsq z|E$wabDo!*ZlQDH2_}ic)@`2u9`W^0a4tF{@t9ak_EFtCH{BsfG7CAEh~Zm0{K}r; ztdq~pq306bbJAu;I@`MZorOLvfFQv{qqyHzI4uK82E9smPb6o_m78py9r3Asg<2M zkY)Z-QwBGl>gt_S2~Z&VAJsj$mnoxN>ao6oHeX$`0qZPe864B!UDs)_PLA0vDM?Ej zW$781uAARNVdaoVVGMX_cU$!OtZ(bD_^~+lM|yeXq#h%a4h_vvsy5Ec8@a5O7gZTZ zpxN?v8@2eZZR|DGDASb?1`bDCzxx2ANqp7v?vB;w%bwZR$+ITH+3$Q#$ioI*85^wk zlHPeI(9GYo1Pxhn6iAa#T!8VdPpeM?A^5{bKv|*~IF&!UmqY8BQE`TRsqfvNGdY=`>EQ)^0*|wFY$2erOMK%+zACwz2NIB-}dd7v=P!Qj^+~mDYUdoqYwZl7K zZtL^2Ja=(A(XL@uyz$7mb#OzVS!k{sE7LYLwNx;swXsnhsnF%`Rc-Y3j}hHX1CWp= zrO0zj(J38i0Ax+|A6CSroU($#TSCHRnmO0g6>c>(HDGgdGp%B)FPuBGe{s0g?cJRg=bX3s1#^Bf27ZLRq6|Q_qvDQGRhjBi2Ul5Fu{^)% z@}jzTG(UCiW;OrJPrFhPwX=LeCNHkqGE-3-)7aDT77`IvS;6V;c;;YB&0CnAZD?(c zl9`=-f0h96_p~{5lS2MsmzHC`OqZeT%X1&iO1MCq;ccWWW{pYIN=J<4a);VTTkBUW19GpsY-0C5h%^YnuBfOSeaIT`IoB`kGH2C)6}m#Nlo zXqc_4tz4{~)TLg9<9M%a3V?ikyV=f+Qe7P#%e=KD;j_HnX)$w6oZmXHL471tjbFbq z;agDC9z<(NsNQDOo?2b0+~_s@i1Ax-gVcMT?~$^Hts|kq9nb1D*w;3!s{&Ct+N*>_ zI=?hfb*CU-FIQ_Vyh}FA&-QvpmagyD%JjyFPfj=qfS$oUk${|_4faxEAluG_-jO{{ zCoI$=zem=&=EwQKS_!$2IN|tB22o93-f1PE&@^Y?ancRKLdfQX69=2OBZmu;4*0~X z7?9Cma6QG`sZI8yO{bfM%^u(9^%7 z=1N4+j7%%){f?WOH#{ma#UfW()cTXIlsD5O38}#oV@mcLdj8SLMK+lAyf`lZB?l zh?F4IjI(FRQP3DNIQ3ifu{K^2JI{N7LS>YZTWS6l=QJ~!)KH|G=&`iQ4YGE4jG9UD z_Yk7v;IDeZmE^H0+=d*B<)X5&VZGDrlR@WSx^1kk;c~=@fzjHW5-m47M`J#3qcRHt z{$V^paT773CS;=_7w9D{@UTzbq|Ffbwb#&LddJy`Wc~K?(vS)720U6+h1+IGC<;bx zKDwt**HipxLka76@0nq86XuEKb*gYOcG+sCYf~mUA^YvyH=FIK;m@4DXqkC^-VJ@E z{-xE{x-spHSBT|wl;+`fIc+-TGldFaIG=c+9DypM{^t7ao1^StvvQhGFBk-_U` zOKnwDT#ST@ssmL>s3SZzJ*}jqwBva14+4*jj9gw_eg6Epq?o7P`eXOXN^9J|2wl21 zG#^pjqqCqkVq-8B9m(%LZ*+=XTl>z;5B~i4?@p6}feh<;JK|}*CAL2nYr7#V3gF7} zF*Y_df^^(IW0A|x-o8Oj4K%Rca(j^7%YMHz3+P%eUV5MGgLU8%GY? zQa#_n#hQaN+4A9{-ECvv8zj76TbR@&Elu;+iNke6!zzj@aoE_D2ZTa%WHeg_YYn5U z6CU1L;-7D-gR6cLKS>Puj|U57at(CORb_Z;$Xah%iD9CezSbHIjmqfqVq3w;EWg+v z6^1Nwq_j8=W=2eHX{Fe||N7NZF0$604sd`d#g%XLB5HWTdHXMh8t} zO+}?uMc--?w);Rgn@!UmoQjpzHZ>wadG|y*gZYI!4JHn51Lv#N#zompBgT#y()Vzr zxqme-CbP6EFeaeK6OvtjtW?TjNbJcc#CYEcPbfP_*K|{UURrjOY^7qgy8lo!EzH+m zN5U!i@c^~7Q9&xKpL5d6TjMY?CO;{~NMAOE1@lu0h0FPQd3Bbvv_C~1p+2B^BuSl*5ORBH2*QPi`fHi9jM7>y zKC5YCQ&U~^CN$ySA4&SUyfiIYUtf=m%K*g>jh&sH=i`aqzMV8pFGo5pDJ*PkY+P7e zOiD}y21Z7tB_z1qPPL)gL-DXfA)&?NKOUnOe?i;6q!8=-OGvD(?{o4}rGaA++wUA` z_CFs#acOA|_FkU}$?y4QuyirBC;rV4Tzh+KnI5Y;J(O;g2>H$DqZ!k&=wBVJ7+KMN z__9dAgm+n7Org`({Bdd&CN?g%)Jc!U#l?h@a_|A}(o?}BZLtQ*v3n!$d?)cESo|6C z#1GneeKXA&w zo}i(H?r}Yalvqb~U{kkolJv6k-i|I}0PkoG(CzvySalo5iIRLG)p@e*jP#2 zLt~+)VJ19tHiZTYqW-vS9*RN1=MeovR)G+HFqq%EWI8Pfok^bS~8~4jKC_#pMEhrfM=+Qg(bUT;- zi2vqfdHCg_B+l_APqwXN#k(JugcZl-@oEY-Em)>{N|>?{xw53d?62m zZxSVym`C(afoUt1LAZ_1*XC*hWY{Kp;VY7p#{XuZ=7N*^B0eTdA09~4Xk@jq#=7i{ zv)&&RxZ))LIir)5<6Nqpv|r@`@K0I8G}C+5M&}c5R~vxz5eN;RBTOA@NXl-k6vfVb z`3?+Rysq^*k3cWVPJS^R?ND}3O~(pNvrCEa%MaFAD0_^x1A+@x|LFo!xwN@jB1#vR zqm={{Y-|f(-)iB8=9F_k(;qDVCca*tiLydB<-sl~OL~BCZVi8kQb8d}ckN_^9vcaS zmBB~pn@E))sr8cz?B3+l!p4a!B<5KCfzqfxI6Cxepfrjy1+^N*noa$8Qv#}lu&uvz z(^JW#85e8xaKTC%S~_(Su?PIPLYtf2qq`LhbYA;RvApIO>h$^f`K1Q|IsdqH|FcS$ zf|=xuJLIU7C?@}2wQbUHQ<@kC=nw~ALm*@FRR58`zb&%7W1xfzmgV^WXEq`);*;Kr zA_xbC9PzFHVbT5%n1L0$<_i7?*7)C6o>=9D?$;${WMp(?o^2We{);qvSs`LY^NKth zNtFhN>A&QsRA@4v&L$O) z6Ag#{Gy3=6qZouiJAOasa{93T->s0q#=fF1VKU|?{@<(+-si?ZTZx>1kznrqFZM6O z`?RjZwX(-$Tk!p3VbQ-z+llIbbuRMq+x-9b`d_OW<(lrzc-J$*m1%;L~S&4>s+8Z;>-9B}dAr;q!d2PMo?mN6M;53(th9 zD&eCS{oTnq-$}EK#bQ}ZR>t>qJ2&3@WyY89VB~ml1YJsxlRFC#PHTq-r`Ko}vU2I{RxQ z>_bBQVEnk#S9W|j%sh9?JKnxnH){R>i|IN< z_D^NCC3O3vx+k3FdZUaylDb2u;jfZdZC|+kZm**LIWq%(q!9{dy3L0}q2ZPelB!=+ zlWL!XYfwE2zUmrdtJTHH_4l;GPbsqKnHV1=YvBzdXYjwnp?g>BrExwZW>F+p0@&9| zdtS{fqVzIIdUVzNIu4z;anb^r2*FO(=-t00qxz^2zo=MwusAI-L6s_O?}zy?TFEeIeu#O`??jP(6jz^hucxiiVs+d#O6HwEtifoT!Uk$svkVP?r`l}j z;SYrq(a(dgci-%D|A|ORCVMmAml{^v(=tlb2L}xoOq)HO63pPztJ_4=w)HGYAg(_M(DDJfAkkl8z?C4 zx^2vMwU_m-b7m7CCvG=Z4GaV-!~~aFt<8sg!rbBWQJ{)1G2h3-KZG3gzvCNu*P)uS zj79^V%D!$15XS&GZM8jAZ-)Dd&d`zh{60G^?4Hd>u*|~AC%JKsnB5ocB{q8Yn<;(L z@UNwD>8Bo!;1h|%0-}k$_ySJdM$P2R0fgxxE{@$vM~b0A3*DeT|A2;kXLgEe>*fR?SG;>KK@mCKX!i zmRg4)9fLP!NtAoyv(Ep)LSdl>fqx|mR@-FZ=UkVgMlFPb@eULH#f(FvaEVOso4g?E zMLW*om?|N-!koc`NS1QHubA^ z<9j2{xO;C>s~qok!b`>xK=ykuFsR-aC9jc1qxGsSL{wA{*m>B}4pX?kUYDSK85Fcs zcdO+Fp1%b`j+_cKEKVBrj=TCQLaNEW=P8-WVUe88C1)=*G;i&%UTsm1c0*-?K~fzy z!=b*Tgn32JP3oUvaR0R*}$6MMCC_nX1b$2mIG27Bj|(3o1~AARl%_pf6Ct z>dAnaPLA}g)qUV(G+}E@KmvhYmYKWO{ho8HSCP<+k@+3f~!sAxlfzu>xaXv3J1|{0)0i?}r;x z!NAkcBX840bEa=o%i`UxsU@ZBFD@N9gX|(X--yY37Iw7quZE-=saBh!u=0=B&NIqw z1sCY!DX5jK&6!OBw0xiwuYV2OBd<6a0Lpi&*~75N#T65A@Ue(u#vi%%jc&Xh&V2c( zC=Q^9<(X*S*q_*UwB;0A53WCb zZP1?rRD={0N$xW;@eEkOKY2TC+Qun-Oq|_^1jXY2amlwk-bwXKgoSSvL}nyNfHLn) z;MDV1)vYN*N)}h8rBT?pfS$ajq$I`?^(Aj7u)|N~&nd(Ht<~FNebdn-KH&hK#uXJIA~c; z&1gRG8ajv-!905%;2l;6U8*jv7|QXs#*1sp3g{cps&ZJzyaX|wJdUrvuJXD|w=M*vabIb8EY} ze7^Z}x4%DJ^utP3rdpc&;pDO+Tm8qU(dFa9X2eWSrT9pNAGxjX^baoK5(PVau69>j zKCAj|nfEnS3sM-rV#{_o5PDP7J|Lh@E>>oKR;wQAr%$)KwZxY#K!2t}-OyeneOLSV zu3(+313e8Wv^-4FDojO0Zn>5>W*waV;^}mIs>Im1N|fLanVhboaY6q$a*%eW<@O!{V@f#3aoEslb>a2 zXoB2n`yF2`)v<-up==o)*}!@g-M>xd_7A+D_SdoLeZfRzbxnxyX7}=kn%NAml)=-J zH4J+i$j(L*-7X412CnrAu?x0FXwjMSSqjBAO*0opPJP0OR2pu?s(ruF*?WBorfNL@ zZZ^IWFYNj_Q!yVjT03+ZcpvB$PqeUs>$qR<+u;zVBhUC+;#hF^h{8cHh>hb+R-RY@ z(pYw3UtKPWxOl(=c{nhm22AyT<~ZX@3-#0 zjt6r6;VQUJ$XvocPls*Gom-w+{kt z)2d9}A0!r5{$(uMojxh$Gdmuu_a-^8O%GT@ybw=Z@2}&K&b=YWYws#OPmh1Lk&>)e zJxcoy%h~n%H~CT)#qDK{=YkmRNKlb@qVi04pZ%Ot2qip`<7E|xxd_iSI*YK1Mr-fU z(%SwLNv*Nevmj&O#kvirfU*OMq<`l1sH&L6#>GP!N;SHkM3N4wUrc2UD8+M9vP`d( zzT+2q{=QMn&$XRWD)DWZnT;)$LOv9CEta|*-j-KUv&tJSGapCUfy1g&WM(_dSiITT z9N#<37T0^OB^rO5d>D$t56`Vh`CM%}7GR43c-JFM{h5Dpm-Tm|oi4Dg#qaH)F#vmH zAvdf5w)7|+7&l!Z?HqwN%2Q}Q*Q1gkdm|t8l9TiZj^uUGAAWvjXK%mdQ?X>I{poYW zd;I|A3*I~)7woB5Ua?$`F`)CqZWyJjY`2avcz{B>*shjqT5Pr4ANTLQrHz??yHW1< z2l_8I^A9DNfzkUAzRgtH`aDxDCT*r8!6y~?^2Lye{;@rJD+~@sX^qXJ@#maUZP|xp zVK(UPZw&rSsbBm2X=A0n z4#cy+BHI5Ik<5e29Itb9Fa{8M*y+jcMKikogV`cSkWViqn3DOouC#aVl=~Bmdm9xO zibp@BlFVkN@)X+*eWsL*tgFY3m`qC0g9(nOxPv5u_?UI&3nhJ>vuVfscp74T1b_#8 z*U2P>wHAIbEkPnso^;Q0Jkz&g|7xd3+91l=Fl+Kxd?!Eh-kczhPBYegF}X0-I4 ztR@8k9g)NE^=H$X)^Xrg%Z}BRRhe=Hl9IvB-K^AJ(XqVDCCK;;=l&%GtX~~!XlKeJ zi{JMdg(`fCrqzwSVi}JLb3@=4ck*u!0a<{5EpVh&vi?we#&z2}6yu`-8u@4VNC(dq zV}F-+m79+OUNL~Y_XsF+QgWk-oo5pk9DGj3jeY5(EkJfRHpAjPuu$dY+je5}mn|Z= zJI?5Y4a05osmHB5S@48?++d-a2%d}Q+#Y|7oQg@1kSaBwD=9ZYLX*u3kBIZXEG2e0o`tm}>@|+=KX061m zk=TSCflm`GvnLjbdi2rrrqQ2^E;PGlXB}ynlRh;xu@j@w%+oeqDSLQLWMs^L|E-`3 z@V#1$FTNe7l6m$XP?iXLdE&NTUE|{b3PC{nj#L&BJ2a9>VE6NK+pFxXCSq+Rlpjzv z{_J4^>wo!9xavV%u*X}Q^ER=p6b_Nl-TRRnkRXd|_s&}AjdRv_If}3H$2GfsjV~!3 zGa;wD|57Xub&y$0BlqP5>bA;>ZK?2{mfzTzrK}TLz4J;b#G_Q>SFKf zJwwWI?GH=})s1;i8?=z&I#{*k#_jEIr+Tjb)N3LmFj8UNFK{0^v}jpuEbZWB+K%Pm zNwa3yWL3~sO*KVpvMr3PWo1{;vvMfdxUYA~7Vi=;+V;4W^M>6We)?Nvd+rDuCF*!SQPAolP({n8N(|1s%=I4yS)YLG~<%|AdIrXx-b*G)D zVp?SXE2;t8n*K#b3;XJCJ18XqHGP}gJ=$#ac8kvHvg6N50enc4ray*|YC%}me} z&Mo0#5Awgc0PR#9oowYA4b58)$8mJWNEQ_ae?3cT6#U%TmWyeH;`M4;%Pr$jq^E^V zZ-FFfMKuT^9zkF&Bm#+KWAP2^Qdml zE*ys(FwnE(a+1*Ydl^Un{j+nc@shMSNdo(?+pW1%Yj+SJYQcTXPUp&4{`^5yj2Xbr zFa40S`;o#kmJ%QO8V%+YR2!c~7;o6P5ep2~_P<|g&x14&+2zO;mYjZ;A(3$v))VF@NmLNN>6Aw6U>Juy z!y^BPxFzvASf2MKahy%6E=?Z45dFA!TcE#n_)*65dxmfG^}&k6^lq|TN*L}(Gw|n^ zCOh{3&1QVZcmw27ejs-#CqNdf*or06@u>@S{6P!;YPmY{sd<)SczYHAM-3K(gd~50 zl)>_fZ#wmXOHZ$oUY2}MyD(c9r%=uRhq$*6ilgZoz6S^r2ofy82_6U#++BmaOK^90 z2*EvAaCdi?1b270pv&S8`|d5*b>Gh)-&6Hfy;bj2?d;ahbWe9rchBkbJLinXDJ<|_ zCN$G5(em=zGfhy1WlV!1q`h@2!3bCTHD*n7eQgl?I~FDf{H1 zMdGQ-_orDp(R0woFFH4Pl9Tp!fB38FkDZM^)|+bv3?!rO8(y>R9_(ISCHiu*6go;( z%kK)5B;g&xO4q^CD3)c4rZ7sn$*5Tqgg;ze)fMh0zSU}WN%-if%X!E$;7Y5i$B`YG zlXiH>42IkF_cpvYADy5D^7|U>+>Gjg5@gz6Dj<_wL?QlekX8Ptp`=-&oZo#B5g(4x zieNV{tV6Ej>X}ewC(2Jwb4<1llSHVaGgw{D>Pt+El=UI1hWD>yC}t2iTSyZYzh zY3ySFMt6Z%t^;{T$1E#_pKc_KyGpF*J?ol`s zLoE|K$HF;>d`k*xC4nt1HIFZ|)n`OpbNKU3*+S_v`b*!f2Ay}SgD2@eB@5lCO!n2WwTQfZ z*$=`oYO=X3U!g1!HBn@#nBF1SczwHat}`&?vD!96xbH3>wxk*l!BI5j@20H`%PT4Q zyi#74*ij|nPA$tkW_?Goaw$M9oZ$JiuL2l7MlxHyFSM=EE0mJuY=@N@WIio2`WnyO z>biKT`rGUndB+hVt@N{o(smy8`hwIM-`U(iwT#>)huw{J zUOk|yUkKwA$>W3pD%uBNXYnbLBXvf+FE3lh>l%pXcInP%kg8+2pu(FCiyu z9y$rCj{;}tqd?E+?rO#!GU4LvTwz+O;ugc#CCzDV7AZHg>NaebCFQeOd`CtWTB#o` zEcngCTBsO`bH0($exr#Xdt~nJ9_3i?lw|d($(K5be+RqTZ@Vv(a zP#!X+K{h^gH83uRYWd#U9zA3Dch7%$lK^a=?)mzA3GV>R?jP&?&66CNmZDwU{wsbS}yHWG!HC4lxiB(MxT2-s${m)*BqO z78DkMgr_d|^fv9_e7cRL{d@SdV_hcJ2E=`B+JM*$-B!Sruj|md0rO1jVqKy8WNyz$ zOfo8p&x;R759=Ko8ysN>10gsp(yPVv4^T<6lIi{~UH~Z(7``wZ(<6g4BkzAe3E_g} zx05;hCcM;ZkFMzLh_D*cwW|C^37!#eU!EWFIgr~X7EMK;h({LHND zL=18)%$esN$OB6pe*U;hF%hjsee%QuJbFYKA#nS6zY=7#D6B`+jV_?)uMC+3%U#rB zMpUd0bhI!J&VBySZYi%nUNhrX-q8^iQAzk^_JbC1h{(8y=jElnA#fRD`e$dlVC6H2 z&EzMK|GvJD&+zy2jHrMzzjX$V1{PKQ2-)x$*>4(_8b9o}KTtSM=#OA7Y7(rsVd`FU zv%gddTI*!GvJek)dGHeiPskIRz-zc<)qg$uzIp2Ek8hvFS3ylm%w|{of!UU#kqLqA z>vW5HQzpzmw~qEt6qvw}-%Dm@U=9l+0i0z4ESX66WJy}`eDPENXhw&*5J!I2s$V{B zm)eS+QMOkJo;?wNP1<`yu!D~-yd_R#8jIDkLUnn-emaLv z<@{M?0m7$>wNnbCdA6JBf7iz)f*O}mZnH;nVUtCirV!nU!jH#Moi-{pZ?icYx87gC z!I-b#;Yt$xOw~z)&@L`>0$zK2AJp*9;+fc@tA@no37>3YJ8lKfvQ8Lp$sU3gUBFBoU)%K&9>!mHACC&!3N;WPiHi%}66? zM7_b=T^eGN8;M*F8qaKUewj?~{i#nD4^uoWy~2t0FP}QkT3Tcl$KkKmJAW+gEUb;K zZTC-X&EA*@73wgkcTfHv7dOndGd|s>s%v0dSQtfK@U199JV?_@AwXi4J359*EPxLx zkb?6v)Aq@(tzAMM0K!>LacQl*7$iq%0=r-E0Wpqn$@E1oxib|LIQNj6wR-2@zk8 z_Sx{@SHZZr^c??;Hl82;sjO<-=wQgA)$#XRH-s+q;-l!M0IfV+bD}ZP>u5#}F2B!S zH_NhhFxZqf54V3X2Nl#Z(W_$E?O^R8zhel-_XdMilX2D>3d*`Gq#Pn|}&TDGJQS2aI8Z#?A+0NGbZ zTe6TP{WYtnI2N%$U6cuNH4~B4m`2*}9W(G1axI@1Z=vZB>8ok<%GKvl>YN;~H8Om* z9B2F1Eg^93FjR0#>{dkq+w4u!5n0*SSTS$WAgwpR>lwrc@PS^0N6Kh?^_-x9rOJI()lyFJ@1uXxw$rTGo*jTz5s~S91 zTk+ldb#wvGlVs=k;(gQJkOsJv;9HXJALNwvq!Nxe->T8a)mM~)Yh0vJO}lVb>C7|j zFaW^}VuBirwW`TxzIus743!6SM+}ZW5?nWklt*H}|KTlEP^N(mTm!_s99%{t%D7zC062CPsxu>|F)4wWH zrp%-O6qC6&sp$fgTam|!m01#ncLin%!-QEi!h|XqoYxQLPK>}(O&do#osd=@LAlK^ z=^1JUNc%dMSAgAc#t)q;r$sE(u6eUbF7vUbX9Y`m!5R%d)`zYAfq#O_;{$np)zn_8 zy4Hq#@H{%z$8BfV*tWCbltxJS(e6SP4}%tGvE2cWj|fcmlW*_x+_|8))dsp#^b7Us zaa}C5t7M>(LIxkemAbSRta*2{XJshD!W=ee@Cwd5gN;tyX3s55DbVmdp`izirDWtE zH5b>1R+ohgQ2`v2ppQcqw4|4=r8RAJHazm$(7*784rv=KbQzQ@)Km+?5(_9TC9Tub zX_+l2Xi;kS8Vi#^+#0Yr&^hZBnKDy&YK1q(Q}Elmmjv)a#P%gDs^0RTWtRA!cZ;U;c7N_7 zW8M#iaiFk8yN5=wV1aRAKeLD!?8p)EdCN!{+O69>e?sDcqUJ(0$VUIMn1cdQjfFFA+UMXddrSUK#GJlHTc{?Igkt^VoKUSU<%(hzO=lyJ@VMB?0N zg@P`n4e5)EOScKw`U%NP;NeMrPyt+|b4&6RBD_Mzs%Kv_+9T}HbhuJnsOmJrK+xd3 z)IB({53)S&VlOtKj1QYMuh4?{no~M83H~s3A);r&9O3)*`}2DVub0nttjZr=v$-%opO(g8$ivLJvqJ zHjlO+@{LGyyNYtRF#~_s|NNdXps@LrC0kJ}Dy1VMbt+&`kVt8$J(Fvttq!)`!Ylfx zleeho6_R}j^FL*|f9?)NAzu&$|9uSlC67pz5caRDK=+c=GBp1Z{QhxroZR=ZEWO5) zyaCL9kviu?33={U|EfN8pW8)!3a!uITgK-cng3+VZ6N%w{{PRcopY%hsy(NfFrWgZ z>;cT=j2E+!x|$k)O2EG^eL#{Q6ms#8E1uHAe6EuIS3Z9FpFD*AKePP({l9DV{k6&8 zB_W%BjWztAbop5STMd8yk2)Y_IRk&EyizwHcRJi%kgznm&4=?y-8Eb5!u6q|<10vE zXUNpc@VsHe#B1_QU=}-UxGYk_+|D|oS^cj@m}}*~<*ge+m$EckxNg}`vzzJXWdz9M z9Evi1vhHa9tECm$uvjjsiGC}W^to6WWvUOz5%>J}ap;}UD$dbS{Fv6|EQCmxkZfi5 z)m+2Zd+tX^34M&pl-cr;1Ap)Z0o}%meNh;D{Kj)`Q{Yw zYSo?)LBB%Ded%Snn?CXC%EW?qNca1oR4C-0)3nF3#*7MWwYvuMk-OJZq z9B-8ZKWL>EcA^=myL?M0uu5V}Hx(;@JeKuyzu#V8vJ*g!nDJ~muI9i+wL`oIje*M# zpI!z!bSav8)GOxcegD2KxrOz23j9^?^w6#?D-(q~rHj5hc4trJ{L)kCBQa;rIT7$M zEl$RGeE}y+nE;0%TM7~lVM?n%JASTuv7Co@(aR1fr zZviZ$sqLls6)vt>;*{1qBcduBrW|juoN#JIfkKYboG!VjMakgU*u$^ipVVRfr8H-q z<1yh$14_&Lq#iSt#Ph^Xkb*f!?xRh0X zu!yN{u{c@|6SkrbX(Ex-BR)Z}+Q6GII6M^J*IhpVQ@x5k8~G#P&q2capZ4oOuw~`PuirJHc)kP zt#FWN5%NkPA8roqBxkNKZJr#!_msnsl6&_U0D0Vqt*yYvL-#Y}4}T92t)F+^7gfHd z*D;ht>#cvh4M5T>#N-0+zsd7&te6~q!}xUwzoBan=IT~=xGx&v(rPQW$tqEPWqOG# z+cQ;h%xHuzgHLiB(Yblpvem7m3F7}AAk zg3$BrB3fxn=b-n^^#O2HjZ?)B>5Qr^~ptXHl@?utjBQ72i zu~yAexZW~u1g&T6fJC`8jK6A#CrzWUKR#!M8_|Y>nm>F`_Zw8<#b<|4xs=bxIC;lW5p8Fv$0ldDVHr; zx7VE=#!_ULz6@3#t9|ohe4~%3E=eVZfb+9^|4AqpoSs0*RQ_cG*zQZg9Q_kqAoVzB ztK;d_wITpp*mb+*%vih~--*%{zm4DeHGlw^Lvnw!j0PZSJd7mI_yGB0-tCo&rT9I1 zM-1@(#da@iG-+>u=BJ_PK?dE+s;Bzf>iNs}jd#7JT(e(-k;w1$%9FPri;Lc$CqExzepRkK_A1_|RW%GADg|v?BfO z1cqW2l}D$;um|_WOR*Z`B1+;v51EI7(!no7L!Tr9LEXM0;&Ptznt+KbgF+@+cU~KW z^p}`3cnj_8*$KKy7sLx3WxCumX?wK$&WA__NO-rp-eRKf%+$&+;Mm$#2Pljv`@Q&r zQ@o33&knF!X$OB}42BBSc-nnZ0X`LVT!gnpA?+<~83>Tbs>7-oQKN&8En!G`4o^}u z_EGB54cIT|FfK9cooWZ0p#-6QZ=0#30##8d`}6nKr}OdyqpRiJDb=Oj#I!~cdAswI zFRl8I*)HV$B=-}duK}8yjwL%?Q2*9GfAKI?*{((0SaSs(ceAcrG8N#v zZA6a%;9nWBAae_oEw!$${Yq0=@YYNei1oXd%+qm-k}rxRXxfbDOK!+;N^vz6QDxVB zOVVODlC)N1;RxLLV%>%?R&La{STLYeL5ntRNZ#|0lD$pL0RS&ZNm&RRjyfOHv7ej* zfN`C|t$um;RPrna>@sZxse&ccXo1;z1>$x{H>QBqhis|P@WooDPqZHh{FOJ;FIWD+ z5=2wd0L@qU8Z#U940B!S_8yf~)k7cnzWdYe>=tPy|1C_tz^Hsa!^8jVD%rjG0mdi< z{pVGC6W7;ui^&AD3@mwKjh5qY-L;;_wKZWWL1AaxhY?GH{d-sfS(S7`Wev}vLp$C? zyF5*{x-G}fIUa43*=V27Q?|k0e1;1@t`Thscw$KQPy`Ety9p)SK+AY83+rWI;3L5H z^^bz9&DaCqyWRN@j9mwBt_TDgtID=Wx=yq%rR#INz-}TP4d^hT6u2P5*?opS{Vxg( zKWA4yT~4Q7dsQaz{&De4Q|PF2=# zX$7SzLl488@j9i|b2mH)GGmZ>?<8?22~dEwSM7w{WiKtvY#ANC4VEo@CA2nla^~CG z+JDE0T;Fv1^4s2;Q^DsmMSdHb|E`gjyk#3yYuw~b0bKN~U-=Z#zDy*IK0FMD2-)5Q z%xs)CZZ++2PQS$-vYP%trzR$0NaddO3A+@p@$XA{k0`U zsLR!RBq=O(lD6f(COBk{d1_+NIRoxv2J;|zGccfaC`?1%|F7`@DS(&2gE z8*iYWM(M&l_M+dxjoC*DWS1_>>d+aDXlKoKYH&D>eD9@{6F&Bj3v|%bTO)HEnO>&F z`$*8q&1>Kh8(;4P-V%JS1ir2%1o;>>K1v4(jX(`RRV0$-*H(M6%PT0gqWN!ydZQ0f zoV~Z=9|oQtT^kT$i5fukQN|CYACJW;e2=KGJzR()A#)7UGc!7_M`ekodPFj} z^Ct0I%Q%$Cg0rHl%jGNXCv)9lm~s0*@oM2V3gGNBIQo@ek$OS?1j`@60fWM@D{u-F zgzggLFJo13X^!{b}}W>T(v?diT3Vze_;BbV^$>0AKvGKZe3PV-;O0Tx3#n@Sg2!Y~(UT zdgTN-nn32Va}4~g6iums$nT}x@AmLY_KxOxgHOTI3(%*h+X8eT0i}_7EckQxQC!Vz ze@KHT9>0#nM5Kc%KGEkZS;#(bB9IS)2lCB3JL7T$pACOE`_Zdin&?QOZN5rOvStQI zEmzy=-?_;&AprSA&(;rahsy-899VUmlmV07DwoBLz71+CxF|5B&lmR(A#Qrj4ZUN^ zyNh`|3h@fIwy6$j3j@C>jhB|~aJ@LSHMOJ)l)?^v*^SH)jGIIfnKPc?FcWR~z;4dP zoh-tiDndbrf6x-D>Ae3#*~Hn#%ZwS;`#<< zff?mdHuLre@VVv(HKE_7LUdb*8>Cxs@ye^Q&i z3QvUwm=)IwnN(0ydDYy=Aqow>WK*~C~__Th)N?o;_h1ufic_v80C{OKW6((66%fV$nGu;)@j4Zgl z=En>qa|FAG1L^3HoclYN(4#4xr7MvlB^b`z1Nb*56!0o;J;^~EsxZR)`TGmOtz0|aX#0$rtBdgZ3 zN9-T1tn5fxMdv}^tx|#-Ghp=`aS{?sL>YYRsAN-j4U!VvuP0br#Fv|4*fx1>Lg~I@ zu$DG`sKsIdZ;XHQf&}QI!eA}DekP1d%PO!z8q-6r)SU<}-cYaud_`JQ_?`;9ym2Qo zjmg;AnQ-Y-`C2YnKq7&ec3xSn){zxH7+Jh0*V&+DE$>c`uw-n1TCRt)oSmtKc-s@M z_j}xSk3(WFsA*E8vIK+{*wL{)oPXH@d~2}?MD3m9NGZ7)>(#)0$x$C8Hfx&n^Yf*6 z$_QLuhGF6vH=a1J3pSrDBia0_`z4$wdFOQ2J43nnxrw@XNyJZ};8z_TkDC=WG+eDC z%M9U7Ur3G~pmIMHf=>9ra@rr&d={T<(q>5ZT;NVhoeYvrJKdphCSa4tHRBt^_a|ew z_R+x_qeKt}B-d|!yWn}OhQ;9|yW(MiBV?qj8Z*1ufgD@RM~0E4Wl5O6iV;M6&a>PNrV+79QY^w(CCy#b?A%H4F-za$b{gRJ;Rd zjL=D>D!Pa?;RRJ2l9gmx^~1aV{R^-&&ONYs9d5#veeS*fE|S5a%_;#!q!yPdn?qt~DLfr~Zlg1#NG z&e;?u3i@jI?yY})UeBEq8U5@$)xIsxB)XU4Euvj;}$ zi72i4yCKI6-IKIZV;z-TSbsDTz29aoTRF#PmGgpuO7CUmS+bLpk$~wWHv$#)<0X^t zD{!XqFo3pSM5e%i{IbK~Z}q4ZxIxYiuwZ-?`bK-vnFChKHQrHphMSTlN?@b_W>YWx z#mvUD)x!}@I=?-iUvAc{&F@!cz{e>wKvWzW3FUAPj}RHSXzq~RJ^o8icR-TEc@rpa z)Q}mr*uwU^cXUZGB~|}9y=fGrp9KIq{Me0~3W0y5=s~w38Jwnnto>(GFNOi%r56wk z77GEEu?enPqL>EcemONhh)o}?ZU5FkprXP7>ivtop;>2I(K0)X6qIs52l0n|Z~VZ@ zE&6AV9ECBfcwwUFW|4Rpx(YUqVZrlUa2lcJpZ`u=66pZ9`nZH zsmQPGs9y>37P=5#U%oKS=9_HJ4Z0q+YkZ~RM|3fgT7wCMFOHQRE7dD?sk?S)cQklh zP3tmxeF1vG&wAP=Q5>C`n}~vmxJ=s}IC*NK#en4V{L`JdGK&`X(}*z+a3{NA|I*EY zLXGAM4>Y?HwcFn(T`u$lri%jgbF9&izIMDooc2Ln!;B?b@X3Q|AvVB_2AUjXZsL^< zlh9p4h0q&Zf?%NV7qQIe{4iP)hxGh4+66Yu{o4&2o5J(PX9wUb(cMmCAKQR&8TzM- zgiuk;sb?qE8Zn~gbQnPjOxTNqL3;qvH=+cU?r|6oH01f0h(`wW1vM;fsWmb(%*tG= zDPq4XJW5zsHD$L{i_KC_leIMs#eMux-z>7U)atoWK1k<0(5X;igZcXpaaSC8hdj|; zRwndyy94!r)cmiZR@1Di-pXVYxgyIq79`C(4=vvl$Odj~F+TvRyRGPDH*@pY3UBWx zmVD2HzLVwTrFFaln8`M#YST0tnNHZefWeoeh6NbXlj|z+bnQ($8xUkU2~VQPuc+a! zXWqApCu8ID8gcb4e)HG+Zuk*Z+C+uo8qDy>100kx6hm`<_lxe@y*MFlI8adLFKJu& z@y^5&$E$MRX+7&jiDRYgs-hm&nDmjXQ_3Lc?clP2a}LMvYDBylmK^jl)8=;z_x&FsP5-q;@n(ix%vtX5R=eNqhSYv( z2_hQaiy}!`khH+#NA=(%gDyTLk9K!T*xA$~`}<^lc>%(Q6M)z(44gEW zxQ3#lG*KiP=9_1)tKHPvE>$+lA9=aVD%GwR<-=5Fy{9Ord>xivjxN-+093AWnL9mP ztVUOx!%o&)U^ta#CmbPR^;&42R&jeA~g@ul*sf<;!rQqa*ba8@{0OWP29K)2u*MI_U6qH zjU71EZeb_G^LJT*fe}=kyS!An_Or>=U6q$8&0@LVXWU@t*KNp`Qt8WjdGP;05YrEh z^H9FVTUI-Cu^8GwF1#?STX$>!4HnqtV3^0AjW-EFD>kH%4H8uU|!GMtRSTD_N#a=^o8gb zntsZ^HCvKrUeWt35yMOrFG$7Ez>ekS-)ghxmtBS&O9 zWB)ZPTwO6SvG`4Y;H^m2hcbed;a*W4#eZz)`Ed7bQws|mOmA8KLu;-UeuZ4{y&9zw zK-N+Hs|9nr@c)Z(c~X1=5oQwL{&0e|+B(JkNl$E*=d7gV}(vGgPA^sDg z*3v4f;#F&RCNauB{gt-fQiK;IEZRMuJtoAXZ#EX13mgXhMz3PlHp(1^Sr=WOsxL0H z_6G`QiLtKSC;Hzlr6n~bbTlTu8e?*BEY^%v60_ELxks7v$-L))#??WQ(!RG|2)r1Ym}QQth4U}A8`^-}@rhUl!ooZUqk zsrHCriYn7JTsLb9g7K+GUuK1pjo7x6$yk+J>i(viGaJ5-VkuS3)@td;;V!cM2^ zb2ak~D*JiLNBZ$$`2gZg(Gt5KU}~;V!T1 zt>|-rdm@uxq1gl^0=~TpfS|ftv}e?nNhF_IHgG@Ofzg}%;Br2^s%V{_WGOC_xT^_1 zZ+1id$)DSXhrJh7i29d9|pl)+`b3FZ#oQ|5FyiP%{{m-NB zr9Lr>(`e}Tl@hT&N_v<1d^PHXl_h6awW6$qGz7^kpV#j?;r&hLd#wc@lZ#TnL@6dI zqxB5)s;CIBKI(%W?g@}#ibrP1?QGVv1+#80^_b%E;S@~MWnON&6ks0a8JxOsw7)2P zU<`ery^ldjv~0-K^#eEQGh+xRV#T*^)vY3jW@ao^ZV1NJ05pjMPe1Qg!2XFnz3A3! zgx7$|APVH^WK)K_Y^E@1_6xbB>xa+GVhozi4 zzozGK($wRxyW@1ULM;UYcoOYP(W5FlGu__379=BnC@hH(QROX2_N8fdFHowOuX|me z!Y@qvo%`1DB@9aR0ZXj_DfA0@^W6E&%A6k6*vg>l3~lr8KBo(?tGH@QodE-V>f?WasiEoD--z=j93Yq zd;8T|dmug;>}i*q^-5uHz>m$Yw{*tc?=}pEvZ;!(_*E}Xbrbt0GB z!5?+aoKAb;$3NpCgR6P_1ms@Y1h5KbtDJ3~xA5@gh2!o+3%_0ox=t^#@l=I$E~5($ zb`=^t&*wGp#1(W_#T;b1f1Jv1D>KNmRaHPK=kB_l7xXfM@|%~NG@pfG1BS~Kyyd10 zQGmt}J;cxJrPE^}M;ZZ1t(+_N^-njVPGbQ2Q(@lape@i^de(Fvb8o9c`=*Gag~?gt zt6hL#waJ8C1H5o1X!`u(I=?c(;OAiaYZgBW`iXexELUxqP_A(#pxU3Tja!bY zu#|8=9t5|kW1^nGr6bcRTN8pA?ukyi7kBARL-#)9Q~N3% zIAfg0L&ap%8273$Xa0R8f+qYGCa(S%&y$FvW8q{@mW9Mh|7Dp>gafy z@SDhJJ3r8c9F{eW#=4|6ncRzZwY??SAAjZ)-)q=>44nern z9&K#Dbr6O17N$mBIM6w6C^RhTE$7y^q)n0-!@pKoXR;lZ^8-0ThM=NNkj&b>zsy|LUx+05ugJA4bcyV`Cs zkSX25A2=X;@%b}m7%HW>s`~q|$kI-BO#HAY`d+axD6Hz^$dE9Su8_!B{{ZI zL1v(3;CkmZ*W@&y#(?gx23BYUEfF=Rk)VjJ!#9AXlY9`2Px#iIFJUmXg_aWSY#|N^ z&7V9UQLq5X@earK-PK^;`nu`^#lusY1P#2O?_pr$0-dIUKtqQN!)fm(jj*%FANHQT zJ`Re6L_dG(HTCbt=u=#9^+n14eWOjy!B{4!E>c|QtL4rJ&*`;vw#F#K!<*)E?YN#; z=XMLiZN9@d-Tm3DYEy$F=<+<@BppGA;LeCQ{h1akj+nIGnWfd~)Aa(YNI_C~kLou> zw;vmeu9)_gj`Nw*v2S4$hW&K)Iz~D^S8~3zKV7}$lb)y@)gf0`$+cwIuZ=l@QLw1{ z{ktF!W8vEWVlgVH=5?qn`_KF6Vk3XvhF0Z1u=a4_i!}45Nwx~{IfRuX2!(zO@DO_o zbh9p+K2?|UJsv@YtfJDD_YF?LN8;mEJhc9`GK*2f=F>f5Ih4T=oPjI_y>(Tz6)C4I zDGo%R8WrunsPEhPI(cYoqT+4X?~ScLLJfG7;r#LaJ8v(89~5+!^wm^?o%}-6#lzZp z_KL9IH-U>|j)Rp%0AUGv6*89+ScUR&ny*^L}uc=KHn zjo^A6fz;wjRN$%F*g`{v<8ewTlVT%!7KWk{40ePEkX8{>w%y}#7C$KMb!_!r2y?BIu;_nbnO_Ze1tv_Y(b8$uNdUc$ZLE90lSD?I6sSVi>crp!oL!FSo0`c;gnG__0>Q@Xvh7<@4;W z#7|}7`@LZWd5^1p1F)(9^28pV+2(xQh-%fe(J9Tt`#hZjr9D#>eMc@PIQtuWNm!LR z4_1#7XE#i zNZ1?k%{7t##kbjvm0NK-nC>&7%mJ!bvutb$K|nThT>~t0rOJM2A_thRjqL$<76ZV0 zO>Yw4@FO_^?dn###Z7?g+SaOap^%M|QPk&=;5hH>_k@LnpB&GFuDCaCB(Jq+lhwty z1XfCgwk}l)Hc@y{pX4Pk?qtg6q^BM$rZm4Y;0l;A`xGI^5VO=yMNTDdvunQQL<*=R zBw9GD!5j$bYU*`3t@IAz&$XELq>?RzBI)7%1D=cVOqE>L55bu8QPP~r$j=XAjbQUI zWCmS_+l8{MPS^e3oNeKNFHIOAmZJwH3B{N5YuT6izU+NN7DOY}?aF1xejpOD%i6k< zfgd6=-?&iAkgwX8hv-sJTmL|dXf?|}t)QE+HOB#a#b!6b@P{7+9HiW`SLp`}XTVMiHZxOW+xZskky|Ex1}=pPRpd+x>s z(S7vK89-7-FB)D&K_0V96a)l`YdDQowj*Up_69N-zO+ZLyc?m5lzn=-k^&D_>6Niw zv0qlJ6!ojH&I$Z`fiyKEq8ID8yH8YbLB_||0d~m3#6_fGd|mmd`r}BBI;BzKjl5_ zI|6m=jp1ZX29y$3pBI18<l-Z2fu$FyegWnQdD}PNK!zGqt)|u(olCW>AU)hRZsp0@M1OvtBDy4It zjXkRm58>XX%PrD$PPS%iq3S)8rn_WLb*}Tj>L`U1Ho6L^0R@__yS8bI@Z-AiNe-;E zxrowcMHRASA=im9bB<9)@T{VTuZ8kPiGSS0mkXl>Ha>$Ad7f;+I6B;0LYrxp#r%Eq znx?8uKv41ix)?d_Ys9G>G#~t&f2^5^txrKE8@BZ&X&xr0M2SLkBKL)ODN>P{X;hfG zPxDy~^69K-o=cJ%TFv{HKMVsLy3;*zI%hf=Th(dp@eEiTD;*^K@}htJAs1k2!pY7( z?GQ>yf!nE6^7HeVVK5cRTnKExGL_nSKP&tpTWy`cY}AF7XjUHG<@IU5RHa@}OVi-1 z@Wl<*m@+#(6*wv%DuVaFs|Q|L?C-__y}w zz(Oe@%gcBIP3%ieW~N@2!7ql1`Vzeg_F4$B{x+2g;hIzKWu(RB{#b^9-6`}{@YOpC z>=Z^_8YjrFMjuV9*(!+z?021E)Ad$4CrD!H9}Vk~megbNt-uXafxGp3+LbD=S8h{J zzS*+8@C?fqE5XpvDsh_!ozFihPR7k3YCJdh{lmjXLiH{RYd3Nr`g!*GKh|2k9~uuPtq zm^d)5=WaK*5R8Dp5PkCpGd@!n>V>ImC%s$o(Zhg2%tJU|+-85LF8L*}vl=nG zHO;}BAe~>LW324x2pan>E};oa6XhLvq%Nw*WAFwG;LjO>lKxS99x> z*@fcIOpU0fgvCJ@^~OQ&qB5&*=2)zNvw^Sbas{`OrS%?G;hp|sr3<{?!3ICi(If7{ zmuV-_wX*P)7PB2%8!ru+dt`rZj(16ag3&N>0Hnyrr;+!97E0??ZT>=u{#qb&CSQ0! zb@*5NB6a|}0t{b_<{vps)opajmXDmC!q}@5-Ur#`8^@Wpnit3KJVo{;by`yqoh!5$ zOqLJ789jdGEVjf+R3z9_vy#I_^2$=onY4*FZK?d{kuL1bj!n8u&|>%jK2}c-xX3_Ot!? zj{p}$90R6xyK+#C!>{!CrhQ;Abe(y-j^?YaMsgMv!*XUVl0UB_XjS#2yM7*{iL7sR zaq%nKntr@=ox(jW@8`<{)R|-nDwqpv57mr_<{s*qr@%tLuHoY6SW0xeR1Bn`fL}ST za+QE>uc$t!Lw=t$aV$P;+tiNuLc5B1Ib_c=KpSF#@&LEja$7fIU}ER6y+Gb!itghw z1q;x0wb|Hx3O6Y!I3r?`BU^2KG0b5gFTwYF58p8Rmo0#9X0tCOu}S=m&K4Vn;7t_P zF(WQ)(S!-#jMZ$tp5RSJ8)f6?(&h6~ZNvN9`29>Uh{xv&<=FSGMTuNYo0M_A`O?qR zQ{%HqxmE@Ldk?ju)6{IJbA;u{b!%~PnBMMonZ9ezuJ78%IBDwV+R-16T&W;2hKwsk ztsjmA{+*3vopVIXF3fDS^inOTg1RsP`~Y1|h>h4EHnFwanvBIBjY~Lr`vXMBsfrO0l8>bTGjZyJc1gW#W31SWm0x+ufRCg&;TKaI5hp1+Vz2o94id{Nw59~*npz73{bR$B;PkKIF;3R>@d!X^FZry!Sy7Z^?SY$#$ zN}m)!CPFi8g(jSmqOY|gV{DjBV{5d80w6Rt_M6-X!SA_*h$^wvr2@nW|5HhO(b_r! zolc+{M`zI8=s&cy&7OIEzW*Rdvn2y@3NKzx&hFXYnfZXfT}BQ{OfB}$R;y!IN4<*3 zf4g**+PvQDsz;Qf2^sxK&6G@~8^z~#*EBqgsFwiMO=h|BweyS;6O6EF2ue#z zv#X1m8C$*p%Fj&4kwyEr2XK-9=1Xi)AYu2o@9^Uh6UgXQs%uUGV`y_M zhmzEa%EuM@e*KlDncJ0b>T9YkNdu=)qJqx$9_qH_hmlj=5~Jli2-SNx;6sySl8r&S zzX{Zd`Z0|`Mr;2c1GB|>v~P=DRc<;*OFY?u zvYPV+B4#u7y5GvBsV55eM9ijbMTFsaQVFtI>7EB0`Pj}mQSqkMip$TYbFffDK9G?; zNSEAx&{k8^aOb(P{tf4i$xkdNBJRv#d6U;Qm-@g1ComQkdXRH4Z&#nyB=br1i?8Qy zC!b#j`ci7wn*@^#Ugt*kR;bK-dlvgTDrXq_K1mxtt-yY^;bCMJyMg{E95b=2?$&F9 zZEMr~ly{{g*g1KPz1Xam(y|nxsefj@MBPAmv}D37Si_kU^4=zq+Ic-kX9OXb^$>s0 zXdh6b*(=G$L7i%P@k`OO)gYrxCMD_+67IH^7s@rNalbxPNmO~hHZBD2xbX*P7s-WI zj)ZI`qlplooAVf^Gs2r;x)0(sC|y2=PINB=3nd#r(DiFLyDsQ;$)R<(q@36v=w$wr zf`F(jZ|4KL$@t5(2wBL-=b&R)js4mD49ih*g@;_)-40W;8 zU(cjNUvHWT_HKCMGRs?D_+ZqZx!$^a$@kj4uV{;0`8gTpdTdt2%m{FoyF1zm8{ck4 z_&>CLWn7f+*6u@hDBU0+APv$fh;#_jEkk#Ai402TAYB5|Fm!`RcXxMp*BSr&-TS;} ze?J4C_&vkj*IMgZ>wd0xCS4gz4QJ;foEB^L*w<{}X6QwCH!;^JE$8Oo?J#PzULsN9 zZP;fIE4%usKlsr)35HgJ?>=R0;rO{inX4Vaq2B^(7~;9{vWE=^g5;1G6Uq-4&q?3_ z{EdXSp0buC)L@C*=h?>V8{WMOgNKZIc@tfTX@BJB{zU#7$CpBpaXhkmGMO0kWsBwU z;+5j{4>fOFe+z&b%R`)!<4kE3`|Z#c4R_G;nHDQYI#khjwR_UzSj+oMv?U-5vR`b; zyCD>Y`14Skeo{-eR^Lcu8U*61Umj@< z98YtuBd^R(v0OV0xspQ+Z$j(|dIMD5FV>yYByKPF(aD`Ao5dEE9J-gbqTyvmB-S6l zN!rXlX(h-DE{iQeV6Xg58ZYjxana-r7@C3viazt_D>x&tA^FCJB6sbZq^ZV+cpbI6YMnXmmK^qeFd&4I0@0P5 z`QAsa@G1?F{&z|FA%-@6>#!_y&0)hR|>k&0tyQ+#>jG~z&EMw+6 z$91=9?7WkE-fdDtxcs@*k2ax0^Y~#f^5#$OT8KSUEFAgr^T{}hFHmlOh+*#|R`jeY z-bXTam&$s7wGg-DY_(mZUoAcaN%KB3oORy2v{k0+slOa;ZL$xVr$I=5xpVhG1w6knCgCKv2y+iH#j!Y?=IRe8X$GdaKe^~8j8~t|r#$a2 z2EpFT$roR_iE^rU#(5_q?snEfcHU7eAasaT9gAw+i|5cMjbR<}M3o_lfME zPu2Jm1qBdEm1Ri{eWqWMcMFW55{PN6uRLf2x=Tm{bun(dnj zNIsdX8BfcHD82;B4>zNQYYIv0@d4N8h6nyfm+g2DqeCR0U-CMg5BcJhDwN#bl&d&8 z7pRTFm$WWiCqG1>*t5AxsImE+g?j2hP4A@X>r#h)OyH zg(c=8jC@&&TK2rnF;e zqj^Z+vt1Tyon9yOZ(TXU+QFfT$hH(>BCBc;L+)NHL6aPYsx56mp^{m zTf@hSPRqr4ya}G+jxB0hNW)iYlZ`C&b{BTF#s;Jz<7UoguY<3e98(ibQ;PP)>|3`B zq>o*Cp~XIzeIxTmVbg^DKzzfqFNX&6UeCJjal^6DydkB51t*g}1SB2m*%8f>*OMBb z9E-Sc7u3yLPXS$?-@7b|Jt%IuZWYlBuNq*1DMZUcStsG|w=#}AfAug)VlYPQZKgc= zExQ3>&`MZ`TPo)0odKPFnCb#54G5l}#?55E{rT1y0AitBF?D3IajLYZ`bx3faUkJ_ zYlf6Q{g?Sj_=;|XB31kODTlxtzlXEyB6M={w^Hk%5btplu?7Zdr3xtn7TKCAy84^+ zMWLfoCz;fjD*U}4U9VwEw<>Tet3+;#s(Tv&;sMNz>~iEPA5q}QUiN>xn}*W@vQD_9M_6HZIrsF!1n7ekDFHi=c8Bo5$pUv z(mK;MkC>1@Tv#k*h}@UR)ebnq`3J1iNxz%C_Vd9BNF5wLsB0X99gCMTZ+> z=w&GnL!I#5%(+m+>mBHxcyrxFEfE3TC#(wWa6B#m=&W5zVn+bjRTHHN5kCUJiG)pG z9m4w#cOQY-)$&;=R~$!6Wna-k8d}o%YnUu!>t#W{9TSjQ?RT@Nj{>wESv;TlNOp`a zx-V2;mQqbI!7d;Y5L6`I>|@)uSnpE^Eg!(Q5iDA|^#D~Z$=-4kY)o>C=hw@ZPAh>} zNH1YM`Yu$n*QX5Xi;)cRli;;~J@jrdzvIeLwQc9lj9AO!N1?rf^?8 zT??TEYR>F!YNUm%jz`m?4*VRSt!K_;5)cBOn~7j;MGlII9U-Y)l%Uu}u$fOdBLh9M z3q3RUC_~3h>!l%AR6N_FPnFU~p{bCb{wWPTLs-xHa-Sa`YD$!k#JnC(vJCyE_yX-i za3y+f25lJjh3fXrLqxVrdbd~#n>H&%Pz*h{C^OwG>^;r`QS2(c{ zc6OwYCL|@W!R^%XgVf(r-M<0=$j_PMVbxt6|I;u-a^bq|3SApuMeOlbcJHhQaqvdF z!eLYUC5e52#Z9Ex#Vm7%y1^z4|Kd|%_?J!34p5u-V??Pt1M%S2`5K0^oT%fTrTmmy z;fHRRR((Rg9yWIckz=RboN@~ez~DblUN=t@6lG?J#P-nrjw)aaN7D-RF1rv zOmNH|*=bUPDwMB;<9@pDxyhY9I++Qs+?4GNrVt!sVhjHa=E_E#E}t}EM&%Ty*0t+x zfKL%3kW|!K>3-b262}t|r^*EiL;;?OS_RNndWQYCmp_5Xs@p{}nq3jw8lNwEgUF7n zljGw6N3JJG~Z*Le44re=GEmvzKzHOzTC>P{R6(SidW4BjjC z(l|5BH4B&b)0%ATZbAZWA3cwUbj4;}OW8~LSPWuV5$aC%H6wu&-;47OT{qh|<*fQ2 z$(vOoE-l*9jjj>=Jvt0quQKO(J)V`!G~S?O?)H@V0LeH$qmEJi^u`yZ50i5hY;@z! zgx$|cY8s4DKSI`DC9Wi|Jq|JtH~YN2Qh;riuLC#OLYeRZq?F2gD?Ih&t?LXNSK6D^ zheKZ#(h8Q$87NgsXC8AxQh^o!`?4DUxBR{^AMTJb7C;ns#oCoZq7{Ovh=1#~+E5kP z!ANE$=j>itr4TYUY`zF1mE6dgz^3W?UfaU=>{5%X3X>Z44ikC-D3m2&Zv9eXt>HfZVCMsD z0^2Lg8ip_z!CgDx_W*!Gg8HMvP-a(K8<_Abt2IP-yEdNzLkh~bXM6`ww})N6n{-N8iJ)8+Sk!zE_` z;63o&zejpGMrgXC2cmodfE*+Zh<7mHCDBzoy?&v%wYs_2V+FKUAGsKMdB)JL>SB!c zpA*O@z-$iW z71{`?oBh(=&bru*)gPsJgU?s4rEk%IiJb~@wwCs$PS?R?Js|KZ*_eRU&UbIN&!Vfc z^6V+!t{O+z>3sj#>n%_--`YCPQsKCNCB~dcGrPcxN%7hs@?rya51NHF{Nnnm`ugBu zye!|v-=lkLFzR5zzd;@$y7oCAzgo&p&HcFIElxeYPsu=iy|+ z%H{#!D&N3kHv@-q;rdUBq<2@T0T#g4bpGe>^DQ^BMcWT3R1aI9H%eQ7cJ?0tPNl7E zmc=#sZ2AcZZ7o)oFM(gQ!$sDl>11STmgYGGs=GERUY$Wlk ztKyGGbDb?6ikqAGTRN7dsOn4x5y**oXq!}$>RPMP!Cw3Km;_$Zk- zPVvk4b5CUPpK9X}M(&=9s&~bZ0f(dRrMq1U{n&YWxSPF`7k{Svv>SbOtMOnC!o6$7RzVrqSSvPX(# zhyC{3=b?IB(T4X^foP>LwJRDBYJtmidyu0)GgZr(vgk@%O2%T`FS0_;?byWUjfh8- zbdM(+Ba`}rg{!V7GSbO4RX&uTp8nn|Y06F45J7?K>t(Oa7Qe85IPu%H>EmoS+eR?F zQp@@Aa-qj{r(xO&L{lj2=&5&!fC!ck7o?AGglBJk+A}Y4Us_u$r1JJ$=4&J*s;hfn z61i4b^Z59rNP%4&hEN6WDC0A^9ucs@@f~ZZp6INvc|3?1qPRB%$4;#SP7{nJ7x>caq4cb zeefGJ<7U@x^t(=pv#9xV4SrsaOV&MNO~l}BzSIe(N>U<2vB+q7B;;TrCquOcRL&x( zgw=;MH5=d@e7FJ(o87N;=ikszclkec3OWSwp+!t3Ouz0Ug#^ZxwO*_$`nQgD3iKa8 zZ5u97s^la#SUgTQmtha}(bpA(`~x#*y@}Tl4T(1%2f2n1vf>G*&YEW}&v!HL<~b4G zpITXm9Na9fTd5xupB1{9OKb&xH)9ORx%}LQ)tq`kbz4`8v7)!Bz8MyTMJX0=5PAkP zmJQ=rvTU_#$W^7+20pyJ3MJb&ryBf=Y-GUjYQ`bI3I-zb7a;T1V^X(W3^3?@Gn*qe^fEhS3iobni{unJ+Wd9pl!WZMS#UsgQ0QvPkY-T2myooIvcTB zuD*5t*DGyVdtWtJV9Ie^sd=}}SoUJi+uovQaKt5Kg(4SzLGS@_Ak8IcB!%)p+5Q-H zqn!LA`P<>q3^AB=;0?Cu(*sQzybN}tBr^Oq&f&8A%eI(tq6dIqsZT%o`p7w|)wh8l z8eL94?Irxu_^?<#(aE8&)AB7FR`dc==@a<81TK8;5J_j)`%d335s`6e+`rb>@F1z( z<>hj_t(edFx@KE1TOz`Uu=Mi7QK=TDFU*InlHs@2A;?Zm zq^_=+(7-?Ff3eLzI@tOZ7m7R4a<}m$nU6pU^oGB-4xEx?Kk{fMfmPhkO}qa{42d1w zta2P_5Pg`9i)kTlGm6r<-+C4(1!60IH9#|~OKAWZB!ZMf3(=d4A-<@40<6@HGNFgn zTZ{I-iZaG^CWJ(|OwZw(kR@T#!)z@=oec-q`A>gq?}HETHIXsiYifgDsrZ^Ov6zs7-5IB8cEX*jH%b+;UuFk>#Zc^ z_hI2rYG^eHDzZ}gPj3>Kb`)m!`9tp1)mLT3^0)}O1uOz0O=^b<-Z@PI%};bYqp!vh zI__jE?x(=cEJyiDdx)RLZt|%-4s#oA1IMFm7DxG7{1(&IQZs0xZ0I;X zm{WK+{)r$b`r9P3xV`|)hvkeL?VSr_KBEwy-dq*wIa$JGWGju{GF) zF-cJMTn8+K;j&|dp478}7fE7WOXm5!nJ@z2D~p2~l}dU^D3yoF@FLX7Z(Cn^Y-I{& zU-N$J?Shyo7i+EK$O6`mRp~+$;aB|6zuz0=e#6t2dCd&_dJ?4xj51{PeD_ykD^@(S zwV8Qja#Siv7shmIuP7be@AE}X-6Ei8Y?PlS!(I!v(`nB55AAT2{g0X<2z@YNgXu3+ z4`nGqq6NNk#iJ$ZGD`k$r9g=uy3GI5=5zdSvA+L5e^@ndfP+oMzvaWCwL^`GA*M-L z1G`%Y=cnbGB;Xg%&lY*tInllE;Qk}d`1cz?x#NJ!Sv4yIp$nx6We10gKHoFn$8VlW z|L;gJ;z@+I_=kKr((DI0FuNU3)jqeIDvmR@2wQ&?|6g+ujr1p+I_2F)MclXiB$Cft z{7SfpKt&HU&k|oRU4-$Ub^M=x_6QS&O*)bD6@BS3`KFxA+tF88xYrKI+mPIo4s4A04j1v=v@17MVUi;c1?k@k2$kRI`bXeHxyBEv0T1mh2^uMN z^M=1-o26e(wYlSkHTP(hUqMWzJ|Y@HeybELCx1@ud=qu*A}7Zcd<7F_ini{8+SnWV z|IRO+>1EStX|dA&;BBJI&-KoreighwcG)$Re%f5Gr&XhHWPOZf=&8Yl@Uv-ozTC_5 z-KUm$Hbz^0U*K$Np-M2s(&AMA96EjuVILHib~hT+5yH-~s}Q+LvC}$Knb&9v}9#;{J<9nFM6 z%F1+B51MAYs$-_V+neBVUM1SG>s7WCb1+OtT!ppBiuy=Jg-R?D&u_f#XVZPICXj#c zA9hQCa8`)Lw~=|Ss{GsDRS)F~?MTCEDVa=z{m7>7=M4Ikrsl@>hFQKj0fc4Grp_gp zRk5#e@u1rG-?ada9eXa#l{}8?49o8YwIyB;)iyKNxwV}ox#p2^@r74(e7TxMTjy88 zmy(U$8nN(JqZ2K(Bkoe*GshxItGWq6AJ{PO;J` zbL+e#W72DYNi*}K;EY5JjQ2=L;u$abVTtMUT+n}QLDa?aMtnb1fhT>Nl`yRH^Qz|? z3635GEr_W$z7!;PWqTv1Bmy@2q{+24WEv6D*U_m+%<^Y(QphSoWWyPS*YH=+{r)sr z;egCx=Q9ua)j0_ucyixyqc);~1Ax7i(yN~PdkEnH&bf_$M}EHWtm(cS7b1Z$)fHvY zE;C6DsJGe9H}Lque0v^W=E!wF5xM2=K)%`NaBRZpn=`6?b<1d9dv~?%myH8*-U+zA4w7jeKcIHt7!DFND4qA9&J1iX^vYFVxzC zY6FPAtPD}pn6qB&wKRiSHg-hQ@Trh2BtF>)|iH zPLnEPKC37FtU&zIu-0{~jyS#@{NQuiJy0cVLqvyf* z_tN3UX;S(|fAAG+%uTbo<3D}`p{PK;sxQ=)HD2rN>3-_zz+nn#`t>uLZvOW>tO6HL zSwiff2#_dgQ@aI*AWi%Le)=}jyB|*$Ozd)){oo*kQ#=xI%qGn&W?|u*%1o~WZDVcq zNe6xf?UT4~UoK$hxu@7PK$fW}yg+6%6Ct1yT1=gESR&?L+L@oXoseMKKQv}KMAv+} zP(Z3&+j(RF={B_5eQV_6Exc4m*YrEo$^50xzBMVEwJf2*h8DoW9uk^--4rJG1aR`w_i*Q@a?Ci9fpn0jU7L?`|I2wXB-VVkUvCC>?Z!L`5n zk_Za>)1jet0KN3Eip;P?{oWhQjNWcurVX*h@)}MP93NS-SL|mtpo>U7bkdbZg^4YR z*e)KaTQ68<*RC$q-??!PHk&1o86hbtD4F>#inf-ytBMU;=(5WY)lyoLf8 zTMT1G)xXl2E@p#PG+&wzy>$bRV`#9s%aJpmrCLnhH~O}S??ENZo$Tcwlek?MLwEF` ze;^(>&?vp3uVNCy)j7_9tfgC9dO|y~NW>)tvW+$`HR~e$;C#|sr=oAq)K47U=dx}s ztu1-&_TRMS(M{jia+brJ%ewd3Ub?0q8L4``i;1J!v`&7>!tMY8H8)n2j`r&u$cI%5 zCC{t3?Ho7FEF|dG_nG1~Ve#-pq`~Ct(mX8VOvJM0wYRS; znablY>z17+MJD_POgsPcz(9RVNv#o9o5*wFT=ToH@8W$)a^Wyl`@6$p``t=@dAYIm z^$J>?OBoL%b`H%?CW;aH^T}Im%%PM~codu;TnKAo)c9pzmZ+BJR8%+v#3y=nD<<@# zZ{TEHWE@NNAhu}k(`iNfIWDoY z7SJM#PFKDK4X=*8)UiHeWll_5-OU?+cy?F;t9 zky4woLw{S`Je+p{BU7x)pVDGBFGz&j=<;8?ds#)^$4V?d0Sy=M-kNa?93B`@?(wb* zo^;{m9TXjw0zURo1@lZ-N-;n5S<}g(RrxMcK<2`_#cg$_fEUTOyEA2qki|(ZO)@SX z=^Y~z6Wqw+A_exaPuAFMlu2Mu;S`+s3W>N}4ZUl1s>mdR`t~kmPlzV>{yw4@ z^ez^cQZ!|4+^br+acpyUgSp>xa9PWrsm=Lm>mppZaU84!_(tSMO&dz)er5Lm7NcvU zVAX(Ccs-MZOmI>uYmE`>0$_$1_2--K!F?M_ac1y~%{Wq8A6fDu8EHbGXLC=VaQI+( zev>Frxe&JJvnUW&oLsh)k!Ef(GJBJtIr?!rKE@z+)nH-;DU&Dlp@{~V&u$`Aw)WM> zV3=?4LLTGFdOa8P^L>9{t>bSh6P4{vHW0f~oTn(Q?0)?Q&c#J`TTDXwP~PvI!-M_K zo)QVF2WqId`im-X90MtWg~@nf*udL{c3;7>?>Z|D6^ybFJby*Cuf`lBXR}FOfX$qu zJl)4#o1@XQgVoY5!pFOpdCTXWNnoW+db(0}XMsZtX`B6oGdsO6EnVY05q<`)poAGV zayE%eegRJ^_4DO+0s(){c0TqZAS#7(tfE0@QT^#=td_pcuQAV?P-W3cGpa% zLe1696BE5f`K`fuFDdtiQz<=-5)TVf_e9+DTCgmPZxed6X6zD;=(Singu*VMt7%hwjZ0iA7s1awK z2aQ!^>Bfj90N53ehPTK66qk@=hjgrRBxt5nqcg&y8=6W&gpTW3|I}|_%iILALJFW8 zU7VkkQ^ltloEE&jaT{J}x;q;T`vuRrpBA@fMRkrKYW4KK!VNb7Zc(bF$boXqaK8-r zp6?K0g^PhOI4@c_km5984gH!0w;3Dz@*VB~ilNVGC#X33HqsO*uTU{G_idgw*l|ht zSr3#no~BN3tKY7j?WLITO_6>#-#3Q~2u@8O2&mjFDT&N`ECi!-v`vKjqwBKH+nR z4^(RXxT00{quN3=%J4Eja^cOIC~6yk@B{=Px{9LkA;Sja8((G_S|0Es(&xURG-xtM zthhWH1c$mGvz-0#jtO`An~|A|&~}hPuKC zIWV`(6sB0dyuc2T%+lse{!RX`_z0vC7hvHL8TOS_8_=u5NVJi~ywlcA-gH_#R=SaL zS8_8j(C}+t19J-kB2R0gD>(2Us@$}o!5!sLv+od0B^0Bbpcko(VOXf|8QvgBLI?~G ze)}wpjyjg?8;OS9fBE^vMhMf;9oV|Dj#gW3JULA|ny_)Vv-8tgQq^>DjOm}6HZYtY zSsRD)eInxeZst6d!Ic;xZiu@wKm2%QLx%Hh*DjHj{7ceDE_H@Lw3?Y;;wmN^AWD@N z-_vopNqTvQIxVyJ&L_OQ1YVG;LgMR)Hch8pcxyc7!qNnCbD6?d&pp&PI04~qvC@5n zPi&1Gng_?=Xl%({O}IAwn%_x3t0&S~FPPa+QH^f3woHnTy2u93t1+kt3CzoX z3K8D3BJuhJg6n$uSRS)JAHA%T#{)N@sk!e80c~mr+Wq>D(?jfNq>1nj0kT1N?g4Y0 zoH*H%Oq=jZzs96Vndb=F$lY56mIe54(9nl>I*K4H$|w-xn)uMOqbBh~OktiBmdR0p z97`q(S~h)gxThayV^Yyud~`*{B#{hW2SRj$@ezf(OO^oxqY}#?Qo#mgPU*$i@pdr+- z)G9&=5;mpcUSYPWsz4Y{YsM08$&u&QK9qzKG=BST${d%)?`>xQ`@A!j-E64VCcH^u zyU8AwwX6@8GBriAOk+)KfHxLL=!gGcFP*|pofyCA7?4#&Yd+o{gv2nL=A`T{#sc#y z(zwiFfu(kQVhYcsCo663jFw-{^nTC}^^eJkEx&$ck5IaEidt?6yT1&d!f>@+s)0ai zY9I}S8C|oLm7Z$IeTcdz~A{=!`hHy0`!d{gNdW zCxh9SWW>E)3^PF=^oM?)xm^VrRM0By&IFg0?IdY(4=xi@QKJty6#b%;^RKc) zySpIAmSe-_fItQ^fO+!=WdjlAO57fRNXaj_$+{6HfaXn<>GjZPg~AXQyL-xnxpJLh zOFl7537=@F@p*moH`n!mv`|k~WhrGc^!z(;G)Gw1(X;`Bmz{=v}tAC_M^S5q} za5`DSuwZm%!yxSnsh2Qtr+Z-n+Ff(dlFHn4X|^@ZDmwc>6kz1OUeTa5sgY4%SZ<-{ z`T{5^E3J7Ecws=`=HAOy4ZC&Pvp9m4K^0e4=8zcQj*7(dgJ!9n5AAKF9#;THNqxWG ztaV}K3sRMK>%t_#d^D0^*yXa3Icp`)by5K?9~&Ugti6oF zFr4dSt8FklCk)JqcNA30FqJ32!A316ZO(hCO=j9|t8$4i&`EHEeBrd#%+ftf z;jUi^O$-q(uf!87OJ^-6B(T=LMHW8vRjRFC97hJ^`gaArr9Ntyx)K7_WtU;+26c-S z-q+2C6t`}gvk`m8ulrB=zAK9^MnbU8)=PgXiWp z$STw`t;LC;D5i~!+aFUvMeu{DORHxKO6@;v3nNz8Svf65@TJ<%!0efY) zi`r8Clv67`)-EDf63zmFUyC}|qsR#^kq%{!m~53jCJPlv$3RL`vTMJ)6JibK0r} zm}{Vr=p4S=QKKl~jgcN}S31Pu)77`mQkK5Q*MA8vlHv129lZQpg}S&+)0AIG@Nx@W zblO{)Nbo`R2(f>dgPdh@r^^WEhtjMr;LiHUrUl`#sCW|ZMe3trQzkFjZTNE z>pdt8Msbo)KpL|Gg+Z(oc2?Vp90Zg!E+N^Pj#zoxgvi4cN7w)It-q1h_qg4fUsYDJ zs@E06`}l3z4J`u%!e=S#+_BiCA&ItJ@y03M;dJwLb-u>oA{Gam3iV%gJFAmy4aa*r z<|don{`^H?M8F`{6g#l(KscUWa3bmk^;_|;ksh2F5Bl%}mQphj2Em^)(1?_$BcnG$ z+FXQ%7?|Snu|Ow>-mKf7r2 z^8pjYbeuvGJ{$o7!S~U3e6|T~%vA&*-I5dw1()+mR9-9>mM^7ojwe0A5j)g?@8}Sf z48oR^!P5&);4{M!hn|IRS=PNBqL);Ec&ZcArVJlKsKDh;dR53JEY5wVtHhsDh~4EC zZyna9Sks^AomjsxNtTL`3?fJhyz0^}zx)+QqkF|6XVepCa`4WC-Mo)};Z5nF&3*Fg zv(c9=ZXiYtiYt*}w(r=N-~9xLZKdc9{$fp$_V9OXrb;jRmt6F}z+8VfgKX>{j&Z*5 z_M3vx>|n`MYWS5-0mHM;Ft(VL5F__Z6y85XXf)E#r}K`drY{O9NQ)E{5fMw)imx#| z$Vl4;zgSQw$$vV&?Z|()4I_Wm!0uY}wq~&TW*l_*u5woRCK;7RE#k~Jur8M9H-QzS zvb=SVFsBe+oC&5R4s*MVxOOrFJv;aXV&FQzoO;Wvf4Qg_p?kK)DPPgc;Or&W|0GHf zlIK?D=2e=)g0mNKRVagY&d=7bzD5`D@iQ(f)O;Brt1SQQBvIjbyQPS=8N;aVDZJAo z{U7%GG`pb<2tS1#09UClNnFH_zEGF5kf8^=`08}+q*tbul#t&IX62(U+>8g7A`6AMc@jN?t9Z3;OdAre&`yDPZxE}nH z5VPaQ@{5F4VlaH)|7}{+I2C62Nw9{`V_hQDX;}!vq@bu@M&_rmDDI@!(7$rl#729yG+5$O)N+2A7$AX2Lq({oLT+{42%rcR10f{e1&m@(An}6|qE` zg;@&wq2Y9)Ydq3%0+DegP-;|wB{q1yPS$pg;Exrf$8lQNPg128tV<>9`{q z)3ar=U?az4b?o3=bPs!CeQ#5v5yjI}pZxx*)JS{ka|L5)w&fgMwH}LTqCf8l zc0hrzb#&Gp9C_TOB7TIH4xgHhIQZMOI664Y6g(kc`^|B4t^USA|LVS8a64&Ve3n92 z_kev`JUT%`DN0V#Z`kVQRa|@}#4d1LKU18)H%Pe|dnG4>_9jlvUMKdaHCq~|y$Tps zzJ<$W($LUg)`0ePz>{a0HEs8`0<z99V%Z! zjTPpG#j+W>Fu7ykNu4Q7{|V$^jfV|XTKp{{Q~o=Gi1oVOh}S7!@|F{ z_)OCG`(Q|=MvJB5Vk7hACy6+62O`9G_?^A_TjUb|&X$aOC`zo>ep%rq}$$3oeOtQpB6~4ppOgH?&Y5Ff5_&dVC(+ql_xQH?joBQ z(bjAta!EP%1HX2x7L>9zbC~qK{Ra0xCmHqcwDlbDX`M;@=rxPhwkFN)&C7fV6402w z(30IOAS}wl3?O1PrswY(;HKxmRpC*O{prA8Y&rL-m16iDY|QeD^X}jIqaGI3+veAy zOn4Gz+;7k^!)rH?N{WKNo6cIwYfrj1x3(^GCB{isd6;cj zQh#tIG*SPv{b2L-&-%fQj=_JDOv3Eo7{HJC&6m6z{u%+bTRnQk+_pC?i5gX+*x|fM z8n#?!WM(^Je>X1+3+#DZuKthuM!+{LKi;jst3{Z+8}(XQj0b<>cZ{&!yW~hHrSmt& zPz<^}g}>iL=pueVp%`i3F>+}mKEn_Gfu^1LBVJ)BMu_L$pDQs|xLt~asa|bLSc33X zA1vt>Jv$6@8*pJ+P0U!j@21oVa6fL&Um$;2c;+zTFnYy~kXDDw^~`yzOWs=hvHZi3%x}fky}N7o@c4P|R$twn z+Tq(F17A{;zQd&D7FM4FhQ)4cxNm%i4xs7U$Ff8?2j&b14T3_$$Ma1bQ6#7Fr;Pls zHU9hj7ovdKZbuTIIw?i#k;gp%Y%C;J7YN?;;&?Y`<}cT1=r5 zk|%mv!}YshkhkGpjJ4*l!rF9L4imd`-3nTs*~@eGkmyl>A&j^lES^T_gH0vAY%HM! z-HU)iMj7}480H{`b#ifVaEO@D4dDxt(1VbFWPxZQ0X7^Bw*kh$)Efr+{GSfORM^44 zX{5$KNvd^(X79d1NaJkdK;|aa&Ktp^IVX(sH{4>KRPgs5MmYvIP?s*GHeA$%i=le> zV;~!q9v-mbf4irhO-?K1P2-^I&kY7{==sp7d`Lg2&EPOqe(k&$q~0Rp0^%wZ{siJu zZxC?rpz%^)&Zi*hUHCgNPGDq#)U0}KcPFtDaWax_%o#T3cK4E;FYiU4UPdN3U%*iG zZGHdvDNdQs93seS;u3ZoSU9xKzF_ww0*LQcZUwyd949}+%;G0WPyARqq@Z?7HhYmY z!oC`%o&)3elD&e&6vcKN*>vnfy@NVcGF4hyN;2}w!vg~^=?iMhU_W9%5hb%!49i+u zhnL4EXUBK3E?lg=egqG-ao{EHDmhDR(eD>lW9l^ewRE$53 z7Sm81jT9cZwS;qxoP5uc^7I;s${U9Q9@l$7|2orT@sb?J*U0DuR!d)EF^Oyy2^X-A zvw@FEF2qt=s-%;?FEo$eG?Co&N;)3*lT*pjr|Mgll*$F@TY(GpjQGR%&!^F!6FrIb zBLd5Y0G0V+hnh6u*E-@s(P)Ctvmy6NKNq2Io|~PWd6?88O_{;C8m3qL)SuAZHUD8N18%ujP*k$uEo@6%>HXP(SdYDsOG*~jL23fV_xwZGK> zX5Y0`aVAv^P6kF+VOCKmSTgh$2DB{0`-Os)he>Jtk$6&^_~`ncQv%;$4v<2e#b>Uf zz)?&krHV4`MmzP*!tAx|@C!_c=^!JNM2>eCY)lNcBL-uuPsf=u(Xy&D>C6!kTUgZ1 z%uUSPOxABToM#1Om|_wlx2YguN)X~REn`*ZohO#<28;z3v$ke@N-7c$OOZnOz0h|l zEb$cNjqJra@(Sd8U(?f{*bvd*`VlTuYe=3)M{F{{NYZ&MR2{mW@N|Vo;~P}x!IM(; z<(+kTGsK>(obAmf`6B#?|Ed}gXee5sE|S_*^{I#D1($rRrhm?Hv-v&SmEv@!$RtC4 z1!oF?jm0^%!rJ%2S-TC2kb~ZSbaZql2%%v^>BB>XvMzh-G-gC_WSwCj8jZ7_3Qo{! z$!Xk7YMJi%Jqp|Vr?)`IG%i|7a0iUMsNZEdx_eD(ij914H){*S@2$Jcur><2}+qfGng{8L$fTd-kWgwh8us*85=q8Q0^vMfT0 z%0i{G#b7SL0Llo5&KM;ZOQ%1*y$tyNotM6(Q4m%!I$^QL@*~bt)oNGgEF19%7V&92 zD2S6go&*652QhXzXYb&^MCQ;6TGjfn!e7Klr%NBg%G95f1gYQY#}laT_9vq}spQC} zPuQ&jN7t81?jBTbed>+mgV*1R-`F5Kj*rukBvMN9=LX`cetbVV!36$j?)JqWyz&9+ z>cr!5Z)cgT6MC?3*x$lM_m>7O?TJ0KbkV;Cx^5S4r0%0*|v3Z5#_CXqfo z@bkj38E)OvZx!2s3E3?UxbB(p`tS zzl!!p<7zFJj*&qXP5`0db|jpcn}b;&i0Og0bC^M)#sIPjF|svBF`W!NySzj!3;p~- zWN~Lc&hy;#(w}$v#&@VmR9~J?1FsGTYwSfjC?D0!QKlwq`(;(EpX{}Ic+FAWU0zi# zwAkqn6Z!VmE)8VbXO@0<4eI?B>#SrI_B`@R0;LM0ySnfpzD$hxu9Zs5u6}eN6Boi} zB0=<}IpD%oKyrdq6x-*vpne9oRiee%Q`OYbeNn*Il_pH(q(}!)Q3|;`u6j)~;eiay zwPNm1LN5Jdto+4h*4ClZ`5Rghk?gR0VLgZ+-@*WAD?qCkqcE#Ug|%(0mvdERWW*J0 z3WxfZZ8@QwMd&${2?k5iO!$L}W}i;n^7n6B7n`dx+kl*XmaQlx6Gj8a>7f#|JlgUsk9B3AD*Lc0WYtw=o!Ne_j9zRH3$$8*o z{>SEPw06$5$~FUbcf;PsGXL##SBAe8qz<4Mx+?mAX;A)_8%++t;>zukZ% zUsSQdG{|;bO*)^Yk_*b76!mSb=!Y%F>hDFHgBVk40sLC9@Q=< zwOmT}%xoRdFAo3?m=MK#x9FjKXxPIu) zVazPCG~0NBN1!I`AyXvc)z{7LT!hj+>V>yre0~Jo7c+)_p&oEyHd8g8{4fha&b(JuJFhq4UQ88e z;|LE7gfsDoTt47|u{mk;~|htohk%^JP?E#z@7QGm+xfG}{gT9xA8^4z`ZHr+c3o{~S{+%^4>i=B(RO&XxGD?2C zo67m>Bh0CuQvt&v1d$9_6Rfmc^ViAM4Ea+Hu)nF5cJ0}^~bBC z3lXt+ipfaH(7-`ig2b>8s7E35UjfiMv*)|5++e+fS0AvX;QQbcnuz(*w|Nv(bbD`d z{#H%K4FfqaNJE8el;}QNtVdYWf1JPy;+(N~0ixxaGobroQw{?$@X&ksKi`z1kP}I` z(}h`}#nOcw(tEGSkO^~he>G4V=(`paWL^Dvp+8+b_46lw%3@6V;n3hfpPV!QL4liY zp&}&Cr2`c?=rOP@7Xq0(-=5b=ZeXuP^7eLN9T2C|!3z3INsv*_Uh@VdQa(=6-Y-Qy zij7A!2-0%LQ{5KT!Zlqiw_NrZHdEaDgLPmeRJ=U~wV(u60L%_q>JP$#cqoeytkBET z>g_lr|J`jVm@zatZ!qgOQBD>qY(GKU$9h+$m&;dMeXhj_2sie@0u7V{61`r)`mLFSfi%%Y-%ytUxz7cAK7Km$6bFKOJCZadSrH1UH5!*cQ~rbpcv=MRdRYjm6*Fp0xfC% zR}(FawzFa!_Jc*43NQ9Ry_kE8d&fRC2*5JS#)IF|-y*ypR6Oz8kZPS0?!{2;_87Hj zU;W_Qn+JxF&jcJj1OW(TOe+E5MjI$aHXzgr$R+Jgh4IC;n`5`cY4B|MS|$X=Qh$i-FbK3EW>- zNPoGS=Kq`y@r9YUCJ-1S$TO@`5%%K-6-uqcm?`WhJX};*XzA=tO#1g|Bn@1ED8jLi ztPStyu=Wc*B6-&KG&#cII*i(PVm3g;72Tt21mN~$?cQ)W+EOr=32|F_4;R^>A!RYx zI6zi079BbU-(KE#g4qTQw+rAV4hqYYAXCsg#j5l|rY%=UW}SVrnGY*d6y%D0>_#ae zvbs0{81w#CH!IMFzJ`To zF=X=p(DjyKQGMaN@Q8p2NOyz8&@s~8-Q7KOgMg%T=Ku~!3rKgTARt32-Kdnbbi>*H z&iS9~ydT~#u-VsK!(Mx>^*r};-}hR}(CnkD)9EeQatHBp`YReOFH#lyD3JwvMzY)_ zf*&dDT5q8p28PTAo9jVfzWKbQq5pibJe2>O&H(w)!wz~)rvE0Q9$M_f>&AsCy*qN! z@4-CM1s=Ch-UfWJD3WN=13)?C^pCt?OvJqz4&BOPXI*XUQTo|tPm3`?f;W^XlL=Sw z_El)8v*Z#2YUR1aLhEx`uiV$1$?;+XAE_}h!wIiV${xlBTY4~DFnHY1!uq&icDxF& zP@3Ii@MS!K^$4q2V3XB%#y81Q5pt;Za$ zXB(BF!hW)w!1sSP*+4N`hdJ7S30w@jvkhS7LXM~hfDduAjW)0iaHrZr?H2qqop#TM z$B7>DV@06te~iBx^>a~-Dj@X=ysoAZ_nl2_RbqY{^w&G~A9t)>c^aS!Sw#lStjc=O zOhYn1Npj$sjr7mL;p##_urS3mP1f!HDT@v^j~C26Q~U2-!V9ZNoim+IqAqmVMtLxc zG%ccR4Kpoo>}~uN{P@KhoQM1j0lR2Y{1|mCf&5N_T;k%7-=k1^qs(jPvg+zi{n^AX zS&#v`(d|>xOlzyNI-sQqvIKD}HTV4`^SUk;0$&P>i2udtrhTu$ zl`f}Wtdf}tM&6F$+Zt48`6dc&`Tz(d$8R7BQ;GvhT{E6*isz`9!=UiUWZZHn=D_#p z%t8>RXfT^tqYg?RNrzys<$n?T@u~4@`JV)94Y~N z4`!nQQ{8E=nAT?aMA{Nd5)>O?~E=S@uG;Wshm z?8d@(rwp~-%;kdbW(c0Y86nYp)dzNX9p}LKDt+{$O4}&$1jh@vz!U6V=F0<{hS?jo zOijiNr9@w1w#+EIt;4xV>*Ov7OL|;Quo7EhQ&xX>kE`y|XD%rwGQ{=E}Dgbt+ zL+foaYw8GQ%1d)bD^zLxfhr5U6qNMxpZb+-tu}bsg8D4#PHNf=S&IkCG96yJhBcZ+ zC8^o8Z<IXNTUdHOd+_tui z)dHWEPL5=||L!kmCioIFV(I;^Phhh8>nY$$S)aiB!e0F?B|qBp>I;LbvS2ip#&>+u z{@|pIx@{WF%T*O6<`T?-A#%wB;<`Z|mK5gUGD&#pHhyxzz@t7Ff+rmnG9B9GG-Eb3 zHdJQ9OF6G|`I-v@r-^xU7+6)JU7*gzz3_Rq{6jJFma;9gtn7y*K0CxYcjM;+1^JrY z>{Ugav-(k@%ny&(y}fAhhNye z!+J;WgtgXnDDbiLiR+$Yf3p!Mg@Ij3jSY>Ym*wY=U#Atrv{(Rxwe?AZ`2@7_&gED@ z?KL_gk!;qoe&&^&5}#uOO`(zT^0qgH`z%TrOwMw*U}nR<*8Z|{50z%-Tj zV$2bSKW4t;YjQMdKzV6xbR5;`tz2vVysA+JaBg#WGSj1>z0| z2E1~6EREfCt+`CS_~G9*8<|~Nn26(Uno0df*33~!Kb&7UG6aUnudN$m z?!OK7Qm~VU)K_K4T-~!)5?QAz4k3+W^5xk!Qqn4n#9hHJ7h+PhVi0dt?q1vZdXMFD zej25zWHJVHv_YOygXjjJ0dGK7oTHg9zdj>N45#@sc}a{O=@{C8LkCyjv(3hf{VGW^ zK^Ez_i2@>wPqbDaA|CeO*;UalE!R`!$QoTV0h&(rjfm{WCud3o(J0!_>?)gAh42+W zN2B2?1D1`i)8o}HUfW}dt!g3Xi>kqjJQB@Av%8;3pMBPaB9As_O`-xDM zP=HIOSX@>RW{Gg${+|I1P*r*m*q2AnOo4fv)yzo~JFM?|8ZJ+h2QDES{p5^d8^0B5 z0itG&b*WG8PO1y+i)$-F^m4+a(2136W ztl~mdPiw-LjP!y@-Rfec}Y6vdK19X z?Q({4$}D2t4D2X}yH+*eQA{q3=^bz_=_fe%=U2QX+Ec0#Y!WoZF4*Uo1k7tcVhP{_ z{{j}!p_?jPyrgr5KwuN7S|<|t{tY9bij08vt0Wo%b@D85ojFZ;sSW;6AJ#C~K%J0XMJq+rA3JH@cK(W~ z#_ZipLoxA0?(Evkk8H)^RZHnqt0YIYA!zICnU!>Q=lzkxz47YRHkXsCOH%Er7wfbY zLnQHzp|YE=Yq%NpGi>KmP|7t>L2~cBAm2w_ZSn#Gla_uHfFmks$hJ9!;&Yq9ig2h zx(g#5&7^?z78moTyXQWStxE}8%F%XFEq`=i54yp_MFjs5il%6zVji^-8O``5E-tn^ z4JS>QE~7LdV@zczzH4F9CmJo3hCB4f?jNyRyL+Z)l13~lnx-yVmGd)x$j1B^C>bgE zh)F>6k9o!2dBuy?vjr4I1ZE&7)9{;^TVoXn$$~1dxOeTdr29Z6dW0vG%a+}L>4I}Ngd%&I#Hy|GH;e} zVy(&-mZ$f#Fy8Ce6)P1>oUP5i+apz@yB+!Mb|ZVm88QTKRqg!y@zkw%;cg`p*NywE z#eq0)L;NCH)X5y_XH9#D&)g8@(_3Ls`|k~HeRfQ<$N8FQD(dkai~58Y56fmZn-AAh z(Zp{OebuqTx`kj5EAu_);?rX8YXRGD76k9tC=hEcPmhm5*WYD#REH{U*ol;jweh{a z1SEIWy`fVo*SsGWdp~Ofk{ryev`Rl84fGB%G?w(|q04~SI?8)#$Kyt2Xelwvw_zOFqGrl*(agQgmd>j-XTtAH&9A+cT%m0F3^OSOd9e zv-S_umezs#sz&x}<|@Mb1PHf-fIsg&`Bw&9l@7%+Rl)cJMC;PPv>J##0{n`67Nfa1rY;<{|FGPC0yFiBQWR#0y!L3^B*WhC(9`SuRGpiUbxkK!X?n1pR8@w-hC+q)@J- zivy8Vgb+;15h{U($8yvW+k_R!xxRD9U@+imnkH~b-+y@|?8aR}8iy?^ed3f}q*`F$ zf-k(aF)q(Z03vRMQa?IcI&lOaC6bCP`9D2?Dn>nbUl{4!+fJ$vO9sKTUiu zjE|1qEjftpv%5+m4Ni3k2jmCt)lu=pqxk)bjqbe((Vh@`yH=a$HUq!5q(GG9RUZ4@ z|H)9^aGFonF2jl~#M-K1>baaQGg1?FohzPPgc!#UPNiTbb&<5X8pu%=|4H=aB#Saa zS@ftb5J3l*R27Kq(xlKx%0xu+ zkkd?eie-FL!Q$Q&n*9j_N_SQoU&KWsq?J$mhWq5mnVZndlwq7Kn{|Zbv+58?F*Fv1 z*OtdkXk%u3dyK#Laa`Zru(p6frBJNWC@Ep@vld5|ug_b%#zl!}p&5eq{$|ws2I}i) z5ugH=GBKll&vq4hqOtttDcCdGY}U`NB%eN#w2v6j6-)QRj@h^04euHnT@I}n#BZAJ zJ7PQ#9rc!iXwLY&v}>-fVa3Ez%OTTep3L31rrs^@s?@yhP@#hAyK~j zEqi6I!Oph%gLyGJVn6_vJ4VbAV(i2cqH2wfkfuabGnt(Jnsr#b=_^(@1gcC25oZoA zE(4hsQUrcXtev{6i;D}e0N`R)f0!7q~XY?fr!y88X zG%*a?s)KN|Sw#gAGQUTtZgDd8*z+nw{RS156au=` znCAq@l5`o0{OX5GJwN33-w@UNd*O7o-K|kO_AN*59>4Q)+%my##$TfSIZDXH3cCvl zR_2cXy+3h|F&V38{wBIJm=e_YdlPrO>)`|k?6Q76l*UWo6w`2c%hWdjB2c#0a;3Hd6krVg8OW}=CwY`8FyXY+o12$YOLB)cf z{D1BF5~K|)fYXoBySuBjb})Uw7#Tzo#h;Lk*oa2CVxGqVsgMF+QNz{Asq=hFSzY|W zn{KJaWqH2mvU&aC$hWvN-blG2yUOQAj*{6H2YF*P{(;LwjOhXdc?03*=jUfP?c!R6 z(Sj__#4KLXDKN9*HW@{yrZJTeXgN~4uHBP4nN~;ZMS_qbXrM|ZcwsUmelnMI7xm$9 zq@~A<>g*@_WtE}oxvOh2vO!Vd7I=C{V-m~iOWv<#lSZM}~!d-lDEe-Qb*$3#MJQq%V4 zOS|om8yWztG|VwjektvIH{a7F|KwOE+N_Txq4X?<+SlX04Pi$9(~*4?xg<4Y8QVM+ zTVlX0RM=Totf1bUG2WKP`k{q{!oNPbDDcvNm#Fmm-tWrFJ7&gGo zSrobJ^=Vdb;M2oZ@^7sy$TOXvM zb7K?@P?v1SYD1^j9MNPrGOl9`GQ?%%TQO)fXv}a!1zbm$C7{$t{Se{(o49NL$w`SJ z8O|Tn74YUZ00@>`LiNR)E9LA`8nS$-^Yqp@7G2}g8MczAiA=S@dsiWT zkGt#o4cu(6`{)z6-iOzT=U@z^kQzCS7tU3MHoH*#j~8G797;cv&H7xW$=-s|0s$lX zGG;W;WuW=Uqks;a(Nf)P3L{zuy}vQ*##Tj8dsh70in@BIqsf?s}72l5PXm%xPHHrm7x=#Y_c#l zUq5;0~mq@{hyX3cnrX(GL(tK^|>cYll{WaaBQ56e1kyxa_zXk;u+(|_l` zQF^pyRt*Pjfi2O4khU7Ad6XqVf=Y5k+cf9*4K&6;e{W8wsXwwt9iPxgW8}4R@Oa1*F)B_oP^Vj!qsENO+%53$@nd70%jczlJ zyd_4k;8J&FQ9T;6j_X_a{%=O}uL^%SL|miixbWJrj1)Vu@sB-AuNDHS9+H0O+P3?n z|8{sBI_l_unmDS(Iyp`e&>_Lm>Kf$yV^`yQXCBh!ih$!(X#XpxfsO4FwMXUS$B<&% zV;937`oNovt_*+~!{zxhV{iYGc?b;7ziHvlwwn)`f=Rq`txlwL(=u!;=!wdM_bU zsHLS?0!xu{(x!2dxaDr(dC7C-?mgZ?xIKh}%Kh~|Qob}TR!}=LgK(zJH2IM`zG;{kLJCUf^B9xjFzsk7_eazOQpCdb6Kc;_oVx72Y9 zJ0Ce#eh#{4@BI^e&TLcqL4P#lKHtkFt1PS6ZOId~^;^3&tD(RrxokqHdv`_s*%ntQ zC?%+Fr<}oMICtUk5g(U;)S{NaT!=UDff(~!2`hd73gkJJjoH&@Uqr(~+LjSWp=>@- zpd&>8tfr8Bk{ESOXz@irp2cRjSx4KeZ2GeyMG>m?N`K||DeLevHEyBZQf%eYG zzhW*SgfS6rFL{5pI=a8{ij8RRFhK)+=QLJP1!Oph`Z7o|c{{qZ#bEN#qNjcunJq0J zTvB{?>&W^o4uiIWX2I2L#eq6=4!h>>-W)Lm>`#49 z)E9nEV{lb%xyuORpCuEUnFp@hdfnew3s(u+Kd~? zH^)V!ByB_p1>S6_mNMo;UDCKK$g!mlGZ0EjB@*-p6n_kgKV@@U-;T`@*;xgZC!ke~ z`Escoij8BAfBgx5Bj`D*f5t6C@Wmu2NAgX;c7hEH3L_48Q_wM$fJrRWmx9-NY3A}$ zj}8fp`Fw6Euw9`f0;h^Mlq(_aPEkRg8M=1A=M?-i=li9CT!NYIAC0W;hP0`~_WmT6 zi^QX~2JGj8cCDDqizyhsM~2ea3xsp`MZe-eqMlK!*D++k+X(^!1He<2Jo}v3UbpiD zKP;A@0JEUA^=hxOwr96AN2`41yL{}QG-Zxdt;av|;zD03QOxMUl?EmXB?Iqj8Rx+Y z%=_(c)+2745`;1N-V@#gp0w|n&*-+x%jnsn?rT6~nTd*izrf_(*GMn05y^8 z6N#t?hsPjn^C|5wqt?4^bz+&);ocR^%z~*k{(=fDifhPUkTn%mpo}~S9y+^Ii%Fh} z(Q-c(r4hc}-xe0t@IJGVfSZhQPS*u{JeE)O;GDKiuFcO8OrK&_aE%)0$Yf4FEU&D{ zAZu6EHY_S=Up|DAVkRpTBr%Btt+mzS1_I;)CP0YxTY9~J|0R`}PrCht+anABcbeNb zJNZvvnZ!J%Rrzgs;Fjd~M@Ym)VN zWf9J~nHabsgoT@mQ`LTOH>QG28*ze-mwNnyVbY7D+5Pd}n-RszwD{n|`7>HsIx1}G z@v2d?#Wq}a>uB>!oR{v-b{}8U*}~~@AuNi-V=7^E`ls#)9>Vw%E;M@!a=kVY3lbwI zI`puD%F52N)=7FwVI^5R5t%&wxhmDnq+%Ui+e@Xq6sx0;i*OYq9dlX`;e{buY625U zRWnCccU<^?JY-IMuRnI^GDrK*-)?K#55jA?WTZfGLu?)b+!gcsGC02u+*RuqCW#V) z^$dN&mPY`39>X# zy!D>S|A>J;;UuMv9SCqE`R6?#$fVK0S);kRoehywP0S7fRnd4`=Xj`1)=((Ps+RsK z2gqvMMC|x(t739-Z{&49CW;A!4>JKnCI%G;ir3dCjcI?j1j;5|8cXJS_3;Jnn_`jDHvo`T1^>x9<7ImzPP%yuk562oM zIys+n+wVA5*Y>TjGp#UX1c7`uO2g(N(iqmv z7Nkn1b&{Q^k1Uw44f&N=R%6E1xT+>_{G12gg^UWnYVu$#mNQ&CU78Ezke5?vaXkIT zB`HJ^KbXmBoUO!Agyv&PstZcf!u4+EMMGAUVn*4f%r$*~4C$LC$U~=(`J$ybe(-gr zNS`8^$sXWfGezr35&zx@Xy#k8a|joo7`}l9YMsZ%&?sl`{hYBIWs4kj=vDV|kW#r@ z$ldab`jb9Z-EkPA`5#t5*%}FJ_gopHeZy;;J;hA-%xWE5BlQPNOU8!78oR%bz{MM; zl~gQ!c(8YRpORoriirtE2+hcB-u3Jc#k@$mrV4vXi`U^<|RT(`kbmk@~*L|P-mfDuU z*vjg(F-KOh!9L;({}z#<6H-5oj?yz{c|t&0DaZfEQs?|9HvFsI1-AQvz7@bXR^@YE zYTC7?zFVknU0YgO5^@f|>bdIHLM*#>x_mOmy7&B<0f;N1`0C5KTc+G^* zEbjn?jByJzks_?4JW}xeMoY8!-PS}xCdOWu0tE~*CU{h3tgF%MDxMQ~Bbx+(xgIR#mFz|xc0eb=)oCEWoa*Q85+HsztY8g zN>jn1>ljV?C;nUY=k7rm)6l5ud#oOY*LL)8jO);EPIg%GA<>05hb}aSf{HdwdsG4S`TB{IRhr zxMGZqNTwRYbh)=shEhq|t_=%ZjZu5VTPRntEN80RnRTZwn$X+tz z{K)_J2ZIdneHaaDhd7as8~umxR-0CGhDv_S>T+ zj)KICfUdh4cO5yx6ml=^AD`3In9_FvL0pM(dIb14ie->;9mZVX8KBOJW!g|34@zB9 zUGIy(@;?p|0J>E}|F{Xz)09Q)PEXl4RwFgHW2vhsjyZsPqxRZfmjKyJp8M|deUcCW zIJ*I``SxgKUuSrE{qd5urp-zwxY*HDY+r-QXYXwbAg{~gL#qw(wOL5>AzmH(9YeRo zgXxgx^brM0E<8}{1>~2s88em(v(3w_FJykkWu$z&eldcL#F1e#{3=XBiF*nIhYbkG zAHxi!)`Ra3m9yA{TrMiMbyUg~&w0K6c)#_1+Uz|Fy4`)k|86tcfQ3G{MBmuSU1ojz zQHD;8t3u~sEsQ=^ffYLUyf}^knA5A;Z2sA*BN|C-E66zgTx^*l^B%DPTB{AN1HzZk z7r+oeq?~K*^}b&Izs|PV)2kyFZgE?84Mb2{v#>SZRiGo1oFFiH zQs$E5J0Ry<)&X&>A9I7=MgomFgAODE5IA3@aisK+ZR_Ub$kU`0m<<&qxEei#AlPW` z5#Z}Ln9mD5w>oT{Es+%M*GJ9IZpdryR&?Eje0(MP}#Dm)&ut|}=RnvtOD;vZ5e8cIA8^i4^g-f!khlXQvzn~{aw zNRP;d6iWu#zfOELiCAXJ&iAFWqC`AjNDU!45pnD4w19t|d6!t_Tbc^jx!hzCetW>> zkAT=sP_%q$-^pW*Xaf-3`Lmg&mtAqvf<*eRT@{?hSh*d!e}VRbwVCsE-vJnEt6_4C z{+ka$Doz;aTCxvQlD;HG3rR+%5DQ5>WlE6|Uke>o<%X?BNsL#6pxSaUzkU#{07>Ih zKnSu{AFezB6v@LUWz zY<3yciv1$931*Jq(ied}q`*;9aX!K5=t7&Y!f9}%hVVTY7;s5V$s~0CK*-FBY$4Qq z6Y4%%X~5xJfNw;3;Ow`pJm5u=gJ-m=Hx&i4a;{scB6Nd;meT-}&sRz2yMVWW|7Go% ze*+%gL3l8fZQA*kH2?Hqu`$}k{c_Pxnc1!DWaz;W5$tdAZZdWdVB_O(G`DsFgDiVP z<#bX_{dxNI#*3| z(-XB%CVZ`H=+t?A{9jBL|EHbvo%UPRt0*{Ha~zC#zlJ!V*n)C%bLF)2gnh5Qk|C2K z+DbQ(oPn0>KEEokY-P9+LB%USMiOy~u=Y=ZZ1ctvI-V_|Rlcplh?@+705%-j&hBnU2wuiWqRet!z@>;KB@{`WRBtM?)I zxF*D7z~8R-rYT+h+o!aR)y@uUef`PFkdsPtvA_Fe`DXh8{x6BX0~lVzB1#d;#4xoB z(?TS$Bo!m$rh;hGPk9>!UwKm4M#XZ?^c-W*rp2}?&Xd9l6SC=Z_f&xdUO)4Kl{4QS zYl|tkZpsnxqsa7cBMq30qthU7{uJ5zvS6+Iqym*B?K@iS1dz+Av1_~ST9^L-pFtxO zfbeJePk}hd0m};242FZwrahWN=m`8=$3oF&*HiIY_?XZ+W(%~slW>xV<0#IZ$B5krZhrk!Yo5f_ZfSVjFjIJck9Gkg1@q84R53`+W+JR(uRmyyqM~vE|g9Wk$;3?n5 z4F`bQKKDEGa5T-?iWlrfZjGgqsUVN&;>ttxbqbVPm}S$Nl3;XXRj=ij>nNZsi^M8l zmpHq6Znh4MTSac}m_pp`&SowhMl(6!qITObW_IoDoE*rm!I-EsrS-F1bY>b&k*W<0 z2r>HL(OOSl-rBgaS-@pGF_3b8EKjelFS8dge6VmF0Oml7C6`lZ(_Ao)UkQ(_5Er)1 zPc%gtPmr?G(69eG3M(Qzbc#w^h>q zP34om<^Q3Y54;e}pO>;5?@xw7R3OtQF{zgu;3JSYISkGlPvmUg{Kf$tv zs>hM7Wc-&2%0;1;5``^@Nz3RyWGgOQ46f)BljN+!qovEe(w%%mCQ5k)<_MV7Pp+Y~ z2vy6;W#7))c2(?Viab$03uyI#Mzkc(b&tLkB~C%X2z`W12zxQe2^zL@W8Bh}H@ejX z#j&b+{fQ_wS-is==>u%qnpRh_QK{Lx_$jW z9t<}8RPbs4HSfOWVLb&-OSVczPmfqJGpAXX-vVl-e(mG^j`&miWKfL>2X@dKaF$g$ zCa~r6=szg`5=%es^nF3|i}LbXr1&Xf@bZ3L`p@dIYJXS)WtBWa2@ zTmrM2G@S0yX^={IEs@w+%Z}7}g8IW7NMs(hpM^EJmOxuXWX>f2fs%b0PxyC-*RACu zEtdwBr-T4exQtDUBziGgjs*r+BUbra2slkhV!A-iQJ&BLb-rKfI8^*3R(-{LT2(oVgRvZ8ajt`iZE?WW!^uJhA|m6Emru z10pSfUQQ8>CewcvZbQcbcpz?is8P&y-i#C$B@>1X5!QUo`k)Sxe@f!A zW&0_7faJSaN~=cd+(3taH1MJPe=q~?1&L{&$dO4XSmJbO|>TJ=WKH%f` zKVZG*C7kTWEzS$5!_*=7iTrDRv%vQ7N+nBol|DDlQKtqP(LOgoYRmrc*BVEw{A()4 zPT8~~Eixo4Xr16I9o@WcSPXnX<3)yVcrlFJOG+FdkM(^I_CCcOX}{u6+@!Af#GKMy z3SHsm)L=*_viS1{S18c40*CA*WhF)7xc34)ka10DK6|;o79*i^ z83dgp3ytlinH$R<&7ga!g)kWVmD1XEd7C-k3UMMy=RpngMs4sO+qeJUMH%-0>CHK} zc%@Ag6yDyrr~#@uaZPB7ykW~|9D;ojD(AczIbF? zCL&_3UH9wLpv>@MEIYCPTD?C-iWbIY4t9iER)q<@*}7DSq0vc0!+b>;gCJ*fVrMGQMtl4n~2I%s_2^I6$^Df_Tu>Y^|OZnD$^{K z@4<7%dOcodR)9=q73BerzBvxr*%gPzgMMz=<@aoFxH*$$^-xj-c!2|!AMft2en}JO z+Hoc|8<1fDx`Yl7thgu;px$Wf9Z$u;MDh8zGi9!AzoM*@Mc)Dg8|ZOW{?+pl^O1ZRMN(l)FYRVx2Hz*u`cjt7@eooVzYSwKQ*7*`fkRklme}S5_3d~mQYffR0<9< zo|Xb&AB+8f@0d3=^D!Z#vm+peIW0Z9%NjK@&xkEE77H@=885jL?tMDTUVCMCriD(c zqAHdq)sgfXu$_Tyn7C`P6 zYNdBUAc~02OX^%*js%}!Ih2Rn^!9~cn4zsIcwsM&{Jl-@Jo4`vce}~?121}-<%6$b z)?}*H6hnm{C&d?MeddJKgjpi{rYlOm=$u;qe>_7K!lQ{m>Zd@{jA~#;@J|HQQ&9N) zxvgSVDw!%1f7sox?R~u7NTzQ2(qKF4+HTX#>8zOQ<%mX^{MnBkKGLpr3i6+dveMv^Bit{K{|v4b%v zLpL#&%?tWd;Zvk1#b}&So0N*yfw51$IB@wJm)h4 z|JUQwJbJ>b&&!#u3iyBQLM}4;Cn!qum*349uS6inmH7Bxirv5rE`MC=Vl*9BAfsci zet$Zxu@8T3oE4VVSLyp!^i}|5ccEL2akd)r7f-(6`Z}DJh`)P7dgKxc`f|B`zH&E! z<2Ah#LcjXM$ZOI)pvfTWJ%%BhP*3;kU)~ggqK|)~Oxtm|1=qU&qeve*Z{NR8&dpLI z9w_xck<YU*H~L$X%p4EP@#LD{T<7MwQR9FRl*N2rc7cdu|+$&5OLkAUuwF0xk7=pM*kprQjHpRSV22; zqx&N+K&kwuCyFmd6y^V^m0e`Q} zYfiRI#pn7woMBuE?ML^oq3TXiW(J!##FoeZf-_BRlA!I;ShNK=@7nc zu=V=JGhZ&E@noJOgpvNr!ZL&cfu#zC{bcjMdvV z2P&r<&fd%CHvkS|D+iS^_QIL!k0t6PJA3>PDE<=2fAWzh*Jb2m3iy#5Qr4s%*w|hi3Aih zn9A3?2E#eRXdV_?gy!1-ANK~-tqum{Z2WjVJ-7X9r^RM7Ket<^Ap4^CrT6d0Uwpcq2d`5ZCDhvw!o_o=CuQT(Ft(^lc}I&aXRydD4dX|g>HA{KVgdaGjt;HLu|{{Y;t zBSpMY{WqmzkMHvDR(5LIx3d9=@3Vj!PsHAFF=yO+-%Xv918>S|-~0PCRDhzwIsZw3l&B&@+R8Ro*io3;bUpv=%$IE_g>uyVRP z(C4|I6`lNPw#aNx->O3*k4;Yw?S|c{&p5gsDnpuWl<5BWpX7^q|7hY|^+in22mjnx zr}$n$-F`T6_4~CG2i54Kp&ZBwRT5|GEb@ZfYl?eYY|YD{ zVGk0aic7njTk*E<TfR$ z)boKUWYIQMIClA|gS%WhwZ`>j*iT>zJsjAH2P`?1y$U+tB{qAUb$j|rpSBGxDz`l% zS3^EKs;)g)xbDixV4?^5OP5X*9;*R{y*)bEo7@I$aV*S{8v=*b)m~6v1!nZYsiRfV zY(wTPFxxj}H#k zfOW)#Nf}z>s&HA1Z6(@pu7&zWR!r$~*an!vnHe8l{(<^Ns(J_5;ZC${fCr++`DZ zVc1|NYNcFw_uTC-9~N{q3%&MIRq*#m##IW}poQAE^UGBBpXUtwh(PtzH7ZuxXn#vP zg{T7~K-|YGUz@_H8ip4(l8=8d$D@R1v4YAC9nKy-rzCpk{Yt2TI7fXmS?0@T{+P$W z4a(bjUaqt8d4y!*KcfiQek)25GdDV`tm0)DkhcbJTL66ve%ste9m@LEU9h&s&)Kt^vH&y zwA;qi-O>G-%4aL?^P@jXWA@2~S4U23cb&zq-Mjt8piTajJ3D>fr@Q3!^)MPV7~3h9)*=fsyk?>u8UQ;(v^c5w~*mo+s5-o3(Cp9zCv5u8Tc=CIbC^^t;AR zur(lYwsQCWoIdikC{n(uwG~g|zcmW-%&$>}mBv5JVTHxI=*OWIwYQH1?%P*Oe*d|L zf*pWKr>9<{FBQW)lHoRuj{M?T0s30UU9`g$V#$5BYYa{eUcb_~ubPg!xYxX^*gPm3 zfFH+neh>X4Q0y?JK-b57@>Qc^X%WXt$$6u82G3 z6OUgA^TH$N%iOSQW`mdUi)tQ7zk3wimCZq49Mqn8SBY-Mwlzx?P*t4HtSp-9?35E_ z_qZ`)D*us(_vyA}9aJ`^mgHL|H-;14AYr*bAg)+-f5*^>==NP}C6&*edLw2ktnhDj zq5&ff<97d;(b7IUTY5MbCIC%uxiBY1&Q!c6yRpT^y0T5asFo)C4JeX_JjEOnVk=X# zN5A|xYR0&x)JItP`FSaO8*+IeZSM^Ib#US(o?q!rYtWXg%q~{LV-1U^tdbMr-`iF` zzM&@$-lTXcr(RjT%sUegJZkNYPtd|PZ{F)14Y}U964tMIH;U+_7Iqjc;tbvyiN0C$|17f?Y9vy`EYwQCVzByBD>$~yHC#94tb0=)_-_N7Q1R>62DG`@ReG1_dbj* zu7e-0OwA1%Dbz(UKp_q86|KK|Ebk{rpKd4BwbliEXDNpRA4hT?t;Tb6Sy;Z8z{35h zug7lWw_FV_$~et$2aX@wy#$hDZOwJI%MrmpJC5SEibadV ztkbVp)$mx|C~s7A6S~rt5X7VbJ*=poDsw7V`>iJsf~4G5O}7rTMb$YRO)sKaFx-#| zI_ED%&IReJ}ObU$wLxwGT^+G-bvrRoyhSQr+DEhvkjffh>;dE7t|fPI_jd1Yo-} z7-|8(%&EFBD#<}#lLan2T3eI#*Rhg<1Ys_VRDj>4zP(Rku#kdqs}V@(u|8mGWTSm@ zw=QnXfyPO(fQ`&~>g)02tIjxlb#FE?=qN;;D(Xnp0$}Z=2ELQYP$ak4_FUdl&ppyh2;OAPw=)X%;ZqI8nhHU#}hyb&t*Ktq1h5-{%Y+jbGniaVp)PT(Snk zdLE8-T@M*Sz4wQ6UV3Uiq0aL}p$%&i3WKA<0alenP0u=C90%Nt$TM%w9ivh`=8p?l zJB}8}s|&f-T=j?C6W4W7EW9tQ0iNF-cCdRG@N+)-aAj6ENC8LDwun;&N$y;pdGVuS zRDximU5mQIGbc!^?%9?!FI~g9R*iYwm6_nZ$fGEA<(hdF+Y6`OdauJbf}%CPuB7jZ zzT_P5-A{y!?n2tH7))d1zCG>?d%*!W)=`q)%ef$@`HrTKV)&6Rg*WKNzSBuQ(gAf_ z1#_#jAv+ASp?P(;_Lr%7!c@4`UN2WIeK|UI*8g3jC`n#%fFxZ1P_buPI^;sGShL1h z2zV(nbY2N|z48D{^QqqaSvS`J-#nAi?kb$(03ECr{y*L;qR~G%wqWvTPwC)ggUe)` zeh)b=NOf}_<^{BQ&ir;NtDkEnxG!&Gd$$oU$2e|r1TT<#$`{LtKqe94H>>vft8o1?TN6kJ$I8GRV;!tQt%xOxNN|53;IfUCDZ2AU+CoNbVHqv{mRi z;2MwG(wL)+J6db}mIwH{qWRyoi5jsD(51%?X`5DJdVuBWHxhSR`2I6Bg;_qdNNg&V zJ^-_8xS~)~iPu&xg$G!LaChHRzyH5@`pU4Xx@hZ7r*t<`hi(KUr8^HGjevA_rywnG zKpJT{Al=<9sFbvHgCG)8-}b%te*f^1XS4TOYt|TJ&8hLwJK3`GH_h5%&HrbmfZ9oh zZurIfHIeSKk9QzaP+`IF!}fD_HXoQ|HIf)!*?yaAGD4?+m$M`!2WmhuS^a;TKA(dr zGlugp_PXgVUh_is-?(y095FkpO59g(`9EDp`Iw!X0TN!?eDpkbmW4lP5{ptDhIBz4LT)o*jHu>QM9d#8RKl@o^Y>o##1u zM<`P!N!xvz6+miw*J2iM;ev3v_R#M$-_`oi|GTE`@)Y;s_?=FT|3!=bE2rRn%Jsi? z>)DTo@H6o%vNybE?=BjA?w4t&+pYpM9!WI!A50#3XelNn-Zz?4$F()QRo7s=?iBL% z(Qi?*bjkkCQOrX=Zra`r{$r*_u~8PfN|?8%QX5Z##9I z`0n>!IQ}7hUn;S!W;h>M)-gAq>>r;^bG`IG=bx?)@j5yJ1rF#b+RFGQ(_E7TF@e=C z%jq9|&z4(ektPE_
  • ?Id!}^LtR>`4Y>X~QtNl^42YJhsKnKq4GTTPpmWS_=|q~A z=O1&{xSNjI}{5&8!4k>ANqFu{;(__V%uC*~VkqGbd zJAZM8;JVC2YJC4C03I?@;ea+azI^QoF$;VU2b}LFQ9yB-#-B6cKd0sfez)o30y{22 z5B>mc*Cqe@-@kw6dbVae2ENp|81b!{WC;J@UOWd`JtW^h2MIYpXSu)MdbpqD=cRWC z_`WC<*MnZ2hYbk_z1=!*h26Cmk9n=`mg0|o0#TBh5N%-?Lh*9x7s)Fal1u*CiT@66 zQi4gyA!f-eES(i?ZSDGDt^46ei%N+$8O^-e(cR;uVf01$n{k`4E#8)nj_b_5`RhIR zrX(x^ZJbGy6g+KZCOKx}YoxBtj3T3~nVHfinl9g97mex4nl5L#q!|aX2i}?U%*5O~+ubc)6kDXroQjHfNSDveBLm*8RBZj+O-mFzM6ya1wV@I6cczduTtsv+Askk5 zakdd+2$C3Y7TE(PG@Xqdqd+lEAIQwp5x~ZL?VY0PtuM63|D5$`Io%ywojWJtPyT^s ztbp$wdrp98x|lE2^rxIDPB~BCFaG^cVK$mL1h6eQ`^U`1!Q4`Uy7c)99mA|Rrka)( z$de^pI%&aGfK{C;4hZVrfZf&=xUybY4$qD=AWN}kstzL9evSigb)aC- zL-2hvd7HX8(I068Y-nhqerHc-9?gp%t(Y0<%%wE(VX+h|VJgPu?;VyKTRo*uo9sWY z7;#B1FCA$cwdp&4RxwjNkt;!QswgBSdV`?Fs3nUmi_9dS&XH<$mDwOZeU`+ZshWa; z%%?P^+U*kb%wsCYV>fdw^DO69EPwC!eptFt%gncV-}eYAa`j~arQf@BA~QHsFr@LU zMzulez&wgCobDa^78ww#4uo1nxrY_n849~2*0WM8gDm7>K`BF?1%rQEQ0uL2PxFYb zrn1KVq{Xc98#fmzX_1eOET%lbuDhsjqW(*c2a^bPQRWo}WI#C4W69~8L197NqCGxC zov>w(?X~$Smcd8-84ws;8^ha&%uYyUN*UKIUqJH#aRGhK9z9 zsS;!td42lp!CLSQ4W_CZswad2UE7zeXMz=w>(HmMY{m}jWFWy7pk8_5IO)cm4NZ+H z%0HvXU?%2y`_e>9bBYNYAOqX^81T`zG^6nIgKePnz)=?Nh*H{m&y&mZD4z9IAquoa zZN?PO*;`|yk01dvmyM*E#g?f$EjK~$=wwjj$??qNS>a3bB=*jBUjlUrhBlw$0=Dfm z*ilWhRW9qbR3o<<)ax^-?J4(%sZQ`5vQa&HBmi@~Es_@##@nw8rSuyAHNo8` zrKQWmykLn9_$Cq}BZMA^LIo3ehsp5F3rE@E67I5g4m{u2_N27E`&Ca`yUqyzYzG$f z$k;VKKiStv`r-2jOp$e}1+;DNwv&;*b1CmC|-5B(8n06>k7(u=** zIpml=Ew;1&xO%R+Tw$a3Hk`>roPPV__w?fB@S&_P`a6?L+W*-L)(WND_oWAscyUAh zZen<$&N5#_Xk?YfjTv4`;mMlJy#7mNk?A&OXXCDX{;f;&B{EMW;yS(+Bqdhkt?UA8 ziE0X?z3%%{D2f!`AXi6R3QQ5+3vqb5I^d$T{4n)%(^VL?0|PzfTJ^P_I-VdUetF^fd)_e`^%t8k~OrY<_mYqNzE>$;w{94w?!)H4&c^=kqIsbbfL<^V ztBU>sr-2;-F-ybgR5@wyM|KS6!uo*MNRcpO=Z>-EBfZ;&onKRKuSFoj)JEN8mg3(Ix|6xa0wAvK|FzcXf5ng zMwDFwITWyn)cBRGGH@{(S+=xwGb&PBLnQqHAsmtaFc#lk`t<_*xl&@*c=71F? zs3r)HeLfK*8?H@FrYZjnDmrH*_ubunJXclm?%6;4Mf_*K@tsm1!jT@DS)=Q5G7949 zQ0qAqp5uR<*zpz(Plf=IMQ#8%5Rm-1lo$~LA(bG4Af%{{7b)QM+^1k!y)NlR=SR)a z0W5F)?eSigz?!*}#L^Ndv?yW+pCvUUr%H<+jU6=V0C?a8)`qf^!%#zbxi!3ONri|g z09=rOst9+BP&i6Zn;)IvvAmt5qviU*#D{^tKS@hvhEzm|dyf&8GYOSWm zqXofJKS=bm_@5;+vw-Qk65Bfhe%Nn9!dOo~H4l%5i5+*5lc-NrF+&K{<0Ac$du*Wn zGBO?E**=RhG8`ymv==RrC*o5G{RPBt2?K~!8}H90!Db-%iG(-B<2cmL0z}XE;S8yb zX*^BJ^xZwTH+lqc?B+oBPw8xV_BEGHOb!Eh$Yc6TmC6Enwzke59aLFUkP>8cS9v^~ zEn&o7@;YIv4dJQQ9p5}lS>eE&^6I0>a<-}?j{M9DQsHHmaJu(O5KvL}6r0mJ3W#C7Kk6)3PjpZsi+H7?-4msx+kPI@(y~~W2$EqoHV$uLj6O_#+eJKq$M!Li?Q<5re{ z>wa{Dx5bTD{7Df?JgzI}WM}8#=o~ZrroEbS2RW1vH4@km&fD_KBlT6slg*wx^c21C zej^8cHo`~WTbG!DRn+X+9zh3sPo#ftKRko_jVdewG~NUZx%N(GJaiy*+3p2N!YGy} zWDl7zuMz^;BYLZvj{?(5WHGJD-n*S|{=~r|n4m4sI#;1iUW`3LwSgSgV!+t4d~of@ zq$MCWo3`GrU(O}a!Es!XiW^fA?K^jSC&YE>7UryoCh04GvW znwKWYfdYJ3g*vNcJVmY=6+JjzgmLV^^Cq?n3@oDyO4gQmG@=-zC#z7C8LxlQw6C~# z)=DaxFPw;Kzr|V%0Q#_Z?xT6-UCZAl+LFSSsmJTcfSW*xSMM?Ye7*0FboPf)dtgL( zi)Zkel+_tLC&OXcDK0&dBAa$gfh<)Cb*#Q^S*+5lWQ-A;MzT~AAy1T@^JXYWj>N1| znPvSz6IC3SQ24~n^hnHPoZ`^c#^kEf5C|7Duc46s5X{s7A0%|=AxdQ0gqQMu%F%*y z=yiN?ZdrB$AE*RAkVh_=;adjBgnThyap{!`DXh9cG~!qPzYn3wa5sA}e?dPo+sR{H zn;lAro}vSGH4X)LBniW-{l28Fja>94jG?X-0?skD(Oib2XJ{rXM7yioSgjxp!6uKlpPLtfbot0oBjtLQp9PpEo4(IL6frhQs!ypB(-Q*bS;C}qN4Ii z;+|8@56C;Vh-8(78?2;;dBIR_8t_}_OrW7|RCUW$^#j#M?UNO{3xZG`0ks)VW!4cl zvFSL_=^$FhZ~4j12;}l*9Tq&7BD0P>VrB-95*_pZhUG~Vb!&*uq~=tBYWd6#H>>nw zG69U-a>I6Ir}iTZh8)o+?PR!S*`J4dtT4e@QMUu*eXZ4>tSC&7X8q2-ofnde_bUF< zs;?CvoI@azc&NMJm8+FC-l=#CL*RReWL3+wsy>MiYFX_m9Bf!)Pf|nO6>2eAR(2|V zxrc`=f={LbMTOfN3Q%B0GmKej>kFDJAY^W{VzLGuBZkTm6-8-@(B#Ixh&QrCUQ6Dyk1D=Dfy3$xUCWeHBovHT;azF<_r2{0jTvJ>E}Y z%kIxto-^Kj-DUM5)-hiSpK6%2BZxrXwD#kTK^mvm{A1uMdiW*j@CP)yUI@}KvUKh8 zNmeNf0S0siGAEFBsA~hm&qEihInOGMA&J{|d+nqbvnP^%3ZkI6e8VrTq7Kb}$rbbw zCozARHOl_m3I+)zTu~T4GOx&f3(7!>Y7(tq*jd{Deo`h3*VVL}%3{hHmk8#8fh2?T zHl7bUXC)UivK6l#Mk<_Fqza(2D$tK$P}vw@$SM6qG1c)>n`5{d_75{a`q zlpN6wUZE8K&r8X3VN_bjf?jGR>YNlk#l}`bjVtv)A`GyMx67i58!G%(UTr5fLKvgT ztVjUx0R3)^J6a@uT13cNU%g5z4E=v1xmH-M8GRkN_Gfgl zd4q+ULxeW#snHD#Bk^-ZNjzs~f9EfEXjVXI>_pkR(AWUda?f>~ zjnJtQqQS(JDUZ!D#KR0x14L0PORJbopYB*3a0P%+o0YcfH35I&$l%{UO8w)Iwln5V zTBHiMkFg$uqLlbC9ZWM)pgQSE_v`r!{kXd(mgF}=^x)2-FkB!~gQhJ~(k{kCg~J}Z z=`LJF!ph1H;Kd9BC_56CQw_5#`ZKrkOQ@q{J1A35Zfx~bs*%>Ozg4Jvt-8`80U%8T z&PebzO<`=AfNF1U`I@V0P={&D+|g5$liG=AUhW=^Usaem!Ul)U%lXJMmK_b!+Q`;j zYC!WgP7!9O$s*@?oW;p^i^P{_9l?*Dp=VcSB#2?LGFkA<)mDB9#{@?3P4O7DTt#z( z&FW_CELC3+S%0DeoO*6hQZ^LTnat>RBN~?4$xKB#cAiUFY5dw+?L~5n_fgN=?7FHh z-O-5Sr{SQ`FPwA1IbD>tXx-YRJSKgD4Uxzn79K|50^c1(U5KXY>33Jj@R;ArTNTWio_fcpPw0la1clDNun zA8d0nM@+qaAPd#6d#-wK@>c|Rh{XSXlr;-v$w(>`+-k#$mj2-!c@b)T8I#luRm$SjY3p=?EsoB67z(pZ-lXeNKfh zr<5Z5Ms;r_{-EKeYKu$pV@OiW*XK8Sw?p#00{lPxgW?R~t(9H#+`Ny7(v#}G@(^8e z-6-~wv-fOB@?_SkbDnbFsz@AO+p(5Zz!9;D)S$X*+kQ$g-!QNN@Ky{2J%#a{%0`xl ze^|JGDPnPEfT|rn{$6D4M%4Dpy}kK2?$mrIFqV9oz4rZvj%Jg&OQZiPshix_;TZq~ z()f#vLsxsBQ6hPDXm?OsQi?Ric+I;Q|5E?m?v;7{ng8@Uo>B=g*tE48AiSiMtOI&$ zD^=LGzRcynw3+t7;YI~c_5++;s=gvr>5Fet+ZCB_ZHs^57GG6a;19pdt+Qm-GZv_l z1t7E{)ZR4MqtROmeSEh@gexSWmE4khO*?m#+ipzESA*UjkfWazAww}!3II9bbp5325fPaE%xT0f0pNpg_OX-kmjw+K?ieR<72`DJS>+urtKrwo3T<1Xa z$3s#6?qG;ze7$q#aXCXa6?H5A+7U_flRW<5@@=gSxQ%-CEYS+%1K|8NFuhJt(OhM^7Et8qRYH-)n+S%__$1ZiG*TRxQIPWlf*3NO=AGWswA+=4WoH5b z0>Pyx12eyx5vPXNUUC|2^@VJ3xIMhoE=%jPtQH=VRtn?4+-XTx2@fTiZ}pcjp|Vb@ zO)`#1oA?RQD2B3B^R(leBHLm%v|XW!5-`$CC`{hH#FUO=K36)|wC0fzdAsWJTQ?x5 ziOcov)Syxh&Rs>3e4e%;GdMAm4PIED1+M@@bpP-0UX>JxQpy+m2BVV{xetsg?2Y8m zcSR@e_4F@obkh>$2ICdOC#HS#LZ>|Q8m}36Fb5?+A1B(KWFN$w9F_YsBmK-B!PbIq z+$@K#-F9ONu^{}68^0YmLw-TE(KK+Wsomw6#dPjhIAtg>GmMyB6p%!4ZtggnIrY5( z#Q?20qPgZz(|Y##1sXZxU^ec<-cd&tAy<3<$b_YQUm|tS`kSs>0gEq{%LsIgKC(dO z2M+RaRR81Yo@HM^-N;u?%U+GI@i6trHl@1YEpF2(j}NC|;lgX1pM*$Om;$*{-Zm>kv`r#!44 zFl{*8@HxFg5w8;L*gJcDk3U5n!!n*{*dU4t1aZ_c@Z`P5)g3QuzcSyLp2sCmT9Tn;{>t~0SJ+1ym!47T z-G{yqavRhQ;CaBSfF8!qTq(shozG*ykPQJKo<;6(+^B0Tm*}WOW3T)fub|AS{!p|c z?qhpT^wCJWg2p*cKH{g*4*juc9KtQvA)7cVyr;$#xVM+lH*#Pj3?--$p&Q=zXJ^W!Vq0Tu1SN01Iq6k?ws=ukp_-hy5*$@#wR(+iza?)G&U;FaU^` z^s?GjjvlaRS>8Iop%Y~5;dP2e!yJD=;r?Y>Ir3boPt!n8HLDq1UD}3s+qFqFmMINu7Kqg_m5OBJ67DcBR zQi!7?lh&tc{Q(zaDCF7?-et@;!R?s1MTOHrhrZ#;n5=r(?hF>PUb(#T!kDT6q8OUk z$V;lJ!skhH^<;1OYIO-bMpW}pWaxlU5RR~bK(dLegLs%i1%EGKssv{KXsezn{ftJ8 znU0~Kk~^WjPG3DCmTHq?alT#PHL}Y5%j=qj_U*Yc9x_A%iDJz$(BY%-IortM3}rBAue?K;-N{ zr(_Id=+#arU`w~X4DRUxZX2nL4y&=!iy<3t2Ts`vIB6cjOD8I ziadL6TE4S#4P;iw&Aq`_{4(brZ<>RIe3}++Et2Rn+SRwttr#hwL@3~u-90~=P}d6h z_eWYV)7A)OO6A)S&dNKSLH~{bjK+VlfNAxUF|aJEy~75?pQH||=}%%$MXfT$hC&8< z-uZNnRF!plker`Eox*I zDCV5cc>J>_?mxPfGczcLg#|CeWFp>xDE+4+(dq1`BLQ5V=iKcP;TKAlOE_Q+a)*K% zPwJ~w3p(lYSg>i*3C}P(z46O%x^g&NhdGvjpO2f2=he(DSp_%yFl0sq6&C8&XlaW* zGVCf%kv#6yVDzlA{*Q;zl&NGmT~}DBg{oe31!xcdP@g}%L^#84gZ2&J!{KZynW^L@ zqSoMIBJQbv(Bhw;giBhg`#O-w4k?S+&?0ydZWnSbK!ZHr`DB(c(*qrT&J^)ZY*4ahW4ZB}i zN>U!p?+oz8Q#)ViBe^<8*Dr2~f-pn<2X}}Ac=YKsl|lF(W5gAL>#Bl@IwJ~;X&Lp2 zk5<6uo)d8DHB4P_?d*NMa$bxB&?E&6{^A4P%Wq|Yx5`Lh+PQ}(;e0H=#JJHBr#-|* zes_Mc_Y%!9qm@{homEBuC3aT(^4Oaa{I6-Zs3H+@HRJg5sj>4IO>2lD ze%-8**qrGCNqo;JKa6kZXg$z+-GcUUn>AvUWP4C^0tWt;06(M=1KcnWVT5rk6r{|M zCO81*EsN?R)~!~_h2Js?%j31o%`deMz@5Ty6`RIFoGu&3v}rQP!LiYybKM@*0_4%_ zmQU29BS?KEn8XQRh2kLskvt--wAITafAydrPSL|%w{5*`ltY5YL~p<2%RaOJtj5xj zkjhQn7oM-vW=ZUpuq*rN^B-zwp9!81+3_IVB7in#DZvnaiFJ3H`!)NE=j%8GH=~P< zz0JWsXQ}EokC93cWF|bHwwWe7W+uXkxMYem=i*`HN_g>j@czW4!>OU`&mO`x*4n0- z&BDa5E@h8+Tn_9joAf=uO5y-v4`BK?*foQ$_{e41dLsR^LERh8EZD++d!8yY+RAp?)hmEoCv+NtXg$Y48vDmV&Lvo?D>R^ z&STEnz*i(MDsQ7;agFPw_dWad_3|L9k|Q1%33l7QC|7LyEweXnybhy#PziMB&?S%8 zh+V!~5_1WlUJi(FQ?!(&=g;LE7l1-_=M*)B;Fw51L$?wdvGNGzzP)Wi0IXppeB2O) zR^50U0I-Ddy$US`%g33DsrF~(BH!TQ8ByhHH-78QV;7LPS)T)18~5lyRimT2mx#Rl zopPfe^L~R#jUUe2e*}~*896CYC;$Zl1LBvLo+d6%PJeFO4fR!&l~GH?Zxb`4 z@ryivaPyeAPeJBbOQ@#fkjb{lHOR@{TK|k61z*e8lt?aY524qUTW1&@u&Cf>9EMm@ zmBi!8gU~w=uVraDZcujinJX@{c!!1|U!-eP;bt?0?3}dVr=XL3as3HDn7(`n4m$_e z0&^N0&IAug9nm>S!%^v4Nz;bgWvR1n_(}uAkgZ!!C~vrDJnyqYy4Y}_A`Cz3(sozQBtYKBO?- zi_L8w4}FDcYup1YY+=Mg2qMpG^u)%WDh~>GgSn_)o0FsTsak_ltLs}lR=Y~bIdNs_lrRumwJ zi5f_@Yx;J;>@W`}%0^w?^aI^XdlwHJ;nph$6MRPN7FtCk-U+rSk_pLkV z75>AGX$h|fIOEWj%BEq%;DpNctn1n|GT?d1-4Z>ot|k4(CxTcQzlB=# zlJR_noHW`^Lzx=#KEdKasM~|*e~?zt^kqk|cl!It0%Ihd{;KOmyK8AB)1m*E_IZ`D zn1>A(DwNphZlcse9nd1xG;6i8tWr2Qn@O|?wk2%3EoVv~*Jqz5EBzBprF@6^E}C`t z&+z+0@!u4)wd`3)Eqt26ZZ|*|8Q9L*fQWg|zEC<@=;KcbgWp9t)!^N*iHLHp}8 zlX?NF73d4>vLLY$tFfJBZEbCL%C8jN+}w0@bgrX66U#^)1Eq{Ixd0b z47-0lG^3A6c=I0^Sd|XXvroe7?T@8nkw5OV{dey9E!Lf`bpuXb1`vBB6Tj9=q!PDp zSw0cUUbSd2Mn>6LD>`Z)D`R~nEn>qHdbxmZ z$&m?5RciapiH;0%@xEGke$sfpc@y`|1-klBHK-sI+L6x=<3;3PlBIluXPpHfb?2Zs z7I;rrxiUjK6dmUw=MX!D$_x5y)45XEKY}j^7X)b(Ys?9rL8D%!Nq<%Z;Q(=$fWfHL z_idq*@InZ@FfzRFgBH}+6c5=HPgZ(g7fMzFPlvNL#z{?*A<2_}xaz~3RQ#(Cl~ao} z5^ZB~H--KqYfS%1PX3Vtm^hOtZxI3DTcRW@ZMVK(B>l!lQm#ab-~}R}tX#hr&+wYJ zO`IGgx-p{gRLPF0QgedIJaZ4*IoMhJR~k_kg#~6nUS-apTuEo{Qg5|vID91&Ew_ma zWXqta3?HNB_~vv@&O1*|ws`T2e*oI|V=f9fAcM+j5dn%h zE6EA)S6*s5bH2i#M#nCNAWZ-KG1vd@gIzS=TL>vhdo>m!rgcyui}d2zHJJTfQ2gFg z+uAGEAp5TRSE$9=bC^tX9Do3ps?ZeW=UMOHeW%2p6!x6ZCwYn`V1TxXKlZZ=ZSa8J zTm3Tp-?0%Bw|E-dsJL44$<3&dY=8q+&zcV?VSEgS3A}1)J60UzSUOpU_s0u3Y~blH z{`l|ogRk^o2#iNlR2xSFPLjtLd#~Agz6v}8q3;w$MvxttIXJGT0Z)nLV<#3!n{r$2 zk75Im60tetFou(m%h`Lq6Mp?VT|>JOu90`zn8*TZb1`}$tD`AqayzyO(5u{Pp7G!t+7joH8;Mm%)b$B#a*W5~z5M(z>D|NCg7eAT{p zhwy4IW#y?$Y=ZuLJgGk*sqho`vXzslS_3%S@O8imQt9FD43mRB=^Nl_> zf7N(c+ZTEG#hAKa6x}-+PkTmPa@9l?Q3>zXJFy_^_GY|SWOK8{S+}+e@Hh7Z=aG0k zBw?PFY`yr2c%Nd^i`&^opiGM;;KUF#TP1lsMoCtXn&-Jd1Sz~ro-k>)3q*bx)-$lU zRQK@kxK0CO34z+oWWEoGMP4VL*2mQ`KeU|HBUr}s=7#09l}-e`LI(;WZ2_2;e8mP8 zvPZlO3+8z>CjsRUxFG`k<^PEYf>>}?WTGIm&V$Ct6}kTFY!|u#ky80w66%F;z*4s? zciwZ2&V<)9lV=z*rw0A!KK_ovtWowfhm~$Y_xNJJMGah3Fc0XD(1wH6@b8G#4`R%f zpN@auVxP_Swy^Y!#{IJZ5f&@r(E4D-c61q&tCLO@dx4h+rFT|A!wAE5tE@uG1)yWN z{9p+8SBCmDMQg$eKNP$ZVA5_w|}Tqn#YJ)#_<{P`6OF;Q3ne2R9BNCCYfK4+F^!@)5*!C!CejMJ(S@@nBTA% zz#UGGV@OQO0TWUY-PC~1;!5RR8DrG9m2CgOdxZ_P@fSPYuL9%*x&H}6v^8Nk?1F`1 z(Og}5Fx>UZK*p9#q^JTL#bl^v6rx(!=n3v&U>yti_Grm@>aCZ5^W3Onpl!A#F_}39cVPF0uNm&KH z{}-0SQc@YMrSYmr*r$JgGY~LyEE6gC&u`KSyPAhm&aD4%6w)HvDb9hV21y#yV2sOD z=QAdek?onUcdSyqq>2*fcheK&X<_yC%I1|u2q$73n@Itez-giB!YMpNF6PX-M`?E3 zG(6Y})Dz-*Lb7Q=F@|E;w;!{@gGFKFE~?`TmDoG5^6B`yCxymNqHYlZ7 zH5qu!)ppW3fSDnvM?!E`3bDK-S1jCiZvz{_F)9a%far!Fj5k+96#YBxwya@Fq9VBF zAd68ADqvX54bn;mg8tIczsHC%row?nZSyLPM5|9Pn=acl_c`N(#Y#BNju`MyUq?h? z7hR7)A%uyeTv2Kl?#fq~2@1Ont5O)PtChyb3M{p8-o1juy<2=qO}F1MDj&2u$-Gt{ zAG5k(e46*O()gz{vT8(|WV+gsXvz;%pb2OG%jb=ChUffHPnL-e7$ z5IOKAL5v6#q#*zQx?5TuhI%^S5&pFpa%H{qobNC5 zShH3lnxXzWW7Kgf&VOrCLMp^I_6}9HJRbX#jSE=T$`>C8=H?`gO&(|k&0b)`@XHjU z>q&y|GZ*xzwGe>Nll88%DI3#{-90 z)|#YMi71OI2$|O*0jtAEfV{ui{b(Q4S)ljO3wGM4zDcY! zlcZ`&p0+!y{jq|T&b{BH*TWnKQm;&wp&e(EW=kksQ`;sSCe-7Xqc1~(x-3>+xa2?0 zP;z-!JuN>qXBllOfC+P~g;FUpb_E{V4hf_ScI#;}jm@q&KIY0u75D6OMjV$_LMKF5 zdQmEU2Q0-Ch-&fn}8nXI(7bx&|@pa5Blr+-z1y)D|$IbUuUUU@T1JbV|8LN@)|h109n z*|Ken-gy~7t)BT+=;Z&j06y!#kUG|pfTeHOuh6=NsPF8D_ApJFNo)KEUw)VG8y*YD zGV@;*3h4Imt*dicreu#gm3xqq>JxIm8nT>jj05EK^R;w4Dmm{HHWAA6bkgU17GO!I zt9LCm3OErm6~C8Eb)h0#-`&x0d915KW}?r@Lhab^V0VWNw&Qi_BTwghSFmRhus$@HmY@Q<}d#U{AgDbyknQbD<+hO{L&O!;{%P( z*40>=91L;_(7CNrQ?Lz|yEc&=6l(p?nTFYAXO6LffCyLRT$U=y@tq8-8Y2OSiV*U% z!M|sx($k)df%%s@Yl!bq>Ry}FOiC6&E7|j_K>z4_l3Lc&@%OX-dvc%Csb+M|#~%|a zFv<1v2`|n?9OI_@vE?WudV{CM!@c0Hdgf&zBsq6gzF_aF>tzqEsmB;`zpNF19hJ-b z@;@r9-P@l*=@^KNX)n{O{Tr zL|Om#9JWtv~W;_pzx&-f~lQ)=qXWh~#J-8>h`O`%ZTZzUXK=Nbo{BN24rsB~=ysjkr}!<7cg( z9d!RAOv|xB7&f4W>vUgum|jU(L(Lcbr)lFLAj^b*RVZ%fn=z4NIZX#KwjJg9u22M}Ve$IxRtB4=R zfZAbo>}WouR~Y}GNG@al%wlkGaFOcFZ%5OnM+OIQ%q5s!$VB5jbG1YzQ=1V`(;+Ge z{hzZIAkzgh4_f1-_w*Y~9KdxFnq#Qq`tQeKMf z`l^kLg$F@4-pe$A@7JrQ?yCUIGSUZIW-Q0VQ*q_Nh&nABQI%;Db84KbGauXITQ9)? zi$NqC;%AeDpge}f%zx+M+eck>4($;1voQ z&;u2}ARkAXVJv>yPf#KUi2fjlh>!?~V~jH~F`;lnC@-~{r*s1NKsASsp{dDVBB|Sk zmZ?gkHd{hfvu?L@WHbPI{qNj8G#1l!iq_r%VcTgUxUKQ`=BWqi)Jxp-&llpIyMHRY zG)!*^C;l#le7>D)vKy#pZs9a*YqTzDEb*R7n67ymU}OpXby}2!E_uKB&YC3j$8Z@b z+lvQ@uCwl};os_uZs!TOeO1vdYm)wt)-7ieZ)Y@!_VhjmeY6XCx06@u=Zo)}BJ3?p z)ieeArC$8jlFV3B}54~HdXG({gni8!Z(*ba$ z7%&&`TxzvH)@2}^IBsvX<6tt+jBougfUd2%EF#e(b3_#IG;?^Vh4>l=vGg6pkWV zzvHp*aomjponEkfn!9ao{#|iFufBAouKXZx!dot;xcW%+)SGhGTq-kJ(h!3Y{;)Ohq$j> z|F&o5T>9Jj>#{0#$41h)!}qlIHCFSJ*TFnzjm+|}!&$&pGAH-CdxuM^m`(BHqP=b^ z8V#GxL0c&RM1Bkn#=n`_YDXcrwC)x z%aseW`D)6mY6R+}(!2@pq0d4|1eHO&kBfIa=Z`5KexcvQ)`<+;G_P}PvVGe;E_JVA z2^Qiq1L`fQX#2lRF#(EE1wqVL=d8dVz`QN6fZD#l;3}xYC11%Q7pE7e+P->C6==P9 z-E46#=IXvHXusd{bQaN-$ct<0wp5OgBT$eH&P8gvX;}!Yr>4UII=mg-rm1LdHVrAM|vv6qQkh<@WYs_A0qlSvJI}~Fv@6IeZkVf+*ocLYW zG})|PA@v~l-Ud0NkKT&De+CM_GO(}%U08MouHihIP-2uF!orf0cf9h73)AvSN@JfI zM{;ZpX>5vrV%xP@A5M3_uz14KmbSxXXFIA7!0!7aCB z*6`m{_$YQ>G|mz%u!V_b?EWD5B(ZpKu2>KuSQC^xD|mb2U;u!M8I-7PGGTHhbj)bBtRx)%@E1mv9 zJs=wR3M85e5K9C!BAn5%)Mmo_%&-6KYfdqS{FmG~XSV-jA&h*O7Kd*Az8$Z5n(|wF zSkH6Y+FGVSMvy|pLk1u{Z&HvF17%-wI>S|H-+VJ6HAJkde>ZV@DqO9D==U_e_vLPk zTc^P(CIt!brm;n>L;^~uCCuJ833#tvAAFRg61i)}SUQz-qGBtqxkZ7PHP{36U zxnLn3M!bOb7zz=a&&<@IOw_cyb^aaBcQtGXlPwr-a(KHShyr}t&_ktJAbz4h4PtgL zhl*|uTeNVxSh;t4o^_-t${DJv1IqD4a5p~_r{#VY%4OCC_w|d!W4R7b_mi7xE+?XU zo7vNl0c30BF&2t!is<&8^rO!*U=0>74TTQZ?)^j_r6`IIcc+lky7(LaY9tsZQ{ejW z9H?z=CIPMX}Ijg{boq;qTf349jWoY zKWRcFdPQ6qfxH$pTFspo~C$(GYYI2c+SDzDrrLmKOXxp{C5r~hgN@?0L1ct z>fyE(^%wnFT_4xLXVRm4QRX*`T~(fkwXp5pU(_`<^_X~H$NOnO&z=_8^uK%;l|n@g z+S_{e5&xYrlrx0}$``gV1jf+rTejWB-vgQvRbdXe&TDUuJ2~KuR z*p>TgbTmWC_hlODV;^R`+Rbc))V_}J^_s(Bg+HFVsoq>%4cDS3p!58}BCw8l)?fU4 z(|O&=!QP!%<3*n0xh>*ne+PjkuKG5o|Hsx_0L9q_U4w%J37P-_g1fuBh2ZWUf(3UU zED(Yd+}(n^TY%us;O_1=IQ!)NzTN$6YpbS;0;&e4pL_eB)7|%+dvj)Iv%Zc{yCsVb z?GPI~Z%Ym>!PLO~*+rK&D8T_i+uk0JCi)PEyCbay>GECP(G--WUANlDkq8)>|5W$tOvmz1z_R4+7!_(4I zYnUtyUEQe88<`CTsF(pX@3GL(Z_fU#bMuD8FmWlgR-7X+Kri*#kM6?eeD|_xcQ<_R z7Da4hIx7x#^li&Ps@)#@{zW**i}dJaPj00k>$Y<1 z@r(|fH+j7DRd`-5~LxL{)kOYn+5t#O30VGk_gNVNO#m0J9U5IfdQ?j zLXW&>-5!P7Y3aBy%i6E)tno~?c?DX+b2+yvVEA;G3a#2YmkMPlsPac% zC1DNtE741Nj85ZUDE%m#aMdr7ES=Jsp)2aMWNs8dD^;no^|XbVK~GorpHQlpWpuGL zbzF;Y8NSuXpK6iX`RLis>6vou1IcK4>azDxDY0Su=7v-9 z^`BTo>VjFp2Jqm?O5?Rcr+4pSq+X+q{>wa=#NYlQmrJj~ZlUS6`X0i;Q>uG;*>__- zS7FdRl@|>aOk&!U#267V=kAHDm`r8gW|QywQDzTQFbdU4g8?_zTgyT zblOVY4)gny9p#&Ilg1&4e7gL4I=%gaUJ9m;er=3PiYBVKMNedT&Q6&^Mnm5__X zvb84Plf`=L*)pBl&1#gIOqF|ZN!|1e{wsP_Dys5JT-KUKo%fECvchM~zo!2hnEk-5 zNV-%#DEd;XUUwIfCKlk=C>hYi!$wJO zbmyv|$?Eqb4sL-v#hWAh3Ln=KX1^4p#|MrOV(t37jk)NEOlav3B1Bho5&?5l?DY+c z4-uiqx~q%}f2ePua*_{2As1#_K8okj9mf?G#8+a6XZ!mN8I_xtjTK(PuxzfuYGMlYWc^$4|KV&f}cn0D>Z4J%_JA+jLe1d&ei$w4?m1F+l*z% zA?ObPtv36+jl)PC`^U6X{GtCD{~48mqV5Qgc$OzM?&bqcia)^E&vvwu(AQ;|HFBg_ zmM_c>R;t2pgZ`US-1^XolOqtQNmCJc58=1Em0DUcGf!2(>i}#wsQTSlu+g6 z;Zl&Ih~j+kkVM4EWiZ@5vQG3k4%d9d+lq7*i&7vAogYM7g8qU(E+qKewF2nA|R^yp2$K>ZnPBeSsyxk8Ecy_ zF%p_lMO+x875vvAbQ-_n85{6gT61xy6?xn`^76D+Y!QghdhT^?Z{wl?2>z=Zl!g5) z9~bD^UBdOmmSK%36Mv@-1KbAtH;kTnO{MXLLOSmxJUHUM0aNfZTz-VAF>U9Dm zg-irVOsN`%H|ME0M{|`1wKjvf#T|-)P++TeY*v?C8(t-q8~8$}4TXE3EavR>xkZ*J zcES_O7g}70hm}?{4qisz6SCc$Ce2kyOTI-VL{~wv(Qkh)>1D8U`sgVw)!5d2F^aa- zVxv{R&24W3JzN2ScCNB~Ji7`WR&7_FX5xsSR)d~jJ;w0tMP3(fP|V{`{Gb_8{dr-B zyn7WT$kiulKtl5eo%adh;6Tfmo6o%)qhoFQHXE}(jHNg))h9*P!6$;fXEA)CpZ(gL zwm-$#gg)E1o3$TqAeswcwIF~5UYj?{d3anddLBxAeTyly+kqcugI^w!a3kV7!QN_f zc`MKB?sw0XA{rJpGba)3&&BM;hXFGLjW!E4W}`Kd9hW6L*0U8xowqw?awUZi2&E;a zgLwGqCI80w5>C-~!2d2FtsR^KLoSq+bVQm~pWrYIBFG-G|4jVwa--ey*7$`T+*8+i zAfrq?baiQ&nux2j(GCOjRN0RLl5j_a%gqZzJAGPhq1c_;d?=Nv}KKg+}aUU~_2ScQ@#+m-#l zgrzxZ`s>Or3+D#v?dH(Q;`gLErVdx#&Nhebpm#YJN{zzp_O}K+4`Pup(~N%mNd_i* z=0dIOQ!O*m%;j((fK_Q}F4q!KKY55*;M9X(6tEcWg&W~j_00J4dmRr3gO8z)h)q<~IbXV&QI(ZXDdOx}TEMR;&?l$+(n{v%lh}k- z7*V^`cJRIZ8Q8IsHMflr8*Nd5gwsH+HH#mTrC)2d(voCt%_HpgNSWO6%>?lOvb8=mo)8RLH@;aMk2`TqP(jI zG8yl`J(9FIuR@k~7COCZ2uWugkJH>rBv+d$5I~r30C2=9wxj{MTs3hvXId~6-b!87 z<&W|G951VvIIh=h1ZN2EFEh8+zJGg=LNH?F=GWZzoU>+kc@JJs^Lj3m0Y!!eU99J~ zl4yTP*Qq^iTYcvZJx~Bm06U5mTFl;Q)l&8Pqq$SR<#eV1gGmP&l)Bsi-kEwGUv2M~ z(#Y_Jdo8brW!ie%3X2AEG>qzQX!qhf z3bfZ$t(306#n4OUD|3Bd41144|4B?a6f;1SI%QBFYFiGC7Lp0ZJe8qNDLdPvFuy$> zUi7{#OYsC;Of`IZoJ;hbI-Vi6cAGono4MDUG zcACX*tqSqK)G48jH__vnEmB}RHq!{lWib-+9?9W(Sp}sxDc{^3w$kvfrs(SMo$U;4 zpDpWjTtHDsJkPs&8PJ=@pLZJ>%%6`DO>~Va%F4i2(Z)#u!S04WTRS)QJT5lvjBBSi z+i+Ddw}eU$sSvxX%Db;AsLjU$&{y;4;GH-xyFDe+k^^N(<(zH$&3Ul-0)jf&c{k#0 zBzgAY?=&JYp7l?kb< ze$*PCo{P33zBP7N4~NKT1cnQ-9mWs`IEGW*`Sr}IbG-`qZF`~WV!LNT8=neu5!88$ zie>#qC+-H3PV(12qw+F6pEIgzp&JrtFWI{&DUL7NY$`_)I^e6^V9d(^nYA{{zGM6y zA`V5b_1S8-c^1!_3cKgS{tiw@0DmaiRp{O0So9bfEdVz|cofn+w={M{d#{JD2n>D4 z9>nK%A`Yjcl@e6mOl3B%%A{p?8Qxy?CzdU`q&-h0)+49qKl$_$@hJQv$@(wYmxDax zi<2hpvbvEmsMqvBChw)aGY67Hl;1zf;X+$gL zqK7%(beq-3wTBb=dfWDwHFdiHkpZm;EsC`OHp$-Vl; zcBd29Raj5O_Gk5BrZvekZwM(!zoR3~70IVO=Q*L>)9KOQz103LX$HhS*7Ee5?3`Pe zv-&(YOD;46AK@lGnkk3Dv;%V5M1gYHr__)J08c#hc7$b`CR1=*2TBDOo(ZmFLNS zwE~oSguxz3p@FOtDQt;8NhF_wFLf4c^16~8_LTbJemB|q-pGq;Ld(*G9xH%HhT#93 zdTBg^jSHl%9zUN3^`vaYHNpVBX{rnGE zJ>N&UA4qRDn%I3xrq8}zD>WUAy#?VolO*eHREw=#K^AJy+Wjnr6jw{9J6}U#q>%k( z)P`b|JEl0=hbFl`t522!dTxHEI-L0A5;~ahIj^|kxfMR2zU~{y2iR(% z@T~oj-^=%tT`3Uar>S%!``5$oEu(Ry1O&uJw~akKFH7A^+_o($HN%rEhU!}>j*@}(vAuGcl@Fspc3Jqm6)cc6t2Oc*jnDBG{iTCi@FeQZ z9HTzcZ#070*|{yhRYPtIvlYU>w`B%g->{Ga8O-JNV-7we!HE?Dqm9vHdR*oU$23Rg za3Lp8rq7R{Fn@%jgSZ=dXDuK1(XmR#-%ElRPCdc>eytbjrQW$(Is%RyatJa1_bfnP z+ncyOrl2xz!IvR9y*#Z@!vd+Ml~Z{hG0d^$xwS)*0^hYE7r3A}EUtKg(9BLmvmK>t z7_sdoH}s*T#2mmuF}@A6pZ=)0M3$~VecReiBEAijT|#f7<53@a=d8q;JM}A;+_8E` zJw8c`RCUdv4cvEmc`2Pw=CSP3FX{=(P(mDn>k1}?4G?9;gNNPO`Nn%%0s}uZ+>VBZ zMq~LkyKR|(Z^KJb#zXe^eImvE_=h{go2;D@gkMU&ol@w7J$~%u5VQkXhS}TKJ&Ou= z11h;-^A;upNtQ_NQNDenGy)G}Odnm&CumXO9O2Eg^SG}@z@-yQ)N7`YPUV!V*>jWD zpjQne3Ge(f2J!_N15oxvvXB4|yiIXBZ~lA}J{U_NSCBoe{g}d4ZE9ZpY#?P$Fq@UJ zjusB{l35VXpD`xim@D!CIGbMdki4AFA3%zfqCb)QtYvl-9XJ2T0l!>wrSaJ7Hk;akaH7lgp+haMN3-QRwRWQ> zwe+gaBj7Ug3&x{p4F;0d!!a6edym}Qq^R!>^ssRsD)k#ZuXeRGg&Ym|{4al6Cyvu2 z`d_ACRC?`BN{w%-r*OJov?!!;+iF8@)Mad4AVXBn!vTNto5$N~EUyZ+5=Sx?`IP!) z^n|ZcxW-4?d9I3Nt2Tnp7J$`ipv67mg#(Pk1FxJldV0nhSvU;C_lTfcxnL(AnUGCw zGz3kyoqv%&ER3kJOoih~1*?*0Gp4s6`F8GeH@`H$!4S##oqTc3F>@XtL8xN2 zGMprGx$G>p4d{Xj3;o39_}+)-%L0lx3oWChhJg{PVe^Ow@MO=pC-w5}JY$=N-eaR{skJ+0 z_?0u%USTER3}4mDt{6ADCEv^G>(WCYcha$2Xc{U9&G|VAuEH;OCf%xigS@X@wOm^& zoR`a2vVx%XK@uIW({m*tg3X&X&gf4!7yU+2@|iyUcXg8V<}1$$-=lFEJ;p>f3R7^B zU7-qZS~CsLuRD+%SEl&VicGgdrfAR4?MtOTx!IU*sso7Zf1>EE4-4v!D#;m5Ae;yLw5?#D*wghLM<*_Q|+#%>mEc-fWE~l zgxY3?3+0kPQ^C*0q&K4xWa6i$h4|Z^rPB}J4(xPGrOD7(se64D%#c~}5=J!tGJR5; z6qZ}np8d2G7iQ9#rrXXRGD9FydiY_*Bcq3PNeO2ZROPua^}r#dLEK`@57Kw{lcmPiCKiwy;yPAtJgx=o@C5PrvL-5j_BDAsnG~>@-kGhFdPqCp9!+)0w|2@pt_>b}9l$1=t z%O~03?(EzWda_Tke_4LVE7Rs5wdB$o6k7O*0G3=XIXp|%Zw9wsl#^)jOfTQ8s}UsBILnzGd%qHa(1uS-+Mel5 zMtJs$aOySuXA{jqA0s44PT*Os$8K)>v~b-O@FHzj7J1!nb7f{JC?-*D$~=XF$&3bI zBBVJcsu~O>@$XkC^y08G%O1DNwZhnk+bKRI97`->R4mcuG5v;}$OQ;6s97!{6e6TS zEmU>K@DlvPeI}oU6)Ix)cXlTs;mYly^D?}7?qyrRq*27zdq=3W%_zmd=Nf;e%C!|d z=uVsrpY4}LzfAbCFfIHtHG-m%GpOIe`5WF@JoZ`qQpG)|KDzJThEkuCy@KZg^ZT}E z$OK;1=9j0f?oC{urmyxMBgo!34qI}FB3a*H*OR!2@QTt>7Nq_+({;Xg4KRL#sz7?e z!|NXUaR^pjWAs6Kvv@1Lv969#K!}B<@{9mt0Sp|E9={SX!4CO|IWNpErAMRF#pimV zXEz@o;XJ1LV?-pCR*M(h?GZnE*F1OCf+Ie>FhVtzccBiBn9bxIuN%yEy}!Hqkttw*bfPt4Igc&sD(q_x}T&&0@licE_@~ z=xoKm9JUv#|E*=V?oxaitA7AxrsaSmvr{AuBp@gBcU3h>(KTbB z!p#}@g+87nC=u0DrK#C^98|QPdI)H~tjFq9!PKB;Kb5@YLAQ}Bd|y0VWMI?ZQ68Gu zUue{EXDk2GSGUTm413tfMgAK6(*ib`|8>=QvaP|Kg%TRHR0!KtlM6qZWyj|g3gOpK z7KV0N7Az&bI#IyFfN(hW#-by7KIhhzn07=!3TdcuS@SyPcOw;Vz&o?)1+OYkDb>3kt zZqU?ij-Qt)GBUDX5jC?9=?X5Q(6Xh%q6NoCEWT|YZu&#is zsu9=W35ke#)mN#l?n?cbe7E9>@?i{adp@|g5|sS#XXtP+s_3-Y%N29(`TYNY`6g3J zs>95Nm*5$D^SPN(?vFgn&2=45V_JM)){gnGamv;$XDcwb}2)^&)HwS+AW1_HfhMrb7o7MVNnAv=)9;Uh{aW znE9ScoM2tS=3L(nmg08ikN$F;Wls@VGlWo|54#o-*vRrz$2 zVLw`2QCb?jSmiNubvu=|t6o`Is+ggYA>V^m)?~dA(IUCVQi<4iy`}a;)V`I0{!J8N z-FjSot6ZKZ{ob# zww)Vq(n5k${f-Fv?M%fsTBPaZep}Gu<(IgVRdywKkR0=CljrE~r^*vKVa{&95UM0U zVCJCN43`t!;qI{jnby@C_WNY8hQSL0*>tV;P5k=qOaOh1fjSl2I-xv6-z(+wxYGzy zO@oJHo-9znl@HNg^R=v0L+5GexKL?dCbpJeYtey!;%hE3EqR^yl=l1}BJV`MH`843ADIs95>^ zAjii@Gc0xSBTK{tQBU|!u7+|VooihZpLauw|GzY9>JB;{k>hos^)rrl<@MIkI(Ls{ z_31vhrPuKvi?RWa%f@ay@IHKzh*wP-?v+nef3#d#^?RQ4dmeM|*m7zH9RupHfU#k# z``KyW$)XLQK3Z|)#h!8;IC{`hVW~@E^Lsq~PKW`hQGpS(E#4{L^(3<7Dss`_jZ7GE{Vk<`mB|sX@2#H~ChmdS(gO*4`F-Y2S&y6K z9m}ia;wWNR;yoH%Y(=w>h_NyRwnWc#Y;QOTZEPZbIDO@n2~pm+>~FK`TGwfdu&A4a z2s%Ej6nFE*|G^SA(%r05FKRNOy4Aa_Z|Cn`2^yHGewtezy8G0Gx=Lef%AV~2DkS(u z_A7d>6tq`I)kD?L>1}}fIlgm=2;%q+yT|&gdgx1-$MEl|uMM9#RxtldhY0UVY0tCA z+7nc%SfT(RGoujpn^!Y1(K1yt)5+d`z}TIaND&m4`**Y27cc1*FeQK53}=bLV3VQJ@*@n%4F$>dQ=dvHf`6+U*0^Y9t z94}nuentW#>e&dsqh4pHyPs*#0?%+t{3uXb%wLL{E5$~$o*@!2y(At*ezWgQiu>T$ zVJ9A;mQHqClC>8lO;Xj(iT+x9)B6z%BzS5ma+7!ms@i25^(!_8Dercgb@VLobuK*l z?z0R>cbt?kLR+r}A72~ImSiqr^TT&>^us9pw5LatSnM@kM)1v7^2*Q71ZoYi{$o;j zO+d6!^XLBO1WLXUlh;W!YZXf9l%_jr{K3Mh@VK8B{ooP@AFm38e*WavLvYnQjU81& zV`f#)@0AjEsJ)^q)4j31^=GW}?Y;_VeQ3$W&W_E2R>QF0_iTUiz*<|~ZMx@`=;R3e z3kBqWxC#dn4s|1mIw1W#&*~=k*#$dobTDUQp;&X@wT#+1)Q?6mJ76K^t zQ3?j+!9Q_E-;PQ@y#XVD=W9z8XA9ak#%kY-7|&>H_3Y6bXzf$ml(X~Y{BHk2-?x~f zl6n>v^a+NXBxtqt=XNY?p3q(-%JO9(#p~ly-uLbzj};ZzFT{@->doI0JDu9#lU0qD z|I+-2q5UW>ZN+#&4zY$3%}ZkUf2%)kdkGXCR|%N%;Vj6N46cs#5Q)YP<||awg~9$Y zcE2`s-Rili&4oT(pzGa}r}-g)_8k#u_vGDD zB?92(9^L+8Wl_7gql2_bmUv3~9OJbb~6RkGDQHzE< z+20jxI(L5ywbOoY%Nx;l1edTCxf>|hnGcvt{cl;J_H>OSpbn268iHz;L!c?YVAlw} z!}HOM{BmTk0C^}>Js0i5lPi&7$Yzv@)sS!QZ;bVEjZ?}%qD8Uzt~Qq7>qR43i5bw$ zK`oX}|J~t(`~=~gqy{y%H1pE=g&Y3jo&bonMtBk&S>(`$sQdM5^RLQQHGPI30tN?& zS4J^N-_u@EC-io5?JJ^-)=vFccu`-&$vP`cG@~E(V%;3yi*;scN9FU2G1IN0!|1RV zB&b`!{Q7$AKlZ}P8q)Gde-ji!XGM!rlux15Y+*74h~<_X{^3(98T8dVBUdY6>Z>ca3ayZ$Wt&MOcZ+k;*} zqHz#I>&KBB9P!+Ame-|idVn$nwa2m7=HOi9Yirb?YzXH^|8y@Tpc3 z+XkA}U-`(nOM^^yirAq3=oHp{{f+pq|(b{f|T>xj&#XK4-!TERu7ZqbX*i_TBcuREc!{k4M?NBNH5I9;YGVV$*gxpMHBX(}B4HZH z@+O-IKnOSPH2-qCbhEUh!O=O~z!y;+*!y}v?eyBm?nohmRkTrCTOwG%hEu;wMBs_)>+6 zMX@ND9ftTS0X@#fS>o~g2ydhhZ-+^x1D-_0Kw}Rm3XL|)5M;2AOvGk(P}VP46wiNL z?2V}a!JgdSn&bp7VHZJ=|CrbE9Y=j)cf2jt(3oNM+O-vM2*pcr@DkK(%Vb)WZ`_pM zm-K3)$F6uwhJL2U*P%-?>9yOPJ;5}G$UOJlqhuYk-5lzmL92^j?`IC3d1$xazE)j= zHx^~X2f4a0p(qWnJ!V>O61vU>ddbiQq<~*tL8C`fxJpDAl$&R5=;mP#g{BD~z zx^4I%pw)o*Tac&j%sNW#xx(93JxmsI8Lb^sNu~HTcLr7!}FKk4&yvC zM1N8at2o=DCS1)=cl6$4zG@J@wcP%(IHE1=Ig3JsFAC%?o6jw?8@1fm#*=S|m>PA> zMjaZ9&I?TM;Mp`8(7lf3hptR55YYc>ji)K zRK|kk8X)|!nsOaB(EPJ*)frf7q*T1>gq$Q~N3y>0EXv@qHV?dwk z4D74F9|VNUiRqaNpeBnNj@2CnR-T@#E0BMa0sqQ?Uj0j$-PLwZJMDSBBt!VI#653V z6&-c_Y?ygFO?I^|rQnd*^W;EdZ?9Y#*@0iEv@!FOhdQtPAmY%*g2}HWTagUoXh$=0 z-fk=E7ijp#^kQqVnskzhxQH$o&+#{`#R~~dxmixGY~3a#Z8jZ-zSCW79|4TIUNRRh zMdbM0Y47vUoe#GqvR`P^&D)!>8o{ihd$g~^A4TSG_Og+*AV>rea632GS|u--PIXQr zZd}}=nYs#{EhXYJvdJ3#<#EHZ+P-hHHvZz_`!IBNf$h7p5r zV(Hm$L-N63!co3V<4p=1&E-Oc5f^OJQ4ES{ob-F+_4gD(MZO9~7ltoGbdgtu+pF&w z)(ZPy6&72q2YvU_Dy}r6#B?*A9^`D0mHB?nW=0L%WxZ$8Om5xUk#M*8Q6F+s<5qU1 zgD`;$>B3Yo($_!zYmD&#GjiQ`^orUmEI2 z$1NBxv^#?>C*!-93PGWFyJiP#8hkB5+;>r37mSWJ>?rP=i%D2- z*uwJib~HJ@E#}}QHXJ()a_>=(Lo32y9E@%@`67u8%s~}4i#~ZAbE$jXwl4{4ANO7! zy~hn}{SN$$OrNr-T|cQ3B|Y_Lp@6`NX95jEARvFb{cO$V(rP`xbzKF|BQx35S3c?N z2$lcfX}&DObL}3ez5X;SuvUkI5&%5W@?D?Pc zTDaJTVn(55M0FJTKv6H}s0TTKgs>%LN@U)RiWKLks@sH-GYoF0SUBqi9Aw(g`+xqw zO9RsJZ{F2J8~*-TD!xHSMn?`TrVd>Z1@wVST;1x1R}m5C_9J>7c20;bpG4@@dtfOZ zPyP0(?183^KNiwDlbI6eBw`RAcet%C_zocjw!r=XWYsIcic3*-G#p@K!5$87Ssy^;RIhO#27*}{?SUdHHL1f$E? zYy6uRR#bSsmkVnDaC>~{>8staOP<%tU8s?wA0A*2Q2m=y#xQ!$uCXy#SLs)b*LNO9 z1ncWiRj)e936<4O?-3hCpxrkBAhSslYkri91LyY*`3f|3ZIyJ$=(@gvp?jmGid+7s?c`?WfhdcYeT7^M zPkFlM^Wxs)f@B;FA$RL*114A6!!WMcKV-8{(27pNC~}q_H=cBYPWHeAh9|Z6a^#s| zM&N<_CXNL``oe2bX3*fVylK8x+lwbh`QAcPb-}c-IBa=a&9yIdFx^=Jg0L|Y z755&-%=rBBdBwt7wOb=+Kx^^(>!{WdN%j^R`lrvC#*u*RUh3o5%*t67Ny!wzl;S_` zh8YwP_~*o}HNC=voY)Qp8mGPh(@#HaUF&KT^Lc<2!dbpanPMmH2avSx?A@n71)Ox6 z8aumb(fg7um9t7)a5Yc8pjbRC02`ZZ5)gV{BLvUJ8L$kcHm`wT|)?a zhlR|XD?=gJe1|1ym6dl`Kb`-b@&^QgW*y|R0WEYoVATxs1bW5nmfkEu!xmB63v5++ z^>LTjz?u;lpq{~HK+V}DudxD-3_ z4>g;~Zmk)Zu?G#Ps^o0<8-=^GQq{+e}Y11@o;q9a)g7croLkx+bMgp?V^v zEL{Sn>~G3uF=X{If#7{Lir^D=3vrs!@mEGBoj$aql1ap&AB?3`lS%wNQ>!X2&|(lO%Q-Wr z8Y&xGX#EqN`#@Jb@@I0>`G4K`e<1;ZSQR*kqr=sAI%wXp3elBwa>lZizlGw@oBdTAgM7MZ_Zc%eo}gJ{8; zTMcp>LjZC9KIOSz>-`vAg_M^d$sdb^oIZDT_WE{CXq6x)B1gBU! zjQ!0n2oxJT65jd6q>mG(81mmj-djnJJNS&I?iD~>@fO(Hs-K3u$<|A6Ao+K^guhH> zh}mkEjomR}A=~M->VNR6mhrx>FHDTE3dJ))z|GtL-zM94)+QZ|1RTlg1)CH*Ic^RGH3%oQZ%}3-42d!V zBA!LWJ8@l!4GF|(JbeplM8t#;oL4S<4p&GR{BRBByCI|)P|rXAoYob)#^EhD$MYx; zHW-*ce8-AOU!D04d=2C%w`_IU`{XH11Q@Py_M{XGWK>e)8%i9mn53@1u4o-4Eq=NW zhhTNG0-v_GzmKprqeHiIk4ULdk23uY`WWwCI@_vC6QCdXBfzn5DQ}3--#EF@_`NLN zPlXsdGQuE#g5bdbQNxP0y?VMZE|F^0WEg);`UUKw(bHW+2{n^J?X(JNUfitx|7W*a zwN#`P7So0?Vmu)kiuCZ!agMTnia(P#?K$}N<~yG#(v8PTkiTkd%X6wKy^1&zm1c}7 zy$ZcrsI)qH&`>O;%!p~QF)N@mJc&F2@6RX`rpBgV?#`=EY@}zc#<|Q${{)-hVxf;Ndt#0c&i^D& zAcwR38you=oI@K%8TzR)lgvs#y}$;EmIJ+yZ$nUI-0z?lS5>DW7bn=#0SGK$KKfNM z1D^wLi;xgivy3lOI!N4@p+ChL{rvVjJ}GGsCZ;%*l^S-Rc9{ZoZr|RQ&6W5(PPz@c zoNs2ISf;>0awW)p>Xq4-EM~`bDkby~Ueh|FD4}(ZLBrdNa26k^nu@J4mME{7;zWyM zV;$q8Eg-FG(S}U(!6DLs3f?2yqy2DI*o$x!U-X`wp6?Cve=m-NEvbnunP+;AY6WOQ za;*IK(eQo)9YPnZ8l_%1uJFRhK}1Yzu*n9|3_;-R^`9PV&FJO3Gai=JSYh||mY-Qh z4v_@GFgj7T?LLb-oF$Js$jiR(v zu&u?;Z)3CJNl7_z=GQ?5E)zk#L5fi;iaWm)EdQ;SQ67@XaF;b}VY+ynvkXH_5&{&h zADg&+8LjES&hRb;0?bv$ewog(`u?q?iQ^dG)<{cjAP4#w{uVV4-ya1oJ2ve5ro7a-IJmpuE?uCbaL=*OvAYyL2`wrVq z`e7FauPIOW(-9Y}pkqoq(3#^_DM>PSpEg)xCv0GPrxbTA&3&csQ8RC|h2{fO6D5g2 zw9Ia+!||I_34&cF?H^BqMYRRQ9v*|~Q%YLuW4hoytjZBzm%+tBD7Wbskq2>}{=Y4-%g{^d49Gqk@&c9qfsZE^K zO4q^^(ANUrCpn>a*4o^Bh+n%;_-Zoxy%&@y)UZ37z@u3DXX;_(M6r^8SNqK}B2QZz zcrwfjRJ!`)vU|MwUR`k3v26Ec`$$6A7kK}hSw~dfBc8J7ejf%9Fl!){;kh;NmQ*h~ zVFL1CtexUatn?RBbX~gmmpp!X3jr*e0;g$!qWCN94VE}x!Tb8Jgz@i7z1XR+vBN0k zVo@DrLs#s0WIMy@#PT>@tbGdv0lw zfMyz|-JC55sE|nOTBMb@#pr5SK$nQM#{MV*=h`*KmT$Z*{tysjY&|RD8Y^}93U7~F zy!%M07x*s+Wu-~5&RNa7ZPWUQJkPF7hZwLpMjwschavX#s5rQ5w#7wDMzn;%ItkOyYZRe}y%07Ee~4Ixi@%9WU08+P+&1!S{ywA8e!AEy95qg8k_ zMD}l$cHCEKXz19D216$oLVVahRJ^5P4iOM>xwrB;b(c&DKmLo~*xe-&j2%fVRMP(G z4ey=-zn(1Z9^*{3sq&jb!wa76_enjEX_r_8D<<>Fsw`kI-*5q(~_m z!dKN6r8GQt+WPG+*2rH#qE)+-Kg&ckpT^a0N9DBU;I{VcUq%~ChBHsn8DQI$bklTJ z2um+h7_>B#xI4fSH*Y~F{q#G@MzTA={NZitR9~;!+0m^w3Q!0(Hj{}h8*nO2gBSt6 z!xR*!ekW854kgv<$YxFHV^dQ(Ve-hdTO*vPpjloO^;j4LO!JSkBk2-}I68^sli%1= z>c&_TeKX$yO3g%s+>$UbI56lizsOZr5B(EL2p^I(+qHozM1}yOv-G!G>PcT{mJp8mNHHU(BMmeQS?B5h*Sp@_8adGOJTxIc8 zbQ0vodL6B^vaSb^HtrpsiIwWk+uDN5)X=*TTzF$vtbZ%cbYl9R3&kR0p<}aaA$%^& zX7#Q263v;8XT9F4ND#hckLe$Ip@Vw9n2q?sRk!2nxALj4Pr3N>9bXTRdy6nhGj(e% zH}Fgz0~2bMyvp8e{4FDUbTMe`9tyPhb!C!LX!#?SW91iP5*m!zYUa7ywu1xoR0-ci zGt^Wkv0UA(FWER%^L;v_O#FL>k({Go%VhMTyx**AN3PC_ct=g6soL*=6^Yg(Z#FLT zoXZ+HLE^D?xtJOc#KlSH?~vNq!al%QA5yv1fkS7J`p1qrRTVjKuG8$UKTmvwZ{ngS z;TRnkwg&q>{v-tL#p~Yu0Acp9;#mY?jy01r%oYfs+kHbo9KY~FL4k8?jdY$W2&zfw zF2kqZ`na{CuKfXC3{M@{8kj-ybXm=mIArAuIw~pw`&|#g0A~x3;iz<)?QH4j*gQQv zRQB8qmg0%(boQbXXL&iXG`m%pTjjI9Xy=++ajjpuJ0Cq}+L{=x?yf7s9sP5QvzB47 zRsNe+tgb_N%C{^^C}JnvNQbv?{$;)KbV+u?0Aa5Lm&sFn<{lL3m*sq#t&sq0}tdjE@;7f-FBFjr5=L4!F^ zKb07hn3GPQ#;6j#RB*t*H^Q1Moq)?fFXFl_qV}zTo@WgVpd_DqUq0URHMJsYZsv~_ zZ)y7e8jv&r&dp&{6|s(lLwSPz>}#JDzsz%nNLAEGKckVxhf8= zO>`4nGVIRXjykk5>s`IMVIbCV+@avWof!pXceFpPS$`K})UURiOmAu7`!`#1x-tcQ zoY0CA(sXaXDgc8_EGlfWT*m*tT8U_8RBx&;n)XJ7KZE+1_3h1QN*V03ns~jp&csP- zRb2pwY;8c6VmRHIA<8CocX0267y88>f+8T@8k_5zNp*U8Cl%R2%7RH6^w;E~FHoTn zz|WKbNKe6p6_~A{?BSq-8lCU z&j0YK&zT$Eqi3ZzbU!}<$#HL-4w9dDCC_(UzeFo43(8@L#kbJp<>8L z^G4MIa>07KW2SUTdUbC1_o=D(KUdJjQv=J-+8Y73g_dnqyWk{fCrgK9Dl^M@v;Gnt zcOhNq-eNIO17824)~IyzilHNhhbjEfl`PMbQ)KY#0O7js>U25ffEsB*20U7t0N9>K!bRFIahZ_FytMet!$Xlb~HrDlY$QC2U6*XfM!!kZhVhR#!JN?%1~ zqt~dcio7d5fCKW;Kl(lWU_1z9JYpIVsM-ze#v1be-0E=*E;dMA--Wf2t%ax37@16b zfSOJ)Z5|_GPi?RD4xLoTvU!5~*uD2`V&_C~@kWWm5{~gsRqU%xK;P!X0g5i5S=WZ4Sh@%NRV{#4*vch3&;3isIZl>2@1BQovZ4(Of_g_TN$OKz58Wp zH`1{}-_swWAb)55{qM>dCPIAh!}S+-5d2YN$d?+@Yl?JdgE?0Nnjq;Dgs&Mu_QH|+ z;L60#i~>8f{v|?3Lm4SY@# zWi9>Cnf1g>0kK%t?AL)Xe|E&JbWqoqql#!@;|NEGP}SZ-f52@UU<#bbRG{jiSUryY z7CZJ+hk3AYR*#*8_bee9B^NabnL2=h)N`d1tjDfb-#+6gOe`l|##8Hg$kKvc2k48B zOU_y^aofWdbeiawHF4O%!DkwsXI!0A@wOXI8~J#MCa6KjuTOuxmqb7y2cR0FLk`ed zRtbv;tkCaW=32Blny1w{M}!WoD;Nw19-9ba!`&lF|r>L#K3iDvbyN zL$`Eycgs-H-ObS5+@Jq*&OK+{FZUB4SZi3r8_)CXz2CjtCpkb2=PO(*YX_+-*1qBw z30rrnR;+`MN8V>o&o*;)_dVbQwqz}P#>fZ5F;%x{5B77vM=)kNE-1l}Ubk+K zI%ki>3+cR6MwOxilF6-atryL$EPLz)L~*^rC=RH45Vn@&S={ZFb2znPaTfH%oWBXYy38U-hlTmz2c~yNydn2JTkt!O zT$Vz(NU^OS+l+q<@zXk=7R#)F-K+frNUoK9f?JH_n&x>)nWOb?Nb{zFI+TU#H$pGy zG1&(X7(gTJf6c~ydjOfI!a*eBO(jtn5(l)s;%w#O8FE)iA%w|>ToZY-CfZdovFhfm za*yvoX35F6D)Mkj?_Zd%;muypoo6ss@Xi5P@isW}lSUk}t(aX67Y~E-OSZT zYVDf@kar@ul~5cSNrPV8YWi8cG)yLj)8HpGhN$&58om4u?d*KHw3;fMhAA03rR(Ng zR~SQ(N)n8UEf-$`ejmu=P-|H1qM`oi9#ZNZJuHq0x)4BsIME3YXGwg^rKLRY$sf=K zg4d?|uZEf0EWJk>s-|u3l^XD)V9DejgYqb#*NQFo&h87Ci6B;J>smtiC~7uslc8J< zoJv%|ND?)Sjj@}Xb8(KFEO*WLr?h#fJzkAyw4T6OByEO?#lwG=af^&Bh$@Og< zN8bH)xvEEvG>K(Qmj`o(W)1G>gvsiv@;Khb+apB3h|QH}h>awXL_wZ$UTP}KS7)+C zlQaId-N07Fl_lXg7aUbT_(yC74itSEwrwR6v?2NjCxw7MvPd}kO7kU|8E94D)NB*# zvk4T<6l~@ES`--AN-7ekUwgBU^hEBLMS6l5O-)k5n)% zdtx5UCi=_$3k%S6W`3GhJ|k`F=~Y|23XuEl(rv=x!i}<#>JMN*1k>UXPG$g{CtQY% z=KojOW9}@Xn zDw>_fuQ`Qg1#NQSoxFTJkilky+38D%7?{F$Ph?9yu zj|MkJ_nQ6orn_kvknIp_sXWh*7#+r*`Wl@5x8gEuG~VV>dsYJE2{W=ylI@J#d;0fX z>XHLaF-LAoz}$8IPIX%nG=HpWgwYwV!q776S@1iC<^x1UGOUaQ=*>-otX)YcCqK)o z^Ny^Yy6XT}B?^5HQx;ric7&s67W&vkUgcL_#ODgx`lyj4*Lr4Uqs~K8iDlkpwT#nK zr(u$s2VvVwg*2=V=cBO0`3093%dgNffyN!c0GCJiW>dnCzC`Jel!8F02NIS;t?ncU z*6*aV9r(lZc9fr!BkWCvM`MiMi)F1qPwctObMIf>8ffql{F|l182nqkjU%v)63s+j z@jC}NsK}FI3WMYe4GEKrzGBhc%7PZ~&NL(ZBk;(~pabsQ!>XeSs5I2DJ!Js1)&J}#JCk<>3>uxW z-A6U}1h2V9I^g8-rRV@ehqF(?EGW=ajtYk|H9)1CL(z<(ifRyNBQ*zU3l_@gb}Rns zk}Z&XdwE+GP!lj_)eRVy%GMV#;a2+v4aZQ&0$PIKrmp~<*m14Ih%~U9WV<_w%u`iW z5*B#hGgXy!sA|X1SjIJTD8?p5s6jhysxahHkdZOE{}z1|N{cj`kjO5AC5#P5o7#km=dF;DG1GK?kx@ImCX#e#K3cPUG2~7IZOn)p9$QDcdNz1A{wzMpK-`L z+$LsdB$jlQ*%OcA@yV=0{VHllv4SW}1YZF_;6E(rUG)JfgOj~oq`CW^3Q)Ir_`5j- z1U7y$#4*%{GXiJBQTi=m1JK&D^k-K-W{`*W;!*^1!{`noiJ<~Q>Pqj00=doa7pL`} zs7O=iN(lD;K{@;w{a!V)0OhohI`*iPOuuxcaWHA`HR>ZKFn5l0prOI{N(E`=Ly5SF zj8_3@g(gf5Q|YbCJM&e%KwP6(Q+W%giY=81L&b@=D4)z*(VdskV(!4swH69FabHcz zMabSfeo!9J5`7_#-YPD1{R{o9tR3XvcI~2Z`z!wfC*_fK1hi9-3RMMxh6NgEYwGd_ zw^T+b;(X_{=ASBvhMQp?YYmGFzUUp+7H`u>HPcSmv1AU?Cdq}B;xF!q>a8fu+Isc;Te#*^Zt04U)6*3DwC)Ox(Dc-|> zx<63??l8HX6IGEodj;Aec}P*R8CM@6Jzfj9s37aFv8TlR-sBf+7}&8l`Xd_ulCNx5 z=#|_95SmT;P#yFl86bokn0ic)^b`J`%IAz$x2UKhq3dUHtI}5UQ6ES8ul{h2q0%a< z5~XOYziK32u}YU3@a7`hJ@SgOp9~6GepSbERC4-^C@8frm?a|xX4IJfR6`p|m8tp_ z<+qE!1j+zS?7$-6>v8v3X&x-sz%1#1`9yutYIayVqoA1{IO;pSW6{b$6|idE4U{z{ zMx(KtwQfaCxR3t%0i_yyc&WJZ6PS{Le+052e;SI2&5CX;?xrw1uLNWg1S;diqg<>} zpZ9hKOg8RTcx;(|Rvnnxw->^@i*7rRSPJM}?iNZfk&EbM^s%FT;ultqG&?QsP60J& z*OOK|h$H(yDzdj;#;rt3*t0pjzS6$X`$vC4oF-OC4H7QWb#q9mum#ff|i{(a{jKb@P2o zMjMzCc>eJ-mmrf1DX&UfN1CW&^T5`JvD$#dKI=7Rjmozf`+9oX#Cv$oR7$_KAD>&K3x!%6-;b4xH``^$I98ORq#$ss*qF>V%q}Wljt4 z)81_&ftQ(IoEd@_3JeTlO#RlXr!rurjfeap^U^P-aHbwB7p|`(#rBK;qXl5OPtYCP zUZ0oEF_-jW7Pk6A6GO4-lz)C-+WFFU#!&ldAUbd5^`<%O&P_5)e0x&||GO!y51H)R zO_H+x*MTO4oDVsE#{?F*xI%if^3XCk*@J&NyW-tuxF(w#qo}kKI6duRdmTNg(%2+M zHTh(wX(8o<^v^t3c__=&Bv{+xB|;(ckj4SH)8?PJnQch zoRzgMrTr5CMWW)-?CkxYoWVw$@4*%SqvN*g6tA7~*BAPO&M0 zxG9Qk48QA@7;|G-USY#qI>wS9fiT(RaIzvg5EE^`-Uk+rK;dS2IEG{k*pPp0Y(Ccq9v^F$DUU=y2CZ?=x8Yio z09@@Alyt>QYYI(C$- z7zT*<{fFZz5IZzOs3k47RlsjBK|iV{p+x?=u3jot!H$-J*sD(Y2olV(SF?sMb8+BT z(L<=mX>9@(ZPj7}I`%3ET$w9|m=k*#vJoNJM#N1P_L7}~38qAWpA9u;Tt*bN;{i59 zA;3NcvyLd9V8Fo3;r-{Y682dNlP0$4 z0wItKmd29&A;K((llp`UvtJUYWo)cbQXVY0lQGDmtL%5oP*>J2+4IwM9X6$GL0CWt zR{t*m8US{N3Y4ag5aAE80I8+z@5wZFisZrM`6HCqPkGHSr6qI|1A(F_WtH`hKRqp4EoUa3!SHXe;_vcIj7bV0@b-Z(o5 zhE8L(zqukv6&H-_GmgWYJJK{%CO5d~1|UC~k*}DU4$QU~NrDX%gYm6RwPR@e6qQg^ zYXdFlL?QT6d4Z&YIJ0hSUBS(LC z-vE1#0sc!UZ4Y}L=b}N?!x}qY@a8FS>h)>Ij3{hMN@pK5|G9-b`DF-(h} z@{SQ($1=RgT3y`CoBFB-C9JJl{tF-HBc{Il@j-#AvY=>Bh+nWCLo{kwRf+t2k6BvIK`NPffpxTw6`W3-pec<0qNUz8%yZ<_Uw5^(XUdO~ym!@f= ztfu+{Z7G?*@(g=av96*@@K%;}a_aaOp5<}k8t-5Me!-np5D-MhC9j~wFow~MmLK@j z9RPfdDickcF-8o{Fc&$i^iHlMfhuz1@`?=lx0(Q__gmSJ6a@qQhqJFvVbS&scwz4a zvj%>7##cL5P2y7GfwDAvMdAHF;8f3<$cGLn!pBT!Ml<2Ym5e4>V^f8!T6GF4)8GJ* zfAaKgt+<3XY}E${TVhDYtwkn%j$P(qaRPoc_$h=3R|xA z((hiQ>tj$v`V6JXo3)PVVaNsgjWAQ=H5HR)#k>eX(yQsZt1m3+^BP9cs*&t(%tx<_ z0L##C=idQ(;$LMF+u4*2=WUXc?SO5k%FXX+GiU(~XCHvTg&Pfy4!a1xiKtZZqIvxt ze0gUgcjj>b5R-=WPLYtU7cy$w6axx^G^2>$xB(G{?hLQugv*i;2L?i+4DpVaEB*T! zmu?Q0Td=$XS=`oXX=jwkQQn8b)pB_YaDomc9Y1P59lv61eN7!NA1`+w4fCY@(4M_J znl5HY8t3%nViBwfV6SOj*@wMS=Ldpmju`en!Cig{cf9*_fbZBZ#9T)+_6Y^07tD;5QwaF#^L3RL?wyQ!1XZB|{2^p1|d z6P2I)4TSsB#A@P-meLUd87?FZ2}jn;&=GX-=sgh1%sIH#epjzlSRiEkJkIEJ)C*JA zn#x6XFLFHF51%7Z+o2{aPxU>1N!IGJWEIE#nqU06uf=NVPZq4BZpM71py*v6t2{Kl zJT+A6*u#7&q>ws)>dke$F3AMX%kByjZCIj{5=!OVNRVB(b_wBtVEuc0#fgs^wGh){ zy{);X-o1*6viHg!{V`QVx5iJWn|PPeJ8>(+1!oAf>P5aDTYe%O+2=UWH>!Ha1DVSe(gSKn=p?}HkyvF-_H{Fa9yP8qBZ|MC8U zVIRmlmt+O39})-mAhgmb4uWs;3_m%{e&&s#NumQ*eqP1s5D88|&YUhE+wAi1f#QPv z_gtatsYqKA)a8B0eYhon##=yKmaP8Ph`(=Fq_-NXg+*6#UWC z*>TzJA;W6X!zcVci^Tr+r1Cs{rR&%; zmJRNsH^0G1yc5jHM;db}Qt~WJhjAsFl(^1j2$D+!t-3i%uB8}7`Jrcg{d*vhv!qls5`xDJKv$PQ5i|Mv2A9V9FBJTY4F~)AoBBT51_Sx-nV ziT)PBY#~O*`eUExw0an>;o_Z&wkoVBzJ&z6@^Mbvj#26pOc`ssRJk3l^pKF#{OQf( ze7^Xflk5!Hm_rtpg{RY-RoM%yMnQeQg6a?B`oC!+a1sVP8&M^>)>)m^`EjPvvLaMt zJcFEMV{%A>HKwAl?MEhFUxQ*&Bt!qX;y~C$|GmwJdno`T*MYYbgX0OpSGIRXB*qbH zbezz{9vZqzo=L#@IbtA2=i^WOFj_S9Ga6}iTY{E%4h%6&{cdt`q4K*RDt|KyyUig% zYRv~B3LGonn^&)3?)#w~oNSkp_y92gf;&<)%L~c_*To(?NMZILM zpnDruDxT%xl(G7=0z~_3m&#H4-p54=AtrF3Zz&ng$20tGHD63BzsVkU=gYT>8&tn& z>T?Q>v>y>v7(qooncLAnnA2kClqQNJ%vOkr<*auCTtGT4#qQ41N(YSoi?!vzB%4SaWcPi@a?avC{ zFi%)t$A%0;=;`6KaKmJ2pkE;o3TaB_hNEOsOJ@w(Az1v#p93H?i7az8tXcExm4UW| zsbCyr79gc(+^EVWrmCd@5{Q{l!e9P0*e1N)>S&Nuh9J>B@20uq+ai`d8ceiBlGj${ z331_DPm+plX7_O23rv~`6pqqVyWKsJJ?zTClHS|E!tBW))APQ#e9vNKpiNZa5tget z=uq!pRss@l@mMdO=oxZPIk}pkCw{`|DQRITX)J{D?oCJ1X0FM0afiUT$E;t2a*RbC(H;SqQTiQEt!i_YV0nL5-%* zXRKQG17|NmDqJp8BwO11b+^1}GG5-(t=2mkuWwYxeP`P}p6`P7Ok*>A_c!(%2V6+U zE?UCyabFecentRQeY=aBpdXQ*YVwHEY$0*nI007N{C=n0bK^;-4g9ghTjlnI9oCg! zl0lfwGf!JDok&L?sBY_c@=4?srVI)#PArQIdenkwrW4B4aL) zEHAiodn*>TfFIVQFo8%JzaPR=gLS#H z>sicBA5&<=-RX@8t=00mX{=ceZW8Bu64cK0HedNe6Nj?Lfo<;75_Cj6IeLD6nsV!0 znk9V_Ln4Y7!9~N0%Jf=yZwaflmFT3rM4jC0=fhRwe13+n$3|^2ff#4E-w_w2bc<%N z%9PeSCY>Oa%De8!G?x`TLTGMfgerea6k5zh?03D|^=rSMPI8G9ZoepU-Xou|x?mmr zv^7C+4+nbc%?_~z>_&oQn1iQ2nq9Cad0tCwrR~Lm9yGY=G~j+8UZ?HDY{`OO7TV%` z^s{+)`V(p{t&qCJf>0SxSg}S9o;vG%G?MW8fN?T&q~*sYAmpTd=!DPyJl1{}Cf6?@ z>}F!m<7w=5)834qdetmOaPqN&S3yale0PPOegT=LHK@ehir7p5#}M+`Wsq94KvC3b z;K~EPne}n9Gf++fMNLXY`2EZWMKz#-`8J|sVp;W1Qw{%hm1?7l03!HPjp0|NyTf%C zO9p$cN%Ti7lRGM0$%ZW@2^3H_$FItU0l`WWix{YqQnOx;vLG935_R|I4&A^PTcbW+ zOD(=2e^h+sTQQ%)qU{Evco+6zk2(~I(FMOJl>x886)B53b>p~%ZOs?*WPYyJr`xp3 zlN9^}UqN(>qCK^3ju!nXLLZ+OCh|0f^>rT)9vGDmKs2Zl1Bbb6q<1`#&9oo}BCpbK zkF}NYTN`%7Vty{Y*ZsftQ}7|Elz`weri1}_#jo__P3JQZrnj%QeoW*dJn@R9d+R+F z5I&!0k!Rt%bxLkyt&^Tstt_|{6I@ja&Mfkt+jTK*H3jA3l99uTQ@|RrM;tB#LpZfp zYmK~s)Ew?2jf1D^R}<&!YCRU8homtVbY?4fLT;OH%x9fl#Gv1-Z@4ElbX#FpWHD`f z6E(XBF|Te1FD#rw*ylfSIzhY8Kvk^p5RAQCo|bBL7&7XsOy}QQ@{bE(Bl0#^^{v?{ z5^@q@443}U#UyJ-A#pc>CY_Qs*}+Z+Ue(3c3b3zOKW8W32C_ePu_O~EB4qsPN|q|i z!Kyb=wh7$@r7q!pC_b>7>Qv!psQ)^JC{0`hZJ8MMn6Ux&N3O!+x7JRFJ7D)dGt0h2 zBdvq*F2d?Sj4)2%F-REx_Pr5mw%>{v(5>Q!uWzdkevjmD416DHFZm9cy(*c}NwfX( z9f^vk)?AMs?Mon{K8H1z9?XV}@3cvhi1%g)|`P^u`{BFb57CD&ZbF-%Er^E52mto}a0eX7%m@zdT zbJZhW<}Ig=S(p|(P(|~{L$F|-MfBvBBjDmb`c_+PC!dW#8Z>8yw`tYnI!%A2Nbx}p zTyY31Xr=#(5cZx52a{ZE5hyqUJ3Ijs z%-Hj=`A+ zC-SVXS5KCXk#>`zWw)wVlFt$PV5 z6az8cfXK*1I>~ky!o@t>lo~#fC7^qhE*hTLQ$q7c4@2b439KXb-1D`l*Lb_PkFAU7=4OclY!XH z0aEExdX6!cKK4$_f+4WAdtav`pdOOk63y_IuKjtsL%7F5owBVLPE(Rn#gpPxR9A&e zkmuX!h?>MIuSnmfP}S%3OdMTjJl!#u&fioS&t1sHf&IC)YbDyD)t){mr=^3zmZE3#B4c#7$YMqw8MhgC+$W7+** z?}FnENZ`htTXSpUKr-mJs!&2>;AvG6iD&my+Ub{j56^OQBDol)kI>A2!!&^*jx#du z4Crl?J?z^5tXLZ*0MWcAcpF@03bQzD(!%|0X!u025w7IO4hKlke*(+YW$PiQZz?aL zqOw}MU~OY#*lc7R5!9_ZzBit;Bjric>5-Y$CWdn%ZEt4jNUYSj#{=i@%rl@wW}iNW zV-+s7q56&+4GqnjZ(*%FggRQbYi%}Nsy^*$w%r;b$Y;M5bR zh$&ad4G%I<`C~c^K*OEnQFazR&(@p;7>#X8OPk6D`I6M2T)9)R$>?C_1SdceXL@2J z=stVsDi?#v%Wu)@iS*6}mG|^zi49p)e{xDxfhDPgl9H0DswxAXQ3Nec7&q~5@|T=6 zkCFCFQUP4RN1!VN7SOo1&8-m&cTlt7#vreS&aYWfTk;j7yP-r2D`aB15DP8~=omcl z320d%>S9oBF?QM>9>u7IIN2}BW#Blaw=s1DGUz%ujzA0pFz?x`Iz<-_{0A=j9s!Je zNGxDw%r0Kt>xLx{5Bi}-IwBQG5Zi)vpo(0Ke0fXP&ZW0bGb15du8nAvJn=MR&^-UL zrw_BanT!-p>dBBg%pVLjY`m>s7voSJ;^=|;C zYd|gQG~nRpPrzP3b@vw2=Xs4lSt;8rN9%k-ylW!-(~?#NuUCF_#$|~|P-xJXhMr!S zENZX{fY@+sRH@_e*Bu)@FZZV=C-E?l(j0h)e&&+6)z!Afr#P9i#OK3~y+o+rWqGF9 zsFev#wUJk-h*a=EMO| zn571$T~NQoEFWop$;0ha>w%@-&kiG365O zJY@=t(-CLHYdObcx))s#&zICn7Tte~{z=;Hp^(789_IO07HCqq|ehK_dw?oGt zCa3U=B)ES=Y(VMdhxbU7g$Tgb9a(d1MA8?nC}ccwDBaSEos1Ml1cz3615J_I-xK@a zni`Uc@s}US?{0hU=u`yPnSEBnmZS+&g`#{l%=J_2BdnEE^93B>?Wf`ps;WiA$|o$c z!xe=*b?+ElEY-+Jux(lkdm%rZ?l4DjNb}d=y*VX~KZ=#m;0Aa=9lynzpjK{LRPFw9 zeXmTR`sovcTuf0>suNJ9`*>olUcN;3dm8P>Q1&+NV-WqGqW^Gwau*fKo`6jp)ei@J z4Gj&A+5qa>?llGmhLiipwE0#&J3YPSXlfZiGB~=kP-!fqsu~Skz67x$%XSqchG|*0fXP2r6w0ED=T5=T@_bXS0^VYL&K~*i+DL6IL?<7NA{a|_~x6z zRE!MyQEEgvO8MCo;`%c#@Hp01-`{5!Za$hIYscSTw~7!)z4{q|jAdJ9qYRF58hMxX z_tR)_R2kPKB4U(vl>qKxafHynH5|tX1E3^C-=ZSd36X+qL#1b$bxQM9F;9QJT|Xg0 z@)w?;Z?hNh4(1dgJ!OV&747p3(?yxP3$)CwE!t?ctq?yPfAdZ{2Oz!|OK6^j`~L3U zQm$7OvN_r@Vh)W*mM@Yr;WPgk1V>QlCB`ly|n3F7*Uw0hRdx3<06XI+2O`E9ylVTFi0?ATA_1Tyj6p0h5v z9?vBR+5iu2<)+ofUk3QANYnP|VD=i;-&R$z!KSJy#ATvGM@vmuDn@j|-vTTXiV)TR z6zXlGKVJlP_S97WhQW_1d^eUaoY<@Qzy;FyQEb^2lW0=~*{YOTPtJqI(7c&-qj+s& zhhAr%gN~cy2#ZOsl1oj|y%k0mP@pIj|K_Gf6Dx13)~rwmwiqH39aH@yQn$m2K*kL( z=O+6@f{RTqN@Co}>dnHquT{ZBeuD7&sTB7ytLw%|Ui(Ld6c~Gw+T|eg^Tt;q7m2yl zA_q3{vWCuVn5PIP@QkxRKEZtClV*a)?Zcki^_9U+(+ratOJ8XIlljPvwP?dptq1q( z8Hj>=(OLcq^LrS$-NW$+&2RtL_|8hATPcZ<^PAbLyCEVCmu|9*=Y!Hp8Tw&aHzr0e z-|0W4>P$udLMXA|XCh;t1**JHElNU17`zVikF!Y8g5WIy`CvB(F$sx_ZvC9KLX7jq zO&m<8J9t~{EPGn~p|Z4z7)1HghHFQJ_=gZFX8Fv*0DB^*G~?lNs}~pyHfug~KN?B} z2hqF*X=u>OISP;hSD>p`2#ZDY(g@+;;GppI()}kt)R9KhlD8-d6DN1xkN0{?jB;TE zX>Am_tki=$%mDaMBrI-;7Pt%!LU-k%SqVai_9Q7GkWu=#aD6P^RU=Q(8!lBjCyPE zpJD_xo||BEXH4Sq(Cv?r-OxKRQ!Ovxg4O}-r-kS1hrA7>b^AcnOz}gFJMy9p=e64S z-}w>gL~3{QH;}VEV0P&&`rvWHm*zS=W@GyKSR-A_wdJCM#;1o)MRZsL$TWfCDPoMg z?sxt9IR|mK8=Aw~=N(;M%bxBR--f(0kV34_-fB}xm>N?0cUQHr@Y6qj1>LB-*14Rd zblHMF8oaHC2Q83B+F&C4yLpQhciW+#l?Lcv?82@34_`Guc!R7&$%=h|Tiy&guCj6I zJIH(6*>~F+-kqD?qr8?Zs!P#GEjBrCz?hR4=kVt%b~y#tX4dPIFFYkMBx8jb!ZkWt zk=Ne=Ml9L;Jf5}klY+AOoHM!0iJYErhu9TrB_a@Y7OHC01VN(q{ z7PR{8jHDqTVPy6TJnz_Yefp0U0GN6SgPj%HO3Pq?)v8Wee0;nC$CvtrN8k25i$H9v zOCZswuBHYOA1@#C9%Vo$Fkaf)1@`{4itU##9EwgWZ9bX~fXsh~Lm`&LlZu$m;w_N` z^7Ge=C^*hZcN#n%fW5>)Rh+qiWTqa-f&8eporR1~-8uf`6c+Ky$y?CiRF41B&=5Tm zQSL%=%O{R$bb2yhwto!p;9hAz9m^Q?t}R;2Be=gH!FE9K7cN(J5a)R`92Q1iZL{o} z9lU0J+#m>3(KVOiZ-HHU*vdjW^-8JE*vNl68S8k!4~kJmXkc6!5?O9zXSt+(vGgESUo zG?06YrnI%qefRjk4+y^4$s?UW_W=o0~jd1c>&+a|MhAQZ5egQAzunh zHRMlU;{dC67l)9*M{E#>L}>(O0O&0Awj08h8i?&*2pi(0Xr89_;IwNAd|CmYB zs{bPk3W%3gl)sImXy`OO65?1yB9u&^#RihM^R?fc&P9KH^C6*RLBPppYd73fGhu&D zy$CMzz?|Do8T2)|x7tcY&9xXaBw08|HvHjquL!?GdC-@u0&hxgjkUtaf!4oJ1FLAk zw>{JL)6`)1Wtv~{GT9zSBVrdPSZZoW$tsU+Eca_Hzilc;tMA^ZZ>sxl?HOhK z;&jWyoJ_)PI*>(Ek7sZ`9x^z}^QMNnieO5`Zb!=ud$*1@oDbJG+{TOPjUJEhAuhpc&?g0%OdRkHz&3^ z>&`kpdnJY?zg39}-re(C6Kz`o??mkJLZezk!b@Z<$B`(F*6YKCemHpx0a7|hU6AA| zX&`Aqxt)c@-dwc+*-X7}<)gDTQluFRf(83`<2!8mLJLQLLR>=Rk6zQYrPU#4&dW$0 z82;+!vm9LW!*Rfe8jZUBjd~@OKR$2g7Rk<%aAz4wA%FTGxC7nF8=K6{(-gaF-%5ki zZ{vj;B>YO{q~}Yfg=g-(-*=`#ru<41PE_d&cZ_$_`s~G+2Hx7e{%yR~QDtjG9{&sS z!|i(N?WHNZT0QJOr;qMJ{!Go<;A^;T9;QAmH8ObUgs5Ge^>JnTK8}-X(dl_*i!@sD zv-@4F5HtBbf2#cUdpnnUkicZQNIM3jc_TtB*9i_;0N@xyy2}c}-ZRmB_PFTb$%3VQ zE42V6m*GlUS6Rn?DiHPFRq~u5CKe}1>Li_spo6jk%qwfu9(d}_Q%{;K!kE~2Qmh;b`PrvS6e|uPc>MwE< z5z%K)o=4mCGmShZ?9`usvP8LyP9La!T6VnX^uOYoF<7k;q(6IgLXMXf&byvT^eA?@ z@brP$JJD7Ztd`dO^P%m9KHU^dilU-m$)`)0+o$|)nW#anKNoZJmzSO84jXG5Wy4x2 zV&K}gw(irgfhMy>YPYNFnTMm{OZ|HXhx>i;l`2-7MbDUG z2HM^r!OB42;mo&qG-Y%k%s)eD9u_fDcS=I5L9*!!Sx3(Tj8(jRMZcK_x=uBN(EW#B zW*Qy}7dwgTt?X@8K?k&>o3>p3g7{-3Tkj@q28$4^`ii4OYrLPfe)O`DX8Qtg$g0G{ z-dZn%PYVIX<=ylI`y!{$LRGXnQ|ud@%95|9rXAa~gCL1`m3Hslo<{uglGf)P^(X%A zjLEg0PJ=hN{)VSQY1X6SW3KmLDvh5q0f6 zE;ULkInON+VrlaG-w~n*cgv(H+g~scS{_frW7{tiW8`6cU`YYe98@N7_gcO<>H) zrP_h0tVSsrhm42WQ#R*!->eZ->i5WtwY;X?9yasXK5K~4SS?gtKQiCTkTLsNJe~jO z%~iRkaC+%RTxqgj#1E~Wv^lr3pG$m9xwf<1b=ld}ZZ9eJ&FtI9R{B!*HY$!%t+~fC z+CNSiBkf22besJ%B)wdyWTKC;c=={v(*gWFZW}6xRp#a;v_#+Yi6mE7QLUD28IDc@ z&U&TI>w5W-h&>%ULES+Zznr~Ue?=_MLV5$$KW#Vs!^F-bjY>0#*}H|6XG?iLklH9% z#3#fwYH_UPE_;HMvT`G!qGn_0XrHJ|HteMA4QQ2U<99Wjy^biI&dRO%x(UNfgV*KD zQsE!zL!Z_4EsEef9XKyp!EWt0Pp+F7Z4%GpqGid8j;p`zipA!!@CXSO^mE`lJ#wFG zp07s(QbCipPhRmkey=Xu&%+8=w1ixFKi56ZDCd`>US(YDPWobaJ$oBG#*Ch7>^&dK zsr&sIoxR`DfF+oaWo*WPkC;dt((3cJwe)ZE{@LBB_-uc~tA#rZzp2~XpS+j+-fNUp zg>TF<2yo~gJHGo%Y)k}~d3j$BUW;jb7Ch|S z+5WibFjd>zQHLeG{qjG&i%{kyU8neCyd1A_`ig+nZw`a*F}?pXF(wEXp9m$Uir5Ez z9Zj#4b`M!W)00Pj2lN3}{i0g;;>ztUr}I(ooaR{NQt|7o_gv2ft?XA2o4Qufmr6YFF8H}!YS;p43` zSSiDGqsROhe?=Gd^(l0tgvYbrl{oVNC}ngs!KQ8)ypKXz%KBq*GiC@U43QQh7gGi_ zMRGAf+<@{b>C#&DdR~7*O59d0^Z4#kiY_U7If-AxHSc(zWt&qmFWg`Ep!HO87@VU# z=G-RcPBe#lQv$pTXw^{`<;6!L*+4i743HXq6oz#{a%Gk}?rUX|R*U@@0;r!z$=O$O zQLAD?zwW7CG*{bs5QXu}(P16M|D})=lR0zIKwZ>8ELjU4Z=o&MYWb25&t{f6Kx-W$ zX9iPCEL91)tgl+>4yZpTFWng<+#DxNJ+-X=uzcPRBHCU9*}L%Y@sK|0LZ2F729B}* zjN*bbER5_{n2m@veb|GAi z$J%N0{G)jz<|OmMeN50&-{#_zZb|@L6{+di$&y?TAuj0gq}W%nRkkq6~4JWA_k_f7m!|> z7uc;pMYNVnGC#jqC5q*@__*G^^KK!kgPYE7-0f2NiMnB6C*|U2_YTN_^tNJa)M`n* z0oT9&VC8h?IxSn~>?h^U&Bfy&`1$F{91Gb0XMkd4x3wac-%8C}C?=X;N2h=hH#<3dAm%%v~{eDtQ? zWMpCB>WkzHJVGz=Qqi35SY4h>ePvqn)oku#Fn23o9=y_S+V{9r%4AH5TIm51F-mQ% zICsN?#|kIUsDB8yG>3-PMk!GcA~9xPSJs5Jpbs1T+c{{`M(T;Xh{NIP*T?&KdrYMc zMNIn>lX<%OE7Nn6^t4)=49;y=LAS$Feg!2|xm*X=BDA>qeZQ8+IRYLRa=$|5w)5u{ zm9vZRtNf=GQ8oL+6l5GMrboKSfzo0&CRVj%@r8-KnEz06bZLj$O(r9sT+U=l{de9iTu#f8C1I z|MGMZHJJ(pZWnLTRab2F9@KKKCXCZmYTmEgzYAdDgmo$PUNhv*=z0A!#(x$%K&W3h ze7w8dNIeFSP~{9UASL^7rQJ_mUES)#2LM{4ivD74?cAs%>UjZ(4Nl!f&OZZCK(3YQv&osL>jSoU zmCWy~8TDZ>ow&G#r=F?RGDI;ETf5RoivdjlbW=<)bf%$+HKz4!=y6mLX(ixeb5w!) zj+(iMg!NUe^AMueWwJ&7Y@J9& z>0pm;?=mv$z}G5Pt?Eqc8w<(sWNpOl^OskKRP?)1kv)&47s1>emF zA9O?lvPZjyLoI%&eC+emDBH)kw*tTuhn)m*l8lXT5oScwud5}FE7xVl{=`4zmCQ$e zE`)3xMp~BMjrk3Gu%dw6p3mY!kUY{7;;v*4Q9}ls4)^A;u=dir4c>z>OFgz43ACmV zdbg_0mc<&HV>!E37Ow0*Uu>qve(CDXCQrNVun~1i_0N(9i)nNE9a&`{NKCUnIvJ48 z){-^c4|w3(9Uf~W8WKiR>$9XhvfE`OamW3=ZP*;ozO%>Lgu7Ju-N*muuBp02gv00# zeLodncQsLymkE)Ln8OzqsBd}8y@^4}iskYOorJ_}6f9`4J;Z;Mh`Rd}q;8J*(C9bE z=eu6AUs>({dju-QETs28RPgj|qIo(|4k!T1Z_5&84ZcfxTuJxnFVXhj*Ke)D>`3G< zVm?Soh)l19?+E?Bv}>YJ9k#Gv;}90;=|#J~cvFj~v0#PMmQzwyav271Aa9yZR_Va z%jeWGfcJ|Gc#cA8A((HPp6+0xWXdeBt4U*l&lE{()hl1J9c`K3bB0zOoVp8z)m5<| z{NZ86L&L|%50cD+LqOWx+LFpv9TB7qOri6a_yD_NZ^x(&`W0QEs5(DC4+aOYB`_1B zsY3CZyLm8ZhNBfn1dWGyhHIj#HU40M;9MEl*i%^+*9B|hf|3RJ;Zy)h7H~3XWElh` z;AX-B@-6@-?P6V!^t1?lPSUPCjYN}pG+3*_FHm2Z=d)Tb`C)7h7u_y;-JHFm2$I+f zb-<wn;Y&%i~V2~-e8x_V6H|RmwzP1McD^qT=e^NJfpnR;dl`O zA#(1)4;NE_-%em1Y`&ffVkZ%z64pA}zrkdraC-Vd80{@8utOS{_{Sw%6vxU6J>!m; zraFo!mLV&Cd??BmUd~nS*=Y=Ep*#|9vpGabA)~*Z&2FI~K<`qWM9O<`!Lm90CGXXG z*i~^b{U6*gc6dLpSOho=v!_+~bW*sBA{Y(fp`AE^4P2dFEZJ>P>oKp*J)A`Gz0K~# zn;ZC%fejivH;Kv}4wpkSKsiz<8+tg8@qXhFHx0oqpTzA`bg}wDHXBJt&Nnj4C35&5 zqC*J67&?)ity9BONPP%@_Ty`OYY^o964a;p+S4WAu3v7qelOr=?#3AqnkS!Y%5x$| zd8=)Y#3APjuX-q{5$mvsVM@2v;NL(QZiC&i+((Jet1S?-|ux{(Lth zbi>|==1-yGz2HL229gGEgdHZ8CDm_cATxn5rVK_>(~Z;J+gxA>U&%+Fo?LE0zp@G@ zU_*PN7v|?j&2D#A^vUDg$`Oq4l8P^jVq%Yn+i#!zSj$_@2QW=uwla|mRQRZ$E>)8? z`A}r?@sc{=<9U2XQuKM+8zoDmruhd-P32}odYc56x<#p6h+}s7fhIMhyn$&B`5N?g#o%B)_=H(H8;uY68ENVSZpwv#=>ibMn-KnY@vF8hxjM$y*(U{yW;tuIrgJ~xzW=M5)HDhj? zl_ZXlTzA?$;G}^;tuZ-L)3)Dan`8%4(U?**b5KZ=1NA! z_YYOOdi7dU#vF6ZmhZhX$&ueEmTFFuL_?bgqZ`S@(+r;S9(P)ED-%?x#uND&t&S@I z7{F!{S;Z3UyZXXW!@_@Zo7sQomrBsRna0p-#$US7pe;zfMM0T7$S9E@$g6&-usisns_PQ*2fLi&y?YvJp|t zp)pQW8yg`{)Z-%eF)eWnN)YZq-+OTk+Q4ua03ywb2C#9eQDxn7;aaX8i31#xl`yNn zwy+~Mf4BcuUbo`!?f)QfxWqqy(hlWYm3{E$cFiGaHF72+h9zdoGF%j0(wjdXpmRSn zSXrCgBSlX`)3Mc;PF%gkyo*}A0okRaVEJi94UYJJtJGX&iRs?who4`^P!A85mdUptm%(y{9c4gQus`aKf&lp+lWqldtj6 zE``B`>=49#Eu7T*W|Cv9keE#-mT~*y?)O?1Ih9{^(&XGl!@{8-0xm5r zZ^p}wekJS23BSmvIP{zYH)3?EPoIPa-+r`zbm5Vu=ADrgQdaIwn%uK6GaDQn1V>DR z+=1-4?afVq3?sPvJL4aQ|0o%!zgo<%P2vv6jqJnKcWU9q2=1?093Mvy7I`naH&c!u z^MjEEFWeSwk^uvGY*-_CxcX8fj2%x_T*s$Ge ziO3S4fnJ_BBnH;eHs@=CcrjS3w&4JO*Y+_(u4h(vVZ~$FFFiITQjN){Gr2swawM5f zorQp_jO{0>k7C6kID$L7|-t%Z>O z{<=oktZz?K&_>mT2ie_8FO&JkmiQ&t!xr9jKA0}iF)&933kq|EE{n8JK#|XFQp<@` z52*m!5Rsdl7tLOjf0|0{bQ@9o-Daq{_jBKeSl8Kq;mc(TulX$JRHHTfs9RT%>gJGC$z_V z_03w2HRrYaeuLEl4$pMwKltfaUQmGW6}PbQyxsl3cGsBEbc(gS^76J{?%B`-#@Dg1 zUpU<L6crqfm6g6**F&5j zeZ}+Pda2Pmv%s{5Mk>Y1MBQX0<+Rz6vU!FDHP-v9nKK8fnyiVs2G#p-)6!>&=oluT zf?E&QJuz(6{GaGACQv%`8vPyFQr?P^Gu7cW2PR43qoZmQ8mv&m!GUJ0y1It_lplvl z;wdSBNY2C;7PAkkN60dvJsWY16cVM-GEc9gpMiQXw>C@SGhKn<^#!KD?PjbT*fcC) zd9+htnnbbE;EA}ylm2=nNd!5xx86ikBZv>!6uVT7U0IwR7mBnQ1?M4XYiE#07lt#* zW+t|1=Nx|{tFl<99g;27Z?M`lo2UEvG^I60OTjK!WSVlcX42749uNSZP{|ZCacxq? z>MAzAwYthz`ID)@l#5*kJ;u$>IJ%*=e^>*HK+4kQ>C`v1;ynC=m%&J3ZxjYphF_`l zB~sH-M`aJthh|{CXrq3J*Kg12`K_0DsTjuW?nZv3_%Z41}kC-QsM6I%Hn9LQzQZ99GqtqrO5y%N+tr`NgbBBuA2 z|1&zWwkY^yC(9;zdQ?0)Ralt#dM|wpuvR#Ed-Gz?&LZtqzI*;LOYa5`DBb2ca<$vP z)o|aY(jCqDAxxBVfzQLSB}4M*A9-h0({>GIaNxb+C~^vnVBruZn)n7XW?EF3<&?kt z=c~A{lE~Tq3}U#3H6MS@>vuIceKtjl%gOB({JKyb$%ag4MkZ0SaMWDUSYHnk*i>nZ z8W*VZYh&%?tTj&lAo1;S-~JeUj1d2>wF znM#TL(KA?HeFSyjk@Vlkp?_iwW)xDDGN%H2>F}7h-skzXz;hM|WdeXM@gIbl$M1T- zUMd$wSDYT6>mBu1(z5;RhPELL8hn;oPtiV+>YmKCh>OXSP=@aa1cGhk^?My#JYEra z*#75yFpy;C`|qx4mrXxsf|a&O_GfH9z)g6expAC{EZW;{OC->HWqjxJul_x^D;c@iSOcoh-oqkQ?~z7foL5+-Az2NF zym4jOmN$;{g9=>n+bE4whzGV@UylNh!ry2m<~nq&v+2IB$tcluu;)XYYQ-a5g|E8v zB6>_@_k;4>tq;I&m95?IGH$EOnUDBWCSvI@Tg{IV;>P`f;jvrre7W3xV&~QyYiP~*Pq!HdrRJ?KQp4fGLEA%XhN~|IY<%v{o>ORaXp2r-vhtypSghE z&<7TgV<*AVmV;oM4tmfgCA(ucGi#z>cJbpvF?(m%EVu-dTs1ZC7E{Ah{3qhwEuVSd zf<;HU4A!*b$bY#2W^qfIzvOo43MQ4@OZN?JbH4Ue5-fhRHtVfk8XaV6T*$Xtdi60n zNDl|32kyL#Ew}ZFD=dX?yreZ9v$hOu!{9J1im)hu!ju=xhK~>VGBKZpSr&fw6I)%M zD4z#jga&?|@(7k{MJPnBN_BH0s9$*VyD)yJ0p@2Mc!*)Zmwr$7xdYA7yC=p}1F)&! zOHGr<^3mtx;n6fsZfV(=F^_Hgh!4y)9e1HT%n~Vd8QeiDpFL@%2qg{!{lcTo<#2Q3 zs7vN|-?+53%TtvprYnHb4adh2ahC{emkewd1$0`YT2c}cM&$R()71H4c$kU+vHH%( z?E)=_R~@1B;eRy(8u%v*c7MH;8|R2(487<~3*u+80ltM-V*EgVEEWYvM~Qkz7)*cc zk3H;6LLUcBcTspgDB<0 z82`I;LA$+V&tl)nJY}{%SGk$ins6yR5#ll^?z`O&Mf4nM ziF0OfJrMwJUSl*Ez(1vVewhtPi$$t~#N3PUL{_uJ9-LerLEg~>wi)}%S6=xY!~$9C zndUp?W+8-y#vSd~grSVAIuha!4G*QRt_l)Yu%wE&J{@kkt6kp3UKoJL;4-&OPZA=a z+pQJ4twXtJ_eTI&4X}USKMsKCTj3xx)aXtJ{h5xk+Jda6);w+WKE@#4?klnbWT+q9 zm-^vwnl3}kpS7%sKEeY22e!}Zpl*j&(Kom_wMo*cI0an_HQ6s!wgeNoZw&`=U2eXM%E=W;9VrDas%t^f}R+?U%;t7v%vu#e|Q-h z8d82xkowD_mH%U~gFcA$BlfTHVE-cNKaxS#t6T4|(?;BYIs;`Hh2(CyN@Ar@&0qFA zwCfzQW*U&YkB3fmu{BFA`JV?@ZSu&v2u~vF4B!7+^;VGdK@aT_p~e&ygn}JMtZOd6 zFMK=CeEX$x3>Z`2VH{$`QWHe5EG_GY*^XT8>FW=8Hy+VN=tL%)X>%%fy=fu8GEPo0 zdpF$bwBA;GjD2@C7$ID@vy>%~C&_ItlILi75oGHAcCD7ZrOpz4zo#mYNk~hV_zmFL z6Y!v+65p{_k;GQb?{$>dlAVVK0P|ika?|tfV-K>&L{#+}*)Iur??*bjLRQmzq$&ne`E6YWPZ=8lVE6Sg6#Bgl<=^)T=6I*|p_MnwOP!Jz z&8sP>CIDF_9Rr5JME5>R@Y~e%Ly5T=Oc(LAqY0W^6xFB;L8>>I1jy2&o}iXGhZYXD z@eu(w1Y>W1+xqXoM{KxcY~tU(jgb=tTW#SS3q8B7J>kLuP2@g5@`u?!HYM&-48{jf(5*-p!M&S8xPVl zvCZL@p`P@?xK~#X77YOS3#_LeIRyb6bi=k!O7)WOA;hA}pG7A`ij!;He4KZi#lCoN zd}SFKy7)u_`~IqqOfrmo*DaiQ)?pB0zIsO{gTltDOdUd?KaiqA9bzOYBO_Dn564L- zI=SzvZC*(YQx?4w%R<|E@m44$)y`Bso+^bp9{1v$Rwlp1ES=cI|MJ`PtLl8}7O>Bd zbgYGCM5I`8lCM^E-Sb$3Q7!$|J6uwpzSl%--CL3+B^AY`m2U$6g#9h(nn_ZOw3(<* zIOU-nsv+&lh>HVB)Uxqj`bziPuF=3&jF*7iVzT1KaY4UyEX!1QE{I@+VXA{08)k z%DG}{#JhK!CemT-o>N7eY^7YAt!7Gr@L9bV!3xcsPbCTi2`O@X!NsCm(nRsmsOXQI z?;e9A(S>%;4_1HDTt=X7?b^@6QRU`za$_9A5tmUlSL~G(6qV$Zl$1cciBEGtHZqk| z4pm4EO=t}21c9+6l3tjgeKN`hwT1qG%LM74e#-zR;hhyEM`W{nvziiaR=RFv)*N}L z<4U9l=@@ldN}1U}$wx&&qwn>zyp^YJ5J8Zu7op~I8plr&eE{#)RZqLPZYt0K{fA`&s+ADIM8va~O;|DU&# z;pak~ROBA^ueY|Nu>c0qJB{oN-tY|GofWifZOh{!YuL{DzLVsK^Mw(ejiusHd#Awj zMeG#>@A{4=76Lg^++sjz6^Xl93CoGR2%WUCsVBOj4q^BVmT?k2wt&K!D z*$yk5iP%8*9uxLHUs)MCH9ZZgV5EHh0TS9t2~K(X>|w^vT04;m=p}Q8;tkkR<>I|I zuI_=({>Y6m2hIp)j2*b;B*hTpFqQPZF5E%0kP^<8s}3W|HQ%&Hna0#aajB`g_wgyz zC-1t=d{8t8^XwDTvKRk`zgLz~N$&Pn7cAPlJjX8DVNy%i3pWM`#$Mxdk#!kyE2>S8 zkAI=Iq&ASlMJFa$bCD&M@hk649ogPANGvfc9PD5;>kk5r`os&ejM`u?8q8Q}NeJ#B zQZ~v@+`%OxBdT0kUw(tPp!$OB-y!BWTmTl7enALhlECfQ*F!Uigf2`!B9g>DADl5B^n#OP}Qt>DlUpQNWc!iLzL{)`x zLFsWJBu8Uja8SU6FJ>5eFV5A2aQw7#N)GNDL;PTCigzSw3IfR+oDtY?5tOa{cfx`) zP#5j2Fh(&*5TnL>fCW>FO`Fa0DB5+P$UPgYgrd|fN9=c+>QcTT-DrUIY7>%zqS8n{ zH3lY`LfKxy7QMU&V=omfT2aNMo3*f`On8A=Z~RB39I7wf-%-;Etm$O@{pdrS zFAa4N!|e{MolwWlBacFrIe05nME}Qx36zHRN8cY^CmOzQP*n_M0&=Imv%Ze2;PAY6 zkV*fh3~HwrgAz+4persn*JDc7ln73!d#?@jI&8RFt_Ho`F&T&}pJ4 zuv&JLTJvQZLRn~WV6ttctgemZh7giD&7mW{X%hBB^BQpds@3Fju3HlUqVs4bEHJw^8IdWgW3S$t1q}Z=XNaGs%P8j&3|3)?Z_c2JO(n0IP#L^e%!-R$Ek110- zZ$S|Y?`=Z>frjffI$MTo`fZ{WgZ{uWyy+(=F+ zE2jQbHFk5n1Zx~uZEvLWO$!HK1_6ko@x?6LQTOkq@8G~HZW*2csa3wJv|`5l_NLO` zg~I#Ub?;E#ld5YVv7{rwl88=%P4vD?f=J>V03ZW>ue{+6>SqS=h;u~jxJ1N~MelHm zfuVCvK@4`;w64^5V-ZoL?Dp5W1OL8|P!ab5Cd4p^k57hr!lK59|e;S0#QM1Qc6j({vp1OqNRo`B}eZI;k z^7*{u(?=R`kq9eIL#566_Z6_59%`@sP09N}rDX|-e!4?})@#!|9M{g}lDu5u1{}k0 z4fWD6meUT(+>hi=E<*rsPS*grFge6iE04|V^W;=4X?!$*_2(<1!R6=gXMqz;-tro- z5u`)Mqf2Hw^#`nd_?*^P4~|1d^!G0fh7B^XT{kxhk$mM%ET0q=u;9yD!oM>DfEX@t z>#^)sDHlxD+g&KLK}jlrgh&8>pE283G6`fS4LiG-g1tDVK^#UiW5E0DR{T(y1Y9D9 z|DHeVHu5Y~U;;TeY1(2<(M2mCJjf{}rl1`M1*d^N`yAq+9IBw49t$>!8Uu`E1*Shp z{tQ^O_JU!bu*WseVUW6INdv~=&m&FqC_df7wfkU~h%S%8cE-BCQRB6yrHA)!>(FU( zA?7IHi|1xEpFem3+nB~8nuzS!%fXpB&h1z&zf6Z?{*VvF>K^1gaHB!-5!f6G=pqtvWCJv*hH6X$6w1>@ZzZiNXs3AI=?uRh>#0@~l1%mK zvHaJ3wS5AYFC>SBh3)>yrwT*w{dc=c zIk%|~O*rL#$! ztXa%qkFfNhB=h6BjyBANH{r1#-e`=Ng3Uakh4&sgSoXB|6IS1WX?AVR;rOtrk{Tcw zs&q(O3J*dkD#4omMFS}bW%unT_J_9WeDw}nbHYowxilCNw|IDuK3OFtEce7nEb*!o zt-YpcSPDuRk^XsA)89$_aYPf;F00}hwi3|_4)6}X_!b`9208dp zxoz=s#{Xi)V*chR<%fM&NleZOx0AVit=|3R2!M;bdKQ-c3Z2(OZCO@sW_Zo#@nuod zXlT3!vChJ1$TJN4`^)@>Crq%7dI(-CT~+}#IQgp2eUy&VwWvj3z$K$my_{gpcdd$X z29G=@{BJ)DB^Zt%w|1i#g>sT~S+OMxM-6OIzW`b_3jJ#3Qw5*uoawtROu zf|Blf3_s-M=rBx#4|HB#?941p$RUzcd3r5FudkY{Zg_yDTF>4mZvBS_kPCZboT0q~ z@!sQxPB`U@BX3 z&tm9??ZthKXQWl9N&Z@J;5Mwg;Fbr^;5#7TjpJvz5==$`Hv2k!Ip(Fj}ua!P!91yqA^IPL$lm`y z9w8*>lGfJjYzQEtP^VTNLxT+N%YU9woI@xq3URt_exJGhzQo>;iL{%{D6VOoAVt6N z0_IO8E-qbUA(kdxQF&X@ABE(=O0=`r9;He3U0Z|R>SL}8Emb4){{6I>dUv6G;x!z8 zZ?nLGgcYrJx{{K1RPSHG`G({$NjgdvSC}`;Qo{og8=@H-aDuC@g6PsU2G#0*UE|;! zmUj^%Kqp!1AsasZIZxji%$PmF8WQ$v31(4+vAE12|HrfE@x-6RNQIw2EqInbyhMp2 zkvPoh1)dw$>1|zTJqjnF$E3u(0+gqfZ!bTAv88sIUxz_9)R0P;gTTtQ>$A2M!Mzt!9*qTvjkFR4X7~EW`wSCSS#sLk?!0=l-bW}624>2X0y--mM z;E2#~?S$PBh%%TksvnHWQxpsT@0E--RWU@B`o6%$oUlw~QmN0XP=2Ab7u~@J2Q~xS0t;o#HrqyZ zGDTcnlA06<)0bX#{q6F5AjY6N2|n6bPaiHn>}_vOmjO&C4m>EODx*x7#5nbJFzh$> z|Go?Ns_XLihN)>NMBwZ9uN(w3j=an1|ANu=EN6H>9L4w33#*FnM~e0a{sm{muYiA6 z!3M-Ne!q>_fm2rS2KA`%-bNI-=7iM@#Mug%*hk9&MtM+NSC<_QK5p(Py)qL2x(B*_ z_@qt`#n$!#ZCVM??sHvp^b9Vm8786F2QS2iDH)!8xH2nQpFLtBI=0NVchHXeYeRKt zZX(Z`j;EM$&NF7;>nO+Z8?@pPJHegEonYwTzroT*on{f1Fpj*91)2MI4t4B zkEzwRZ*(;%@-hE=k9(e$5kge>aAG@#_jL=0+L`SCeZOz;ak$=8uYzU8wbC0ISD{Lh zj^PaVjGOto-yMv?Xw}ZVO!SDek*JG2Yd`2j{^zrby8+8&3;IyN+T0qTp-VpL0iCSetF{ z*y3xnl3Y&cW3nW9&GH)WO~>=9J-iGzs`mNtzI!0|5dR{R^Kwd33@+})#W$G_it5K) zs756skW~9o?gy*0)*Siu#CAida*TCN<5>cNeoDK4o9c6pH3^(FMKF^_8x$W+)Ir8r zX);&wg4I$ejEdPhMh5NY((ktzwB&FTc0ys0{5U|K!RUfH@XJQS2iB6+%m+TrL*0ee zaN7ekn^y1;`;Tu?NW{<#rBuw7u>k-KSYeFGqmpcG3H+B`)oX)(q4%St$fQH)oI#8s zIFn$s=x5nMr+4s2(0cjoF3Npe;}DdeQn6=c&<$gRc@N+KuzxiNWB0gn-4tEJoI>1t zD;V4HCeTqWFI9X_5Ikbrvdw)Hm_qdtuLJTu8HhbhUYT0RvBlE%hlQK zcN2#ajtAA4xSejUUTBy*-Y4_PY@Vp0B>DN=PVi*$R*4$w{+iA!AHmg zx?;zgECHPAf=!MvW-ZhMBZ8Z?I$6s;XT$7sJE@1$G0J@_A0l{VtA*|pESEhzh32xE zzomkbKyG@nZvlasNt6OAAYTI-4`aZi7WIMi@_{vfqy=@1fymu?Iw6uzf;;VM+T@qN8m%L!=q30ZPyDrgsf+GX5Mlx}d~1zz z6|YVrDB(Y|Y&!$SdCe82DOR-$Wls3|(u&G5g(+apQE>2{Y6A`|dVru&bfRJKj;j!d zsKWQpj(Bf0U`hQUp?rKFWMXpTGHP>-4+IcM^6rdS17qBY>N~*D@5*z9aw@1|WFTT` z)TI8%+F0v&F)YpZ8)akJz+mbTY8KmaD{oyEuj zBKeS$#<|)7WN^k{Y=nx+b!!2kBX#zAAw0=$LneIU9Q#H3m$YT>vD75%ATi^>p0wRp zNmk`a2atayGg({#3#+~Es*Ucd5CbQH;Tl2euQ)9h)I=gqP4548HLOtJ%Ovc_Fdx}5 zg(5;g{Y?WwU(ZZSXV*2@IK^3%6Yb&*3oc;D&%bS=;81D(g~1;`+4<}S;@80woV{EE zmL*bQkoa^!N6eUP5KA*;l)S^Cuqvvs`o$r)Kou6!%cA^EIh+v-O`N4Xe?LHBF?N5# zvN#&24<}!GT1iVet4*W{4I`HO?oVz7Rx96X>fvi6gpo`Q0{65TFRxN2Y|GiaB%v0Y^zizlKzbz}@P2&M!T85zo-`#n<=o<9<%I>N zTn%-*KgV@GwVjt+CXOS4F@XBi!@zY1D9R52f2^Cl)|0vj1d7gU*V!90LjWM`@ww~_ z`sVlVS0HjSuXB0P{!+_|BP#|PiurwIL84w&4uS~2P!aE)TO$JKrx^i9t!W40Qp)1+ zSw>hiD*bMkkW@x6s=z=4OM8+WI18h5avFWxgO2+@MQsH-|0Q{c%8JweZD@Ujg_k2+ zgO|J-M$dmuqlNG2<9vtU>+35rUpBc;o?F`{*lV}tVxjc(9J>=nn*4;XU{^jESU#RA z4c)(+kL+DUJ$SU7fjYVLOZ7h7<(1Rv7qs8EMF)_?zawbS z8SRn+N>Fu#1r-?vT~sQD-#FfkvrLl76`v%@-e0T#{kIMk(GVhVO(IWS}+iJe@(era!LJ9&9uN;4ir?YV|bndoyT|WLq zlg0+y+;`Un<=wi9#eeo7NmTj9M7J?It_V9gqOi(_8Lr>p?IeVQJ;lTzmKzWY5|2wH zIWS&{_`V*&q)*wvwp{PO?R2CsC@2dV3rDi`|?zVj=s{c^K-b&;FTo(`AES02N#UbXu z8?Qfas~5Fq0)DtqWEcK+B(}}^b{Ix*1`Bvls1voN)~0mwvEH>ylnG+T63h?$zOStO z(rQ{p40u;4x9T)LIlAtj5bUvuL5hBR7aBXwr2qQsLGI7@EAG$;{MtuF8}p`(k$8(M zdXTw__ZLL9m})hFQ1pz+!uS1|BxL_4{J&b zX%#O{>-?7sa5u-z&=s?3V8@ONYnc|6&T&eM6flN~f2h86B#B1L z0NTY5?r9#dD?Oe9iK2(PC_v3L?pF!%fKB?q0kVZ*3=)4_IiI2s5NeW@K9-rLg%jk^ zQkXl|*m)u`&$!l!c>dARB7*qVCDdU{)xJiC^R|$yG41lADMn@awDP;vtyaTjp8VN` zkN?jY@i)`5?NHV9T^vtX#Oz-7Ouct13r$P$*2~YVbM7D*j({JY+7oF{t z%x2OF{CyFx$03cg_muFVnU);Kjms_bSgtL04-?&)BiQ)uVYk0KQG^DOCJryGo*i)t z3XPTqeE7dA2zPMOd08{^huB!Kor80c-PLbK0wrd;Vz$ZyLuyw- zh8$VDKyB=b)G!|a+%+~@PXiad(k!Gr%4 z%n+wpSl2R|g+N zG+_91!D*gCXJx*&Z+k%xlpd|})n!)+uL_19i_Igq$fAS6xfxABXQXnt2?>izV85L-+S--B?2J}XLv zQ=%u|*%dkT&!Q`F+vnJ54}3IU6Mk=nSjfB2%)rJr?}V-yBtm>rT5*mHFs$oK+1Y~i zPJ+fk7a~*)}g`_?Gy`>T>k1SLlCp?^cv0)9GvhvFw8{IDh~~@R@bW4?iTnm*`L4 zg2di-t2d5BnQ%aqwdAl{KbKL#OZp_OyJ*DMz4q?1#D!;+fktw<7f7Lp+QrO4x-F;x zRs?;ED3`>CvwE=f@^swt(tdmH^Byfe<+R;<0E(P-44_3Rk-U-iiH zs?{5uD9nh3ucND^|9+mVyPmE~f*3EuhSl?<07x9HtsX7oSgHoqz_ z`PA1MVI_$a9MKq-ZeF#8M8buF=%=LkCk2nu3MyDxWHrI*@Ct~|eQn+T>G5$V0a;EY zf@a2r5O@?FyDx=&#F~^*yuBy2=)MW|6kwqnZhY3>fC!j{i06gK61INyeyeMB1^Dnh znjv}2eZsR0^2lQ0A*LihwP|*xKc3g&2+S{~T(-QuJt?_=sw?A$0J>2def)2;MqBPW zn!k5Zc^#c$qyJYRD9W`3S; zADBOl;Z?Q>4}@C5OKCe;SpAJ(D%=!3j9>iVpZTD*GcAAY3Nhpm59(5#Gx}7B6V@~J z9LCqTWP}2g;DyVR#@RXr8-!V1zI`3*0s5T$j_+RlUDXTJnTH`v*iTcPm7fmCwR!aA zT!zdlpfDXJWr=_gn{oCZ70J#D@$GMEvY`T&k{$dMNn?O}S;Ic}G5T(SS7>o%kY+^V zTHGH6k+2zGIVkHnAYj^gtZoso2yD)g0oU^Sr;06Cv7;{{t#V)7{*Wt$fJolGd&;1W zM*#S_0zr+0UadBJYkg^RN%iR#>som4oWO9Ia7zB~Cku`qm+eR1&M&{FQY#&$Q?;+a z_S^~FnN%-4>if@4P6^ER{y!c|xyF!j?6ubO_MTt0=sO??1hJ%hEZO@b7S`d-oS=8Ov;|O~0kxE;j#&1T^o@ zRnEMwdf8=z0o-QY#^{HQlr=m_t3r$nyIZ#v9$ zyIt&0yYa1CAYu`CW))QY*$2exlYe7q&yGR36f9sUMWRySb0K}kpWmeELlESMF#ln> z$=zoqjfB0RZV?81<(4AFydAdzqxmdi_9rFFs#l(YpN+4?(l37mlCn>MC?T>yWJ4OL=$J0BT(C^ONuLsAJGp)KZJ8 zOAnkOX2PM&+7|yE!>5>FMGnPdr;cgAWK%B5PO%4fn(H#Q!p(&#n@q3_!&9;KITf#- zWx9I7biw*0M?ZIH?GREmlH!D@@t4JZuZfTdLSR83gvJQpwQEd&S9wpb@p7_2&{6FC zMhee9{j)haFy0(_5XwKk=I7Su+x^y=;`QWJ6q-?`3gU#KW@GttXJ_67`!Ayv0C4N! zH+yjeHoFrVUW*A?2+|x!}n#f(I2roM~LZq#hrTA;u&(kwCD0r=t z;b`Q`{nT(6UZoiU=;Ff;;S5|y#Schfauc)#+G0rA#{u|1`pT@eUlwMrenJF}`L~ye z!sJV&%pd?-$HTmyJ}H!zzwHg|U=gpXa8qHY{WN1)_96tl{`ct-%!TI5f*7r@7^xx7 z#X#OPh8&Ix8X?$~*I*5fpe3En`CA_^W~dU`z{#60TFS)~s)E)1qB)vtc09P>aiaxF zX00=1tl(}9#xW~B)L#6$l~$Xgx~ETDtuXc>4i(CTS>F>v3e!t=Re;ArzQekO)V!urc2ox1FgL^o|wn1>^ z<<5SCRPcjHEe#BiC+Bi#nl}3WAHK8n%^Hm=6Y4s7ET8$8VFCoNlq=*9UnFe~Z3icAO&SW0l5NuY}@awyt4w%4P0Sl?0v2%SJ6{Tl_k|ne^6K zEzslElMEzzhta{$$RAUmYC58tQ#k|R^}o*>A3QXecV7B83h5HXL#N{EA%30T`~=_QcT*3|Tbl%Bl-FYr zBIK=mB6hx+#+LsPvq48rcwu(g+`YRI{0C9~vo3TPe0CA{&EwPApfhY!JlKl0J1>aq zwv;&g+#?XbnP(W`?`Suf_f3SVhRoBf#I;2542gnQlT*qNI3zh?Z|zZ&1^_q&0mskY zSXu_1NxbTE-VpC}M(*kR;zi^+2UUbBHMSupmcYv3A#pecq6V^#gmn*gMkbE07rKs5 zOO8_x&%WXy1xb+C9q*=fb0IeJA8%xz`uVXB6Z;l3ySAq-kf~r%n;3Lu?~E7e7F|=% zn%mn6Cu8+Le1kbEpcGE4D2>t8x{;6rsa%daI$sd1plPMEpPRTD%5NPh^C@A$QY2r+ z+6=;qK_wHz_m|G&*^Ri45PNupwyR4+E(RdRxu^4yUhc_aH_G?2TU?f)1sQOGCUiB3 zW$BSHxsL4(gb$~tv`|PYlV|wbe+!?@;eNQcLwEZ5KNg6^0~n@^8-&Ii(joO`xSZKBI*p40LGAoX?NwEG8OoOAW{*OqW# zz`vSbtH*CR;4`8Y=EAB@rCl8j84Tb(eT57FG=yA5lYD&vl2mMiIxhHq>^PH`b9{9@ zEsFp1`LA&P|28aa+z_k%(wI^?37(I#c`clA9|6{Uf5k|m2Y_7DR zME&235x+`U|G!%beZPPqE9^cEth<5l-XH%~qj;&h&yJk3mGJxE>w>Nl$XIu`Eemf=l>tPGYjgadj_+c5oAzSiOiCO5ehHX=Y zq^~1e1%3|(bjI_8-cDvhvH7U-zi1{29BAU=r9#QNe8CK1-nN*p)?a9_4A5wJkF{-V zSm(xUd{nXim}XDw``LW5!56o}o+Yi`VWC2+#mQo5ES3M7U?D3*RBrshXl8~-wY;Dt z_=JqyTC&T;j(yE#EcsDAWGkwEZ6+`Uu>>~v>FoHe*=O^f0Ll z(AWS^-$w(3^4SK{2~NCGRrM-MXoc27!{*o+-U2SK_!rQ{-PQB;QuqQ z&3Q&^k&obAY4`Ya*J)IhDtUeu0!;cfFaB`78194~Y2|LfUGFEuKzg|LR8QT>PLr zR9tP^#{q330ABxn%3JO=w|=$R8g~2mmBWiuI!&k5t^gB&=}TC;$;vVN-9Kk_V=+F+ z&i7<;(6ge|;;?06`EtOJJKmP%F_%PMP%qk4(W8G%Z)V2*RZB&_%BqE@#$-nMAan^j z1pH2BMR8tgbaCQ`5ZfH)7e3!)yrz9f$dKq*&&_Anp-O44v+0WJkaMw-A&`@%ocKE3 zc>{BH+|wvn6d=a*F*+>tfdbpi?U`K)`WK^Ks!a(gHYuipYH!f+SP{CL+{RZ~Q+_ZA zY;TVJ<*{z9!lu~9DjUW_27L4vPTZ>)aC|0ezqJ?(Zw@~POhW6`)0`c;2IuB|JfKsU zqEhX#?At%9oS?0BH(;x{5Q}`7INxU~RmGO4dr#3neLS`1f8;Fike1htos$wr2q^(L zo}RIG82b7{_g_p;fi=dIG>a%wjq#{+SEY#1xZbNp;{UPV=t7=f=!2tqlW(G?FJ{ia z0;(MbbAq*|n~RHOL?eTbiBtlvYe~sN_U!RIr^9J4$UStjzc?GKT$Y^6svH%bKj34< zwZc9=xW0K`Usp2VN3pXN-emjO&&;ip@WbX$HZ)^UTQQ}@Fmo@rmGOd&et!E0N8g#! zv(L8Yw}Fni7~Z8TU-$d&OZxMh-UAB<$WDaF0wS;R#}@1I$Gh0GV<9=i7h_-jM&{+V zT`tUydogzB!KDr>5@z-XF4qN8SD>nK^=7CY&jgQ&mEC->EKEot@cd|O)C2PBy4-`u z*;)8-eOLyCedY3}ZNq%d&UxXP+oHXFv(CT{lW#@l* zS$e69rTl{}Ud!9j0mtN#9LHn)RTZWyI{lwRYQ4A+uYceE$nLN_nVT>uopyT;2QBi| z$JFNs=d)v&ecq}-J2@ZF0)fU67QFuROjj3f!q&~>qJlL0^ih1FO%B4zT{&+ zj!_??lhN?F@Yib^^Xypa;TECYTI-W~EBAPE#^aUeV>L7(5dwszUv>M=K{Gj32q7{x zK1k>#D3G}4r;9JwSAT@du`1tq;8^M{Ey~<9WsW;l%rBON1nAl|O`W$5VbLzWYU&93 zN7xDoQ}YA(XfFVl#Vr)8{x9bBC-*l*8lDfa7lM2j&s=iYnSnzz=(`hR9$D>HC!5jW z@&TP%L}`y4?((hfwwy~*UgsP9*Clc+A9rj(l93yw;4Y@u*uQceugq9x+#BK>=nZnl z%g|@o#39xVN`C2Ui!_#t=OQBqkX9T*$A$aD($ZLxqy7zwc-`LyeLB3Mhgx_X}U!OWXp@o(HbAd%FG}WWemr}#% zur>sJmeG22(G{f;&yR^-71F7w0#RQV0Ft;Uv?{KY8s-}>=^xAk$1*q{SFe9p+&_X@ zL}?<3D`kPVw?gTCBEJf?gx4J}>!w(8X{fpA!AM52@%ZoZ)6X+5M#c%M+%QxSbdJQB z&&;EwgHFRq{Z+MRcYEaurs`M`{3k~L#hZ$<7bU`P9=+|vM$`Ym_k$d&me7#p{@Yyv zGJPiriGlPd|2PFGJA&}<(+5e(MY%APjx#&KRIv7^-ei@&0RR?KHgu24)ouJHg!W=tdQEcG#G0 z(KnmRU**JR%*n~6CcE55MxOlM_W!cB40a#7se`4*PBUp!eFfkN7|A{luT4u?cX+DV zx?Imc&Mr7N%<4orkdC;Yd=BWNptVgr)QDN9rjx#vIq>Agza{`1;TkH~`B8k)n+4c6 zZyE-b*m;%~_&_!~=u!4%f|w_!yB1*Y3r*D{-TfEh*GjIYe22D5%FB6Qwi8{DPScit zeI`AaAa9yni%#8fAlTFe$xd8_*6Bkxu+}4TrLj6vdx` z(yDo+TN@!{yea-idz!DDoo4px|2UPC8rQn(W!dU(Gk4W2=TA;APZ>P)W{z7Cp`=UR zw0{9NTnC1~XN6ooveDr|W!rN0mx)9xHwNoNKo3x5cTEbGAe5XR*iJxpp0XHyUZ5Rx z*Xi5&`3l`V7Hb^$EeQ(Pe9-ivK0_VwmJOxA|7lWq7Dj!Mk(BYvb?>`$vM|!skBRDr z(%b=n!Eo7YIo{4-u9Xm7M(qF4^%hW3c3<20AOcdNA}ye(bazNdh|qbvf(1`tI;6 ztFViGro{x&xB0&|ciG=sNv$LhsW?s@FzJU)e~zjVaJ>$qhO_J(i}8vVdUled@)ksJ zt>`aax|ItCqXx(i_5GipUx$rlsbWODK9jePIE<^8C!ql#Xxm-mh>8kMV0Qw(;ylN1 zTOOA^ENOK%t*c`go83jNCA*6^swkel$!<)%ukPJ(3Cq2z$7}9(y^N+_8CAa)YRaVxFr?)4lJrH)>L}D7S)Rb-WnI+?+%Jy=$~mA< zxxDYj0upzy;Ti zwnF-TKuuQ~7FXPV3_wPhFB9BA-&UE6dbuI8i^#NOaZ!^}XN*W_zS3g#D@tx15d)N*Kd09kZc7&a3498OPHr1+VPb;>!)B~>>q6j?ugR|`UkjW7PpDcL z7Ul(SD$hLRW#P@B#hmewl)JJ>a_of!9ee5HDhvWvECBv`DZVWfp;y22MdK5k)pa8B z_KJ)Qgd>ZpBh|$J(61m&xFv3p$q0~nlDQOc76xGC(L?te1V4g$N~^<$ew2ZH_(4}w z*>78)6)NeRcAjp7_zoBJ5RHYZJvLpY`zN9{tOE$pJMkL-9b@>u=y*D2zVuwr63~0AD&Ux3cZ>y*-P! zlNnDR(!bqH74<5A0IQV%qYw{cD(SF4zdY$n3MXGaEKR$X&O2Gwa4>w5>Tl{UC%EXf zR=L)7v4H2V_5%RRb|2ORoE&|-GfQW2k-nO>&D@P&Q_qNi3RHsbl}00JHHo*7(yfk` z(TJCm9t(t8&-kP5N}mHDqCA@zNe0!|{sQO*TohsPAQu~V>+^+-0vM0`g=p=P*A#{Bb(* z+XNp@Nt83?K&C(kIhrihuRjBkVHuu%Jd55uuDW-dc6VgY#f4|^ujo9r=)h_?~0r84&IM1r84 ziBTKsb+yR}7}*hJV(x=^pJ|$i^-TUO_BXOF-WpM0U*tLJx4D^@()l^xow{k#`FsA+ zTZSsPaT=2La48Iwt+fcsV#-_4eRMPl=K8Z4<}S5+{M2HK;{viizOM)M8k));uZz&; zSHd-ZSPONSt4foSew5}V*vQx6WqCKB_%zQ17!efxNJ-~UCkU9BZ2MHe9Vfj>)brb7 z=RA6feHROhd!Ee{$p=2VzaI(MNgDpCPYVC^ydAV0&3?TiMHoT!+!v7P1k#eMzi*n_ z%0^NfSav=+-`PahK1j%pCveU|NIwx{$1OnBdQePG7M^2Z1So0$nFm>YDC5(v72%sz z;fJ;tx^g<(9Jnd2R6AEuOqSowu10JawUvyU^1D~oPA;O7`v)pu`U0bxW8ypjPu% z9*0RtOm;Slt?SWGfn=ND`Ear@mxcw~i=AJO%t^S`AGOC`?e@?Gme+xVi(i5NOAGM% zw5+cPJYW6$J^pH}^4c^-5IpBE-21y%lb~q7|2~m2eUIJOH#895Osvyte9VM{u>Tr9^CmYUOog>SVwuoVzbq9FGj3U5eBP_1^`eL=CU$?FO5N!XORQ z@MJEF{=-CXo)K;nOWUb9t?Bdz*SSAwVZF>Bz)g0rsN5RDcU-~wemo5L?Z)VSk9A7C z8o_l<)zU%)cK389i~LW-NV$Dhc7)P}o88C2%`n$T9sx-cwmQC=u`PQyH|kHZ0Dfc* zCzR9`Y%>TS+j=I@4yo1G(IWnjtIe-TavYUsPp#ds7JZ+ zt`Xk@##}rDSH){T+AQ7(~gGn*-lsko`iBVqV&H zY_PPlN@ZhL98Gy2*_=J9ee^&K;bu*Ko9?;^XVFyCt#z9O7eqdK@(5re*I(PY9o1!D z0RTjE>^E_OKRhdD0{fiQt93VA$OQ&eL+ruVg|3ns$xvz*2N&ml%5ZKztcdYd35pyTW>rHh6Ixh6#Jh2yii8YpT+tMAG^B! z1$ff`pvtBZ8ol>xZ6NPv&r$UY0jUcKAuhHo){(bdaaK`@R^l?L;U50!2VO+AmH>rlu^q76mH=xx8E}#hi(4@=VV1{tb z+&-%|`=ZLN%U5frMl+0=53ZrTg0}tM3D2Hfl(9IF2%}-?v+-k)_i5>zH$Y9gviNxE z9@e9D=5>$}PhT+!`MB6ACF1U6egvShIsuv7c8l<1kJP#ia&uHQ`mSj-%^JS?1u44^ z?n~Jr<*^^BS~~Vw=Nf6a&L5@LZ>7y2h46~p&8sW!`J?{Y63H^l8s&Lu`{FTaDb_^s_WQB=x7MkILL;(~&@9!uVdcL68B*EGT33}{&*kd|Q zVvFIoS!+Th_Mt>|5XXI|TH?_Yoj2 z&2O6<21CGHkeBw*8?pY+C6p^`tQ34MDp>4kKkYSo-L@*>M&;9s6i7Kt?Np_C5- zP=Uu;*j;vM+uABq50Da*!YfAF8l`27er=cAa2G2hUqJoZ=IIaQe)2fbQLHNo4XEV zf@g(Pi&S~bj3on9SyEPY6+>3)OBl{4DY4LJKJO~~ZC&`9YEW**5zt*)LQWFp~FvbxjJQJ-g?F9+Yacz=7Sh-x+kiyOyVlI zt_7y)y`>p$J06%g-ayRFp|Qniz5c)(a4~?nP?D%T{kY@CaCjRbJ%YT+NweZogVaqRZFeo_({nTag^srmk>z%Mc6BOsBCSoBp`8PM$bo-pHb8&5IOwX%0U@Hhj>YbNO;V@Yg`pw0x99k4v6SC&8(|hjqcC0W0#z7fsX;Ch((YZ z9P~W|UF@nhrpN%~ju8#F_F`3sqWM9u53;`!;XxXJbWxXtu!FA3nh!K7^OscA-p)tA z`x|R~?x>CJT0@s>$L#b?_7&=-)!Ap%*HX-fPH>(X7bndpf6>$B^!PDRGmblH*lLFZA^@NA@Uiiu7KeW=fI)rWRZN>hSu;E&6+LP}1)kO+OmTNmfTp|w7 zrbpkkz^w0%QX-HM0+Z0Q@z(kMj<<25x^0`Gu0IQWvK%L|s@ZhLRGxB(3yfb6hb?`u znn!-HvpXpG^sm7n z>b*Lpk*>3N)@eh{V|3lds(mqmV>7U@J5`>lKmTV5m!v{#NlDuT_f%9yxsC=G(5P!iW15fo za$hHTmdBX~8ntvi_MnvA$?*eK@BY{X^@w%vmT)yT zTpLJoeW2Fk0yXL7Iv1zOXm>iK&i6A9P*`m`1Wtv$rHkwS>C+g6zT82m6;a}2X)J)- zCwvuo3LD=a=$mlY6Y`oY=l+B~v zi8>l>=DFyLY;qJ}jhgp>Vv)( zk=%rkRCfx-Lb~_*SV{pSQ(&m1#6_plslOGifCMpHnR_v3!2I~x^u(>F>ASgS7&Ol% zN%XH(b6<=`I&K7@V}3Te3z#MJS>h3afF#$2xo9^CfVyr-qG9R}KNC(9w_?a*6HZ;< z_Mw8c_puDHsOGsZTg$AjGEfoMt3BC7X-1}BpCy~l8uauI{=RLzo2c!og6SXZ|BAk>t8r9`isg!pit z6rK5kfc)Kz%6j!ZOgW+Pe$KRE1f1}GUR1{R1>v$x?IDgUanbXy*-u(Q!mwQIG&XTQvJEU zlGP~JgSvFrL@6AkAS0O$y-yPuC25!HjP@JrN;E_~VCx4>WzANjKb?1{SiScmpD4L+ z=)u%0^q?NydK&63WgI7?-6wYT#0f0kPCG1$wZVbdTsh8>=ZQ)ZENFcxH2%O9k4KF&-r7@Z;SH1@r%OXzNhGbS! zoth~8o&jQbKo=rhu7@fQFG_rKyb)$h@unT9epSD=^j%&6bSc}8VW*X1(q=p(`)i4w zgUIOX8Nf)jFw=_2iSpEyuD$ZsysS7f0t;ZVzBIp*`Mh@lvYqD9!e>&jquiU_b6~Jd(>-Uy#QG^7i*w>HAUM?CUJa!4{4FKIJ)mLuN5dJ59L8Hz z)yeUma5A;Vl`{>E)>BKBOq!A7i$wKuud2lInBh(>#&$w1&r>B6vJ?MTQPfF3yi$hY-2{;X9$VOhqmTA5xa=93Y7^qK?OV zz#Pl~fdAMyV^8>P?sCzi*A2!C#;y;J7kvyMq`sDOFPm97)W`dxd6UcRgUey>_eizT=5e z7}>QD;9<+RbuL~*@GsdeBM$E?s8W z8h^%S8=D62;&+9~_cnveV>kt2FxFv)Hzh}ufOgOR3-af$G(09B95j3u&l*bJa;pz-J8 z2Inmd19A%6qN4t`4f#oEzPh#dW}=m}VpFxrSsekwCzHQm^a zv!=zS?&+Vj6Y&6O2ulTsC@J*#k>c%rk4AZLsWk%!l1a4wY$~o$>1;1t->$)|c3@^c zyVqfD=~K$S&A=naWh|~XS2H3@u;4f1{#q;eYLhHQg5FVIO0iBWI{2idQLx?3YE&5a zsH^}eG~Qh%58J$JUddj9H;mw0du-;<;vViyjqS{>`q#TwP2qOJ^+tQ^K_6t`_JdAe<%=f zvd{Fv{NfKq(_h`d+ADpZ1o=#9^EH}u3j9hw0rVw6QRu*8ZD?v_p&RH`XHsiZVB==2 zE-SqPHI>>8e*S)~SIR5`-SE&|___zPKCB6nW|;_>(TpM~isI#uN_HmbzH=ps5Giom z5dgei+u!wxwe%-NbCS)k%bWEUx`Mg%%&1ok^bieuJn~x@3y6uf(rh>9KkgObbaMx! z)x52kmUs$RI^g85(0@fE(GW;6BDF-RBd(yUWkoJ}UH};F+#R>~j(S35EgRJ<$hCH!V#=V^ z16*IL+g(05%o-Q)sa>Af;(fOk^x7OuZqJvJb-a=8n#Z0tgx8#yEj3&I!r+FdvFEG= z_a-dfKj_t2?s$@mzTh*Z-Y#?j+AwJryo1fw6|J{+aPY%`kHZ&Wrbu!;}r z@8xc{^P6=V-q++mfDu5Nx^JW8nLicc#V02Fr({#KSHhZgiM2aW@u= zBapta75epfIo(n5>t*a_0ac8j=Rj9?4nA(B!DUtr#>swf>f+NM$1jKwZ_-LYpY~e| zEJ27N7A(oNB~$%oO^-8)?Mbw+BH(0>lDt{>kwt#H!%t4k51i2Xs+>Rww&BU6JDQS9u=oC+}?ePY;BTw*;tZvQ^vDkBKUy6yc zKIohh0%y`yT63@NOQ&CT5G+$le-3DkGi&@U`|S_|33 zivC`Ak>hIDa-TI#e#W6j)J|vTbkm$TSDAGLo;{%zGSJ$-YftH}C}6)WrD>Ph!y?x& z=3|e!yUxN-4pp4K+q@2A5Q4hq#&ilduPtA&GjAA1)iRvit1j{yRPuHI4EQ|!t^gA(2O}z6_{vk3 zysfLAa$C>jMm+R-(xGRnZV^7c?x-F8y4I{L=y27yI6n~Mr0=cd-C zy1aV%16-R5aZ-i5=@}d*1c=}=XzbHd747afR#_4BSAX86duTpD zqe`_5?pEUCFPIhQ&&KU6tLlai2lWrBxQw-PTg@~l*)Q&0pEe(&n%uj}5lo6!yU8Qp zLYW(z#%Aot-&)c9>MKzcp80?m%(1%ZS#EcGQvLgCJU`FU^8DS{v#W}Q`h`ZzP7KYY z+s@Cvt9C-8O1{H)=|nth6dDgjOpk^(c*yme&!)Pg%E}uKt0-FAFh;lm@hT;^Gj}eS z8dd-$fjeB=y_slREthT#LTVjhB*l1Dk|UnS$2(LGy8BQdSK@q)$(){RWXF97v0dAa z=Y42R{)&G}SV{1=hwHNi1Ba2K7s)OgNUMYj3oE{_j{!Wm2iU@mMz_fk4>gzF<2?_x z2!^jbC*|7*1yow#y4vMF75@RH@}KS-lWTW&L%#Wl^hd0kI@I;fE|ak($oY$z9pttu zgP5@wR%M12pS}JK#dv54;Cwr=>VeN81{-nZs~Fd8^s0t9op=dv&d<7kK6= zO?hM^OG3`;UX<{>p)9kV#r>vczkMd(ow()hCK2Iyp7I;wc3qzM#r~WzWY4ylZ1QQ=Wo1&IODM2^p>OQw1bS|x2>qO zK=&*fs;|#G=ja*fhQUA7WT%>|7!5J-8Rs z)geczZwu~pK-1K^SH?#ko&p922d?a_NQx)>WahBVV~t+|zemu4r5j&b_e|(rpDG_* zoD5u0Q%z;fzC=R^Y7&Iy}5alBUSbli4*| zwrL$s%6CZn%>DU&&O*{HvAfU-{8mAyA-BZDT?>5stUN)uZRTt{DV)+6D@C ztJZYayNKB^$~=%|uFWLL;D>DcD;p|q@NRDPy}vt~P21igPBa2UqQfR%n2F=??`8Jl9n_cDjpYgyFrza*# ztvJT;DW()td`|8Zrza=psjM|`l)a~|kfP_kzXfV`cM{SOjn^v}XYI9lJfIJ$>B&d2 z8&_pDa)42xL*IVkBWgC_etQxfN-`^m45LVQw^W>Z4EOR_Xv{-#R<-M{t#)@N77L9+ zbl1?7c=Nin{TA#gn*tfxoQffU5C9(Bh#Qe#$ zolEn0BnF>|YjbjP^3Kv_QYY*{>y^~xX)1EC!JQjLQ{PdPvWe(vXh2V0tlc)Jy7BK8 zv{7`4iQ%`E)zAI~Ap}fN=8|?C^r^`z%JDIO7N6-}{iPGZwno$5$F5hKa%)ngKE}U2 zongHsyKfKib^wfAEEoHu_cry;o&ygpFI@9R9Sw5anmbzswr})*$0D?0kq)gteb4Oy zNa&H>SFt{kqdMN!cc!79G^UfQ_$1cNh^`ueO zB9oMmkeGfOA0Lk*%4#(Z4WAd4;<+HUs|p*}W($BTH-zN~;*Tq4KDQI^vcvk-*uk*mU*;`1xLkrNR26en0y(gv z5Go?5Mt*-rC}f^--@?%g&H1?AbEm^<^wu`q$y7s(OwrnAUPGUJ`UC9t;D|*Cexxyv z+|>9D)i+h2*WCHO(7LrYI9_m^O5yOZy@F}_p{j1XZXCvH(RaJUeMkWHVf5-q0%Y1T zuuwIw8Gq&26wx@JMs>>-G@GE9O}L3|J&ZR8rHTr3l|PhKuZDK0s7!I&T%=1FP*69w znP5AV7EwKGFzA9G91@?_6CO~eIp9id#Ofa<`}V7=rx~Q{wzaOX4`ama?h<$$lt_F^ z+TT8-d>eP8r#uG4=G+p#9CIYH^4wg!xoLWXK7k)~_o7{RykhS#7=V75%Cq~+fITDR zDg4cl$2!S{PcVwQY%_77iBd|KQB(d z!iK+6dwOI9Hn~2pA9d61Nlu|s1$h~%MDtFVWiHx49`jkm`Fw+8y-I*We7dT|Z#K)L z+oBoVcs@}HhOJ+85?NP1uIKX|E8Z`Acu1~e;j>gkv0TY+!w;<^e6acw@O=3*yPlPAMM`lz zdHlf1IYW!k9ZhQseI(X+JCTS%-FmWyN@jDxW9bhLz&58&2$F+-ZnvQu2PWK@&v$1M z{)eU|f8$i_1YDS(dAwX~qf;J$%o}~1fvT{rg}1k_O91$jMTgQw+^0r4&#c3A7lA=l{_4JFUxx(yiDbG+%e$PeojTzz3m%z7pKC!fbVr@8c1h$6%Lt1V5Ugp4d*UES~li%Pl%bk4Yw zGnl(`ef#b`s^c@YLtU$YI{KgGQ~ls$Y#k+^R+IIUkn3YTyY-$bKqcxObyz(0%&w$j zy#!w*{zl8H9~+bUx-SMmQ&amX;E&It)1m+HbMZcG*&F0|FV*U|g9e+pf|HVRg`{l) zwQzh!jGh+&C8xES?B>MK8%G_`FqM#5;lNqHmGmZ6vyC+dpuP**faW$8CH(s1_h;hl zwxf}RrTHHYq=gFe<^EAXVwMs@GQGH8H0)r$35s5f=P#acgSaZ0!3f2#XR+1gF(Z^{ zgI?8z$K3IJAmd&<*ZiL}X=YVFmc_*6n-IF340y?{-IUm}`)R=-Qef568&rz9++p#6 zM>g<1Z34s8aenYeGFklgq5A0?Mn_6EChIiSf}dj(zcf&O_E?U25GtMdFAwb$p?$xHHz8Rt(Zcfhx8}mrPiif=8Yu_e8)lF6+bJ`w8ca!_CCo z==?W&K#TsPb(+YH%dNB`rja|uv_?XnHtW#2;e2awQ`%=%jON8^AJeZ7+F>rQ3S`=9 z#1jO#t%!7JvbH^)S~h0v?#<4`Yx+WAhZh&Fgii!~417V-zIX{fsua98@6{EA}fMr7%x)!5^UnYEw@k6F5r2gFmnq_g9rrpdeBj+4;d8hdkJ z=&GA$o|%^=vpQu>Fz18ky^>85Md02w7MY}Sk*Y7BKkEOHm2&T!Jb3=!=_j zp0RgG{BPiHEF$EHT1sKJq9rjgUZ^T}{Re90o3Z*%dR#dJ8|v$4Lch{JrIWadRzxlT z_y-hY&ME4y`9AV?+GFWe37VU|S2J`~$0CSxn<#lS`Eo+jQM_|u`RQbEpxw(e*RUr7 zX009>i>1A(rx$ys|1!n z+jJ!R9L7@5#*o2VLmsH{^%(N0na3-`X>w_}ZqoZ_Q3WXlA7_5-EoL83V)a8UmVZM{ z$#~>0?U9NR-6h7$^gc!JR4Is$7RmJ#KWAW12A`P;>r+}a@!KXOXQ{n;5c0pb{UE9E;3q=E4^y6}|` zJg=5Y{a>HNh6oefExj$D;u8%-Z6=rX=7}zL)?n17f$v(uKQwy7$2srYu*B=W9ZJ6h zeN^DS*4JRY&lV)UoARj{{5uloO1BvQ8OZ3x&dzSuKBPS8J?`c>L043ZcI4F!URm7l_EvqV>xicC9IdCB zvwz#0{JX8tr*aG1$@!XW$j83#rw(`)BU2=0iu+G=HOnWwq3gYTl6u94k2GRIVvWt(l# z*2>E*HumfCYqjSFH5XUNC{w8Eiq(TubK4A+XJCP6Tlsn0)MoL@%(>GETbIn zV9#!=#LIwdj^oukG(z`}WCIu|b6jpGJ-NAi%g9J-46y;$J!pxT_oVzjuUI`311##mF!s5(XePuxcBfgik+12w0E-49QJ??}@CjM}zZViX(<{MWau3_9l(J}30h=!N6yT*$`EIXQT1 zs=D9CQx_=F&DYK6{Ui$=RqW*QrWeBS?`lDvYOfd{oxjUlei?v3jC-E*LJP(fv}Tg4 z;G{1DZDy71&C0FBjlm8*xiQKz9d)I@;$=86kl#z+(yKA#Z`-b%d$gd952SqZq>b-0 zQ{Kw6IL9C>AV-bIYA5fstww(ajZ_K4W&pVP)(-2GR>RA(bbqye`?tYFu&4b^TFcLG zCKtRsy@(g^-^;H2Q|>g5lqLyYg^*OeIxdbjp8gHXlS zrgzVDAQt2nIl{lb(9u6OUbf&P=jAu@_cA;f@Y4=Z5G&Dc@4CECdDM0|* zb-Z0i3vnMMMbqXx~-ZlXtmu(Rq-uJ+G}s~u~oa!&A(+L zwJvdxuibRV_`#tjcQ9Dnj*;oDV|KE;kU|Jn_mFo!kB~<2^1bCRJ58z3@_q0{Rcn)> z1JlYUZc5$kgoGdON&wT~Xz{jkrS7FI9NP_h$gC{!IqjRLm z1_CiCOa6l*SpNemIzFPw2%!IrFW>D7iRbDe0|s#Qxc7>NgF5)vz*V|bjK<-pDi*Y) znzFJbG0GgY@dHe|>;N!FRId$UY{P}imwn?{@&a<q|ZPN*)@A&tM7$p`>|)J%Ut@R7m&(KS|1RcpaoC zURil#-6qMQXWlkZ*}h}w_G1@`wdH*Agjl$hXz1*+R4b^&X6u>AbP=+N$HcV-%d6Go zdV{s3%I3^cWOLUaB^t4uO=fHq;V$l+JJL2Xa4^5+kE|WZx_uvTB)g+qq2|$j~ zLMuPk0nN`Lo$25+DzUlX_u9M-Ea8RBmpsx;6X}%@f3)zA_D|axUNmqE$A0lY+Xk3! zyBM*qx{Tnokv}cNvAXdT;Yf(?_>s)qT&-z0wx(iyRK!t`zgKdY3}aEK$hMdpIewG( z>xCb~dlp2DGDA^rOaLzS`#fdkxiOcYy>L_d_wS9PWjGk(<8T1RN;r4`w}YqIa;O%f z4K}GXY?!YpNM9te=bY>gV!>9ObuMQ`?Hx=OJx4#2YPR*LaCCvre=~o2edBW)k0g3F zc|hf8n>=8HcDv_5zV|zfpbiR16`g3kVM`xHcDn-nv>tXLQ0TJvrI}ti5kA&@`ipO+ z3y<9ZVic>w#-EXkT5AL6^!8f@BD23?1bN!aH$81#*Yww8H80pxzWSWKzjt`cCH}fj zq|pPz?=srGJ4a!9xSaozYz zJp{3leV^4XpyEep@=bsspenNSX{I%dmj%_JL7V)@L-=Qv?mC9CAD0-}i)AoVUgk?< z<_lGW{z&#!6=R#&xzm>NRU*@@hrA?Q@u%xc&qh+6k#yb6d?*N!aYxtPaQ{1wQ_c!? zDp6Z6?&yABg|`S3y^OP&g~Z^=G1#YjD$R}6GW!vcgai{XA;GeF%c?PCub^U?lv zN{Hgr`#x~fI&6Ox&HuaU6FcthwXlxNYaskjXDM zen2?e2mu;jmQz9V!+KW9+0c8={Y|xKbI$jV&VS_~bN>1Iu>n;&v_P35AFpes1!%{a ztSsZ-k+%!rUy~^+wLm#;9c1I&_&A1@%&@63^m=fO%8oPaF?EKcQ?$BqNZ`;NA1f?tfE9i*50dyg+j#Wn+wbG6VnE5|wkPv4h zcpn2adWix#g_)m?qZPEzvp5V2Z-PF1&#Ogvvy*~E;Kx*>;0UA(#+<%Zd7JlCAc$1$3gae?Q9|9yPJ*0$S zv~Vl1zXSaHa^pw`DKc7FJAs8;ewsTkE+Am9aBrQ4Ey)HU!AIm2^ zN#aTrCp0i=26}0V3~IaGaP#K0-xg(mH?HGaxxza@OO$q}&w1aFJ^KEKT^-~=@RB9B zF!x{Njp{s3g+lo;J3qu&8F9cOmI1@m%K*|EP*?TKKot$RyiB6Z=4J{A)tDs4u@|nV zEYse=V9@I#bgvH#pG`pJi^WOWc6!pxzu9g;QaRpNUHViQ0 z^gXLJ7i@5(*nTu+ExavSnIpfM>f(~kOXMYvLr;5B97LIMy2KvNAEJymnBXE^(HS(7 zHE|#;k2ChgJVYF*{S;kA;ZLM$BkSu93@Lp)G2Y|y2iOI*V&t8v;f&~GaZ#%>3O&vh zaNnRizyyXUD_N>NGPBw`SmkQf=A46!^ERV`wmE}{>TKt(A2CO3G&MbFl^4xa-p1(j z-FgUxI$3~qX>ZtsGzGXf4%$4&>|9aeAKAF;*F4~^b%CDXEv z84tbhk-MtoAkTS!zbLMJ0HQi>0H1+41umd6rfxU}0b>b}G?stK3tHBK9qg$!@(vj$ zt8*qF*Drv%puIWD!j}hMhCjERt~p&u$M{}5jA>ck4sS-FBI2+1oAxDNprYx*QY(rn z86KY>9WW4(MDa4W`>ce(i3g$7b{;~n2V_;PL!3m`N$YOXi-&CZps$`q_$D?eY6%&& zHSI^2RcnaWyXqwqpKHns2~wp(U5$|^L;Z<9DL9cY1@{st8bxQs>6CORG zvg3*B>L*Dt$L+Jo#&V{-@KOt{1XI}_4=cyU7nB?%&zVlO`Bf>#E*d>741&NjZYd;f znyYwfk=}KaWW{?6d%_7e>mKo{)!yD+h_WNz0;>_82oRhfJ({N)5`)6#N##fnX9T3? zQ-Xs?_G+9;a3TnvI~b*82H=)o0|QwQ31bOAQA(sNRE#(8By0~ZY;>wIU|U)}=(kBU zbw2&H@kLr~D$cY`RJ}M>&Mc#wv%z~8%_{>C$(qP(3+SuLJ6pTIEYX`@RDkZkg|q*^ zo+&VRhm?b!C@x@d(k>}R8SRxW!+TTPEe;hK!BCR$FL}AO@vFtg6lohKJ?*4m`i*SE zc5W76jm){sHl5H1ii*fO`Ow{))3GH26#u~y?SUhXnbUr4$a=pT5Tu2olO&`nsGV=6 zr0p`}V&D^)44}IZ)mN|lRApqk>mO&Du&%TxqrVZfBVl}_rqN%Yqw&qBP2-EHY}17Y z(HL+7A~mF5=X*-_>XYZ1!5kk!rnt>{S0X|T?H>*q1@s(gP#}*$d8-f$1iwYg$hVUD z(oh zDDlr9IoajS!5sEIfUeq1>z>EPGK49FvDOGqt80FsZ6a&@s$ZN8LDoNXWI5>!|PnSqnB(xS(2btw$>?26mKw*h^ju45#^dFsbXmeO!9 zYVZtp30FGU5_|a)DaY{MY1F+<{VG zVtOty8HOOtJQR=k&(jR91CjEsZ{zpxx4`Zoc$K;V*9u)|Kj@y{Zff45?cvK1fQ3ON z_}K7&F^BH#zfk9y^8S94%b|P$7tT*KRw%B5gERw-o2Z?1O?)c_(~rw+HX*q#h;=|l z7TqVqC>oAmtqGJOGn7NqwdW5cRvXSugJi`1)aacPT{^fMAt}bcT6%igXNLVIWbJAu zhY#OjV4&eLY_9T0SXWs^?jx1pZ`MmoV+o%HTYeslks-mjm`Ssx%0IC?+I3lnzEnjk zr)b4uQ!y|+#Rwd1V8~E54Br?S7~EDP9ac-sd-XZvZ}X>T;vTb=@vMJjd+0KsU3 zeJ0in0!X~UTBm}gN*1Oxxc!>|v^Le4FZqq-;v7>Pykt0OQI3Cu0e_e0r%9GDv$Te_ zo9X7GzOmgVQ9`}jc47EfJONx(8X@{{v3t|%E*<*+*gRv#lELM>*OgfkxoIWXR-FwD z)S0hsu=&wQ!$EKW`{$zEIK#m_Y+yJ@e;cdeC>WB)Tb=Su=Cpm#sb=3_$p&; zq?nznC_(ab22ShOT)qaBGzEw?kGoEUfEIfyQ$M1yrJ` z#TVpQ+#^C74PtefS>;C~Jn{?}7@?7odB!_|ah$P3mMJ{~1wA4 zUn%0yyK?_7{c5XPKqa``XKU^~)}*DE$kMYmh~0w^Kte_q?R46aW-j31drYe?eA>W< zlo{q!8hL-Y4r61@7=+m-3MsF;;`D|v(I7<^5iqJKDE}TAe=nApyVjN1C7Bamknt*W zPPb%5R)AxaG8_d;diTjiO6QR$oINiM5s(vR((!tGT9m6NNSB2BhFh=3#uEu&*p{PB z%npxSHpTRtRpx*>V*Y=0y>(Po|JF6WNh$FlND0z$=nhHgjzc%nDJ>-((s}3*kVAKO zDIlGKfPg5S($eqtd+&XJzwx~H8T`W-jKSD@f7V`Wt~uvk3!h26_E&s|O|@M-81ECx z-eM=Qa3FC&6yR&`On&gONe%?&E+>&-6KB5AX zb-o;!9yjt`&$e$XDqQR=h9)XO*Na5f=VMb~sg{D#F|{4N!~gKF40UBYMDO#B_^J=N zfS%D}osUa?SJa-Y_rGGe$1L6011!b@aoe3iu@0Lg6h{Vy)%&fu?W|VA?CNUe_DR*F z;?THkz3T#~I$>*MQB_%A#qU43{ZGs2>2&~jghR&;#)E*=N^*d&=%p1*vDiX!}? zd17xP8^tu+B^5Mgnz4wZ_vAC!jp{u zss6Ye@|!LE9!^a8*qg36kK*4A0m)2Gj)B(Xh|z3n?yalNC^u}i@#LWkhdJj0)(gHP zdz){VjNmn7(xVc6-_Z&!l3#MTT}SyUH1k@;DzoTd#cey0=u9ycyvQq-xQ8@{!a6%$ zK#pE^)aUTNy6fF)v_jWwpvXhcT6%$?^^`@nk>n?F$uB@&;Cdpg$4rtD6NAl3<(u=aOd4 zj*Qd6?L9}+-EzrI0LQ*fLW@;9bWvdHHzk(gS)9%t7jXN!{D#O}38SiTm{<=%;Q3~F zYdWuoc*JTC0dA{Tb_;=US>6Dk6+OC7{7v^uWwCo1T&1*|J6DJk!i9u-7%GuLK zC!wO<+fBIhk76Xq`8qW#Uu*40)~hXODFKSo%=e|)*?%(a2*Pa~ZOinFMO_nXm?_Ta z#@mfe9$jsEbLa7q;qX6x#sGO|l$ohFO^Tj%q3e_7on*4--2uR3{=ZZJI?*SAm6Bl_ z$xaO#l_uhvWTEGPrgFFUIE#ZxQtlZ725@h&dfa0@{LVO9tuYN8VEpgZX3`nPLTnA| zYjR|^S3vYoqFTqu52a{Y@s-1o%_T70l{hA>>N8@f9Cu7(pmaza3@3f1Ox*5|ozR`t z@>^@p^bWudc-9*_q3vX&CGeXc#0nOs#}3DKV{LPVVAx%lG*A4ksZ=TLN{F7;2FDQ| zgr@0_Y?pCxAHt}^T$5uK_CSwUm3560bMlZgo5RxXwpMl*Lv?m`7H`n^kA-4|u+sZC z$W$RK0{N4sPZ}#zU^7E{A0wvURP0ugCb$Yk7Rp zJ+S75Cg78TJ!xDp46Nv--(RSD>t(PsrXUN<@IF?Haan(=k~6dmCLjW09oWM3PeTs$ znFa#N4J7jfA-j>D+SDYZ2IV;LR_Z?0gU1?X_vuje(P$&Bgxm|(BI$eGGX8cj6SL~b zjJejI1u*B}4F{hl$;k_lX{(tkxuMf?$2b?;F@Yrb7+#Ee4m)o4yt(im!_zWJLX~6BLu_OI}=2+B$HA1u=Vdn?3|ph z-zXj}vP2B!{t3Ay;w zHy68OZ7UT^q6YnN7>9DXw+RoaqX#;r=LM7L4{;rO6&?0oL2woIjIDtJy1>i}U0HV( zf7Vu-+X9mn=70EKL6!fZ^Jn8&5|Tk`tKj)caUYVfln~r9ii-BWzU_{R0~v$AtYTc) z;P4Ekfg$c^nVYVyKz~n+LsMs`(fnBy-Y2vzEF}drcWpQc@t&^m;`ivL=wBe1ZlZo} zNCb*#%S-XXXn_zeXB$?13)|8gvgT=m^kJ*9W#5aYe*EdC-X9k&f*|+;GTayISg25m zPrbgY9GPZV`Mw+@q2PO0GJ@b90MC!yNOt9GS(T#pKNSfCCqv0%w=STOV7o-!tY?;S zh%!kYk$St|HJW&zdyw_>M&5&7<5laR03HG+Uqp=3@*{JSxSqs3vnYtOx8s|={ysNKpmK~K&O=F1%sTg5tPNGm81^r~U z_liZt_zKQdm{cTgbxEy|U>A-eTT<|U;STUByU|N<^jI!rbN99;Vd0#B_VFs+xBmnL z7b7@$@GtbOxz#l$&3XrZm&xX!r)C-dlYQy0tL5OwUr{|D&MiU0mPQCA83xb-gRob$ z2veT|>8@`^9|5Ln3QSo+Sw$&wi0taGNY6HIKO}rAHZGiy8!R_3Wv5^M-~~p?k1SBL z{z6&gdisJgl#vY=G#I>WeKs1|u{~D~0M;G#Y88c#d+IEy6E)RxNQPCK+TAjkh_a^i zLh1kYXu)?A8UcnYGe5H0{JDk-$>ycE;1&SBW$8&#E}PRH<0J$Q8SPLCz-Y$s%`)GC z zCC-%VHX-0{_-dQ3I}!pk35f?S&<~KlgSnK-xBK6}rpmpIQ5~O{-XWaKyL-35tVu4pLV~*W zS5f$aMu!sYmd}aMq|Z^*O(i$SoZ`%eY+rmu5@UJ$B~EAX=T}ZSf@((4{TE%h9n!3X zvE!&xZKkiyvXVNMsj|~tt`p=sotzOIyt}U@U@hS+j({D&6a;LET9Jm|OQ3)@-+w-GOPbWF9=g`U0KFtnKFS)2B%Xyi4w$axdOIW9o_()X$J%G5H4 zc#s<*&h?$Bs@p8dMg^_rN@MAGmj6>%h$o3`J()N^@LMKBZnFDB^J8kp72qic`iOkR$+!xk6q8J4uk(B?_@uHZPH3eBycGPwS ze)gt*7K!pWr3s{jOL&kydcmf|`Z?H?xc*dA0dV0ELujMHqZ+o z-!C{1>i6nTPnHxEN`;L*tDJUQpsPqA6+Eg|#5s)e{|e??ELZ=pVE%A4)y4`0Cayg{ za&7MTe%2RdzJNh>H}I|brt2An0Fe}zjNNWb^#rlP2d{sf%?{_;aT|kR^8^e>q4!H> zq(xn)2n|ma=HGp2^TKp%byRp%QZI8Nn?65-7ujYOS=KGM)9;;TWEKf>7Ap+jevUSD zaJ_V`BTuMRECBT_4uWpYr~1zb9sh=RPAldoP{Q2xjT)^q>ZGb1*U^J3Ep z$o%||;jA}0-QIA6FK@2wVN0$KzK>Ph?HAUYs&uAWU!kWhw_kqdydAJDMs>`n^_GVE zeW&|h`BE>&4Y+@d!`shLNkzpjho!e~-n=viLVsiyaf&}f0}TOy0RC4rqWpxDt9Qy{ zH-(xp8!|6HE={hF!??^%r&$fUTE#?5zjl5i*MEk4p90oRK_uvgVG+nDp`qN%o7@*< z@CqTbrz4|++gjYjgQWYY5Sp^LXx2Dy;u#2?>Mh^6*THss1aZkra)kpMpFe({9jP(U zbZMA!YPh!cAm)4df_Er+VGa2Z*mH zP4JKHi>n>37!}Z^>YZBJh|#h5*0FccS_LqA%!M`S1vlL)s-|La!0BH-LTnzxIq(f{ zz^N{tlKQvx20k*H#1Lz1)q6(3lyR|P|2E&h+en%F!FdzmCYD#*i`Um{o91c*%L+~T)4>+ zO8@lC2VZb{c@cZpK@_g&-Z-(4woCYlRPSIJ-?&;;5IDo=7tRK$fTTAy6*X;w#Ni@1 zf{ni`eQW~(Pqmy@VI8b>7-?bwjjR&7LADyx84gn(%L%_Ac-nSyz&&F7eo(Ej?ydXD z)aGY=m+}t*5i#T=qb0!+etsbnj(_|vgI-#6em!VTrPm!um=2mmhP15^Uu_ai4A2kF{jWtL4yfB%wQtOm~``8`GHBkl~VGWU{3uRz(b|Ft~&q z)zjn8P&ZWqiI&`E`^&7VJ!$|My1|4P8-iB89~*ka;h@CnrO+j_5x6pSTHV~9FQ}Xr zz?GTWwk3@W0bS#3{rsUsH+xXDx5<)s?YCkt5U_LY$tWZOxP8|y+a;4M*o6hMJwpP> zo-0qn2C1K;*BP`8eoLF?J9sD1xLdWx{tUCG7+jqP%+moGxa}bc0yo@|r?ynefFilg8<7>x-mk%z1pomCODnA+n{B*XY<6y=KolC9`q^u>bF_XB4GGo(if z9=uh0F_b*+HE)Z6kpOCx)EMxHJYm)3h)_v}Tn;0Qp!=|00@cFlQVWxZywYnMYGhL5 zpQZPA;u&jKm&8IB>dvjfu$M2QS%p1}*>nQ))ukzex1dyVdE42XkHa3s00^VLei8!K z$_1qe8lXHho89iC+XzSS0Pv>AqQA}e+V%>z?zC)2(nO$0lz?Gg!Z3gyber_%vwtEghMcA)@10b};*-QJC=eq<-Q~eB7sWrZMQiFH4J2FxaW1G<1uBS!IRec0c+!*K^-6I*3JRhH zGLH68J19N{Y#CDwD;xQ!Uf%z@{Y@q&_ox*vtnRS=FsA1?vdO^SU3W7SYv*F^upkT0 zoI}|PDD>_%Y`kk+A+P?FGy@x{9z9g1CGtcjV2bUr8zk&(;Xck)ZHX7A9dCK*5H#P3 zvTrN7bRh}N{@qa6eCqumGqvD8PUqdpVe!g#!m2?9N$oIhwWU)7pP~am5`Tt7AkO8o zlX8e}@bjn@Bft4i+uL!J84xVygL%whFd z7n3b}$eSpp)|}9qQI+6bh26h0TkF3Q9RrS=tswQwxXxjtn+dQ(` zdPlS3uP%HQ)>XBzLs#5b(MArq9}RSQOfY#hv0q)yejk~xPhnz=IP>lN;YoKXI@|o( z$LF{p)t(S3aPh`sg8MlooOJOmTQw4}6-tw^)P@AiVm~3;^y6|J9)?6f*&N1u6tBCAK;i5`c;-MSAPw%3(l=8^-8%{J!=Vx>hU` zEXtXdAXcVK2jjiuP*Esc!XBo8mk6J(Lq*0wRg?oJrKCuM7u~;pl%+MP3D@vi-|YKs zP$$+dXrKBvp!z1PC0qE}iLWL-Hjuwz;$Y`rdGp9*9{l|wJ=5p}m<{>BY2eK7@3}hA zlAT?2pRR*N}fC#usshdk(E<`CBni0Y^O2T@LP6iv%Csm!U7lMuyCO=wTn5jGG19*31CAAMmy1t^nugvpp zj@6aCJS4kl#0gTv_;K+3t&rv06JeW*Dhr;zdSwo+{~uUgzsXE_k}95s{YDK#bD z26mW|)o3s!bufgQSPOy_3aPb04NK?q7#?QU5k4PvQ+?R@Hqv zr{(jl3WWJzR-YQk%mojIEFOEIXS)b)jDeR`+uZlR)DVnOxKAqGqetBA-6y-I9y^bE zlcrtBfJuGtTnVZ|coPBn0qb2zYmrw2G*LWg$;7XpnJ9?qHIXEmMFl|$iTNN3^0X92 zgf3G`Q`fb==Vj3DO&Da&83Ty;;$b8Xhb^W$*vtFmTFXz(@s-jocU&P>+Y!Q(#Kj*I zCe+C#&*BETh2q|1N*&d=u6(=>jp;-@KlFhBhxh9@PAz-A!&^Q_1pmPXY>X6oR@2PX z)CkQ555*1F4N<8c=Wk7{0Aq?rttRfY%7!U@+6a;1#EjHJki+Fl(8@gvpk;0NC(Ht; zsh?O#)P|atn!2*l;00e95P0y-O7j@bv@xuo4C$-0ptpb`MyeF0t_<@ZdRFdx$slOv z5vxTpDXv`cOkj4DM!a(%Y{?uY77G900+tIw@nsX+&B~+8slQ(znyhU1Qy#70xAh82 zB`-Qv5ex%4Vvt&B)vLa`SuDqH_~0PF%u3=x1Mw8q@b2}#SAHYk!BC>jdQ$YnxnVUI zc!|WB6ZmrYz*YWB2}*I=r;DC>o+g*~ad8($zPJz@G1u0lA>*%^qg2EHDs>=&@>Mic z6Lr0vvrrC9bjAq0=xps)19x4;y3pHVPy=~zvx`XXzPP)A6@Jfy#nK3Xl{mvi-3Z+* zhWt@*^b3}yw+?$fLAkxXEFBvq$UuZd1PQrDUsGpyvD49tNY$3Skg)c8e}tUnzha%! z`M+Xfvpj|Oluv>ECC?w86Wu%<=_Iw8J4l6Pb`WY075jsOiSSSP?qwMmq0gQIReLYi zOIuDpeLDst9SFL9gdXtF$L#d>h@w_yQcswtigFr0SGWg7bmG5!8G(WLB_|8b6^i`} z7XP{FBMc&VJR`L-DN>}I0v>MIaAJM|2lD5FDfc!K04q$wX*Caq6$k)oHpox}AJwSo zeZ2oDnzjeM+X|ZbAPIMwjWV({>m6FOzG{A6PWO8P!Etf<*wBd^ucxu!q z(PL7*9=OD`$EY+oCbvERyy$EH{pR~9De>Q_v$fY-sW{o&pBp}bl)&ie>q#|zFhf!$ zsDqp2cla+3`JtnM+tnf!pEWWHp0u2O`sNbUfZ6$5n0LU@l5Lf~bw4UM0RXA^4-0O$c6j=$-N(hK3Tm z-zB22`u};h^tseKXS+ggDlgx}{O%tSQ#&%U5x8l)T)zG?vDZly8~raB`fpU4%YhNW zgOosL>16USu-TZGY>^4DR9H4OX2jfp%Fy|`w#l*(5B#3 zye^)c+FubQTA@7>`M;-&SZTQ6VUYX;6hL2Nfi?L;Hf5+XQleJ#<<R`_kW*{EFl;jl+@IZNs$_- zr{uisZq_X{f`e&s09OYgGF%k3g>$U1g1KSC>=(H2Gqa#CqLJ}z3wDRce_M(jz?sEj z$SHXK4DIXNF4Yw&WvmOlg*YPt7J6Kyk;nS2DIw6s<^(Na~&rxf4x_{_0^Xsu15ND|NEaYlJk{l8r#G3>RDf+Z?!{pEBD>j zL>1T52LXQGg{%Uz+DbQ_@RC4?{SJ1pE)=r@bYKolGw3o?2<02%+$ly!;M(h z0EUhTmW*}M%I`|2SxZ&Y4?}9`f$d^$Zhn`AoG#(6kF)a)pIbA|_kfvS#@XfNV=Fg} zBBe}j-=aOA6qD=xor^LFm9eMPPu1&6ZI48g^OXYSMJcc*aydrZ{S5p5P zk;Qg7w_LmKc4_1_v%6H?x`VRnT>#@Vb{S!{M)3LB4L!cmUUqp<{?K*tNX*3O{m3x5 z$Gmo+A8mtX*oi&-UH+t4f`^eOW%5)e1PKy`St%|hMIey}63?hmu*Ehv$aq&;?AbHx zSCZs}^-6~e9YOIqPc?({Z3WGwK8;!F{>5Vp7U&H+y09u05V7_VE0a?iLkb!SPjxhC zm1r$?61P<@#6#WPWhM*W*ySJxW96~wly!U~uH^u!ilW6#o2>s`>kaTD@@qG1W!vs& zG$89%XepC=(({KP@U3Afq+Wj!iL^1#kk+XB!lFdOe-E{>+SjDhGe7@-JbO%A<%moS zz+sS3;^O=~WteWmwlZZ}!Tzy0BX~J<2uD3|mvV+f=4|GiJ~Kk;Jr|Y~1o)argz?qV za^Tx>Py~iJK2oBk9&9)$NU2Nhw;@8_7C~S;ZKavm1l~?qwwea@)M64f_)n!Wd64Yj z1xYTP?i(mub=(8GA!~MA=D(`8A|Fm$831rb+8l);{>z#-=SBHKI;+3gbv%}58}B7* zBoIUa?t?|O&As5ePu>h-7+O5MjL2%9)?8UBm?<@0^e#tYD{+pJW@$qq0ZhTxAobU` zL^)c*XgMh^!O;kDak-Dr6I(aIL^dErjbeKM)p|REK^!YBL1mDo-mf}{^cqu9ABHg! z!?fniLRiZpU#M(@oEq}6Cqp_pIyWP&h^L7&ipMP6bDL@ zlL0z8_&#T8kCTZUd|bU-eHKcNCQ3NdCI(8v8iKGmge5c5ZmzFi8t%jMA3N5fUwP*k zhe|P?=)1MNikle55f$ugWs#;K`>^Bd;}9&OLAr7Nw-0}W_G(Bf6`niohmx_h(P!$Wbvg?06^<B1$*H#8Re0+Ob|?h$`|s-v5(H@-em z{ZFq>_wfP)DSP_XX%(U7wYo2J>^@8v!A)TFsI(As94g@&jsacszsD!rAN5t$&m;Hp zXIk1jvxAzYv|K;^({iyke{dAQkI1d@u0s36js=d6ywSghw^bwf753|}^dMPeLdedS zJ0H__A#thDT*m3h@xxwX3z?Ob`!;e-4QmXy z-yg?MZGAlORC#{nXXb$?uQc2q8hGsGFusqUm6a701}imuo1&d-z}AXzE!AXdAFdC@ z3ENj=B*T3#5ofNKdLWRfW;2o7*}mc>iBE;4s6Z9QAsGdk=K2-csxLu^)j!`Ps`|_A z;>62JZ!Wjfym<4NLT?~0qVhwo&fm;Wxa?Np!8p-*pW<_bEX3CtB375bT^6tXt~Alp$wlm&L!qNZp*+j4lJ-u!U0V}k$9MVPqDSbJ zJx{~7uxC`hrX{ z(fLZq8tLx)4JtB)@DueJwMSc-0oU)@J3~OWFu)>62p-RY?;a&pSbx>Ga){!4dC2@M z8jOoRO-#Hnae@d&S~&trL=8)ZN^!BW{k&8rfFy^HabgZHN6iV1J=^Px140!@dx~Ub_5`7r?ER3=b*O-+~sPg3w_RAQwUy3u_AH z=#w>yRn(=1Z{=x}Vd4pIf?hfQ1-P7ZHgUCJu*KT+4tw&V^w^ph*|#MtUfx}K#~c44 z;x|I6UcIzlZTr;~W@7U7YagTHXa(Q+2 z!vxWA)t)z9bA_;~Z6)4h>hxQOLCk*YM0r-$DX(vJ4%3-(_*4-JU!Aw@&eo`k4etaA z)qcCtiq|WB3aGO=MAhIgTytqQ)Dyi>|5{=upP|Cbkd=v!&fV%zwVoQH-mjrRlSemN z@>A+lVyZh+V#Gq+^3sxOVWbRQog~L62J~0MALmVDIJKW-=Z}7CS#lpdq4SJsJDx~= z_Xq%TTYe2&da~%&5Y#R4AJ}ZyL~}&N^a~GIReqMSZrqyILo^rOUh6y9V-dp-O_f$!r88es?Gt zy%l@j7OpDlFR7RbWTbeOL;I3oSQ5)0NLX4oEHotW6X>O8DtF_F=$%PqHB(woxO=sR z2T{cXGZQ9f;Zxw3m~TTN`q0W}iO9>Hz zZ$&CG6EH#@6&cnksS6S!U<$7>A@HFM!wGu@+EG0wfHEMsJ1@$RH|h6CL@a?F{$!=1 zQ*El;gm`la*RrhT2V$W(XWoojnHt*}xAPS=@JuUSxxBiPJHZwM3Wu63SaJv>L^|&* z=fCRPA{xc`38@Oisc7|Ki%mHZ3_p)cEETEa0|PPS(+ga+@*gqZg&N*xOfn%X97Qn@ z8=tdawO$h6ni4MH7Z*DW?%_0vK|%N6j~SH-TMGJ(FLtX^X#)F3y>V?GIAZaICNU3N zy*UIe`NWo*N}3vvDB_XN_3#^YXl3K{OR!B)&xU)R&SofUw>Dpmq zuaa~mGedP7<4upXYv&J^D|frK??1GX$EqL3e{AOTs+dgrjA?1VKD~eV!}iFvzU|8; zStM|!}OVz^^=Pm_Pj$fM#sVJT3r|K z{n{VAOjn<05=B)K0<6B@%$r<+)z zbOjJ($B`rnCN05O=~rs}+Ru`hZHan5DwscA6WH!V>AntYA_HoQKBT30@-)6%3i6nE z@sn_PDR*3d3HL}3-#V#4GJe^or;J|T2Nk&0OPc6(xE&o|!Uzax)-@c1bG z>-vh(@sCG$Ec9rIHa+Brer!{8YeA-ACn?jqH+ zRNBXj7C8wS8Fh|Pgh)vB#l>UsDVl({y!S+# zoKb;18BmgF1dJ`q%}CXD!{kalGa?jhg9uU^ScRTqfgkTLO=ULVzEDb`%qc^%1i#Qy zSta+yzM77EyeaHyd!wkbb)a&p2?P!?PapYL<0k@PKe5Gjj=;e%iHf4DJoPBAT75ku zQ+2Jz((>=%HTy$dzmw9z2dqc5XmzLj@bzK8K0$ZtdhN7RBx5oL7j@&nzrgwc1r=Px z9q6M|OOze54{1`C06e$qH{=*#LH$+S*AO8~Ps+J7 zYiasg9j+EMHk%M=g{n3|s}9hz$jflg7~BoB)zxbM3%E4Hd;T}2Gb)?|qk*N)2 zB6$+`b|iS<0&d4cr$itFZl`z^DpnFpS}%u%B=GQ)*ec1b5RxeO*+rA1DxF)4G_0l& z{A93>b?I%N%9pne;uzx!Kwe}gMmT=O=&<#hNpnNO-d)uon<%ypsi4PPyV*577O$>i z(*PA^6aTPZ2QLhpRkF{z{`Bo7b+)@I>o8cq^%4q5S@@v9W=sqEo%3|{qZoS@b~cC% zHkLzFMQFB+2@RY*Tz|&~gcR}UmMa6MZNYic8 zy9?Vy%Yf(pI!@jXaX%^imoIw`?){Qi$zAelc2<;@FcZTRX(AtCWqfqaCN76uv~M;B zvEA=3%)jux*Gl)_%ntWf4cH#oR%^n4_`Se9Q~N!w^&cR~Ij|dxJ^ZWh!)=tDw=sR% zsiDTnRH3{*G9{H7mL4cd>eY=L6EDOmOWmL8(H{p7LX zVeID9ZLCwrb&}37_GC}x@F4ZcDZCNJWb!3#qzbl(L#l5NNSvX-!{{8#D+-3|o?4Ak zAy1QrVr;H+mz}UF0mAW2v2sXCQS5qpS8abzGJ~od&F+iIk^0kKuvsen{*J#Em$G(c zo$~r6od5Fn1POV&R#eRP_46wOfHNQwjp_9F{Anj(U|d^uqu_P1gCc|kd{=(pYH@k) z5WdZ;qpPfeB(c`OB63bG?zP_aE#*)2<4&>B&+K>N7Q1JYG1B=Y(V3|Z2X{ka?ZDa$ z5%NCkJ|Oa^!`MrD-zXZpdxhg(HnLW|!86Zu^AXJj;Zypo@6Ldt)jZI7%R7J1P%_KDR&`;7P zQA+@IH9d6vOlmcrehZfU&wVPh#xHl0E-D>0jPLH;T37hd(s#&Oi{4dCN$DrUwFL-L zrwbIM;%pU(Y%*M=v6kv+rsP-%Q&JIkxt`stok<1w;>gqbR7gbd=Se6&vJ>4ahvAz% zM)yND`n$PAnBuyGKq%2F#CX5DnBbc-?)lM4z^US=C>5K20Be}n#3Ri&g$4j1;%QL; z5Er{Sq4IB46-kCqZg?lhiafjHn|w-rcZUdeV5Hy_LWj<3T$v?fW+^4&?PsK)JKZfK z!cwChlh^0yPQti2=8byC<=QNO$m!Cm?`@Zkm7j-t$BK}<*FbLK6JUL6`N`iJ!8tI{ zhqiJ2Dlh_7jghc!A$!Za2q#7|g$zGB27{87IWv|v^XFKp6^4RX$<&iZ@p>j8_~JAT zDI%gJPZ%kE#X@>JNU2cYspB}AC_CWI7mxrz?md!4r^PB8@V6u>V;-?F#)Bx8%k;hs zM6MNlfh)vC=xP>OiPh=`j zg8Tm0v6mZ@E!(?EDGbt4lyGAbsk}xRadG6a;!;xhG@!P~_opYma<3{n_fiMJYI0GC z8o0k`P(Z!YyY88NrwNO{{Jss^#qB^jM1SuPmnO$ z4#69AB0TS=ya~m6omHWsnE7PT1r<{{N{)sSDWlANBdyP{rD}|KSE^9psA1}=btn+a zqQHBasQb64;)HIfgbgwk0B*>}I8*ydjA2?a%ys?Dl3Rm9n`uNGHJF3cwWv{lEn!1| zkNS<_Wq_OCjnr2jzpsLiKAP|fH1x2SqRRwgsC;>&!Ur0al0Da;8?9BvaBVESv2?SA zCb*SmEuDh$q9F$ovP`xW2fiqBunYjed@6`A?8%;A2e@f3)m;sZRPXz{e$@X?VsJ4v zz4*{`MPX~qq2m}(={dMpv)(X!!d&l*Kh&QCpyBuz{O@A$49ma8U;x-=>zaC=;is~P z^`)Z@ZE4&=e-deN3OQdD{l8F?%)s9l zLX9Z}ojapz1!h)_nRy_+z}Q16@) z`K4W-bI5r~LuHW9bpOszuBZ-Y z@k{^(Qv&Mj>V}LIN!XrybNe6+8@|At1Z;eC$FTcnTS7?d=zl3 zcd`=naBqzUEOpNd?aYi}Z_=lFWah9qnap&%9T!^ua5ORTxb~HNbE!2(j!hHk>uo3c z_DolqzsqxNKHzwN%NQ9D*r+&N<+uFVxm-DwPljAW_oO?9lj6UFsAEV1ysotrN*HV9 zc4byu*szx(f`AwEFiHePOxK07RyxzdBlyGm;%Y+Y{C~MA2z7sZHtsTPA32KD?+&oxPsFQ_wa(RRRhCc9G z&8+H@%7P{VLQNPO{%OsyOO1t4M2kcVu1$-Y{<6+-NR5#oevoFZ#&SvDo|~xTBB1Ei zReHqPWC^l(uHN~9@l6lPh!>-&V-R(~1hAJu=4=RqxsfzJO552$c-`;Jse7_SCIXlY9 z2@z|z|e@R89*P9zq&vF1lMTQu*U&YfbkPly~=U zHyMhb5H?sYO+{X5U*?eyzdb28@p_nACi+)Zk;zOys(ViHs&(IrE5ooWZ^+%R0Gy>T zjnoqek-&Ntx?otP$u{_t^I#$yt*?3qk~pnTiA;5MTw>KHmK=y@ksHUj5yOZ{b#3%M z; z)}#6bv99~;O(Os9qge9(UVrMaJY^l4w3O!z^STU;{ z0+!h@_ZL7{f*W?G^=C>?iL!lrPyCjbvy5-=u)Dq6oL1i)q$D)hCRCrUSs+2Bc}Ve) zZyupX)2T8`>qDng)X{)2aVUbW(uOAqhmHlRB-SBzk$#K)I8YxY5B-ci7yuqpIDPE8 zhV#@#a$~CKb>g`z*lcb@mRIO%7u?X`C+z__t91vJ6rYIggp9IH9h!YeKp*KT|y;nG=WhXWjU!pmkNc`fW-lxgrc?#z)9RD$>9{k365Z?X* z71YqK?m-hm%}MKukcXFyC*$hx#z#m$4%s^%!mCAeuMCSjL9Gk&-=X=><8t>*tbVgD z-B|^^bd^a;o_Pj@xb2Yhmq?k9k)g!KEmYLffknS~w+;C=DAjy4^KDubwtn;ye)FR2 z7SXdwux8WqS!=a6NS&3eKf2;((&i_)nc085j4ZWCYi^_QARW*p$}RK}%JwT_)RLBR za(dO(p891cub!)j5E%-x6v6hy3DM^=)8EkTNO}TX6$RdYYB$)9dz<6QK=J%}cWbg{ zhW&7C5Cnn*k`JJsBrGjXBlAq0fUyt)!y0rcn35CDr7XJ+k&)655-%gwxaE&fSy+OmdfFNkutK>v!I!1rv0B56?3 zYS13m0BIHZWRQR6(J5MLvebKuhbML3zv(Yk2cegqcTz>CMy^!Wb9VUJPmW)Kly*_;i@WD~zdGxQz;3BR!%4mOHKBo!KBGWs6Bw$jUm># zK}<{P${X1TqV(-S@lKPGpqx)qN=h>43%x^H1N}TRky{9d_N;B}!20oBt{#Lk4-<2v zv^dviL3(Qe_Vka@Ct{_KI$C<+AzG>B!(CcK#57!KL2_C5Kg*c7uP2_p{d_jJ-o%ef zV8l*Zmp>gT%;Y9$lNhcr;mY!K*Tz1mKUzHE-2N10xjk^US0Q$P+u7(+T=mG5eovt3 zmjI|tCNQdD*@hKDpXhAPGZQL$SMu6cy0fKK8(xdwXOs=QNB5RU6be_TPsFG+m%Nbo z(tI5QF6k&A`X{SYB!cvD1ZPfRFIQ{TR-3Wt6M!-ldXp~yM@A*ndNK8UdwZIaX}Zfusn}FpaoR2D$LPQoqN@PmqR|C=>w%@wZUSAh(>a1=rEM;YISN6{~j#b&mjR|;Qh}HhYNvX`TG)1Zn%@*`j)J>>NlxD zl3`xwa92l=;6kxxfYKP^J_YetPKObRc$qhO+EyeBcw@Fd{!JE9)V7+)MgN zKKT(A9NBqweBe$!Ot{%X=GlgKiigaHJYz@<}>B5!miZi>IVajhvQ>2G}tbk=S;yKU{1QGGQtHxkl;iZG%lL zECE)D$09@!yu#$;)*Ow~k<_E_w>M^+fJ^eppYj)4K!Q7+#9f5LGKJPCOFnocnqS)9 z40ZRJ&C2yLlz_?wTZ<%U1&APJmApEf_->dcV*4(e-{{|Fh<}<*P`42oS9>EaX%uRq z(DlL_A@_yzbrI^eNqO9+;v}hfGWvApS;?PYoJ~*iA_Lu9;p`jSZ%X9~U(arA87jPi zpvnQL1<-|ehYN~kQ(q#UL4e5z5-k|?7KE!Y%#u!BgOLUd77-!FuyS2 z!Vw4kG%D**I{h%AVx{sF-VRCc$3Qs@WFxK0@G?ggM@N6w7g^rB8SK>$PW4$H0xg5F zcptHVQdg>7;Q=!@& zJgY<5kZ6LPk*HrHb>Vg0X#}di00FO{fZrPIw+3aYkrD7Y)E`=^bsJ(|9-KDH+^FP-&E&nR z%C$(s88YJJctu{WvIq&#QU<&f6_=R$o}Ib8;8OAg7t8b0UZ2%;SN=98Z3z!Ke&D3P zldGB@?(Wp5CLlB-?-P}f0iywIJI{)hX<^KtnLB3N<;C1N4o737AnnF%vdVH}DRx5n z(62Y^N4!@7i86eY_(5}|fx^=fs9FoeAkf3WfZ&A^NWe$9j=YDNv!H~vWpo)KNqcl@ zBc108F}0aZ{yxT?o@*Ee?i00y-nHBHLTSeJwcxBn#`~?q*7KDx^Y@m=-PV6?H7_CO zD?yQC1SV2>Nm8#<2d`r!^28rLg_@;{_6>uxFgAQP3Jivm-^vPy!Cj@+(aJwkZX)yM zA2npNIMZ$(ZEfY{_smR66~q2!fQdDidwOB2qGV2m(rX<6*5~*`zeJ(2)T7r9P;ok1vnYM00mi zYZ58*S{_drxw4jNq}^6_h~SyJ<(V7^9Y|tjpA8V(D@BX?R)l#8 zUw&+s11G`$HLl@fm{7aJWArLYzel`swmUx%5LQkZ5s3{9Zk=klqNHLKB2&g#axoi9 zZMqP2+fvFAEVti#BV}V7)kIrBHR#G>tH`1Wef}RWfOm_Scy}MeUAEQ=-ixzi+1t=|2ytqT5Xn^3s z1EshX3l7EIogiO$-gm#>zRuo1&X04Q@h7acNY>Ob?=i+b=NR90z7WxT!jJgKb4qI~ zU96p4msZVPEJE_>lqsmhNZuhz0J?T_vD^W}tPl`-N~?n;Cj=Xw%~&AUf<`*dm2@On zL+*^@{es&c)heK+I~kx`jVDJ^u4OZ5(r{G^90 zbW&r61=2%{Y+U9J&=S%uSX3O-;A2m{7KaZ_3i2m@KhF?BU@sOUTk??DiC6@>g zJ32;Sf5wvjD*Y2B9Do&KX7FS`rSLA)rbeagjQb_g#}~9os`{kqt;LBkDizgf29v`+&{^Gc+~mR{_i?hL zVvg-iQ>Jvz3Bkl=gMUXzwf(_uCHd}Ult+L4)p}cKQ<$x|SotrWu}xZHpne?}EwDKF z)paQ9zFmgoR2nAK%#Lr%%0^9|Q{c~(_ifF`=&Ef?w0@bpJaf8VZTswxOnAM$;eF+J z7`x3wwgpwTmqpThWpnSitmy%KS-sLRj#5G>Sn%OkGh5L*qsn&4?PrP0ftC2(2r}bxh&!*LVFv z^eQsE0OE*ToHFbV!U{kw694{u`s-S+mK4+Hy{Hq6B znzCR>CK1ll@O3v4{!|KT>gQX#G+T#cxlAOe*gRPS##)a?GQkKhGA{#?o#rtAzp{SQ zs(kq-Eo*-jWjF3cohEZ-R$4~=z@X1_ zs5t7*ZiT?^Zys((no1qcGk&@;xh@S2ZcU%%-+Q`qJE5n-a?} zV|d{DkK7}dFg|;A-202{IlXLnx?h3##)8lSqAP*Jo7hd>2TFkZzwS?>0HdKY0`Pym zoDl(b$Q?GHBqmsAixhP#H&68{ms5=r3JI3<5osrXjOyomV*6YtXH>)#2w1ErNDld;Pch$M}uVGTR82-1UhxVy~K2@u|!Bh_$ zAT8*_R>}-vmT>nR0z;_WRA99o#W@1MDj(*I9QyiS{N!I%I5Z3!9fG#V2_??{q$8%p zJswgd{}_Olf_D#1VFw2onAaq^r}c=b`KG*edMeYpn;&N4H(T5Xu+119CBkX~Doo0+ zFFwkX(B0SABe}#P7Q?mO5N16YfGiPefiyCPzz`CLT5$aqYXF8T=h7^j_!gZ`W}xxy zOjTK>BQ^tiUff%pT67%Q8cpkm6RRnGN05! z^F1H6f0Pyy_J*AhC(RtKdybPmA?QA<${eREmia&C2B1*vxp1#U5rgG!hwKuej-*EKw+rR7+2ek>71K zbIwud1dIdmz9JVoY-|*TFLVvYwxSg~2F#4PZN{#eY|I7EM`6^1cVV+?(?_KI=x?=N z`1YNgD(uoh?k~}t58nO({3cuP)OOcKVL_cN5`O28?R?U!$2~TK$j`8#^ttSzE)nH{8NOT9io|TxVh9_CGf1 z`}iWMp;lObIj+VFPegZXYd)#ZZ2yG1t1QtK75w-8`s44?;lV0+5b?|3CL=|QcNN1u zrrE{Fd~TwNk)S}>&5YKwEb7IE0#&i|n5YAF$)kB_VEvEl+ph6|)|v7tQ{E?lV_qjC zmrX)Q-|fi&&|wy8h>G;E5=Xyd=_y`O3g|N)vvZWi=&WNm?D$nA?19l zoL%(C9_k>%OHWU4N(*QjxE#(6fgyTw8qOxvE7sv*a4FwSwjg`DeM7T_%Dto;-KERB zjQh1BCNO9nCNVo%*9Hdf#t<6&Y|5yWoA?FlO*PF`NYva^E!|&?z#-Qpfc6NZDXBW& zjyIQSGV8h_xq2Wx&D zYe+AdqI+Sz_9cfBjF+N-=xtu&Cx)B5fj2;RVd|#6u}JQgEAxSGb}P*5(2u{1QH9C_ zCh*t`&!@lqDGl7++1W94-;Cz$go&TtG&{pK#xCL{6E)Tc)fUH*fw}G6!8un9U1pt4ZdF zKggU+9-fQ4K}zC6o@ITm6l*?SG$;5~#09yTj3)uexZ(|c;})a&VLZ#*l8&c()(ZW( z7^t*!2mQ$fW0GV-eKWLAKj)F#;_0$$Dq>-k=l&bkZ1a0VIj_~E(I$H`E`~GBJ?^mc z@w9{dg39IPy+su8>dNmm$21iq6z${no)gUX`mSP}N`AnG1r^Rs&N{aY1TDgK>MZ)Z`cl8_@kXoUW^jj}l6mxvR?A@+U)4$Cx<+Bhy zl_Ty)`E<8hK8j{O_%f6D%d3=tI`Hnj&$CRAAy|2vt8MG$cJ3n(y$r4b+Nqi?{|>nK zrIJR zHd@fb!v(im*jj|zg2!^{K;TUje&uR1Qy{9)f**qAex=H}w}+CIRXppVFmF9w16TuA4i^Y}qUOlL4D&=N@dmN?6ai8Xn6yc<{P{vM0}b z?35EO+*g4g)>a?dUVHBq9XJ>QALJ`S9<-WHjO)&&geH%}m6g$RiLuvo=vtYdMP|B= z)mr4I8{@0=@SzgZ2T8r8V+f{09)gIiKtx0W$eu4!J&}T{C&R?>OCFuaFVItX&12%{Atqk%hV`ULC1ik^wK)cSuc~Sa!fA?o$^l$ zrMsGKV4cfXUM7KFlXdly57Uc(;aGNT7IjEtUQE5F!irr`3U6fsvq+;!-Ys#pf z8BY-}mvi5uV~`x51{{y|Sz5bos`3Fh`UR%m$Csz_)x8;SRXlkpYkR)3DCXNy%WF}W z5!3g%75Bx`@AxP}({!>Mh4G9|k{nfvY{3Z`K`5DD5{JQ-^6Iy#&@OA+6zWCR2Od$r z>rtHkrH9c5h9RsF>d8$tKxlfuLVx)8>OFT( zPzHG5+Nf*PT^M71(AA9_8j-)r=m?o5ZMNs7l{Qh;+=g!EV(Gmy*->>UmkU~xP~RbA z)VcwL?2l)hwG*v#DYmO`a)dnt{z${K(l{tWwHqAvh#PwXwP77tqvgx3h}rI2Q+};6 z9=al}c%tNf;RnFbVX%jmd(1TZ!kdiL*7=^}$xT|pZS7+!^9vWyDV*8{wQW>|){6z_ zxyMyRWc)H6o0?|-zCeLa;(Rhhth~tH8V>L}_MyWGEq!06ayijVz zt8sgXMc|z350leiCaqMhn~cBWsxBD7+A`69d!{mwQXV;*>2==h0YIa}emgm8P7gY~ zEF2}oTx@YNyx+qf*wnLI-yR?l+rI|l!(|Pz-%7{E{r&TY*3KCyr+5GJbu@>NX(S;$ zsH&XrT_p^f5&5aLEXOmgyO)ph#Xub68xjo|B|x8Xc~t(z69Q@vk;CAULd~!3N~d)i zDY>sp{ozp8-gj!E$@DWRNE-&ke=WrhKY$JvZ~g>^)#U?5+=#>RA%N z7A=2Qhj8*y*N+ka{M|91!)<5+5E%zGF<(-S7#J5_sTz%#Wf#-Tj}$En1j$>#GOOJ2LTGek(#%$7$K$R-h)?EY z;Z`M+c0<2Ydq8eQF{x((8v>2gE*NWWfb{Q%WEHe^^B(*rQAD|4Ns~03((PY8gXGJtO#gI=s^~Y z-thuk!tYY&)q)IK3(Z2d>Ie7t6{|#e$f`1D$I2V|L#+`t2urDC*}HUk%L#OG zFqhw_`!<2({w*k|blnj?uw)$2XuN3OkipJ40Z=Om7Uu{FQyi~Prdc%fy^5pAbNh?T zw@V|`tOmyqDtkC=K|IMgX=7b%yE5!2zdip(tN+EU*?%+SfZZVDiC7c1?9hOLkj3wb zuc6z$y%Z|d-`&l_4E)bIKQEb+4vcOhiNWlcgUU^fx_TcHYlD6i8J`} z>%1$Gj4SUGxRHaDDw4w}zq>xK&n->aOUtq`z*ED!SRM#0h@V=sZ_c=2!#-8w_w2Uy zm~fsadwsEUym33$DUq5Ul~FTY7R;BIb#P@sKu2D zYLW#NYrCw9=XL@SkuMW67E=OFRR$>qQ30Vd^*oYp zHVODFQP1Jt_6t$OyJcEkVixlI+V&HF$jH&&FOFN9oX35GTm-p}=rWTm;$stG7{t=P zd1FTxa@!^WJEO%WqQ^pI>@y^iiK7=tG^{6U1)wVgq2oGqanmdCVLjUgRVIyMZ4>|0 zE@3oEjZ_FL2hN#VErb&aq?>0EsDm|HxK0X#1@oQSZ0GbC{q0(9Z6NXE4MwA_{Pq)K z(U*)y(5o;rS=2vxX@Wf3+0CB25)v$SkvpxsYor^c!J$`A@KFF-3X`7+Ra(uSeXJ1m zsr<;hJs21@a;EoHN=M7;UB*ZiUni;o?DIvvEgwA4Ni7-V_rhfw0O)U{oX9R8b{?D6 z5-~;jvVaJKQ`a%;!BZ+HsVJ$evYaTHo!lVT%1y_kORVy@3L>cSZM}FvpI8^_L%Wjn z2_HjYsflX=Et$q_R2Sky7~Lml$dCEn`x#tWq^$X))0z1Z-_XAK%$(3SjJo#ob&Xdb z31YkmyvdAQOsz@K`7OB=Ax!ML(UgL(dq-rpd{fq%+2Qn6j5BZh>c{#%-9j0vITY%{ zs|Bi!EnW|s5Cz`8PmcUR>}}G9NMinY*#io^*_(1F)kmpNS#!Id4Bj1DoSc25OH5xn zA4KWihvw=dnr2q4u4i81Q22~rqh|P?>({8tC+9nwg`f+;%djk<>DK4t^UyGwg|8L) zG{{5)RI7BFHpRoGFxH$-pYwz5EoP!Rw4ze+T?af>UE}r=Q;vin_=Nhw>tVP^6E69I zucz1-j?^FXR@?DCQd$0+UBy=MjM%~S{pj#p#}CcEIRFKc5BRM4_hbI?^w{x?Z=^vu z?x5jn#twap*BL|b088gZsK@bY*n-ci9jxxRHT+p3lcO9=$_j;;Sy{*#kl2c6^#UnP zOTsfF)Uv9b`dTKsnwmO}iTZiVg28|{LCVa%=(|ammiX&QyGkreXL06lvX2c44*V39x>S<0Eu$q;#O^-HJD``Vuk8waBt z3bUXqm+tzy(~JPV2@NGL8|vZrh}(q**10l2kzLXoq%0^XO{ClQHA^kQ9!?z< zu*XA-Y3lS)@`U`ey{=qlH-M`Sr;U0HFN$6R?`FqxnKnU78>{ssqMGg+T+PD*?h0-ud415lKv0jd1i+Z?6eEM zz@9WhsOg>6-cKn=Ip_vv;&+LoivnmmC%|sx|I0TUA{y|lUP^>CgZ zQ+Mp}TuSW?R`#BW#@=W?5IAmw?e~SHmHJ`xYfHm;`3!hoBjb{7XGbY*4w!SK-}2ha z_3T2*IBl>MhghTt|CIT4)~5y^x<&~ZpH4cKe=cAR5;E7&(}!t~yk%zMI)!Mq9IZbxZm_+i}k2~ zI>?RYm$|03Wr-bKb26;t@Yx*x4J6TY13Zs(i%(ceLmb=s5Jo?#W1cX>{beaQIk{LL zQe4-}uc-yKvMFj6Q;IBRvYq)yY%^F&QHFl6)$SoBjo2+8`_JG=@35(u%6O$)L$?GF z5hkWJwJ+}I?>$`{dfm1C&ADREXV0z*Tj1S?`v;-sj90+j&#U4+g#ze+ICTA!;T-k` zukwbx*-_4>9IWCIgJ)KG$dmc|*x18EGLKbP_ZYtT-N+{O5jo!{0qmy5+a9uC_vn0WLq5@p@*Cw|;+?9a{DX%?DaC3E89YWW3MW`)dl0SMc_GAo<-o(L{c zKDXnxe&U+d*V}aE#;xXZZ~Fywrg6vXYVNO^!^c41zkkngQ^66*MI5vXAvF0t@ndOc zRhG9$@q^fNk4`={S*gs2Ivz{$=L{={c&QgtpZu8_kbJMA6k!KrSqi}pQjQ<=?1tS7 zRFzeiHr2~i5G~YU2O+}*X>qQ?h`pJbxWSgTkL>5iJG{<+b+xM-R)j6;L`czjc-av=!&ID+1buNyQzIG>jZ$8kpwzRxj+BkgKp6 z5UOp%n`lxKGq9Mwum-+8ZxmuyQt{ zE#05jUwlC{s05sgG#+o zNg4+E$ux8NJ9e7+FYjvSOfi~%YkbFzp*J`6mpaf14;LliPkhuay=lC;{;}1nJIXSv zi_cM|#atC`UrRd;-iZr(9aMXYq2!k8R$yg3Eq_uwOWzgU5{Yl$^p@+=MJk{T%ZUx3 zVUZKJ8;R(?&C75a4_DCQcTQbnoiY(PkDI zksj{Uzt7O=cSP_@O#2{31nQZ0 zDQ#1Bv9*0Qz$%n<_<}}T@PQZDizwZWT*veBRum`)|Cq-Ht$)q3sH_aFuJN@wNFP6t zLePte`K^wPq6q+$RY;$B8r_4M?DqO6_V%J>Ox%PVr)OM7wremtEcC>$CkshWMrXqK z;ZYaL2>BIq%$Vl_{QP`;-5x0jLdw+Jk%dV#Yil}5asIa&IvUt26G|3ET~QOS9T-3E z7bT&Y*VI7qIaCmbo+7iwt_jRT&%xc5Rgkjz)U2$V(jqPkXVqb|`|sDi;JIooGtWMW z%6wZ8LA5*yK%;U(S8q5Cst#N)Dor=scm*}}jCR%ANy!j&9@R_ir^k+auH{s427GoX zy#K73_pwTY#A=}pXwn}#7l5NgY~8mxXbL=B>U^ALJs(5)klKYsDL{FsYd_J|WL`YEv$A3?T|O#3wNi*uEI_H2r3wsVE)}30QEZ<3VWdFB zK{ObbMt^wOo9_(Kzv=A+%|GQrT8{d7(*)Q_zIXQ!ez?>77LVmjW1aze18&c)t>gu@ z3Cd^|!~4NSTZr3kcY~fQb)#`W-Cy4tplckH9l1>)`SKQXE%ZLdN!l+1(K#%}eb#>E z+u0f8^mb}F?u}Pe;QOo}qTr^omx7DBPQebzq7xbl{qW$Q$}Nug$N}`l?(d5kO|f!} z#I&FD^bM+5eEBnsR$(oW^fvwB5B^D&HDn6?S>t-D(;|Vb-+@yK{a#ND=9l|bC+tMC z7VuidFsvh-BYLNu$mZV4bpa!Go7Re$z`i zt7&wnx}7pAur-+0?w;P!1y-N$B#CQOVns18C5ic49#S8)`dG|^h1ru7*O5qZ;qnQK zXPy6IML0!&bi<~z{JVU9liNp_@wo%fDo^ZFuU5VE*&!|U>B`UL5j@cA7lR8!wgH}Q zl zW!$hknf623L#@oGAC<%Uy&Q&~%)k|BLUdV zLLXPKM;Vp)DBalU2^oh4v`*-FG;VC4r}ei^{0zMFEn!#RU#{t#d#MyuG}G|&uU#&2 z*Zso7-gbX-5D!p0yVFhTt6gGI}?l zjtwM*CS;dd5Ck-tB%Is1y}hBD#)DM@J_~XR3lc3ziDpK1ph6X<<+C47Pms@jG@4j+uP*K9l

    G{#_-|%Gs;L;F=W|s1v)0mWR zotL^d)IxJ#3u9_W8x$ilQ$l1C3cw~p*GIY*=nd@7^*kC=PKF28xl9+^6bX~S;9rly zrY^as&AwME0LDH`J_>t#`)Gli($bSL&4fNyX%YtPILo+pK5`mGJ}GT3rQLN>b=Pw} z(eX)BC&HxF4AX^$^Qm`cvepfk#lLXTe$)1)JH;lik2HR29PO#`t6KJd-}_4I8gkOl z-`Tpqr$e8X&2iNyM-gC{nB5dGDONmk!S#@gG*%uZPZ!xn{1a>@S|(&mXIT1vt;0$o zh6OJsR-M7 z!cBM3djF|s9j*29`w>$J*cjkmZgz=069BNJ9iq=nY7E{HFOO7+$C49aY(Q_JpuX8{ z`>_MQPH@H_O0%E*Q3d*CfhJMWapLl-4VU1}a>1z3{KffRMOo?j-WkhfZuKNq@|$=R zIQXKkEby(~130ko?J9B~?AkCBpja!7a|+G30#92DO7 zCyxv_>6$f^TPE0|6Jg4A{c6~Iz`0Q6k_`)7!s^d@#ZmFFqq*Ie&5-m&Ca|sYv42(j z3}t3CVk<7Rj0WPzXprU;mG+nWcXPE62&68G&j4czyAyvXaPYr6S|KUeh&@JMtO$}> z>7G~}Bf6Z5vab4}WPbxXJIAiEY@Wf;tCbYMvf#u~Ts+ygFeorpG^G%9<~F02H^!oZ z)S+g%%`=Q|%g_M5OxW>juLKGMeHG)2x+YpxlZ#x$$^qhuuW&Hf>}g#G-Tm8V6rU^| z6UKYc-PNs7C{*5QY{oM-6bpI#u@pZQo#Wu0ldEHTf4sLIaln_dTTER5LF4(^B>ps; zq5>5_jvY71*3Jmv+}B|&ah6kQ1n*8|E4H87hZw!W17&V!()?GKawNBG;aP7NhG$Ta z&@+lZjrUmYhak>W2`;h{QV>r88m;9i@&zAWr#W*psk5bjC#P;QBD(n|AO(v6@j_hH?MV|MvEY*^*;o6P5AQ^)!%oxaIQxkJkyOQ-tbEf)&2#WTX|zpY$NNBG>xiQIiIj zDexSHB@$8CFkrQ8kP+9hFQ@b4gFS$Wr1vXiF5?BdoFQgU4`xA#_ygn}Cgc%nHYx`v z)O0+K%8nOeRz2K8!)H`NXu6!O<*J%zq&O#fu?*0@N=6Wk0q3qCFl-90%hb|b_sOR0AB-O=g01H z>!b0tUxLEi&g`>)yg>yhA<3C^DRdIA(uRT`M(zS7R1-Um-SQj|NCO>P9nV*SXG})g zaetEW6r8%=u|%|5cmr0`yM+qdp4=Wy!9JfgtIsW3CoQK5dk#$kZEcwY)UM~dR9 zbATg7m|9vI%dEpNE2W9nZnI~fBxS6Lzvo!up48kKm;7Oee>a)A?`Bw?(C=L$TJlbM zLXP%U*p2)XG_0%1!-znhn|HJD^84dFBktvHsfQ`N-kXQv2j2Os&4+a2gY#dIq=gog zR2+h&&Fd?H3i}g3<$!?`uKcAFY%gfLiM6=S*@(n}#j1GlZP{+}!NRL(beNe~c5-HAMcu4|_2KhG)o0-4tTu0sV-Et`wl47>^Mr&vk}_Un+)>vz?{2 zs0%|_jJg4MWDYn@u1oiNu{)fDmcAYX7y%XLo)_@aTehh%7N5&=Kw{p!j5dzW3=8_D z0bp`dwTv*K&ZqSx0O7AD>Dam{_kcVrQ}WMQzjf(Z*sFq?U*%L7zzVVNga6kGjz6d|DG^qz1V&P0ZYE zMyUA7-7cnxnVFeAg;h091!*W%`a`PN8ffyY%k4=58wON2vuIT0(dN%j{6-4kdX@y>jw)#;Ot`R!HMxQOX3;M}--t56bzrjqJwO`wwILUt;>nw(SvP zpGKF(pR%AxGcQ&<@jq={Iq{Cg!#eXL1 zYuR-lB1g1s4+b`!c`nwDK7Ymh(PE~dz@if{FI=^{J`F5$UHOlb67@Ys5Ca@jU4G~R zHp$;SfC4%Q!?pIl4|vd05kz!%jeb+=xd8xF#r|%Sj?y&9a$VrK31uxA`kongDqnu* zZuXnnsgV-Qync3u}ZIov!6o?Fv%so8iJV54}66Q0FG3x z+Fu+vwP8HVZ%sE!#!09uU=E2e|LD_iUURv6a2I$$Ec)Bt#V~}Ta=wX67T{)NFDLRL zxT@Xq^ZX&hUp_$B2s!(A9StNgb$>ueCyyUZa}l1$O^6euOuA3|!KF~tT2|J>>`z7Lb?>cH8G#p&Y&r$VT*a7v5b6mS~%P4?Jap=O<2u{ z#`bNDM+Um>ns6B@nYj_GB&*tc>XY-CGPk8rwj?UEEP@&mky*C) z&_It`Tqbc^-WAw#Xwebp(?=FJX#HdE{o(yG-;m{q>7r&IQ$pl%-6Dt<%gHl5avY~#QP(>h<-qxG)u-`(TgLc1%{yWV0T??1RB z#nZF()UCWTi0^x63*Wix(}m(!uabduyh_n4=4FOdy8$m=Ny>#4+I|Jl3z5ZC zM1QmdB_u8uN>v&eX7UJ*|4djHA^$7%J8fC+d%o3!G<0-!bo2X`#BS8?UuM5qFRA7x6f6Tb_#;j}rKjs8HBIX8@AH}~ zv|lN>X(_CKhKXq<14bn@09>5O0StK;c@%V$CYRec9`r27oute;8sk})hA+#0_`^P! z&Gbu!yZSV$~1mbG4nNx+(kL?oQ~VCKX8A6qlZ7`}v^6v#W1 zU%y5d+{vTV(A5p1O=G3dEJLo?92h>3>j6Z?DatY*wU>kSHFpl$R;E$;D8GK!`XPpyM+oxtAwHSil=YLL`*UokSRZ9U${L> zYL1k&Ya{78*FrJR&CvFm89M^WL5nGaY>MX#y0wwHT&}9O^0`rZZ-0d}fj9cu06eqS zE1wMS(o+T=L?A8OaH`~vbo(C1)4`tIBIg{yU{QR!{TN~jhEH@iuMV6s#s&!Ic-*yw zDWgPIDF*&rJ|0dg;wV1DB~v%&DtSmMJNaOH^2T61O$A=w=6Jnh@}RRY?To4P;G@1l z&L$(HN92jkwaES;+%XzW?@Q#(+7-$eRVvCq-(eq3gp9nX1uy2NF!qg1ji@{FJjaXo zxRgtHuFmWhwY3y={tChDW+xuRpycJxBkJ{y?Rk4nP0jiZDWu}MyT#4$-7GFn(yd21 zZBXA$x!`6N3`9zilhsPZvwNYMc~e+NpnfA336y2*b{dSq$dv*ucXHaC@?Nz5lmi2$ zn%%aSqq^L-B#qNsgnl|ZtXhx!+!L;H+vwg)0f@wC*L(PIyl{IPvavffRMFy(xPFox z?>@vabD!?0`J-_ySwts!BcK+VXzbKA*zK8Na-Zy(mZ~f(3oIgVaZYtQP?jvv+=jR% z%WU6KVzRXH9oL^v>v1-sHl%T?jK?FLq|$_I;e2AwS*ihM3-{(Cx=lH`@z~|J3y^%o zW1x;SDO+V@>)f~1)J#ijb$glOFP*xfuAz~UACQXN-+%wyIyP52;TuaQX&s?LJo*m_ zRRt}u04sb!SIe|~)H_cTxJzRfP1&^ajO`D!^3@AFZnwr;yEiqXW(3u;6D>90h>@;c zF+brLy@vvVQQj|Qg4;*$F4Z;$^;6J3#S=K6-gtCOeC^&n3F%+(YigP^fF(>SBoFTJ z$wPy;vW4e*`e&Y|*^Nx-F8DO6E`R0LE&NeSK+r61tEIXqLd!-7(79pLcq$s07@XkQx@L+pKQn{d8B9nQ(;;Sf6uJWY>3qoInT!DxSPMOJ) zyXU~2j3KP4WopB_U@vRz+Patb@-xwy& z)hvyAXQ5#GZN?wM;EjZvNJlbKD1VO7kd=%Q9JBWJf3y{T@nVNWnR&eRsY)Bhzg$bm zmkW)qTh@8!&!;XK86^jmJ>gNT>blhl_Q% zCUwzN6QRbN4n=;Xby+pYQmK3|0ck4Eg^;%Cdp@(7!IxCeLM{gyo5Yz%MRNbx`F3>! zg*yXN|B@1-O8TZfs{{w<_Klb4w{|M74(T;IK zB^Jr*fS7oBkj_$EdQQBFdY7M%M0B!e^yZIc>-~7<+xpK94_N$wkNDi1+JS_rsOYUH z(m4-9{dz0oj(TaDklEH6;LR>SNp(6``8U(*fSI38ZtcZN>0$y^Y)%jL`g94{ZmCh$ z;Ym5a@61hN(6ZkZeKInek>woG=U=H2c}e1y8x!&HX|nbM#)qaVi=h^v*N$k_aaNfl zs35yxXS^U^hbN6bWjA(^f*1O?;{c2#O+1UCp~w6%;b6iIdvZEF6d?YFz)49WZ&^@vV>Qa?<81x_~If%VGt ztL!FMFu;6DWNxbkhfNNz8_PjfWOY76`WWiCfSs<$qU-F1rxX-vao-do?{l|X>Vft3 z7nAvDH{gl_&g|3Ku`YJqvTONav_-vHreh0COUA)(QBkUm&tJPAn|mg#>y?89uFMsY z6p=C4*tEm4NqXPTeuXQ^SA2YKo=vtJIYROxJ82#*^%rEhCh=$2W1}6+bAAUXJK&41 zN5lIcnPeZHNlA>$LyOR=;ZFAt{(>_2aMzNZ;HVe@i&j$DVu>&1<*#W6JEicXt+pt|Q0BS%r?Ptb-xCAqt z5WQTPY`M)(7G}0|7gOZOv`RO9E;;cN6J?k!kcraZT9AUhrd!YoO&C|6(PeIE+t}~B zvS!=M2S&hqe;`!je0usjaR<+VaT?Z#&7}v6_)E$%&m+^xFk*4 zp~(K13BCP@BCLN`@4JfbNd}y#(s!kF8tYmJ3z%;a5Nqp3?INPr1iC#8vp3(exSRWlsc-9^yG8M)@WK}GL4M5!?Nim;wVoR>jx zrCSJFBpS5N24!kNM$1tuth#j6&!|e?De}H}yT&87Ve1hgctPd{AEK-$NWadoC_8Kn z#w>=+lK)4Kc#sa&0;Rsuea}fIf}O%o@&Q3BYrsW^mIASp(H%14QTL+ObRNgUpNZ!5 zz6Yxj)r3o`+hrG`n)V1q(i9>@Z(Em|jm|J6whPba5-7zk)(SkodBDpimU6r}`8HQ1 z2#c=Bn>+-sBnCQYQkz2gF`rkj9bsy%)P>Q0G_x&qoO?!>33Imd#|gT*)JgDU)4{E^=1+#FX4^_PM|pH^+s}3UkoMKT6k0f?9Jhk0$g36E{)p+X z6Jng;EP;pPm%H&=TJD-P2xSFOi9C^dl)>stWc}s~RzbSuhwS^)%aU=irU??103JsR z%Ef7ZX{*_%57xfCV>Rhxh{CJIKxPhM!?aqRu}&)I_-MrNU)lf&@|u=TI>-QJ%{s|{ z(lT3j@Ua-q6mj2B&T2A;U>CNs2V}YYT@mQb$t1&&=I1S?Qf4v{lB$kIR@ z;0}GIBrgYb^gM#N7_81pZQ+ZZ+pSF;z)P(!4}b@Me9&6bGdO0~k~BND^SS^B1uX4^82o80qBbB!M&O^d*Ck@O zH@igDMuR3(Ar94dIj4by%4T)k9X-$)tX7pr?9*py^JukK%W$Qbaeli06!C=v83k?q zOTVl9+OS;yjjHNYx%8hO6SE8;@UYGHGzdEODGXiL%4(Z(vl3#M2PeR0>$N+f(6$df zJMZl`52_`b)*Gtg?+r#lvikA}x-3i{KYqPQ4i7K>GEK-@^G`cgvwcOTpri*V$iC73 zw|1$+`OmC;L>Fv$|Imv5^-u$hL@AG;<6lz#>pv|}oVA7_kL~hbVn_BL)PsCh ztn>eX5dWFy|H~H}@0yWbdM{Nm$14=%s)>_IW^B}?)B`6>bLiH4r1JlP915A#{%P8yhXGd6!3mZGqy3LZdy z%rI*rVu`KpXevw#x$gTf(K2t3a$RFX0Nphdh!FuHb>XRHyQ4p@vDZ|Q0n<5YOK)QT z8jqxehi57@qbGvQmsC@E+F{FHXOUVpQrCw%MllTjgTW2h5g93hDVg`DhtKFZaC5F_ zgL#O3nky`sX^>8NwJdVrDK)bFF^!HIz5)YDH<)If-bH7==Da)%3}3Q1{9Co{ZPyTn zEc!{_Rm#ibqSPyR1%)Itms2q6hKbE(PBS9hO&&z|{Nh(_afj*l_91jt@LTwnBpEq5 zW-jdbO6;6rT>}=t$u&mE>J7Qhk;~e35xAWxapew8JN4QhQQk?Fe||O=++f;Hw&~r5 zBr$8x{#cW9__f50cZ3<$ID_d`P`H`&9K~u)DbP^(DbEBYN_!^oHA3C%;@dp?JL$8? zRH%n&kljl_svVV(CjwcU7np9BM>qtLSOk$Smq&JYnHT(acTEjE+{B^5G9}HLgjvNr zGG{oEeh>RD&0ql8SpNlt&>(7cqD!CjZ{8%qkcIO z3CKmh#n4(FipYqFds(KEw2%ItCiCkDe7O7bwH$)E1EGA{agIv?yE`rAv;y#4?+?{r zdcX3s>va8j9$UrX+9fSTy;SWsdEt(g-Ex0dg2KAg#_FUb$;@rczrDF^iZkjUxQnY+ z&~n|K?GNavVo!;oo|btPVO>*odvc7At7nBOef3KKB1J{a_$xKz-qR|_<_3HY->3I? z`xRgE@m{fA-(_W2Xi0xbgN5LcHrXlF@P8P43!u1`u5EM(0TSF@0>KFm!6is=cXxLt zxCeK4OCU(l;O_43?(PgOcjr6rdB6X!Tes?Vb-|vQJ+oJLuU_j}(%l8&#hu&^_rn9K zqZW+0Nzw>tP*;h!hPxUlwsRq`5oi|`H+TB8vIA0Og=FBpYhAGxc|6|D)NJ}4K}=) z^tiI$zl~0-`__AoDnJ2zEZMr&aFanI}QsVJO4(FYHRk0o`j@f%$3T>}cx zR_yf2yX@v&h{VPhU9#b?xi6P>G#6)Q4Hi4=14nDwWeftXpKNEiKDb_1-s%yndwWVP zhn)x_bWM#=GD@a!m((d@j`W6s*G|=+T5Wpj^^mXCXopR!6nr51n}-m%E5F^KgJ+0X z@nu%{taU`#IY&AY4(p4?+GtYH@xyMk*5zpl)u5bLrvH~*Sh!Hru7mQ|`@D_NwFsg@ zOa+IX{?}nGCqyU%FAt09!sC3AAz?FwzAYQV+|ZE17N_eE9_4t08^T?QpooU-6AS9% z1UwQ}lirL#2{?jaSQS9;x!&nV!uvKnxu?qpK(22Tshd4jB#(NhCG&(1N)^dmF9#Ps zer(3f&-wo5qe%G=D2Fo!1lX_iZs5*!)I4f@TEv{f^CPVL#k2#EA%<#X#5;5-e<%Zm z34h_{k|n>f`pB~}&C?UV{_aw6EAO^s*p(xM_d~I^y3ENMf&=CM<(U1$@r|$JOP1Zx4t$<$TY9j~6<49hUNmsL8&R z5fRZD&Ei`lfC_2(8ifGMWV!tT2Gq5{$kMf@%g#gAFU3ZH^pzS@*Fd37!}VytNRbXp zQb6u#{ns~$au~dw9M<^e`SkR5;y_hyXF`rSTbgK~n#lBVO@%PC`Dz?MXCi!6hyM4% zYxq#zKTL$?-YI2cD~dPnl(d~=`oO-^T{)&B1n||I%N&Xi4{kJ=r2e_NaB!&+zJ(FE zcy;=n`hf#)Lv%@F+w{2beD!{`B`5p%N-j)}FHByzYW0}|G03xJ@IW{>$alf`PhE^- z=Od5H>2j4>*AaBH2uLlO2yT6{7tTWe4QTp}FswPK-4#-GyJ?6`WlF-A(8y5?Us&%> zdp4MO-JNV?+D&eX1LeC6(=jC$Km&CZ>O&tMntFLtHdVMbTDaD_j*=o(sh5SzYNBoE zhiBN&%IancKKaKFb3kHet&|q_QwW!qCorHtKS}Q?=p#1P#N4f~jOv>yN9Ue4FjWcYV$V zVL(Qw9*lAlENpGI&-3t0^J!^I%g`iGhpz8^SG%&{m|ooIL0t!SH+5{fYbAkapblWC zU6B1w`;wAj{-=jI3lLgvAB@rX$Di<^K(khNM%&p+Ib>rJZu@m(E?+-j)01JGC=xN( zLJp8J;qz@T7we1F+|T1{Xg%%Tk>EuDvRx4J^l#3eDq(?s5M6vi<<&ky`SIa#or|RH z$V_%`$E1zVL2@`jU_uVV*|Vn_8Y@qWcXQ)oKc|5B^NFgS;wW8Rb% z!+bV=6L^I3W@CmD#5A)IDY^ui`FT|ZCnhvOclyldU@F|vlR+Y9mJF4ezFJO`dEfbG zCfzL1m3>>1MrRwO&-(~r2Bqpf$upC7YJU9Hlnw7&c=))xSmUeZ`%aL{eE)~cp6i=W zXcN$-jYVVvbvdQr#qhFmT(lhDgZz{t6n#FbeY8jc5V&Ka=J5*3`hLHC9*NQI3(;aH zO3p@C_3YjC`n}cMn^h=ykS^59u>cMUq$k(@TuSDk& zeVf=+P}$YFtAeB)zssHGJ8awCOBT*ZP!3q&7s-MT;<+2Jf#dq%E!@yLxP?%@lg{#n zK%q)OA;yL6MBs7k;sGKek~vc0|0(9xX*RLrqi{k?HZK1(1W-D{H(AfrU5i-v@kT!E z?96TwG1({7wF`{{Im;*@eRIT?S~lLF7so50L;}!$X>gv0>WD>Q{>4`yX3d=Y+4g06 zjhmX*-Ms7Pcr}|ev~R`=3(<_gfA!1b=70r4JEb|Eg6`rOmN2KU?+1Is4N|sR#c`v-iYyke&n5Z@V!s zx6|bYupTjo?O>-%EeJH4dH?%OyYQkI0f%#+7Or;NDy`te;kOCeiHkZfD ztL#n3a2-c^n1_SC$U8|#x$Pvjwu++O0dA|#_)bP9pvbG}Dl020C>FInigWxm0_jRw zpygq2Y=*Ols+latvbJl6f*u7o$l&ygESxN(AucM^(|&)8qnCn$gs8#q)+PF%+S%*r zaZaMtTDo-x`?Wh*9@XdLea<9|Q0oE|{FKUX5eu9NKS679=q@c^619&Yfj+3Y!NJ19 zx`$JUQeaWcfa0)wUyjBP;Fr{(Uqj4vwX3{|nf}P3%G+;z@U7%?01Nbw(p3_>d%!@# z+z%k^Q*OHG0L$*JM-9V+49%Cn$HIds1U%i5+s6asIEJ&%rPX7WW|nz9`U1j&t2aRB z;wY~V8uZ9=k=9z);wP8yZ!VzLSuF=fZ}p<12-m5~`}w?j5ZhhZ_Xv+srg|%vyisi| z`dc$yr!>Ae;!yaKFk-P+86*6o@reM9zyAU*huV3fe=JXda*g!yN@e%vwcN0SqyBjg ze<8FrqhBm}Idpk-b!CTlvJGk`Cg!Kb1$hR^9TvY$8`7vn{^qDg0m>G0FFM>q$!<9B zAx%SQN{%A9z4XW?WC8i6+qHi<>Cy$sK5gybIb6I>&O~PhKH!7oE&C8*m^^pmk!X}_ z04%&q_nY}|@#!CIawN04ojtKBx&mzG=~0%-QIN0Rc6xZpf%t~h?z1-39R&Uh-l%RP zlpq?u1$_jk`LK~LNM1>E{%LkJ^Kk$XMDZFC3KWT9&SaO(akW>jRHt2TkZ81b7gW2M zL}yU+?XgB%;mfi*cqKAvF0d3fu&D1NKj?e#wbIHLZSzyn4txOye^FI1qir z9Ea5gk1sve(dMb>Un)tAF}1lelWuB8&Gwrq$}OOalnnbKJ=_+`az#Pi#9nYnMDx(p zoF3@DW8()yx^AmgY+jr74&Y>pENW)x{ri-b#VMd|>^o=tn#QmqjEoe%%@K@)plpSY zU6{UHXD1HKSDVS%cAs;sdA`8az=HOd`pRFTu!9QH=W0z^A+Dcr+sECCIXs^(Mz>8E zquiw5A~w9H;j&VBpD18}xG>v^f)18sxoTOB>w+p91{3I!GU*AU>l`9%O@{uids+4v z2=@>5@M*9V3Lv9)oXL_y`r4pK`bJRVMr`Q{&Dw4xB7&7s6fr1g?mH5Xj}a41;%v5V zc0vVI4&dM?GE$}P4uYG1DK9yI&cPy`NT0JR8}bN( zp@AA{kgL0TQX?aC{PA?+!+)+l*^eq(URcj3_dHnmCo%yB?lZ~Tm^1}c3^a1so@b+@ z`p&c;9|S-Y3)!}eT``md7Q76@%iuv&cEJOZI(CP73ME&Okau_3M60blx%+wVe3-W( za`9&SE8m|$xZu{s=#V`q!G%{wEsQ!w_wsuul+#h#6gC!dPtz}x4;2)A?l7U|tH4PR zIqwZ#K=QG*Gwz8U*u6*TWtHQTF1}zmA8P#b2%q_IAC2Oc{Ry5tg^6j~j>~2eo>h)`t z%d3OT%I!=0nxCNWxm2f|Xr#c8nY`&)_~FAK=c$7daP3@Wqr_3(siu#0vTZdA2Sih= z+)3-StOmj}RO2rzrDN5Q8E zAt4>$y3cTt<-Ft0Zbkw53Rpfr9;9msh?A1#?D{nO#D-`Re1j#^SPz&fxApdnpdHD7 z?rP~$N}d3Y6Ry3U;V|3JRqWNGLIV?Jo$BZ&TZZwsw0xUzUC6caZhO7BN%_S|W(n+J z6;7!jsXiajSKGqo@bvM3g$!OgB}MX;dWTP%XOnxGM~~>}#*v8oV}Z5FvuN`kMulU1Km4nvUmHqJOqC znrKvZQXJ;j-Q7#C@)sBj77)l)+ zf_?@P63imIONl-&3pZ`3PENO|5E3sNJH6)_gvT=Wbec~Vi`5r?#;rPTOy&DzH7^ur zb$O8hWzve$xC(PSlU{bZzl!r-)l5F*2x_QLb{`-e4=EmpzS?o|ZsO5l&nmpA+A0+hG4t+wx<_NBIhnYw1~&1znS3n@Kd&JN z`A+O_KAK2}!*!j6p`^Tmbf5O)twu!rBrFarj68~L>o6wj@htq2f3u&RKHlM@4H)(o zL=;%5L_(w36J^1=UEQy#uG&(?^-%P{ptI}ItuV9)Jv~xU+m}kl<%MVwxs?WyC=!6TUc)ndM;5hi>XfoC8RH71wI{Bd}LLQ%;~KKbUb zU8y0-iFY5K(pcfN4JuBFHNGp&>NL_`-%r_OzNJ(`HWQ6t_S=Qw$d7_y`AS;^5aUc=zu`J z3dnF8AP|US10_Lc{Ib)h`qa~D&8&`~2@w+yLn5eb(JH$&Etm}txaXfD7_*_5FjlVp zJT$xax_R>D-}eEs^Ay;H|Mx~vx9|_d|NZp)2YGPFh)YwGU`LUUg47d>&n{XLu$MW01 zU1|@fhmep+n|Qe@2cM_ta8|IsuAeFm5Zk%4v2kf1Dnb@N@ZH~^k6#@4rajXC`ArOt zw}aujJZ_atxvy|DR>6a`bU=|i)t&Ou8?_4lpI3AOi!G+(-v=|gs8CLpTndldv0>0+ z4R0Ued|E`@>`I`Z9vJvE#2Jz?&@{x?@=)HL*GLlrPYUSlAo@G}_Ax*wa5!947%xb{ zBrfd^^cPZ*<%ll13`>=b%E{^J{1_Ns$;$npdA-=^CecGMIi-dZV7z-es;Zf+LjUS* zXftuVa8E=7&XSKI+e?(@zBT+g`w)~GXQB#pAGK@%0x4v3(p`8HBOj#dsp2S7h#Hmh#58=rcZ(nw@ zd9Uu!X;+PO{8B>-mqd&|?9er!WZkc9ajQk401xm~n=TSqc$s&)lrfsIutWOGZ-OEH z)4Dw+wq%o;NH%TUhCE?+Tc(bY3nXYZAsEu2V}}O zCj~WfvpBS52Ac!N$N>x2Rs93rBgqk48co7Bnt|d}yAEt_=&xJLBCZ#SzIeIhOl^u8 z;?~OTxg+kEEZrO>YVlxsU@GWezn9I77W_LYM6LvX7!fRwYc@7=A|7mRc04kI~pkRZd_Pds~*Nv+0G< z(1D=tpUP)Xz{|+w999<$kOg`fgvKj0vX5`9b?b-m;u<$5O7HtT6_~hz&kF9k@II<_ zrBr}OPoLJmd(}EPt_@jY?k*i{Q}lQlaky<7t9X zSR>_Hw|;osVsMCND^HlliNrS2`|!uLvHJrL9PO=XvF_?`hgt1xMAT+p1ffGF7Ylf1f<8>GwrVSQK zaFVFJsx?=bo5q*jA`54Y$>Np-25yoM%$sb6aC*0f>TK>iT|Mt>>Gg1<8P{re5VkIM zmTEl>c*_>C&k?~>NOmZHoBb4L#v-4LGQ6-ZeVvji*%4s7BrmlvyXF95_>EW-hWkll zZtJ*2v0Us#+him4$4F1$!5^o2hWFf}*8H!ajIj08Z1kkLC@rU^^764$(zz@@)Qe}( ztmrp0VGH^(YVBS=zsiQT9np(kqBZ{3BY6`FG##Ewqv#;dfn8U<(AH4a@vdfCn2F7EkAwba;?6w?-!H-(NUD5w zwF%6BU3BMmI^7h?qorw9%{6FP);;Na{H&6Migo~xQ(m8Vb<%wm*kkSjj0;l{ZYy^f z-R0jQ@~4AMV=@pjH8oXM#zc#>vnCIxu%9jQ$>Pf8@yHZ_b{e>r=v&`CT*ZB9h+#k( z&FH}pa)=zMNgrSb&8Y^N4L>byii`BP&i2~fl{(&6S!7k7+aVma*UwTKDxSnVrYNN| z=JSC240hHO;C7w#sN~31&gFV86kLaMG;(1mscBN=jKLePWz$ zw2=2kq@Vn6?*kX@G}u+KA;U5p?&VqMfoym@f9wkr|E*YeL

    8Wvxo0xd#LKqy5(o}+@!W4eqyTaT;al<)7BV5a4oPf&%ewERmmxtVcx4&9Xs39Ey(ERx}e>NWX& zK_C!C{jJy;tWq2)4+2e{eY6SKChBavpFLw62@z^+o;!FqL{@Do&o;r zw(`Y)wA@}xO?6_Sath(Tt261(ACrYieyS?Ubk}qJtoJr+S=Hrp0%01saRL@lGymiQ zT-C`{L@nEbMTSvv_UpdP+_utQB(G z?Vh9YSSbflO~OizCXI{BhB3ad$LCTzbOyYiQ7a~z`*7~D`G(cJY@>mRb4t-}GWw+8 ztESOMGvRhpVQQB>|0if%(_iy*a|L_`WawPXO3NjReau&9OrxWRJDLFk?8GeNW_+8ig4{N%~d`IReJj)z@I=K$D3HzapWiyD%Q!SRgK4f~l?*fGKXV%4m6R=26&rkEI%Y#0jTCj)HtJEE_dA|oRsQC1(9 z7Q&%p*J5ImLZnA_;>|L{B7+G36bn&Lq#tx*4m+#-ykOASK`mz?*PA!c?%A<(cs09^ z{R=+8Tfa2Rpj?^#hz$P!unICO#{!Krv%Hg&la`hiCdJ?wusk`J(Al)Lnx>+(G_qhV zunI#qRhqtsQmKjZmsD2=^$HixTQf5L^-b7MQN^F9C_J~5f4aEf`UT7l?m%BPiO-4M z(CPXA4;BH08;IAhU@M?%gc`_JslC9QQUpkPMDrNo%Pp6KMKgJMj*7EZHSOH z-isP#){ZQ7IcO%3v3+8xuRUDt53CbciazkSlH4p11nb`RMWIrihxx37nAp4Oh0{NfZuBy_CkG&EydW=z{NSzYMt_iC8G<=%xML&Xt zU5l*JZI_>N9D3`hc$ugga;}30=KDyT)p3loC}YRt3Cu)$1DYSx;mzvOBr1-oZQ@Bn z>>8(-jXMqNW`y=FAz|bVMo<*!=yy5J)<>pT#Kd1j_J*z-8)XY-O?60>q>l#g<)p}E z!orjTXyUdz^?CxKl1}(7c+gF$BEpE+n095C!cv>Qb88_&PI=SFX>l;?IMuadPJirOD~J&% z&-VT{vXuMR7Q@{rLKc~b+z!FBAtEAjCZfu)`KqAvx9}Ns1^`k(w@PDe;r@$CV)_e} z!Ns7Dg6G!EGlC^W29*^>tT^wD<~mf|J~Mn)a33W_iZo?()v2AeyM?bP;Rg~lsMuMdxo^PpbhE*il59dabrp19N5Ar!8LW|{Tgz(f7Zq%gSLdG88TO2Ao z47*zMbi<{5A!oVpsCbv!YtQosEWT62mb)53}KkQhw`SgZLGD3P~iHvTev?ToB zOybCp=A>tHa3cF-y?PvC=D!){zu!r1VkJrMj|d1!$&?qGHv4&mb7-zVMow0mAB#tO z6*YfasI9(+*7R#0862m-JiQN4Oi8v&@#_mz^rsX;Tx#ZY`Wd|=%H@K661i*&TkU`e z{Z{9ns|R#j$m^j88gjf$*0*Fk*Yh7zmDg-zVBx%Vy^jvfAR&n@w$k4{HQmv{k4IHb z+Ge4cp&Pd&_}@D0cCQmp_-fk^_~6o#D3$R$GN@)4hboj!uKvk>4s)l>a=w_vFsQjRdgH#qT$Z%L67}#neCEx#NF3DghBarvGnJI zBv>ujuYr%URiH;dtM_e)$(c^;y{NFU^gf4aw2@-}D)H4{&WPArzM!RC`NJ^!go{m@ zZtsIQcEeH;ax!(gY<^&Viig1{C;!zU@SC=RwU|`&f-&>ATmH+H0co`Qxb6XzZkaK{ zIrS;;9c%irbL&9Seq#eadWcRGjJ3_Nt=*~Nrf8hFYo+Ltc!;$kDbM5&-@Yu>=Qh18 zR9tkL-ay9tIlM2G?ToK(1!8u_VHP@EM?AJO6O&Uj2Ijxd&@Y9^*ZG{_S;b8QYCj&V zy{EtyPF}Dbt5%J06YD42Sl}kRaR~?wviLybtWCM|GvI@U{#Is`yA1)7Cw2-HD@Tff zR^P{1`OfbBea=>^^~*ou2R2v6TBQ>Xmlg53eX>Mboo5`roNFGt ze%rs9BV88n$I$sIHe%12NlPQ2AD#8}+Y{inO3jo?tbG);@h$5}TqF#@H zfqW?k{7?)5{w0FCy!~JEZ{V|Sd8KopO}6_%tS1{ZXNn>B_FNz02a~Y&O?}S7U~xpdtLh=uOZcrK z`8A?-L|$)&@>g4TT~YyMLAR%~5YOUEA!@x|Me9dtwqdNVb)TKXU;0Dz38q+C%Wd`| zuFg)hQ@{$z{J&o|r+DZg?%(9mM+0lzcLjEJe>X2p{z!&}@ifb`JY!TJMTZF%e?8&2 zdi9n!@~}0M7D_o;z$6BS+D?G$q+biCxcuF7Yar@fTbUp~F7;Ly1ED3wKXtjV6brfX zjoZ-&9t)Fn9pUXFXoXqQ*kTvWf;T1t@Uas|s(-OyTVY~!zz}DDrNH69PgnKM?*3jL zBIn@Hpd}l;we-%K5D_7;cZ}nSAzziUl>aJ&2fnH4;*3GPqTB6}pZKT@=_k7Iz{BcN zC(S)W^Gce|IdsW1UdqR0JmV?a4rl%vo)F^NQaZDga))WT@vWMTt&56XIi;gwK*1-Aq%SoTdB@W{+P=sYY_1I6gkKm zpM#`POf70IA5wiVih8D`?dU2dCAZcteFb!zY`xsY_Lv!SsW^I~g4~NI_LWU2@HVnl z`{HZ@-g_DpDqTK3j_WFeUtPgE|6+Rp)Gpd&`)+j5PFk_&`LrNUyUjKAcOS;7QuWd4 z^W>@d!TsfM=EKs-P?pc#B-PAs)_6eM-%n!A)fsDUGv0;LIvA2O^!{~gGO@gi_Gk9N zYxk<>*AwbA1PIipYF~o3|7d~wI9v1CnW7+KLwk5Hnq)#@Lb^!{H%_Ni6aP9pa~yWy zjS{hJ^=c}B+Me&GeFmhmSw6mO3fSI1J)SYlmj_LoogSGVgi0aHg~;irQFp`ym8jUL z6q5^Hwq#TQL^Vm|%UCEWEi(`I&*_(D##F(zlzPsBv3hpa5 z?EA`lf2AQ2fBqA9=G*}1U)u^WvfhyV;u&%zB|OT^TDAx@?oNUt#*MDpG~5DeGavk` zujczbr5f}XsO!OCOgIhIkIq4kj+Tg1h;tV|XM0aA4vaLCHwS+hbpMeRI6mAjZCK36 zz^^*K4?feivna8+HI}kES2}4dE1^1TvoC3_@eV2G`EFmcIJ-XHet@?{hV|2#zKBWy zwNC&tUoq7p#Z-K9$j1LP-`$2C(QeE1m-kO+z1i;o_drwlWkZu+rO|XZiNL+J?@qs1 z&;}0R@@iJ3%hKqby*L+uyGro#Yl9tB2$SDElrD**6lL^y*+4LkQFuH}>!mOrGkXErc{Gug);XI@n-6O+cA2hYUor|mZ zIHT_}Cb_$*Y|Q%o)(Ul)ojH|CwU^hV{Ay0{zBexj0ESs~@=*jhx?ZAvRh(BX zki&8(5dc|c6qoI8<4Nag4O3x#FHp68$Zvk_^rndE5hCKAN;ud;rAFwePTK@rJ(OQo zS1f*Y6g>3G;DI++7`yrczV-#G>RIe+&O)c1I(y#st<{5DcCPixJRES>>4i_*^#lJ8 zyJgMcR+f%e2HP>(rH9rqv`}KNQYt7yA8^pD7Gb?!8_&K?rQ^9#&yVo`MCXH)pmlhC z3%>qBnUm6OKVs49d)J%SyPd%7Fn}h~%{J!rj0&Y65O+79o#JiN=@k|>Nib})tGw1D zXAAdMl6wg;(dPyKI4`Ic9yi`%CSzkVFc1h#Zqq5cCx0f0ZjRAc<8qr-VNU43K~S$6#OKTOlGkStSni zSr-T=Ai|-1AG5#o$Qb0drMT7oh!rhxtM64)o-kLAg3aWa67=D}x{=Tl#=EZx94|^f zB+S3fA1M==<)a|*myiw3ikr$m9{mhr&QB9s|ME}mk-s&av$d-j>mCHyE}>nFyr6gA z@{GOd%=+Z7glpo^ifp+t1CCw?N|1g9>McccM&rrdM-U?15nR~&?&yZAj}Y2KG){ZX^n5Ue7rMpvKR!$Zr1z2U`qq-apSz?hk_WofF1|K?1%uCt z%#$hq?*_#4oW#6mkt-Q?j}GqX?nYGrv*J4;Bh{dfhSyZ4`%7CZu&6~1r_nU=m;>t; z5=r0&XY@G6ygeF|#pbf%T$vuhq z+?*U<7V0_uO##$5zz-)|&CJdQxec}sM?>!ObCk^o4|EFekFwg*Qu$1v;hNJj%=imPFFrl5JY;PxMj6N9<^ zmI{d5zYV}mRc}&pZ3%<{y$hDB7`r?JR)q}j@*kZf1Y`Ic`#~1b_$OGnY11rR5QK&P z$9o)~ViNW%M9|_#9o!}y;M7S8QYsPpXxw7%2E`xY0|%@1e|a%oj;nd!#~U>nzf}bB zkGk;J0vPIYD+#Bzmwb>Ug^vNSY)4!sPZeffFJS>|l` ze1zt(GHEtVS6T!4jGvFHv+#ndNQ~!B)%vG8ptYN(;LmLR4hBHp0X}h+eT};7(HyGY zB-H5&(6AFe%nQz#;0l%2wtd36$=S^1FRtY>rQgvrGO-IO`bo=qzWgTV&LEOS1eTjnlfiCkl5;|srR19Ol6NLCrGJ=m{4vdr{^CYE0EtP@(OuGu zc;bmLt29NiYi%cGHepVMC87+%Fz2q}8lKAV>R0LBY1qt{sYnw2mK9a?aUBz73{sVu z5+N}N^6qeUXE{+TtGO_3Jg|*?614=kNGwblaaZ|q3x_0 zyup%08CHO7?q1p7zcqNZTwkxapU^fzOD=d+i#6yLR!3x#{83Sf6B!`rR{f=1>pv1C zMYCqQMzkkr@T1AY&BSE8&f6?oC1#1s2d()vL2@+;9Nth}J+*LUT8dzs-o6JO8a@b z$^XJZ+spy_4aJ5+$}$pJgFPA3>yvh0!vF)7ZQO^sKcdpb+nU{zQw;Az^-0*4N*MB0 zzhJOh&wYL(CX&t5*A72#9)j9%@S>lIx|RCXp{+Dm&+YxLE#l{o1A6VLF8>{E!%|J49!`=uLgBHqt;O1;|8pY4JkSqRXi6&LPs_r$* zOv>)*#CF$uwm2G76ZdwA!eAna_|ZM=bYkOJi_#DcO`XR(<|>)_xW)auS@6caII~TNW5@guC<{Gi9&p`1qG2+EuRTwbT1|k*BQb z>fzSR->$u%nboqQ=+68Yt57TQWlBg{;!Hp!eQ6(ZEh^6he;oUa|6}3~J5*cTo{Z2WqPgVS#0Q3T4>@wcWE82X+CfP3YpsZh@b;k3@Fs#2Cw$Al(uPVo|%lj6HTcLF0M24aq zo$f<`2{soh&Jgm^V&_n7m=&#Z@2QCtgJeJ5TA(W0EGjDmH$;r2@0X^;AMH-B4z^j` z5ZGkVezIX-4QTdJiIGWtDL4;)x*RdMe_GDa$+`k5&Mk@OpyxX|&LwMQRN`^M6DEtJ zl;xQ5>fuIOE}5!qH4!mBI9MkHaokw+5QctU+Xb(WO=ap3pg|7O8|B)tAnUjE6BzWS zTlSRiuGUk}j%hb36M1+9G)44q0I5&To8*L+|0#;ZCu_R(RuhkF%?ZC1DpaBqTdIaqu8e&F*mm;1_rIIG_8_8=(+!2G=;%GVku$&=}{G zcl8yA-^NQBGY+wU<4n5a3)4=u*^X?vv455~CDv@cMcP)1Vvh0LC~tsmuX%?uyS!}7 zBGITh57xEi1vfT0YGq+YfYDA}8upgIgjXz8^z-4oN)Kmk{duR>hq95(Ovo0jj6M$J z!ORi`LAC>aUvSSgjj^I698Gm6nqS%R&lTJ69Pr*1)ZiD(av*sCOFt!yH-gHe8V{vW zaLR1(92L3dZkaM3l+l-#jlGj}`J5bHZj5vS%0=aj(dA+%D4^Bd9Lh-En1cj15uliN zDXT7P1T}su#(vE`d6oF79H%PeW?=i|U6$4LZGwfm{3CKX&EQBy z$Z>cj=;QRk-}cHf6MFV3@jnnmR=gAlV{9l?mXFOvrn8u`!3}Byh;qB* zWaJY)Q3rHo9j3K*93=&rf35k|BHvD938bm6d@unmHI3oKoxe_G>2=s-38jtcetJ3a z@XHV#_KBC-)v!8E?1uEjZluTH3Y#q20F2z^pnvMSfwZ50PTP4GGD2iKgq;WM3DfIG zzHv4AQFK$Ogo2|}|`xf77l4*h&o z46fDL9i4JpeI~v2*`P-VKHeCDFf>_SewwR2m!{pb6d&=S5LN|pLjod{(5%K>qFNc) z>}Ll9I~qe+?aSOP^eT_f53(~gS>;OcJkM@~)3Iqor9~!Zr9=@NZ&87~wMQ|E_#vMP zMID1HZIzCJ=bvXb>J0_oLzJzY&&EcYon4OxGe4Gwr};q0pF8H}+=!po9`oI;$wBLG zFObJUqc_WqH=_6VsYYynGt~;mfNX4ysPEu^g;%BJ{Vj%7 zxarvFnRx0|z;{fpa^uMcoLEX|UzB**idXE&Fr=eHHs}3DqquEi;yAr`v2b`uDL;>q zijpsreq}0`%gX5~d(NRPY5$uGz-po5-TFOgr*!bC(OlU5A&fQQrZb%Dd5n&;(ZZl| zzBH}K? zHz(Zp`M+PndaSEcBJ&^Ubg0(0Q=9r&*W!;z(ZWMMG=NvnXB7G#OE>h#e=S@Fwnb^* zJ8uux?I8FNu~~e+dOKSex94S`$Yh3tw>ztWS1b#*$$z;+o~@g#f$Xgr)Q26@YA04- zA8L@`SC$4;J+@UrZ~0Jf#};($@-qUK1v)PId&D@(Ws=Xg_c3Bw&Nnl7B}OMazFXgl7VEZn^ zY{-#vY$&t{j=My&j zIzA5!#=AlLEA14@si_jLSk-|$sW(^g1}|cNPERU-5lO?xFrkg3HnZTi5KvY_ooKyf zeBDm%OP0SNKDrta5m})mgQn3N@H!tpBNl5y5K9rJ{l|5XQKJfkWl1!c4i*E07HJ<3 zMf(B|05{D^(BoDYFTWs3C!i(Br7hV~_;_(YkOel^9;0Cr4g*s1|dVF_n^nWjb@=>A2VN zwCgG63Mo@FpqPZ&=hx$xJostVsKJr5j*K;b!E%-B9AMk8~c zU}f#+24`Hfxr%R}Cw6HZ#~S=MO&>3hUpoc-$yU8wq_dnX6}jYuEz!&h@P}U87q2q4 z=Prc1?a-66{jO~A1YQ?z?XYm_p3XfskWpkL56I0c_^bz;RUr*2`p1Ah zeX`#bQycu10w?m11stnCu4-)YPMIv$R{ng!AdnPUk&%%QP_vT^x8>H-?RZ%JAxMVb z++dAG{Tkos4?A{`Lq{F+tAjZ6w5u}m>ASzUWm~%-Ou|@M8WsKG(eP36Y;j#lS}yrB zMevX|b)Bsamdn+7SVra`1g1&VM$@PMT6}la=}Ix`M7^a!q>TUJffAAwx5HRf?lN-v z+>k0`29LeuOoZF;b?l6;pq@jXLHjYdfcA=3&Ma2hv|jnw?DzxI?}7Q(!VdGwliK|M z&s5XBB{(4vZVlj^2cp#ZW>H|ogud=zAhOfQ?cSAZ4CNQc&&u%39P;VYJHJY`eOh?E zayE;qsWqv_ioz4{>}VD@+rulugAll^M!WONjSi7Ys@p_< zi_hXFmHDiq;T*^rShK|UIpCGe>`zNqh7z+yXFd33p5wSr@%!D2Mu*pVJx2(Gv%hD= zX0_c62CCcaWY)Bc7PV^6`s4}+ZyjE4+jlBxtON|vV#D^WM^z$4ytphVq6B5M9jVA* zt^|vGusTh5?_UxBB0JRGr)Ni}`+H@uMPSkf$xzv~1mCQK_Q z6*EvdK7YaHl`NoPG_y6qdU5_a{A;DrvntAb#0oAeHJOZpOzG&ifbHm#+Lsm)Hs_^{ zN{azUmT62IZ(F&BvN`iO+51&7Dlmr0w0r3%yPa@+$%j)6x&ix_4!zbUw$t7=MqRBh zv=A{5lEb?@02OF$VH~}ORXW-c*xtdk3{hSPZ2Bx4o``-Rhh;sqq*gY(@O;BMh-_qS z_|4AA>c_@(R3c+Cx4L{T&onUytIX=R z-N4&@m!o{_Qr%`TqpBLLXRY+AM{`ZKOt-CjK72CKB=@s?u0eA$7B(ICt@~v|dc2W@ zo9)*4h6xrHZSKpaaq8o1=Kf}!Fj=+I zV_lxwTCXPXO>x8MgI9fi?V?EOm4ZD*gILUNdFcFS8PtnO6?c!l%qU8A{-_EMHn%iY znNb2rDX)tF>|!~PWGS@~MKOgQT6pSt(OY9lzl5#On+CmP_IT&I&ipf{!5FJI`^|R>q8a=i5>7o6iI>DT!Ch3{a`&!|U zV2oI`xrL8M;j734tLW0_QyR6M<5jy?-56TCp(3ttB_*aC+I_oH@8P-Fbs476EuuY5 zG}-xhGpfz_X{kAD%SD7mve(#$Q_+jb@wMR&OHEpNnXB@pTb_Ch$!1P-J+RDRPq@;N z$A`wK&zwbmkq-{YD>dJ9IW@?}CYo`W-i#sKq1@IstLy#Yu7z9@qgi^Mk5yPB*d*cHbf1OM4N!OP3)r@*4G4YX~lD z#0m)u!L%F{bA%rJ4MSsrgn+cPba!`2cgFyubl1SZ05kL6 z=-&SJe%AV)?|HuezO~-#AJ!V~xZ=Fd>pYG#ZntcMBVU|e#O5B2E zOB6TMEP$!{)c6zDZxKndKw@|(@Ws{zE~?KGbyYptxHaS+CU}p)mdoo-D`$Os1vM59 zSdCK!2zTxIJ&MWFeIj;KrF(TI%NEkHnSaU!rvLzFnjHWAj4c-;pUAR_{%qkPiHsxr zeN_w$_&t_$QTj4dHim3eqnU@slcC0_K-+G^Gs(mVc2X{Rf|NvBHx`U)#lNt^8<3WjzIz;@7Bm89}R1rU|)T?+_g8=1Y?HOu9rC z(Fsc7-954uk2Ma_u8?&2zWx3LToL%jT$tj-*`nd%7r1?ieMz9kN+sxJihl{VWKofm zYD!er^hv#iICB_x)vE_Y)thH6jIQC=AW8mS?Hr+ImS5=BMAmyBXc-I=I$wi)8Yp zB8`GZGEwMU^wZQ&?;6}jWmaAC^)MYJb&d`&>+V!L%`ZAh_lDgI^S8d`u+A|fbaUxI zN^JT~+%(o&u*+xs&c8#@!lvQcUU z({&s?m4z}5B?{6I&h0rqiRsgq*bPGAKyAZO?^DBD#1yiS;ly3&++IgmyoEGBR6pII z;2A{4+S<6d()Bo&0Uds>pQGZ&$tF4Medto+Y{e>CkTKOR&kh19Vb|)U(95AGJA?xoh_Z)?_F{Y@#&$Juogu=HzrnCDfCqnB41?$G8GkqT@uC6vIMnB;>8?V1v zd1OY4Rkx8Etf9&ixSPn;-#r(b_7KPdDLMQRaxM^}BR$|LBq9DyYuw`#oovD#r`J~4 zkkYt4H!vo{^6MWGw;trs<_fBoA2+LOSD8w9>ejorZ=@nS`c%=q{zB991hTKa0qlT4 ztQo{hX#qA*Z+EXgZms$4;>XeqXT~5t$jpe>nbcj)O@doA`Y{Z`IEjjh*Ck`gcDzFGj`?HIv9N z{NE&X1dQh4efOvpmI({I-Farz*`3G1M-tXpAOLzfF+aArpMvI)d;_6;V8CtYR|;b) z)pPfmbf{ISXHqYqRqF5gl-X;g$1!$CHJc`Pmd}lacvby<>w6R96N%S?#ER=NvhY$v zYbCS(B%)2VhR;pdRif^=c?I>)8;Yq(mCrX>1~n^%7*})9j@%9c+xjT>qlJ3Iq?D_k zsw2*uK>&d;l71G@rQ(xuyb*9)1i@xt%3v_|9#I962Qb!3=KWH?K|0s~0n;aij@;2p zKe;KNFxED839)MZY}Mj}U*u%2K@n8} zbJ;0uqIU-!m4LtLbaIc(&Is%)26?g(OU~F{nLRCE{X^PH7q%AP$Y$ND14_kXCX^Z6 z%@d{AQw^vl)#~Wqia#+=2QH62f?c-pk|Ly@AtOI{#z_eSoJqIF5D!7RVj{%8NGx`L z6zU}C%RQlh6hvN02^?(9+`^A=O{Sqsi))KVjxAI0qK~%v;e%>69OE_T4~5^MSI94y z=?N7-6?ds|Z5wa^rG_9S0&j>;l@+O^sOS}0=sXEQgkUBd3Dhij2sR2j`{^ zJY=>Aas)_^;llDmUFns)wWq|2oMEPem2HUG3QstHYHvH*;{kVsJ&~7H$EvuSe32Z8 zkbNeJA*~d1CU<9e7ZHb>Ds+=C5cGWOf0Jg(b~cT^XX?Od<+xO}ybLK(mX>qg;AQ3Q z87>opm_NEiFTOSJVLedUdD^KAqhl;;B575cXppJUOB5beaa@|l_9^b8^$7}frqz|6 zOQ~)h)o%55T?5^S7_LZV_mJXK(Mm?oiSd-JG{W9z{Lvs|t1_~(OiqPpvc!3Fk3Y~B z&Mt9n|7aG+Z^Evsl;be&8M}TUoWU!av`l(7?Q(m)sX!}|0`9aCEFe0;Fid{dYr5L6 zn-1C>dp&;Mw-!f><|L0HiP}}Lj`b8+DqSSYp_U7a3*@(98@>abB}Hnju&35=*Q%9E z>ZYcI57DqqqYR=g`#-UD=Bmwl?7s7l!xk^JE2Z`XNUszafp~a`*IDEQzBq{4M#rcP zk#L81$`AIOZ_QPJSq5L_(vOhZn!0g1X@M3_eAD_8q9Mj>=DYms%t9c0zwmM`P-=R> z^_029tAR<}U~SDO=9w-6-Q47v75o&bqe(hNGo4!w?f7!bg!7I}M~bPL;H7$<=PD(r z@7*I=JgPrl-!i)DvpVq%ecCV76IYS&N;YuIqGW6+2lw^xh0XlPgXN?b+oklQ#xX&n z&KfM6zRQv{1!}N94qliZZ7yG|hTP!{%A*}R+X0EBy2NQKie90u67?659(!BTO zt8f*ie|BEmvzDuyVwH0-FSntZ{$oQ%*3fOvG|u|a7dD}{dlFzS>{-(7gDYe&vsEO= za%vRCc|F{&=CGPir&<`-w#7LxmzDB}@wI1kf(4AhHGF1>ju$2aTN)dMREM1g-C@YV z)k3Z8CLI+SNMZvd06Cd0g|cu^8wjH;)KM!0yR8KrtM&CNj-FnQ$_wwDX}AHurEHro z1ce_Kc>AwL09;0dtY{w11{!1oN3rn51y67m!;_wrYV#|Js=a``KU?LliiM1C(#TZJ zhtPp4p~t=@!C&A2+e!D>zj|}l?gvu|eb)}PcA2M?Pn`86*u8bOP+R|TvPISe#X;Ao z-+EAhKU#)@mT}}ViP#@$9s^WPmLh=0xf3!!AyT1!IE!zSspqIGrnXquk}j_=NLRLAB>upetL zAejYaZ6Ke^>{IiSG~O^@nVb34P*fDiuM4l86*AINcVl(k9q5t0+!E60>%U|?;bR{y zsZ>F3Luo1(CsU=#Vz-M-okn6a7#&8J7!fnp0%s}4I7YN%G>0Nf=b)sGNZQ2b!sumE zv=arB%RueOi1THFS&GBrfZF)@Q+;U+H!*W5b+L96%jR=timQza>ez#zWk{}Bz}16% zct67pdO>1oRY@a9{^qf+^Uri;yUN64O_hP_E>!cF)&o_yI<;lRe)PgBOG5ISoE|+< z_EQb-(-j9$&l3go>4uN4N@-1`Kd*1RI$5}3Y^~Gi$Z~F?WxO*!u|+6Ux1{E*d0jVe ztS*#oDw{r9_hIvzuxtmaFzig2*|EwLdznmPaz4h+ z*Do6dk=UtCqw(ULu|q=7%r4=b{3)HBkvDoT;~Lart#qCu=D|D=)NHmxn_B4d-jGdt z_06yh0}(gMz`Ycf9o-j7pIW{p7Bvll`1RgjSs~^05bK|g8 zRj{|uao=892z4pQ%h!>B!~`A?;Nt|Fb{muj`*f5v&kLRR`(`m&j*?Qc;`jM2D*}l) z+4Y>W9Y_HxJWv2A%&tAxTi0NS2_fLTfv@9P*;NQt-D+iB4~T!dnQOXslUTP&R~V0I zPs7YnKV7TXLKpP|NiQs|$F6tcg4&Gg1uOyOynQ=vV2hk3|*SgP{f%q;iZwNucI>`rmWB-1KF;SG`AG) zH?GCjFq|ls@iog{Bck7^Oth)8K6C7bKziyYqobP4krhNHFX8KRWdiEP?Am4L>&bnZ zM_Y(7D8w&y+%Z-&Lvvbi*ctbAOw(z1s}9w05U1;ygsEY!SvL;zV`62B)aoT;cU6>t zr1uOcT7;OFK523sxAkfnh;{H9-iYE?_E#-}>PP8lR~}`+q*!^aZpeda=|Lh_da~w= z(r>Vbz2JLpn!RIEfTyX?wU|MZ(Jjjm7t^G!TI-@fox?1erQi6yot!q6uydYu#kKuX zi_#`d%|tK4w>xLW4ttQe3`tjD*Gk=>=Cyhu_589rvbRT>lc@17%IoaNigz3mfj^Nw zQwq~v^?2{i!?SPqSX&ie)y_XsPCot1%VgVxx(IGEcAt&TX~)tkQ<`~mC^7pdCBA5X zty8gsz1FqPnbA~CarS(B5M!2wsJmAlc_^N@+91uM ziz_Ec6oQp#6#jLEn0RLB6dUYxVDkgLa?cXKc z_$9PhWp`$s;%TJS(uvYP0GS(fVJAwN`BM(&5lWU!tZ3tzQj^$6GDY=C-ySnp=y7sz zOtO%XK8=_Fi^YC|SZG&rYL}pm=dI*>vR9BdC~*mrag}VGi#Ycw2;2)9~b2 z20on)dQe*INYYF;OJCa7xx|vwN*nE6a9hbA%BNLo6&|Y&ZgVAvW<@ldx>af5p7IfD zQ5WdsLF|}&ZuL9=rTn6w3j< ze}>1gmuD?ACy&(;rSrV#aw)rJ$)Tzw+Bq(&dZ~N6_m(Y3O1(b#QCepFtwiQ`Z2|sH z^ln$ALskcR5#g!_4mFr0F=M(o)K;{~GH0?5t|x*!w@zul*)a-bv_g|@NBt^d?&Pc| zxkf<2)SUNcRx-eL5vxYdoGT4QlUvU5GU4G(u5CPqbox%uMfC&~)VSWso1>X*3d8mwkn*fiJPY}qFzi&wxl$@01X40x6ayTEqv-Pl5eN%y zSR@e0RjV`Ow4v_7t2Lulc`|gcy|Hk`O$!7XApq?R;8(-qMnZq`A8{p5E$+B;)t~Bb!N<%WGKUVFIaxYR$ z@sFn=S7aI!ojAWG@LAm;ZXf8I=SR+u7LwYYbmqj((!*I|tZ9|=Dqj{Qd{r8;*x=_K z7CVatCAiZTLGrZPQ~{>bL^`v+!o1CNWH_Xaz=hqXh5s32>cPTdL9eowyk|N+DEB0C zn=}}r1k&B#DJ3miS>7({ORMdjJS2G~SMIot%GtFZfa}LfK>Xs~#T;1Urc`Zb`7m>` za4FU*VhT$+j3E+E)I$T)z;&>1*fu6r<(2~{uC8#VnpJi)gA>mk#iFE&-1i!Yuz4)} zvSu~vTTWb`Zyu^at3GG#JVdo7DyjxD=Dxm{M_-$MgxbAwCKOfH2)5Nb+HO1R392GZ z$MIMB(96c$YATga%P5eb_Hyjb6eAEIR@~$|%Dl4!MjtQlxE?MQ(rXihM6IgboOcAu zn0-E+lZ}%0f8`^SsQzL`?IV|CVI1Mg!?TByhxZzD9E~FGSlzz3D8>c4PLyV^8NXv!?7F z2btCB;gbp&(LoESmmC|nX&neSZn0CWas})T%W#=Ia|yDt5=?WMTVW@9*tC zw*z&}^C|Xc{r&M$<%NV!ukO62E~6o-a~IY(+f+eK{(-TUNpsSLC$*h{T6Sm#8*77d_dd%uOHA zsuN;T&HZyBzf38LSZ;FHYdpydb3?UbY+#dA?C#VRRn=_naG_1Unb-O6oF7=%1v{!( z-8cpt>2L`PJQY*5YC5}4Ri?u+xxV8pUpZfV7Bf|9nm$;o$L+-r&3aWZC$ zdjT1=j)zZAAm?pafB=UHAmc|UuFfdDwayPXV43dRAv5MS@H;U7ns;wQ8kW|RZ9^vo zN!zj7o&WJ(+-3XloERZ;_1R;D&_%Wxi>Wh7*p9XNnd%wm#%27%BF~b!BIlF&s?X#@ zmQGr4IeW^;vSJK6ORihP>elGpf-;RZTXL7T$&H#sQAY&#>k0UW=~WFiufuH?)4wZ( zOObRnc86}dFzj8wh@|@+*lUImtC_ofn<*gqHuLp|LDS(0l%q~C1+nabiKMCYy|}zI zE(OzVetH4|Zc1XN_cV5Hb-Xk;&vdR7EPuEUt)P_Syw$1YRz)Hr59E9Nste%pX>!pz z>C&H@yCGZ5+24B^3aq7dh4()0{8jg5?6Y)mrM@3t+Q-au11?{kW7K1vYfVKOk1po2 zFtd(|6)Vz^QY#il7aBseIZRZmS5?yafGi-E^7w;9_opu@H}M`@R@=EZ!nDOb8YqMY z@&2&!+IV{j?@6G{c0&vUP^)HR#b-GZdP^rqnk)Z`QW_{xo8;s_TnmO3R`qqo z-4ozQ9h_Z_dW(KIQC6*3lCs@Dmqc^(P1$3@=Rj^#^{^(Z{U}n?YPo%fORwqR(IDOo z$AhD0JiG^7i5w4hA8;#BCpO)@)J*f^n3VORWJBBd^o%2rJxN@#S<8^OQ0ODN=DPTU zRr0LS|I6o7ZRk8TPAtWpSxl|NAj% z9-b}mY=b3(Oct2)y?T+`2-4dRfiQpmHQ9OUi|i-7o9bud-}5|-taoc_1v)zKGfC6k zxhT!@p%s6^?6qGh?mzML2?bG&bDz^cxr`ckCM;^|xRv(}nQWDPCBAlYNk;5nH6J*C zC(V#~3yPBOl-~*X_O6Nj(i{I-l4pw#dv5@-j&D51RV#8$8Sy{9^6+@f9s^1RLau=x z89*$WD7O~N!Y|=9R{*uRa1aS`9(JAAuYN_r4@~s@%)gUKj9qJdgwDTk2>pmug~*u8 zXANsFUa|{ZymeFOzgE(zS)nf-(D-(|cF8kg*VDoNvxzTI0-$-@##1l(i1U~+tK%kS zER4hRQ+^h~uUZh*mta%hmK3_eE}h>Jt#7=}&UyZy9mANa)_-&gBql|R;Ox5NlgD+S zE}hw)5k^%xOyc+cFxeyjuSpa5!t6jnv-3tnUkX4zl7^hJ-gifmL@CZw2MGYN5H8MN zKLX*OK(Q{W$;g*7&VTL^oLoEO{<8;*|2sj0L^lt}ON13w0Xc6qp07lEOW-Oh*5)u_ z;C)2@^?jWM!tAXKZxma3Xk36~hLq(icyCs}08y3H?_$Kieb^Ab`BMh*@IHZnwJ|K2 z!bn3>Qc~urDe;QSpoyROdqe>*IqpBP(7=pt)yn#QxFSh+C#_|xU?1tMA`>2t{qK&KY`hzgNV?w3ZMq~%U_J+89N7;xRL~1`^tj`<8 z4`$)qg2p`%$l07V4~yN*>Dd`gLLH|0=fsJ!y57$?M>)oAgE*SRqiy!S8ij~c-<8a$P*9Xg zRcQ%}*YUHu^QueaQMd8Rai;%&q-qw@A7;c1)##V;uQTDbrG`D3V>d-=N`vxgD< z-#MFLO++sRXr!37VL#4x-V4TEEjWBPk{iEncRXs`zeDDATwxbR=nrg+ugP?o5M37A zYbZrvGQN|I^*?6*?m{L|?##_2_1&~4r9blW{4=J<_-A-_ZFflScxhKJ)S72Vur|z> zTUyuz1qN5wbdvOpD2;mFmqXLhN$`!A0-YLO|MR85#bp;=yWuwqW`rI$S@~=a$Rs|3!@^E!BtmC5i( zYLczAYjM@-*?zSv1~eCy?yf$-Q9UlKdt8&J+Wma`q}6!mU@$U;L~H%XF|SZ`xS~$) z&-&qhVRLG6eS@#oPqz@cKf803scNK)wDUNSefs70Y7>0y>zZA}7p-{sJJ+Ypgs4a4bvy2b`t71qW7h?rA@|G4yDd`m=Gh|A*rHdZDs-G=scXNRPiLk*~OBR z_TUW_QCh_>7AVHt*Nz&LucH4{&6NKZL?s*S)h?*&72({L)R7IJl*dNpA9eW@0UH!*cIJNnJSlV@p#JlO$PHqE-2_0S5Eh{Bz7`&38cY1i?wb+Y0&ORKe~o>9DP zb+PzskcZ}1+Scu(q5 ze|Ys`fN_*siv@Ggv;-UJdyev2XAjV$RE&8XyeD8FPdxXvQNH~7N#kXjB$q08IZylj zOqpo>tjy$!1a z$=PysBBE@4o`d@ETb{1&xa5IDhZ$k#iR|*%`%xK3jYM$7^xQ_thxjtn5GQXZ6zq!r z?2yN4W!wT|?PDf6gMUhAn4Xt%wl|1TCpU#l_ z^yJfT?lE0{)|A^g#Vfj5i6X*Oy+T3l_NNDwNmn-t&qP(pDLqM6k&L;!Ugp*Qp4Dh` z+gsLC8dm$eAp&E(RfxrS%`+RHn$@lB0E?<^QAg~bU?2t>?^#!kOa0h5(1Clb(yut= zO(`;|0W~uvh0O6N{!D@S^tN=r*iYrByl$H0&Gclp?9)||s?!+V#wno16=ir-SU!(NQD>pFtHJpFxxV0r zKY7*x=n`{P~U_Q>HsbnhS|RQk5+V9z{OhV)$fKG>ZF2`sWwrcTQuy^JmAc-nSm-Xnx6g&MI=b zg8SR^TY#<%{>Yd9OZDw)M_!hf&t|KVZ z{0DdQtH#r!k{)UKb}{{}rkmUvN;h#-4poQayqXZo&A9uU5D3e_Bq3G&UAwOdE*>vr zO-6$o9mjpI7Ik`b3fR^SlfP{DtK!!+Qzrz5^_Av?DEB6>&Q%+?N8FGO=h*jNc-5~1 zt_L)->)7jFDCl`v3svpuF^x%2<&Z27)#c!}4o$DBh>zdsHPU8idLD>Wzbqj-sG!`4 zTMSPv#61lwALB*%DTBC~`0HyVeENy5k>N=0&0T2vp98ul_bRbGv*^m%vp)!O)E~XN9+A>VaYoh|-XZO9Nf_^ANgoT2W zYqJE2a;oyj4(HlY<8c31(pEf|f$SE%4@}Bc@4TGel@|cL}Pc*+R-vnj1LCVEjZ%%GZ zt&(#~5MiA<+gBKli|r-fj~b$^F;WmMZFel=0dSf`j2Mdlac=Sb!&0_9ETQ`BEu6?l zX~we~1X?EVNi%Hyd1@`fS%c}XQ~o-gFAlCB>44n*TE4tDr|v{1R`W9j^gmm?I_JS$ z6jCZ>H>n_xT<1tfdthbGcXNVtXZG-&D&$-3X`+A+fA2)6#5KICYJmU!2xcy*9U20} z=_Eo4v7Jjmcr+g4ah|jqs^8;o45?*L!6db;b163oSlYSE=qRZG^1F{&hRr2UW6f2p z>FzUq^xq<%*xlFlgOPK@*^m-%9@ZB$*16c~@lMZR`=&W<<{OxcMtirXIjx%xP80LU zWp@W@@$num_0QLvnI(yQ7n>lj+L@0Om_BalTP@NFf!PcsdybE8ZNg%#wVakk&)$s# zV~bBpo{s6fiPucH34eQVNUk@SEn-Uu`=OB##pi?h%3PCI z2Hlpg97Nl=uXp4q$4mq_;_UM@9KE^3MZF4}$Fn5NA>(}GSG6c9bbd`OBt5r&|GXrZ z7?x3v-~o=#oY3GTE?7PAp*^Tgook^DaCV`69S}qgX@>0VF&>Q%DFuQt=z2{Om({_+ zp1AcVVO+NBN_jH+bu4g9i?pVuX2|F|QtkYt2RUJ@kFv{z&p8}zGB$k{=xq=Nv$9&{ zEFMO>xs|=&<2y`7k=&aU|7C}Vs--lGo}sttd%4+1?yQwmz=NpeLhBuLD^?2e+OFD=S;?#q98VTG zJP~IR@bP>RKDyh7Zj`;%Q0jTyw>3?J>y2lw5zwq32j&UDd|B2e1fCYx}^p6<9FuQkLtX! zvxBeze+_+4FFoV-q<5&M`n4I9xYt6O{2*D_I+9w_M)W*Bh?qHGy%Yy7EiL7zme>4} zY+J#8vYx+Bli$_T6Sw=R?)WSe9~0LNEHIocERq1hik4A+G6sXaoq*b@Pnb;R^NzpLo*vJ2Qf$KWvahV z&MRY`9!%Ql=yY1Ejq?0_QnQGxr*+NqpppGKi_LL)mqNEg4+1rgWH5B6(hTRlRjEpo zKi`;@oo(EiNp3w^UxIsP_H{1va)G&cot-GJZURP|axiWp6+z-&?uaFb%%2~3#TKnGZ zk&HfLSi-dmg8UhM+`~_+6Ov>e{ZV~~LkEm2^U?lXH!!{Kg~2sxG0omuHX^8im#2~zm^+t+Aif(O z$~y}pye-- zA0CLdI2=g)_$)+h3Yx-0-N!l53U7cy{@cuMgIZDz$F{!N{V+iq4%hOkw_<(#rFJM zJ}X!1{@{arvM{1~p_Azl$L&GMflndw6uf{iJL>BmxYoA_Yd96l`FNYX*6X>{*(cbm z3%Wy0ze5`WWGIAtag;!GceQ`SUa2FXq4u;BpLozYeg-5+)@z$m)Hw}@GQL!^9^j1D zAgJ+w$al9`w6&LI*;w;q_OqLrU!O3tpK#R=tm-%lzJk}xBopwy z4z99L`H8m*KDP+dFZMRuDdt=Omw&V9oz|<~8?$osnMhEN6xgY#AtJ3dwPn{-tFX5p zh+D|h=WQrnYH#XGMxBnmV-MX*=Fj?SFc>WcjzyIs$^c^G&c|4HPZhj3-gd`Tez)!? zd#-e4EWr(r8)5m4nSxUiV~!G{?3?>m>}0*@k!GK^lo;~qq~c|3PMv$s&HHV$f0USg zlWHi#rX>2-=-2c6NWSGUI|}iIQ6&i*1pr^5-3sC_z)Un+I3mTr@r!s!MUE<}BsZn) zVfQYxCb{k?=)APH_R1Mu#`SN#s}Oczr00Jy^Muwcc#3SBBjI@Z6fHd==%}`<@nnB* zHY>DI@#F;VXqIo^ohnO@Y^Bn4M8fssqvJYg>VOjbpNDF@0{vw;rZ5L7W~TL9cZtuo z5)?acRF-p+>XlopR-r_|0!>pwJWb}yk^MngjXG=u6FXg0llJ?hCFEPv25ye~%2t8m zOTMk)n*5W2`8DD#ja?m~7U&f}$Hbj;99tPO#oOPK1(Ox3CZ+G?^1~tc)0wFyI+jvQKEjqB zrHPOu3%fq;OFs<)^?xLj@71iaUyvpch-AAPcB69vWos@DnQ01`*Ew2BK8Xt zh(wKy6o?2YGs2d8HX(9!k5LlfFT8o*_SMdMvzBb8B3Q|Crm9^7dQH5Jo70dtq*ns` z>sm{;a@lFcKJQL`yXR;%^z$$nNmFGi1(#dDMy+^hCwP-fAu>aw#BufeCHjLN6-!*i zL3Mp4))~FK&IM2^Lm3L($J-~YjwlbEEK;dq5L;QB~?HaDxgZH z89OJ)g>|WpHK3?ZQ%YH72Q!TFNrJ+;#=RT}+RAl7qV!!>JEs|(#hW4p(=UI~XHuM8 zkL*t)Xa_x=Ef6$vSI;!umnSq+W=Zp)2ia2#3j=5Ds6goOPHQJ33B1T&qJHYb11*Ca zZ6;!IRnH(V9DKQP2*tl>qxm;blTSg`>b2DmH}v2L^64M)qDNV#<(zEJ~?=)hzY*ze^6?_gF6cL!E{y@-0`# zPeKZSDeAh)+oZOJQYytne@-f|v+QiN&Ki{fx{lZG}6aWMU&8OcB-X~RRTgP5=O1Kgfn z;mjXD$<<%1Y1=<-L$2SS8ObjG2oNibIlq7fV2QR2{hJp2r{LXY{rw3NmWwG7k^E?*+N_KV5^L0Q=&FZ*F)n-6!%0|1DOeH-rC0*8FS9OJ4i}u>jl9dch(6 zPuJj=zw2i&MgA8{4)7-zeFU1q>kGd8f4T<0OK*Q|z2LL|r%Mh{`@i0Xm;LyEvj)El znk&2}`d=)$+J6KZ*nj`?H30l<7wtB20L`djLy;te1ssqoLP@;U2KZD#|E-L-_H&=- z#BmMk)E>0(I5?Falz5-aO}KHlJK5Y6Zamn>iw0@nx9jNZv#1fI|K-#=gW z2Ymg7quH+gKUGZ%ze45oc4bItK7Tx)`Ns_yv~1bZ+I&X${Hob|U00ww_6YE-K) zk2OfC5{5C7o^XEJ8(oGD_FaEH;^_bw*Xcut#=`q=G`R*4?`_&XM$_c`U& zf5@=vwI1)+m~c%JHqgk{O!avzUmc6rvAj>C-8jr@Rle6b(4RePFW9&874h+OFgUg> zvwCrPV%@E%=}RI7^FrZN{l;`mRrNanT$BG}tLNP|)4xE=bX9P65EOc6qTHuNY%p@b zdq2^HsM8gGD4>t2faeh2lvM0Pmd3FYN910pOUN%h&KOIhaPp_ zSgx1tmC#OCrG!9C8%yn8`We})O`IRS&s-`TsH_0@i>}tKXWY+{)726<#da1L_M_YH zq7MZ#y8+{i4Yi6im7PiigITRI7a<+>8PY}PprNHz{Wv2lpNXJ6a?>O`V-u4C1dZ_S z@;DWdzw`RYR*M9`sfo$*Zj>O{Yk&dpu?ZyzW3AeyS@k^k+f910c`PF%p65JSUAiPY zpP1n_PFVS9cHI)gaUVhPBp?|>JoYF%Po8A}jVzH_kij_} zcIVG*Sy|6cPj34E<3wN?(=d{PH8y!iwJ|HzpchHP6OtZ*xNE-So~r%GCA&^eT*6)r zo@+SrSqrIM5P(1zm{4raA9!F<-Rl2Ir&0&xrAVlGZF^HGx5ucS%V}=?4-LcSMU%Vx2*T zH1Q*LDJ)(aUPgB~fqw--TiRm#L&&}PEKytOp*WMBS$g_y&fU(SEnuJdB!QRKX42EF zBCt<=x_}=VFf(=k7KZ(2)0J!ETf-q{ShNZ}s-N!{eL(b+KJcDdpWT10yAmM`Yl>Sq zUHqX5j#oKu31^R*_>8k5!NW_-X5(M zeGp&T1h36IjAv-+u==1CPup0Jx8}LxL|*ca4sz|7EMG^|XJ!^Uh{a4n z^F%coyyO)XyF+9-f$S$MoT}~RZGI|qaaJvgWmLh~Mzmos2b*TJ8wz8Fe1J-*s3GAf zbhVWA@^pP;HsM^WChxsWvr{Bm4xI*bIBv1u$Gs;vg`Lk<{eMF5WoXzgA(5v zsMc_xT6wKzrw>6qx^L^tN(1^9;_KA~(A;4gMUaSR*1Z%Z*L9!7MSA5rx5zKiVK z?(=@{#3RJN&AFRQD;t-$kF3{CO05>^4s;JTJ+9rF3l8vs6`8;Q)e@9O(`QNu2#mmc z=ToFG0aEGK6Vn0BojbAEp*c`2tF+V&$IhTnh+>Zh-K8FC70?}WV*1xqoRzro5BH8I z>XUa_=A)X7p}zD+Ixjol5Af|qYj$wx9xeuik;Wr~=+z(`lR6c!@xp{@q`u>prBvxE z2fSDWTo>A;hKKj!<910-x0z4VwDYobMaQ!l}qL)KHOqfl#>|FE}-wteIV_4 z0Gl>#QmSUN!pu@^>QLD>8El8lN(K;q1&5EkCQ(82xUf)|@0xClIT&R4!s zz-OaZJ^Gf}E>m~je7)07Zyf`t#+l_#*QDu+>~!htC9@)t^7Q8DvRb8D&GaT zS3n-RMBmzDWixdvD(2%)G9MZI6Mk*1fLI+&%oatJ)*bX}@c8+Hbc7f{Q6c{e=ndEb z0)3*J@NN+Iqq<@`ZAdzLXu(3T(aIW=!C>D@5#z72Qs88*Us0TXf#lCP*_p{S4}St| z2}SS5#UJEl>QPT08HS0$^)9@!UA0x<)0T8i`j9G5np*M9|7VDu{}s__hllr${Y83h zc{xU`Q#u4+uSZXnTLKbyT!`y@CuP>+&^f_6sV`V;Z_zUDlah2n@;V)^-&p3*{Ed`9 zG7KhAsg|0=>=MHd6YxilNuLO9<9M6Z0mJTex}fX@`l`lu1dmkEW!>C%%jBoISd9|a zAtNg5AQy6ACC@2r0~$uwVf0ng+a*VGS$U(QVs`s?@g9DoK!M-`rpXCv`Z`-1)t$ht z8yg;fG=>CO<5g_{0OMNV!$O4}rOuIMD**MbpEOtGHILJD0{Eyrd0wF=z&m76v^iKD= zXnpjB4XUI!e`4(mm`-U|-F1uZZ#NR@?F;xYM9vZfW1i5sg!krt$HhLCxj=Ij-oGgZ z0ABse_xUd?)3NwxMB;@VXmAs_k&)}sa1}dqVbI_3*TCE&$D)yH)b6M2@+VyTxA*G* z;=%um2mgnd{Qq}&Py=8b8VMyekF$XAgkP-WV_t-w1)Jp1Pq*~Njy-&K{)KGQOBSSr zmQ=a0y0KgTqFMfe_*Xyw;?qW=h?2qp;}fv7u5A!s!u#~$f-jhm|BHpYAW_)FhW>UA zv(A1#;bNy6H6|veK=x&L>t*%*6SkE6iX_Fm>}#7v(4UBh_vbf&4!8)$gNOeL#{0z= zMFS2YI2Yl6yp#WhoB4|uxGWB^TRp;;@UHp)xAcJTeI*axg|!(v95fOj2R8-@BYh)K zFMqS7e=}nDo&lr$$(z|afN_GNc+Ko@fYF}t)0xaA1A&LX6kf}ar$pm z$v$jc`mA-koEXuFsGdHg2W;PXjjDLcy4tBv%XXF6yb*bOe8*?BCPy~c# zV0Ujhy%K0kNb4-5N}FxL#wMb;R)GBJshY$5Ca0;{%fM<@{vvnOGJBx`4G@6%_GtT= zpsnispT`3=nuFuAgC1t%^%*<}ce!YeUvUJ8VuMb<+3{)N=qEajjPO-Yfd;3=v6=zE z`lGJuu{FgQ26_rbSRC;EO`+9YFBtKQBl6ymrCO*l3a<;wnjKm&8T8*z8hd1T{Wv(h z|4el2%UZ6wld!2ru!PIO)=<%cjBP*4haqq0xC_OKu@ zci?!-eW&vmd9b|1sZmFJygUv!WwX~k;usYuh$CetWN$%Jo)Z0om{iR!y9hD(k#=6= z7E)dztgjmeJ{zv5;w*SVLO6{v_i&s7VLGx)qcl3;O<_bfozX1K>OqQ!($iXaEx2GNA2+?nR5K`_z z3z8wtSU9Q-4KI4?di0?RDb3o`e}-L>r2=JzYKWqnMXdBTBZAtbTuyC+hEu$>Fw+v5 z9j7~p8WN;0Pzz6FgD+NAFBGe~MlkVZByqP$f7vduYb8|Pcr`QBUvO$Y=_dT$+31{h z%<@luLR9wzR<>2zVM~9I`i``%XP|ZzU;hZ^X)Opxcv_yl`#AAL+?t@WNzkJgZ0)v` zY*xeBIXz;O-f}dvP;*5t7W1NIM01fH)NkSu1Ed9Ta3JyCy#0z@JUK%wqT_8|3fJa|5YQEkc%hPV?!6LUI6&mD^w2qpkNoH68z7BI?(0&7;c1`K`)n2bE z)21)r7Nszpn!Q6~hL_Ut>;{>1CoFA%ie^G&e`#P2$yV6^(F|k#dJbPxo25W4XX%A2 z-^Ax%v~h#=vLsLpc=A=e1m*oc2^79(2)d7Ja7gizS^uR3(K~A1m7|8Q>2W5#uj?w^ z7fBl4N7T7HWLZ?a6fO~L(>zR7rz#x_Wz9N>fJw(2+v6H!* zEUZYKrm9-}9KREFWpgzc+~B&?$w@BiHLhJ(>804TH=Jcwy7!fsV+MTDXgJve?5~&wEj?rXI>)(VnyOtb@)2#*;+xNZAA&Cu^QL~>0Rj{5 zyB$kNwVl$Cd1Br`w@WF;X_kxZ1O2U*Il(Mil@5c4%h9iTQ;v|rE(r@D;o|=|WmddT z9!wWm>!IvU2V#<(RiuLa>CZRug$mv}{=Wq&m;o-B-Kv3_eyEKjT%#(@+DN7%213Um z#K0ib0rOdfgH~wI`Xx}EiGpOXl__VNNws!}^S-EngK%X5U*U$KKyt5&>hR*RfNHe( zJQvs9)8i8qdwaC5MkyO|>uhjEu(rN4YiGl%0{Yy0hiaFzAF#KpR~Sd4Y^_BipF*Qm z^Bt-CoG_?uses!#-n;6zh&7R?aR$3N`c|lS2 zv%4P8=BOX)3{>fB?a$1YcFpQH86M5?A!8-O#^bTmu>HjI9`LNbmpQ!DM`vY9n;(nM z*;iTF6d9Di;qo&y;lY zNm4|Kl4C&&B}gnXk|pOHij0a91PLNJNft?xV}X)0k~2lBA{RLpP;WzbpL6=$d(VA8 z-gtX##vZ$B0DG-H*IILa^ZVv9JcF-P)%e0{^-4H=-iKGY;m7;2rPh0hut;K?SIb~R z%$Kw9xLF;YeeMYVC)0Bs!N7u)BXB5~Pvf-lLy4ll8lQ@0GwW4I$lt(@^~E%HAC=JO z`jAg=E1Sk7HeN$Y#T&k6XImL&Lo6I85?5fa0ai(MFR#a1CLJ`qa3aNsqZH&)i~4HB zHxo4pd@!RV@_4IVtG8NeHZ6<*3tp}Z!fEa!@}O*({d1dyq1^+fiSL=a)@A5 zUvKMLV+-!`po_dD5tW6(bd`#<{d~v4c!|9m6A6o(~+Lgr~+^ite3$K+_njG$OkQ zJ`kAj*3$WcOj_81+3h8r29)}=qOhZ+@&(6=!cFW)4Q}o-u<^fvAKsQ1H&eHr$B^3` zNhfW#d~x@C{mnPZtSQK$eVplOV5aUh*8FPA*7qahM5)K9Zdw28#jbRU+H-{ek13kk z7!oQ%`;_Q%nX7QPA7giM&a{ytQUK#f@$^Iw%OY5P&$nv%#%jz4b3b}5L=@JZZj}Hw zhgXSU-v4jG4uOr{^UPRvLGH9Omr@R3(Spq^)bhpEv^M$=1f9Uh2l|fvO2n?e&a8?zMQ; zj(&`#r>!MolD5B_F6aHB`1m?H9uU2aqEUWsi;&i7Fm!#E-ytZdxF3Ie&~mf9F_i;E zT85`k_6(9l1V5>AtFzp#NNI?T*eW2811Ja9p4c3wHc*)VCn4^c1=eoZ8M*YRkxg9H z8DFvTb`yFl(*KFIR_GEZBG@7NaV^!+^806Of?S4+E;Ji6qgv{65*imUtkwJipd+{e|gZq ztWT458@VdhzESRi&b@F zItqY6{N_8KZ%U0`i=?N}1nv-Nb^kpi)yqm~KPxApTfSBq=ad0JLfN-$U^DWEo18$%|RGk26fD-2oD1`k}y~f)5 z9@Pi{sMFBZc#zecEqR8&E4q6f3IM{Py<7qwf&^sOViWRR$cSdoH`S*Sk7i!UTRIN} z1C-jo@dbhoj8c#JUIx?`;r@l3bU)D0{(bf^K5X-MslNiY8@DWh#Nf>s7NlT)$=xH> zUxRCl>p1frvHcuUVdXD(haw{>kr-WoF!1(jE&g(q1GIg9of3u{R?2rp4R<)qmAul^YdUFY}lAI)X+ zyUyaI&5mpO6mh6s=QqE9|MztN_`cR)sR^&#J~G)4lEKa_YT-7G1SVK$qdqq%H|U|9 zJi*b^8@m4sATzP|3(i?6%VW*k6MJScosklli>*;4sLbm`D7$u&ii~tK@Q>6V_)0tW z5B-5NJK&4vHy)vA6JD0;$!D?8po0M5LUVxG9~|1%(%VcyLfuW~z!FyB+g5B>3KS zjOHDA9U3~CgY&OL!|`&hv}o8>0D`nULw$Z@>elxzUe{5VYbya5r-PA zq=-Wt!!J-r0mcD#^c+VsMl2U|B-)vrGW{s!k}7Erpmjw zF~SbCF`efvJ|20I;z?1=AY$5MtZePuy<@&;sTPjA=nSFloMQg4QN&laX9P z-Xt;2Z@fmX8}eEEUrmU%VlVtbKo}=f8R*k3(I;Q}wvw5{o`+3>m}5ftbwRoM!n=KV zEL@N_fvSoVS};}e$wWT4qCk9uDa-Ax&#$Rk{}=Aa%$az;G~hi~5A7`;QYeWd)zV}cM)a&C%rtoz0YYTX(;j8T^zUlr4(fIINtPo>+ zSK^_j4h6I_;KaE7%loILV9#{oN(xCuy4khLc#tWCu{>jH^RSUew4l!{BAl8L)YljP zY+3(cUW{!ZwWMg5F)z7i;Ap)E=j_(ML?!=DmjFg&b=g7tR6ddgV%Fr|8G7>Rozdl* z%L`8>vri#2&iNV;K_YDXhepeqJkFwgw220=PmN>ntod%$X;4qJ|1q7sVyf%nKA3DJ zc{u3KpBPJc=oOaom$2w5yJNdbe*St`U~Tbsn#Y{`+RS9akI0nMy|8Thz^NHMJJ|6a zIC#{k?mqFX#k~e=HT%}jN7Id!T@sciG5sBk{@6%I_~rMRZ#UcE;@0e5!in@W3_KZA4G2xlm~l(Q$4_FN<9PQyDv4g4Lex}#K(1w z4-g)wXV5=L1oT%={x|Be&{Q{{Z$o~W{!Eb{?D=d>QAVAMN@2*SXKh#!ch3P2MYLyi z`}&plg|=QXSExaqMn?zwPP1Yv5;$d-K6a!_Y${b8p`N_DykZ0YFW}EXQC06kZa3cL z@kx7GwZPG-Aj4fwC5w{kL6X6XVPG^<>-ebd2SNP~yZk5&@=RkI6?<1F>AjSg)z#rF zu8;vk!fVrKKCrd^iwp23>#l%|(8sSnMQNo2eOnA&`u~pd; zK!haxaF`~BCUW)9^d)`t;y+NG0Q*?gGqly6_yL`kJosRap!V91>5!~65|zwFy$RW@ zCfo&ki%TGb=4JwXIY7i|RgURmzWnrkLb8nodnwwA2Jo@!Zee&SDs_Rh1#B-Vvh$-! z`D8(d5mfHUv;i6% ze?0f?d|^L9(NZqopE)6`=IIw`?yeTdvZFzIu$Q>K#lBAq+J-0C03(4Zl0LWWYZP(J z+btdNY1uSa-EEvUVzx+trxiyO37Y&&R}ZcZs9|tDhZ6ekbkHwN5q%!U0AkSqWh&Ye zc-{Q;@3q6C=IRRN3B7ZWg8Vu_SVpjF*$5wc@$vING0nd-wE#5mAWrCU9~G^Gjm-{o zUNV%rZk^sXX~aOlJ5ASr5#n1G;`_wR?rmP5(D?=1LiaaMPlH#K1#L@S%f0biS%z4V z670!|ZY6PGo%gD)rOE9kq29SQoVoxkEuR6~F(KuZD(UKIxuO#l(*MD+Dz+azI|(>$ zXG$8V6;EX7MXqp6Blr#K_J$R%SEj0q#KsG*qliQh2$+bbwjJrFJOtnuZ1imbBh#|3 zb7fynk}*}Uk5$N{b8kcSe+eKbr;qrbLAR?}zr<4}JiZDjNh9f*>)YYG{^bRSy(!C! z%X18SJu4SY$xJI*LKE1# znVtDNDri{^Rb~* zV#C}^8j{cP{}*Fbc}fKU;6f6H&!9~d!Gf5TZeH2{T^LE{AZSlz2<+c`}JQn6WaKMC)M;uog=k-G1yHS(Xzv? zw%pv?`{O+^z~bKvK6eJ(0L<~rK#qCZZdnp_mNbd;$(sC&fd3+k{u_1gN}`>%4=e~a zfNAVD4QpuIOVn_0E+G;XJUlp{jh<&#Qd6g^Zy!;chvbKZQ+g~^z*fJ!q`R(G0chr~ z@>qY)A7HH3Tm?OI6SB*GaJOho5n->c`7R&bt&18IplI|%?`Yq>=};bKd-d|WpO#8< z#d@ppHiV9SrY8H``X9NBzYlovImE|B7|`ai^FS36DyzyYdxP%fAS<(@J86+(R%KwR0hN_Aezd=wsdH+1-4e zUINl$(Y$fk56GAGWbz8~Y|nZ7?r-6OjlmRFP>c~8aU zf96A8cdC;lzcyDI0jB1QpHbLYcJH?!8+E4}kEp=*fr)n^ z9m&a5V&KVY@l((9SJU807U2DZ)E<&amhKhmi?2|&r=z4-|HH!u(Xsjr@isZuHI!}6 z&wS+z&~xRQoTc7m_{C|%l_f8kO}>piZS|z5s$QLBNR4DDX;^eXMkj41mUOpksh}s5 ztq1;i?S};U^>aJj#BT^L1A-O4Gp>QRUD8JVr?V9u>QK7c@)`5ch>HLc%1!AFy}#TU z&2f!tW@ZJY*bx57#)VMI^O9Q%&&>LxcH@%Nhy|z~Tc!f)+wbj}t$7n6$;**; zZi{f1qX17tHRd!52mCLTGxi66W0#uElXaszT;W}7lynXRwl>0>N1L^#-HzLStJ6yH zmwGRH?2DAf1Hd>3ijZs;*SEEs;UP7o!&rdM4R`=}s?L#HUOsM@4oJHfwT!y7wX+ORcW%&*l9szi~{%$mi*D zwe%LEP$E4sDnXKU)NO6-obruhmfl#5&2e6 zAcTD2+YwDoOdJgpB(&40%cI&Bz*WJ;cm{S=zjpcV-rcdJo*PR8mGsMQPO@-lC?mQI zi94%Lwt+0ieEDI?kcrt>d2M@oByTGB=AWsYzmsWi5`F5!JqEj+^#saMrn9(je(-zR z`)qej(#?;2_h-deF>ZHSMQ=u6409~47)81UajH{UUAw-2l~KgQjOLiQHA)F(NG}V~ zz7d^Jwso@*A0gI!uWMj>@ncb5Q@C3-wZcOX$T+PE^=&7-PJuiUvs-QWTZ~;FwGlZP z-R2U3sy*|5bn8LWrCTtAeMO207bq)vV~;I@uI~Zyu#1sAWj#K27ydQ{XjptvNg-|PYpSZ5?D8s4%`WmU)c1&F45bsUGd*DQdX1Ys9 z>_N#u?ue$RqOrZPaZ{>bUL}*VxP7`e=ZdW@207sq0f?E$tLk`VtKRxBD+;DcGJ()O zxrs!ZWUvDK%>~|-*pHSKv-Z4D%rXoi;d=5tBy@3i^MP~8cE%e=@fi|wLsCixkgQs8 zHM9B1r_?*^KW-ao`>UBBl+M#$cv!Q{{vgQbK)kl_?$`Na1GHE&4V0_ zoOz6lrMRHmGmCJN6m+};jMH*0ou{jVB! z1EpOL3SlG5TMHcC_ks3J}BIOgMrlyU9g~BnHrYuBT2bAWAl^n=n$une&3|Bbs z-r`A@U`ASEqg*gF#nRaQut*}p*H3+N_>yXw#hJWQ?BPAys?MR zxa{KCan|STXL1(Wo=4Ay;dW?eEJ7|)@uXfI*JapN2%6%}v&XzSYhBzhUz+PtH|*NM zxc%8`Khd;t*Bmo75uu$bJ|nSnIJ-m@QGp-@_>UkZB_ZJ)-oyrmt+|93j-H+g`|1NU z#|iS#+U*3!VQhPH0wZUiar$LGCU9GLk3HCY&EI~z(x_Q8GM7j|V9Y1Wq%QHEL7OA_ zjAotfsjdKiQ`W^*@6#B6Wt-aGH5A_P=jiZ#S#sLY8VoCZj^20fGU2U;#*~;h&iwS9uKCu^uF%9eibSE>{Y6nxgMGB! z67|EfABtJ&$Y~fXhUtc65^M?pJdRuY{iZV2+Iyw5wJNM9l8T6i%J}$V`aY}x8xS2$ z0S#E{jUEV&0H^Wx9tWjmWQoHRdFf{IL>iQ_Ey%8#S&x<0dMI7Eo8Qs6(dDU?$rP?N z1Edv}^Bw0u_zU4+l}3-IFb}{Dr^}A;+$?CS3E0CX5}|GBeor{|^9%7SUj zH=c7#zO!8YQgv6IQB(`kEO8N2qX&j5?zOji6-&g|1;n)Tz(Tt?IvO|k5{=1^!NUz` ztLUY;xW>eK)@rZa$h@^YoObY-#7elV~vo~q6( zHV0**r?0K8wd6F(luEjkyaizH3vjqT(V(TC;>Hk@r zNxG5tZXyH?pBH^eARbou;J(ij`cb!qhSN@^1Pm|=6O)q9R}!{-Z}weON=F#Mb+sC4 zW2=b1^;$-FU1E>Wl6Cp}4L46*ONtqL%Dz|OR|U$&hV#2;MdeyAr`#qP9u5+AP1rDN zRUof7j)0Nev`_7Kns^f_-E$Y6U#AL7k$yqmGW5kz!8gQ|Xsp)|A3xMgDd89EN08r0 zD8D@cH{?TSu*OacuhXsTjn|$x0#!^-=tQ!;l;S!K zp}}`uxO246CsF(6E~Vb<;mcR?lKYDkMFTU{+XhHQQSHR;_1n@6GJNija-{OLMUn_3+cSM$^C7)H>+O->J|AfbL z=+ItfZHl{yoF+S3(6soDHUI2;;UA9dpqy(nNItqsmI` zS9kt57T^6cUU-i0N}gwAe_~F~2qQO|)rsLJzQ`a>tA#6U zKLYtbeI0Ke%1B!))m)!z-|@3XpUGXHP{04Afg~?bJ71^c@H4aB3m$hLhRX0;4jDNc zWw=}iovt(Q_17jeLpMZ;?@E)PKgAa`3?-JFE}4c5XeqSQEGLU2DTA~*nN1kcJlrk! zU~JBjax;V(ANuQL;X`(ojY(9Ma;f7lU=@gs{d%sRv&bBylGB5WCa{Q;Tm}hwaYfqQ zbJek@ZNFgcOv2c(9V~Nq_lM*m5F=I!E@%DZGoQ2C>LG7b3Y!Vj^>7D#zmS9(araN7 zLSz(szHe5BN4Hk(^mFJlf0+7=+0B3}rPQkfj7+27>ZiL)UXCaTs%>xjuwyD&HpDod zR;$$1JUO;#-ycOD>(?*p)|h?G`tgJ|k=NrdO>WR`Bcp6yjh8OMy;QsBOiE20)(+75Q1mWA+1a2X$eK*-j%UG{|b z17mZyMkjP+iCA~Y^~1h*6VLfAV!x>B<%8yDCXH~~@vQBvl8F*wrWv0w0jWUy(f9zi z2jzMi>&N7_**AtWx9eP9he-5thps(cXqcPaVzronG`>4OVOeKVcI*<4$B?V(wp&~B9u$}-b`wA?4)Q7<`|N}lNvE6s!083;Se4-Zxkj$W4;36;Wx!y zc)OAOR_MV{s}~$WExOHsI$11%)MY&v!kmfmgbSYdi=Y*3PX;PhKxRv-X0Y?28;eN0Hs4 zr%K1wWQ#LCD>0(jRX&p8bxfZxf2A85tQ#uiXiLUq_V^axCw341Vm3j$pKCM(!G=W$ z9apQYAE3fPEv#3x`*!ts5>Y~xcy2C2`|?1-y9AV-%<+wadqtrUxtA6t%7yE}|BK~! z9*Md~nhkwVq%0Rw*bs=vcP?_PeqXHf2e0QOlCnE#889~A*TshGlI${Qs~&w&SD9^$ zVl$~THx^f&`u#4f_~l*V)Ro*>gHLx8q#?nvUOawul0UKc=Ug^Af2v`~76zac9Nrr! zu~DwzZ;Vd5{HFo;c*)D>ctnjS8bB+VyxP59vERjLkY=uKiMk8=WDiS>xo4@gKHbAj zJEzSbVbbgL^m4Ehc2fYEh%cpV)ImW+`m3f)hH){Xg?7t`UDD?>gpnF+$Yta4JsrGI z`hKrjL@Z&-Ee?{U1(5*(kjZQoq;+rUqjSCNSF?ttpZ@?=p2VXeyqY+K8(YAPWmQO2)+` z!tf^ZM7B`5-AKPP_hkIB+=${S6iVn!=)%g219B4v^;yDgC}rrOI4flqsM{8Nw}I>%q))laS#mh>K7C;vhF*VAuLbE{tNk)$h% z`hE72$a`XSP8!+3-y5rEIU_{-!#xbHA4(JXAcJDuset_SzI;2CFV78+-u{}D-SnGu zEBF1y{kqIEKQpbk-m`=)mCrfL&|w^PTD@XV#FY3K^bbp^qoIoriLnVXU!8t-Z68Lr zg5~uq#-Z&Sgc5!F9CAoLkC?}wr>Wvvw|0066Q+q<0>lQl-Nt@dVaEOVVM=_+u7tk_ zy9)6&&xJG!r;|F5oj!13ryy>L8tAB%k?Lr1PT|#CbE%ctWT1^?nd8YJs2rMtIYEEcRCkbaIo+P*+f8(@I9ZWz}nHwqJ$aTr$Sw~>U*3wkgzZoZH5QwgasXa6PYoorB;C^@Gdr8A}L=yQg-v2HBNS zb$_*sNVnsznGtv9#j@>Zz+`Cw`1f;M`6jkzkM5!D+@Sm9h)vl$yyik2VU)cp+3kk4Ly>S8hzw7(jo0ugtRdvZC3IX_vpl;D(9&`<`cVB6CL{IntJHH`3h2fG^Q}`6FBVWQB z|DZjqdnG7P^5^>qchMOFm9ypD<-mv%IW(4Ev(Z(O#%nluN37S{|W!4yp*)yBmvTyWa<_KvdpaZYaw5? z#Oe$$ z$`=boQ03~YJ?7!KE9s2d<-PZ8m02Rr%9xl~nuFpZJ1Or0NLkr1tvOBx#AI|MM_pP( zrCC`cXrc?$DQ?K@qgp8RD7MsXTqqQotNoGw2<7E7rsU)H0F<8+(h2T&DSO41a}p}z z(WX;#vj3flFt}yGNjOzmGs0#!v#mutm~W-0HYusUKldXZ?zkZ3^KyTi(>u2$TLR-J zj%b7r*JEOB9)7tr3`O?Q2-c;qu1{mF9%UYBpQW9T3c1DIv^1!wbDuxzh`=tSKlFgz z!pdsbTvajawM?WgTkP}elz`xgBqinSs3>2)rj|R*qq>rg#wziY2mh8onJ|^$EcN& zx5%U4xDD$(om+tHXf_j|ZC6`nZ8PjU4a(v|oYz;`h#G(SG7j|@v)W5mVM~0&NF1m5 zq`FDu1x9NBjBb{b?yPd|`4lEJWjxof?@Lp$je)@|DMCk8s|h*!755;LpYnWz7loMu zW?oxLpe2mlX4sFQc86@uiCgu+@O?~&^w7KIQ#&{rR{f5y%?V_0?#FA^LfOg@v{@0tXcWNs1pJ5rNY}54$Yz4SD;} z2-?dZ;8^Ass^)a@LBGQi+9H;Spd*I~tI{tB@!jY4dHHc6C-g0G5zDk79Gq-8K7o$2 z9et@7ffN9$FMj+PW$v;+qN;_^(C^&$O*tl(FB&9YdC`Y@B3Z4irJD1^UFjTDl-q#* zk$EhJf6_$@w2l<0ie^}%eQsGx-Qj0VfHlY#xi<+>x9xdf)c(Df(10Yu;^Oxe(y$6MKdGu!pdn&dBJ}zg7ci-kZyaJKu(t-W3-mr~F{F7P{BpV5)xf{u;B;!-(Rs@O zjGt&$dWHO?>*5B9{T7=PJRMh56qBGRpn|rBi8}ZS1OD@<;raZJA_%}ong4#5qE(?M z=B>ya(`B|kUBa!6i7%+8dEg1p=diL>YD1-EU48R#)$S*W^+Q6SmT#7<67Yk2JA!sg zr$h<86T?=etHg>BeYtKcRmA+ZB(}~*FWov*G`G<}7v%0We0c--eO{WaN&OtT^@$ix z#Uh(3G;x|`?(6=;8%PGw(1^RTh6VPF7X&&SDR(iEL%lE3no24njpaGq(l=7RpX-ey zci(6}Nbh6qBHoNs>Gj16i(;($-j+=ID_1u6+d|JfI=jD>Ez+B{Nq6?sKJ2#6F0{5a ze_UczFsxbOTW9sm)s>7my2?fyy1fn(k)&-n9ndYX{=H;)?I?j_bOZKy*^qPK1yk*}}KcR79KpQ@~FEUc$LJwu(q zGVLK4mm;w0RtKg-jWjl>OOw^>7OcU+qNxr(l17-G@g8+|Mpy23-B^43ugkaxqN&A` zPM3{SxnG}*-h7_sc~hwOV>p@Pd{AiY)un%5h^6!v*IddYCwjl@Zg?LYMMgx=PAery zYsH#JntVD>3;!Wywjq#;bXAZKvARHjv9YcgB3Usob7V6AVo3tipEcu(7fojmr;z z%M6j+aRn1^%{hP10oYeQIZVszHnU0)1MD8x!0cWh{^g8Vu5LaVs?p(s`6lrpj2fmo zS48wygFDdnmNo0#cLD>zCs+BO7K;-M;sI*2<_Hn)3wZmR4|D!nnk zhui^Pw1kWoJ!8?EoQsv;68rKVl!_UT~#mQ!Y%_udhWn?J`VQ>B1 z`#2VDbBcVQ#Mg}4Gpjomr7R1SD4)N%VM7+7<$p0u^p?o(105lW_DKh7Gc3t^dj?xVZJ?)Kgu(qWgs4-^m( zl!&mhluM?EmuivG+)ORlSFT$9N9fK>LW$W?uE}O zei?PU+?U7rs@qNjJ0Y^!zEGFahBh8{J#s!CizSWD{o3&Ag#E~jP%N<^)?VTc2-`-c~+u929c}S~WC$ZT-v#r*q z#Xhu3R2jF&qDzZ#lg}Ep5m2!W4<)L!Z|I56l=GyJ{Sjup-6fiDci%DT_3y(f#f^eE<8lp(12dfM{QC6_w|4LEGu-Y=m;FpXmc`sf zskD_C!G|HKG6j95Nqvb_)KMf4?R7F{ttu2bRc(9XCI=pH3Xi_YuQYGdGX3tVQuJ6a z&XnK6iBIIU)Yte>;Rwvo!^>25siPp0hczKDccn~k{rV-`Gb8%75X+*u-8{&Q?-sDS zgnWFiLJ6$Cy9tr>3RYJoiFzNO8vzQrml2Q50CyJk{2++8_&@p}e-&x^@BEYhzu!6W zIsWKtxT=QT`^%N1`Bxk6#3bh_A3pfgrvfhXw_hn3{`2+~>vhZj{NVr9o&LcUipy*X lpgn&bQG|^ZhT#?K*c;sPqfSpO6|Z>~a?g|@#ZoWd{2wtIo_hcQ literal 0 HcmV?d00001 diff --git a/hooks/post_user_create b/hooks/post_user_create index 4e3c78c..dec11bf 100644 --- a/hooks/post_user_create +++ b/hooks/post_user_create @@ -2,15 +2,17 @@ source /usr/share/yunohost/helpers user=$1 -app="zabbix" +app=zabbix -surname=$(ynh_user_get_info $user lastname) -name=$(ynh_user_get_info $user firstname) -db_name=$(ynh_app_setting_get $app db_name) -db_user=$(ynh_app_setting_get $app db_user) -db_pwd=$(ynh_app_setting_get $app mysqlpwd) -language=$(ynh_app_setting_set $app language) +surname=$(ynh_user_get_info --username=$user --key=lastname) +name=$(ynh_user_get_info --username=$user --key=firstname) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) +db_user=$(ynh_app_setting_get --app=$app --key=db_user) +db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) +language=$(ynh_app_setting_get --app=$app --key=language) -lastid=$(mysql -u$db_user -p$db_pwd $db_name -NB -e "select userid from users order by userid desc limit 1") +mysqlconn="mysql --user=$db_user --password=$db_pwd --database=$db_name" + +lastid=$($mysqlconn -BN -e "select userid from users order by userid desc limit 1") lastid=$((lastid+1)) -mysql -u$db_user -p$db_pwd $db_name -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ("$lastid",'"$user"', '"$name"', '"$surname"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$language"', '30s', 1, 'default', 0, '', 0, 50);" +$mysqlconn -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ("$lastid",'"$user"', '"$name"', '"$surname"', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '"$language"', '30s', 1, 'default', 0, '', 0, 50);" diff --git a/hooks/post_user_delete b/hooks/post_user_delete index 5ac3e13..2cb5400 100644 --- a/hooks/post_user_delete +++ b/hooks/post_user_delete @@ -2,10 +2,12 @@ source /usr/share/yunohost/helpers user=$1 -app="ynhzabbix" +app=zabbix -db_name=$(ynh_app_setting_get $app db_name) -db_user=$(ynh_app_setting_get $app db_user) -db_pwd=$(ynh_app_setting_get $app mysqlpwd) +db_name=$(ynh_app_setting_get --app=$app --key=db_name) +db_user=$(ynh_app_setting_get --app=$app --key=db_user) +db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) -mysql -u$db_user -p$db_pwd $db_name -e "DELETE FROM users WHERE alias=\"$1\";" \ No newline at end of file +mysqlconn="mysql --user=$db_user --password=$db_pwd --database=$db_name" + +$mysqlconn -e "DELETE FROM users WHERE alias=\"$1\";" diff --git a/manifest.json b/manifest.json index ad15253..10bb595 100644 --- a/manifest.json +++ b/manifest.json @@ -6,9 +6,15 @@ "en": "A monitoring tool for diverse IT components, including networks, servers, VMs and cloud services.", "fr": "Un outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne" }, - "version": "4.4~ynh1", + "version": "4.4~ynh2", "url": "https://www.zabbix.com", - "license": " LGPL-2.0-or-later", + "upstream": { + "license": "GPL-2.0-or-later", + "website": "https://www.zabbix.com/", + "admindoc": "https://www.zabbix.com/manuals", + "code": "https://github.com/zabbix/zabbix" + }, + "license": "GPL-2.0-or-later", "maintainer": { "name": "Mickael Martin", "email": "mickael@librement-votre.fr", @@ -39,11 +45,15 @@ { "name": "admin", "type": "user", - "example": "johndoe" + "example": "mickael" }, { "name": "is_public", "type": "boolean", + "help": { + "en": "A public app doesn't need SSO auth : the auth page is opened for everyone", + "fr": "Une application publique ne nécessite pas une authentification SSO : sa page d'authentication est ouverte au monde entier" + }, "default": false }, { @@ -53,8 +63,8 @@ "en": "Choose the application language", "fr": "Choisissez la langue de l'application" }, - "choices": ["fr_FR", "en_GB"], - "default": "en_GB" + "choices": ["en_GB", "en_US", "cz_CN", "cs_CZ", "fr_FR", "ko_KR", "ja_JP", "nb_NO", "pl_PL", "pt_BR", "pt_PT", "ru_RU", "sk_SK", "tr_TR", "uk_UA"], + "default": "en_US" } ] } diff --git a/scripts/_common.sh b/scripts/_common.sh index 244d2dc..d472c23 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -9,209 +9,289 @@ pkg_dependencies="libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap l YNH_PHP_VERSION="7.3" -extra_php_dependencies="php${YNH_PHP_VERSION}-bcmath" +extra_php_dependencies="php${YNH_PHP_VERSION}-fpm php${YNH_PHP_VERSION}-bcmath" #================================================= # PERSONAL HELPERS #================================================= -#Zabbix part -#===================GET GUEST DEFAULT USER STATE============== -#return 0 if enable, else 1 -get_state_guest_user(){ - $mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=2 and usrgrpid=9" +#================================================= +# EXPERIMENTAL HELPERS +#================================================= + +#================================================= +# FUTURE OFFICIAL HELPERS +#================================================= + +#================================================= +# ZABBIX HELPERS +#================================================= + +# Get guest user state +# +# return 0 if enable, else 1 +# +get_state_guest_user () { + $mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=2 and usrgrpid=9" } -#================ DISABLE DEFAULT ZABBIX USER GUEST =================== - -disable_guest_user(){ - if [ $(get_state_guest_user) = "0" ];then - lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`") - lastid=$(("$lastid" + 1 )) - $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 2);" - fi +# Disable guest user +# +disable_guest_user () { + if [ $(get_state_guest_user) = "0" ] + then + ynh_print_info --message="Disable guest user" + lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`") + lastid=$(("$lastid" + 1 )) + $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 2);" + ynh_print_info --message="Guest user disabled" + else + ynh_print_info --message="Guest user already disabled" + fi } -#===================GET ADMIN DEFAULT USER STATE============== -#return 0 if enable, else 1 -get_state_admin_user(){ - $mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=1 and usrgrpid=9" +# Get admin user state +# +# return 0 if enable, else 1 +# +get_state_admin_user () { + $mysqlconn -BN -e "SELECT count(id) from \`users_groups\` where userid=1 and usrgrpid=9" } -#================ DISABLE DEFAULT ADMIN USER =================== -disable_admin_user(){ - if [ $(get_state_admin_user) = "0" ] ;then - lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`") - lastid=$((lastid + 1 )) - $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);" - ynh_print_info --message="Default admin disabled" - else - ynh_print_info --message="Default admin already disabled" - fi +# Disable admin user +# +disable_admin_user () { + if [ $(get_state_admin_user) = "0" ] + then + ynh_print_info --message="Disable admin user" + lastid=$($mysqlconn -BN -e "SELECT max(id) from \`users_groups\`") + lastid=$((lastid + 1 )) + $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\` , \`usrgrpid\`, \`userid\`) VALUES ($lastid ,9, 1);" + ynh_print_info --message="Admin user disabled" + else + ynh_print_info --message="Admin user already disabled" + fi } -enable_admin_user(){ - if [ $(get_state_admin_user) = "1" ] ;then - ynh_print_info --message="Enable default admin" - #enable default admin temporaly - $mysqlconn -e "DELETE FROM users_groups where usrgrpid=9 and userid=1;" - ynh_print_info --message="Default admin enabled" - else - ynh_print_info --message="Default admin already enable" - fi +# Enable admin user +# +enable_admin_user () { + if [ $(get_state_admin_user) = "1" ] + then + ynh_print_info --message="Enable admin user" + #enable default admin temporaly + $mysqlconn -e "DELETE FROM users_groups where usrgrpid=9 and userid=1;" + ynh_print_info --message="Admin user enabled" + else + ynh_print_info --message="Admin user already enable" + fi } -import_template(){ - ynh_permission_update --permission="main" --add="visitors" +# Import YunoHost template in the agent +# +import_template () { + ynh_print_info --message="Import YunoHost template in the agent" + zabbixFullpath=https://$domain$path_url + localpath="../conf/Template_Yunohost.xml" + sudoUserPpath="../conf/etc_sudoers.d_zabbix" + confUserPpath="../conf/etc_zabbix_zabbix_agentd.d_userP_yunohost.conf" + bashUserPpath="../conf/etc_zabbix_zabbix_agentd.d_yunohost.sh" - enable_admin_user + cp "$sudoUserPpath" /etc/sudoers.d/zabbix - zabbixFullpath=https://$domain$path_url + if [ -d /etc/zabbix/zabbix_agentd.d ] + then + mv /etc/zabbix/zabbix_agentd.d /etc/zabbix/zabbix_agentd.conf.d + fi + if [ ! -L /etc/zabbix/zabbix_agentd.d ] + then + ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d + fi - cp "../conf/zabbix" /etc/sudoers.d/zabbix - - if [ -d /etc/zabbix/zabbix_agentd.d ];then - mv /etc/zabbix/zabbix_agentd.d /etc/zabbix/zabbix_agentd.conf.d - fi - if [ ! -L /etc/zabbix/zabbix_agentd.d ];then - ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d - fi - - cp "../conf/userP_yunohost.conf" /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf - cp "../conf/yunohost.sh" /etc/zabbix/zabbix_agentd.d/yunohost.sh - chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh - - systemctl restart zabbix-agent - curlOptions="--noproxy $domain -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt --resolve $domain:443:127.0.0.1" - - curl -L $curlOptions \ - --form "enter=Sign+in" \ - --form "name=Admin" \ - --form "password=zabbix" \ - "$zabbixFullpath/index.php" - - if [ $? -eq 0 ];then - sid=$(curl $curlOptions \ - "$zabbixFullpath/conf.import.php?rules_preset=template" \ - | grep -Po 'name="sid" value="\K([a-z0-9]{16})(?=")' ) - - importState=$(curl $curlOptions \ - --form "config=1" \ - --form "import_file=@../conf/Template_Yunohost.xml" \ - --form "rules[groups][createMissing]=1" \ - --form "rules[templates][updateExisting]=1" \ - --form "rules[templates][createMissing]=1" \ - --form "rules[templateScreens][updateExisting]=1" \ - --form "rules[templateScreens][createMissing]=1" \ - --form "rules[templateLinkage][createMissing]=1" \ - --form "rules[applications][createMissing]=1" \ - --form "rules[items][updateExisting]=1" \ - --form "rules[items][createMissing]=1" \ - --form "rules[discoveryRules][updateExisting]=1" \ - --form "rules[discoveryRules][createMissing]=1" \ - --form "rules[triggers][updateExisting]=1" \ - --form "rules[triggers][createMissing]=1" \ - --form "rules[graphs][updateExisting]=1" \ - --form "rules[graphs][createMissing]=1" \ - --form "rules[httptests][updateExisting]=1" \ - --form "rules[httptests][createMissing]=1" \ - --form "rules[valueMaps][createMissing]=1" \ - --form "import=Import" \ - --form "backurl=templates.php" \ - --form "form_refresh=1" \ - --form "sid=${sid}" \ \ - "${zabbixFullpath}/conf.import.php?rules_preset=template" \ - | grep -c "Imported successfully") - - if [ "$importState" -eq "1" ];then - ynh_print_info --message="Template Yunohost imported !" - else - ynh_print_warn --message="Template Yunohost not imported !" - fi - else - ynh_print_warn --message="Admin user cannot connect interface !" - fi + cp "$confUserPpath" /etc/zabbix/zabbix_agentd.d/userP_yunohost.conf + cp "$bashUserPpath" /etc/zabbix/zabbix_agentd.d/yunohost.sh + chmod a+x /etc/zabbix/zabbix_agentd.d/yunohost.sh - #apply template to host - tokenapi=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result') - zabbixHostID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].hostid') - zabbixTemplateID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].templateid') - applyTemplate=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'"$zabbixHostID"'"}],"templates":[{"templateid":"'"$zabbixTemplateID"'"}]},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result.hostids[]') - if [ "$applyTemplate" -eq "$zabbixHostID" ];then - ynh_print_info --message="Template Yunohost linked to Zabbix server !" - else - ynh_print_warn --message="Template Yunohost no linked to Zabbix server !" - fi - - disable_admin_user + systemctl restart zabbix-agent + curlOptions="--noproxy $domain -k -s --cookie cookiejar.txt --cookie-jar cookiejar.txt --resolve $domain:443:127.0.0.1" - ynh_permission_update --permission="main" --remove="visitors" + curl -L $curlOptions \ + --form "enter=Sign+in" \ + --form "name=Admin" \ + --form "password=zabbix" \ + "$zabbixFullpath/index.php" + + if [ $? -eq 0 ] + then + sid=$(curl $curlOptions \ + "$zabbixFullpath/conf.import.php?rules_preset=template" \ + | grep -Po 'name="sid" value="\K([a-z0-9]{16})(?=")' ) + + importState=$(curl $curlOptions \ + --form "config=1" \ + --form "import_file=@$localpath" \ + --form "rules[groups][createMissing]=1" \ + --form "rules[templates][updateExisting]=1" \ + --form "rules[templates][createMissing]=1" \ + --form "rules[templateScreens][updateExisting]=1" \ + --form "rules[templateScreens][createMissing]=1" \ + --form "rules[templateLinkage][createMissing]=1" \ + --form "rules[applications][createMissing]=1" \ + --form "rules[items][updateExisting]=1" \ + --form "rules[items][createMissing]=1" \ + --form "rules[discoveryRules][updateExisting]=1" \ + --form "rules[discoveryRules][createMissing]=1" \ + --form "rules[triggers][updateExisting]=1" \ + --form "rules[triggers][createMissing]=1" \ + --form "rules[graphs][updateExisting]=1" \ + --form "rules[graphs][createMissing]=1" \ + --form "rules[httptests][updateExisting]=1" \ + --form "rules[httptests][createMissing]=1" \ + --form "rules[valueMaps][createMissing]=1" \ + --form "import=Import" \ + --form "backurl=templates.php" \ + --form "form_refresh=1" \ + --form "sid=${sid}" \ \ + "${zabbixFullpath}/conf.import.php?rules_preset=template" \ + | grep -c "Imported successfully") + + if [ "$importState" -eq "1" ] + then + ynh_print_info --message="YunoHost template imported !" + else + ynh_print_warn --message="YunoHost template not imported !" + fi + else + ynh_print_warn --message="Admin user cannot connect to the interface !" + fi } -check_proc_zabbixserver(){ - pgrep zabbix_server >/dev/null - if [ $? -eq 0 ];then - ynh_print_info --message="zabbix server is started !" - else - ynh_print_err "Zabbix Server not started, try to start it with the yunohost interface." - ynh_print_err "If Zabbix Server can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" - fi +# Link YunoHost template to Zabbix server +# +link_template () { + ynh_print_info --message="Link YunoHost template to Zabbix server" + #apply template to host + tokenapi=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{ "jsonrpc": "2.0","method": "user.login","params": {"user": "Admin","password": "zabbix"},"id": 1,"auth": null}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result') + zabbixHostID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.get","params":{"filter":{"host":["Zabbix server"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].hostid') + zabbixTemplateID=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"template.get","params":{"filter":{"host":["Template Yunohost"]}},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result[0].templateid') + applyTemplate=$(curl --noproxy $domain -k -s --resolve $domain:443:127.0.0.1 --header "Content-Type: application/json" --request POST --data '{"jsonrpc":"2.0","method":"host.massadd","params":{"hosts":[{"hostid":"'"$zabbixHostID"'"}],"templates":[{"templateid":"'"$zabbixTemplateID"'"}]},"auth":"'"$tokenapi"'","id":1}' "${zabbixFullpath}/api_jsonrpc.php" | jq -r '.result.hostids[]') + if [ "$applyTemplate" -eq "$zabbixHostID" ] + then + ynh_print_info --message="YunoHost template linked to Zabbix server !" + else + ynh_print_warn --message="YunoHost template not linked to Zabbix server !" + fi } -check_proc_zabbixagent(){ - pgrep zabbix_agentd >/dev/null - if [ $? -eq 0 ];then - ynh_print_info --message="zabbix agent is started" - else - ynh_print_err "Zabbix agent not started, try to start it with the yunohost interface." - ynh_print_err "If Zabbix agent can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" - fi +# Check if Zabbix server is started +# +check_proc_zabbixserver () { + pgrep zabbix_server >/dev/null + if [ $? -eq 0 ] + then + ynh_print_info --message="Zabbix server is started !" + else + ynh_print_err --message="Zabbix server not started, try to start it with the YunoHost interface." + ynh_print_err --message="If Zabbix server can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" + fi } +# Check if Zabbix agent is started +# +check_proc_zabbixagent () { + pgrep zabbix_agentd >/dev/null + if [ $? -eq 0 ] + then + ynh_print_info --message="Zabbix agent is started" + else + ynh_print_err --message="Zabbix agent not started, try to start it with the YunoHost interface." + ynh_print_err --message="If Zabbix agent can't start, please open a issue on https://github.com/YunoHost-Apps/zabbix_ynh/issues" + fi +} + +# Install Zabbix repo +# install_zabbix_repo(){ ynh_install_extra_repo --repo="http://repo.zabbix.com/zabbix/4.4/debian $(lsb_release -sc) main" --key=https://repo.zabbix.com/zabbix-official-repo.key --priority=999 --name=zabbix } +# Remove Zabbix repo +# remove_zabbix_repo(){ ynh_remove_extra_repo --name=zabbix } -update_initZabbixConf(){ - if [ ! -d /etc/zabbix/web ] ;then mkdir -p /etc/zabbix/web ;fi - ynh_add_config --template="../conf/init.zabbix.conf.php.sh" --destination="/etc/zabbix/web/init.zabbix.conf.php.sh" - chmod 700 /etc/zabbix/web/init.zabbix.conf.php.sh - ynh_add_config --template="../conf/100update_force_init_zabbix_frontend_config" --destination="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" +# Remove previous Zabbix installation +# +remove_previous_zabbix () { + ynh_print_info --message="Previous Zabbix installation will be purged !" + apt-get purge zabbix* -y + ynh_secure_remove --file="/var/cache/apt/archives/zabbix-server-mysql*" + ynh_print_info --message="Previous Zabbix installation purged !" } -delete_initZabbixConf(){ - if [ -f /etc/zabbix/web/init.zabbix.conf.php.sh ] ; then ynh_secure_remove --file="/etc/zabbix/web/init.zabbix.conf.php.sh" ;fi - if [ -f /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config ] ;then ynh_secure_remove --file="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" ;fi -} - -#Patch timeout too short for zabbix agent if needed -change_timeoutAgent(){ - timeout_ok=$(grep "^Timeout" /etc/zabbix/zabbix_agentd.conf 2>/dev/null || true;) - if [ -z "$timeout_ok" ] ;then - ynh_replace_string --match_string="# Timeout=3" --replace_string="Timeout=10" --target_file=/etc/zabbix/zabbix_agentd.conf - grep -C 2 "Timeout" /etc/zabbix/zabbix_agentd.conf - systemctl restart zabbix-agent - fi +# Update Zabbix configuration initialisation +# +update_initZabbixConf () { + ynh_print_info --message="Update Zabbix configuration initialisation !" + if [ ! -d /etc/zabbix/web ] + then + mkdir -p /etc/zabbix/web + fi + cp "../conf/etc_zabbix_web_init.zabbix.conf.php.sh" /etc/zabbix/web/init.zabbix.conf.php.sh + chmod 700 /etc/zabbix/web/init.zabbix.conf.php.sh + cp "../conf/etc_apt_apt.conf.d_100update_force_init_zabbix_frontend_config" /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config + ynh_print_info --message="Zabbix configuration initialisation updated !" } -convert_ZabbixDB(){ - mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" - for t in $(mysql -B -N --user=$db_user --password=$db_pwd --database=$db_name -e "show tables";) - do - mysql --user=$db_user --password=$db_pwd --database=$db_name -e "ALTER TABLE $t CONVERT TO character set utf8 collate utf8_bin;" - done +# Delete Zabbix configuration initialisation +# +delete_initZabbixConf () { + ynh_print_info --message="Delete Zabbix configuration initialisation !" + if [ -f /etc/zabbix/web/init.zabbix.conf.php.sh ] + then + ynh_secure_remove --file="/etc/zabbix/web/init.zabbix.conf.php.sh" + fi + if [ -f /etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config ] + then + ynh_secure_remove --file="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" + fi + ynh_print_info --message="Zabbix configuration initialisation deleted !" } -#if not already modified, add email media type with the yunohost server mail. -set_mediatype_default_yunohost(){ - set -x - if [ $($mysqlconn -BN -e "SELECT count(*) FROM media_type WHERE smtp_server LIKE 'mail.example.com' AND status=1;") -eq 1 ] ; then - $mysqlconn -BN -e "UPDATE media_type SET smtp_server = 'localhost', smtp_helo = '"$domain"', smtp_email = 'zabbix@"$domain"', smtp_port = '587', status=0 , smtp_security=1 WHERE smtp_server LIKE 'mail.example.com' AND status=1;" - ynh_print_info --message="Default Media type added !" - fi - set +x +# Patch timeout too short for Zabbix agent if needed +# +change_timeoutAgent () { + timeout_ok=$(grep "^Timeout" /etc/zabbix/zabbix_agentd.conf 2>/dev/null || true;) + if [ -z "$timeout_ok" ] + then + ynh_replace_string --match_string="# Timeout=3" --replace_string="Timeout=10" --target_file=/etc/zabbix/zabbix_agentd.conf + grep -C 2 "Timeout" /etc/zabbix/zabbix_agentd.conf + systemctl restart zabbix-agent + ynh_print_info --message="Zabbix agent timeout updated !" + fi +} + +# Update Zabbix database character set +# +convert_ZabbixDB () { + ynh_print_info --message="Zabbix database character set will be updated !" + $mysqlconn -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" + for t in $($mysqlconn -BN -e "show tables";) + do + $mysqlconn -e "ALTER TABLE $t CONVERT TO character set utf8 collate utf8_bin;" + done + ynh_print_info --message="Zabbix database character set has been updated !" +} + +# Add email media type with the YunoHost server mail. +# +set_mediatype_default_yunohost () { + set -x + if [ $($mysqlconn -BN -e "SELECT count(*) FROM media_type WHERE smtp_server LIKE 'mail.example.com' AND status=1;") -eq 1 ] + then + $mysqlconn -BN -e "UPDATE media_type SET smtp_server = 'localhost', smtp_helo = '"$domain"', smtp_email = 'zabbix@"$domain"', smtp_port = '587', status=0 , smtp_security=1 WHERE smtp_server LIKE 'mail.example.com' AND status=1;" + ynh_print_info --message="Default Media type added !" + fi + set +x } diff --git a/scripts/backup b/scripts/backup index be410f2..4383e5a 100644 --- a/scripts/backup +++ b/scripts/backup @@ -54,8 +54,7 @@ ynh_backup --src_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" #================================================= # Backup frontend config -ynh_backup --src_path="$final_path/conf/zabbix.conf.php" -ynh_backup --src_path="/etc/zabbix" +ynh_backup --src_path="/etc/zabbix/web" ynh_backup --src_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" # Backup server config diff --git a/scripts/change_url b/scripts/change_url index 213ce6c..d49f7fb 100644 --- a/scripts/change_url +++ b/scripts/change_url @@ -42,6 +42,7 @@ ynh_script_progression --message="Backing up the app before changing its URL (ma # Backup the current version of the app ynh_backup_before_upgrade ynh_clean_setup () { + ynh_clean_check_starting # Remove the new domain config file, the remove script won't do it as it doesn't know yet its location. ynh_secure_remove --file="/etc/nginx/conf.d/$new_domain.d/$app.conf" diff --git a/scripts/install b/scripts/install index f0cba25..9f7ca25 100644 --- a/scripts/install +++ b/scripts/install @@ -13,6 +13,9 @@ source /usr/share/yunohost/helpers # MANAGE SCRIPT FAILURE #================================================= +ynh_clean_setup () { + ynh_clean_check_starting +} # Exit if an error occurs during the execution of the script ynh_abort_if_errors @@ -20,8 +23,8 @@ ynh_abort_if_errors # RETRIEVE ARGUMENTS FROM THE MANIFEST #================================================= -export domain=$YNH_APP_ARG_DOMAIN -export path_url=$YNH_APP_ARG_PATH +domain=$YNH_APP_ARG_DOMAIN +path_url=$YNH_APP_ARG_PATH admin=$YNH_APP_ARG_ADMIN is_public=$YNH_APP_ARG_IS_PUBLIC language=$YNH_APP_ARG_LANGUAGE @@ -33,6 +36,8 @@ app=$YNH_APP_INSTANCE_NAME #================================================= ynh_script_progression --message="Validating installation parameters..." +remove_previous_zabbix + final_path=/var/www/$app test ! -e "$final_path" || ynh_die --message="This path already contains a folder" @@ -47,7 +52,6 @@ ynh_script_progression --message="Storing installation settings..." ynh_app_setting_set --app=$app --key=domain --value=$domain ynh_app_setting_set --app=$app --key=path --value=$path_url ynh_app_setting_set --app=$app --key=admin --value=$admin -ynh_app_setting_set --app=$app --key=is_public --value=$is_public ynh_app_setting_set --app=$app --key=language --value=$language #================================================= @@ -57,27 +61,11 @@ ynh_app_setting_set --app=$app --key=language --value=$language #================================================= ynh_script_progression --message="Installing dependencies..." -pid=$(pgrep -f '/usr/bin/python3 /usr/bin/unattended-upgrade --download-only' || true) -if [ ! -z "$pid" ] ;then - ynh_script_progression --message="Check and wait end of unattended-upgrade of package_check" - tail --pid=$pid -f /dev/null -fi - -ynh_script_progression --message="Remove Zabbix if already installed" -apt-get purge zabbix* -y -if compgen -G "/var/cache/apt/archives/zabbix-server-mysql*" > /dev/null; then - ynh_secure_remove --file="/var/cache/apt/archives/zabbix-server-mysql*" -fi - -ynh_script_progression --message="Install Zabbix repository" install_zabbix_repo - -ynh_script_progression --message="Update and install dependencies" -#ynh_package_update no need cause ynh_install_app_dependencies after -ynh_install_app_dependencies $pkg_dependencies +ynh_exec_warn_less ynh_install_app_dependencies $pkg_dependencies dpkg -i --force-confmiss /var/cache/apt/archives/zabbix-server-mysql* -ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen +ynh_replace_string --match_string="# $language.UTF-8 UTF-8" --replace_string="$language.UTF-8 UTF-8" --target_file=/etc/locale.gen locale-gen #================================================= @@ -88,6 +76,7 @@ ynh_script_progression --message="Creating a MySQL database..." db_name=$(ynh_sanitize_dbid --db_name=$app) db_user=$db_name ynh_app_setting_set --app=$app --key=db_name --value=$db_name +ynh_app_setting_set --app=$app --key=db_user --value=$db_user ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name #================================================= @@ -96,8 +85,11 @@ ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name ynh_script_progression --message="Setting up source files..." ynh_app_setting_set --app=$app --key=final_path --value=$final_path -# Download, check integrity, uncompress and patch the source from app.src -ln -s /usr/share/zabbix "$final_path" +ln -s "/usr/share/zabbix" "$final_path" + +chmod 750 "/usr/share/zabbix" +chmod -R o-rwx "/usr/share/zabbix" +chown -R $app:www-data "/usr/share/zabbix" #================================================= # NGINX CONFIGURATION @@ -123,8 +115,8 @@ phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= ynh_script_progression --message="Import default data in database..." -export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" -mysql --user=$db_user --password=$db_pwd --database=zabbix -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" +export mysqlconn="mysql --user=$db_user --password=$db_pwd --database=$db_name" +$mysqlconn -e "ALTER DATABASE $db_name CHARACTER SET utf8 COLLATE utf8_general_ci;" zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | $mysqlconn @@ -144,9 +136,10 @@ $mysqlconn -e "INSERT INTO \`users_groups\` (\`id\`, \`usrgrpid\`, \`userid\`) V i=4 for user in $(ynh_user_list); do - if [ "$user" != "$admin" ];then - surname=$(ynh_user_get_info "$user" lastname) - name=$(ynh_user_get_info "$user" firstname) + if [ "$user" != "$admin" ] + then + surname=$(ynh_user_get_info --username="$user" --key=lastname) + name=$(ynh_user_get_info --username="$user" --key=firstname) $mysqlconn -e "INSERT INTO \`users\` (\`userid\`, \`alias\`, \`name\`, \`surname\`, \`passwd\`, \`url\`, \`autologin\`, \`autologout\`, \`lang\`, \`refresh\`, \`type\`, \`theme\`, \`attempt_failed\`, \`attempt_ip\`, \`attempt_clock\`, \`rows_per_page\`) VALUES ($i,'$user', '$name', '$surname', '5fce1b3e34b520afeffb37ce08c7cd66', '', 0, '0', '$language', '30s', 1, 'default', 0, '', 0, 50);" i=$((i+1)) fi @@ -161,27 +154,46 @@ set_mediatype_default_yunohost #================================================= ynh_script_progression --message="Adding a configuration file..." -ynh_add_config --template="../conf/zabbix.conf.php" --destination="/usr/share/zabbix/conf/zabbix.conf.php" +ynh_add_config --template="../conf/etc_zabbix_web_zabbix.conf.php" --destination="/etc/zabbix/web/zabbix.conf.php" -chown -R www-data. /usr/share/zabbix +chmod 400 "/etc/zabbix/web/zabbix.conf.php" +chown $app:www-data "/etc/zabbix/web/zabbix.conf.php" ynh_replace_string --match_string="DBName=zabbix" --replace_string="DBName=$db_name" --target_file=/etc/zabbix/zabbix_server.conf ynh_replace_string --match_string="DBUser=zabbix" --replace_string="DBUser=$db_user" --target_file=/etc/zabbix/zabbix_server.conf ynh_replace_string --match_string="# DBPassword=" --replace_string="# DBPassword=\nDBPassword=$db_pwd" --target_file=/etc/zabbix/zabbix_server.conf #================================================= -# INSTALL hook to verify if conf file is broken (after an update for example) +# SETUP SYSTEMD #================================================= +ynh_script_progression --message="Configuring a systemd service..." + +change_timeoutAgent + +systemctl enable zabbix-agent --quiet +systemctl enable zabbix-server --quiet update_initZabbixConf #================================================= -# IMPORT YUNOHOST TEMPLATE +# SETUP APPLICATION WITH CURL #================================================= -ynh_script_progression --message="Importing YunoHost template in Zabbix" +ynh_script_progression --message="Setuping application with CURL..." + +# Set the app as temporarily public for curl call +ynh_script_progression --message="Configuring SSOwat..." +# Making the app public for curl +ynh_permission_update --permission="main" --add="visitors" import_template +link_template + +disable_admin_user + +# Remove the public access +ynh_permission_update --permission="main" --remove="visitors" + #================================================= # GENERIC FINALIZATION #================================================= @@ -190,23 +202,17 @@ import_template ynh_script_progression --message="Integrating service in YunoHost..." yunohost service add snmpd --description="Management of SNMP Daemon" -yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" -yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" +yunohost service add zabbix-server --description="Management Zabbix server daemon : collect, agregate, compute and notify" --log="/var/log/$app/${app}_server.log" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" --log="/var/log/$app/${app}_agent.log" #================================================= # START SYSTEMD SERVICE #================================================= ynh_script_progression --message="Starting a systemd service..." -systemctl enable zabbix-agent --quiet && systemctl restart zabbix-agent -change_timeoutAgent -systemctl enable zabbix-server --quiet && systemctl restart zabbix-server - -#test if zabbix server is started -check_proc_zabbixagent - -#test if zabbix agent is started -check_proc_zabbixserver +# Start a systemd service +ynh_systemd_action --service_name=$app-server --action="restart" --log_path="/var/log/$app/${app}_server.log" +ynh_systemd_action --service_name=$app-agent --action="restart" --log_path="/var/log/$app/${app}_agent.log" #================================================= # SETUP SSOWAT diff --git a/scripts/remove b/scripts/remove index 586838e..88f1c01 100644 --- a/scripts/remove +++ b/scripts/remove @@ -28,9 +28,13 @@ final_path=$(ynh_app_setting_get --app=$app --key=final_path) # REMOVE SERVICE INTEGRATION IN YUNOHOST #================================================= -# Remove the service from the list of services known by YunoHost (added from `yunohost service add`) +ynh_script_progression --message="Removing snmpd service integration..." yunohost service remove snmpd + +ynh_script_progression --message="Removing Zabbix-server service integration..." yunohost service remove zabbix-server + +ynh_script_progression --message="Removing Zabbix-agent service integration..." yunohost service remove zabbix-agent #================================================= @@ -39,13 +43,14 @@ yunohost service remove zabbix-agent ynh_script_progression --message="Stopping and removing the systemd service..." # Remove the dedicated systemd config -timeout 5 systemctl stop zabbix-server || killall zabbix-server -systemctl disable zabbix-server --quiet -killall zabbix-server +ynh_systemd_action --service_name=$app-server --action="stop" --log_path="/var/log/$app/${app}_server.log" +ynh_systemd_action --service_name=$app-agent --action="stop" --log_path="/var/log/$app/${app}_agent.log" -timeout 5 systemctl stop zabbix-agent || killall zabbix-agentd +systemctl disable zabbix-server --quiet systemctl disable zabbix-agent --quiet -killall zabbix-agentd + +ynh_exec_warn_less killall zabbix_server +ynh_exec_warn_less killall zabbix_agentd #================================================= # REMOVE THE MYSQL DATABASE @@ -55,22 +60,6 @@ ynh_script_progression --message="Removing the MySQL database..." # Remove a database if it exists, along with the associated user ynh_mysql_remove_db --db_user=$db_user --db_name=$db_name -#================================================= -# REMOVE APP MAIN DIR -#================================================= -ynh_script_progression --message="Removing app main directory..." - -# Remove the app directory securely -ynh_secure_remove --file="$final_path" - -#================================================= -# REMOVE NGINX CONFIGURATION -#================================================= -ynh_script_progression --message="Removing NGINX web server configuration..." - -# Remove the dedicated NGINX config -ynh_remove_nginx_config - #================================================= # REMOVE PHP-FPM CONFIGURATION #================================================= @@ -84,21 +73,40 @@ ynh_remove_fpm_config #================================================= ynh_script_progression --message="Removing dependencies..." -# Remove config file detection +#Remove config file detection delete_initZabbixConf DEBIAN_FRONTEND=noninteractive apt-get purge zabbix-release -y - -# Remove metapackage and its dependencies ynh_remove_app_dependencies -# Force removing if ynh_remove_app_dependencies not work (old zabbix version) -for zabbix_pkg in $(apt list --installed | grep -Po "\K(zabbix-.*)(?=/)") -do - DEBIAN_FRONTEND=noninteractive apt-get purge --allow-change-held-packages "$zabbix_pkg" -y -done +ynh_remove_extra_repo --name=$app -remove_zabbix_repo +#================================================= +# REMOVE APP MAIN DIR +#================================================= +ynh_script_progression --message="Removing app main directory..." + +# Remove the app directory securely +ynh_secure_remove --file="$final_path" +ynh_secure_remove --file="/usr/share/$app" + +#================================================= +# REMOVE NGINX CONFIGURATION +#================================================= +ynh_script_progression --message="Removing NGINX web server configuration..." + +# Remove the dedicated NGINX config +ynh_remove_nginx_config + +#================================================= +# CLOSE A PORT +#================================================= + +if yunohost firewall list | grep -q "\- $port$" +then + ynh_script_progression --message="Closing port $port..." + ynh_exec_warn_less yunohost firewall disallow TCP $port +fi #================================================= # SPECIFIC REMOVE @@ -108,16 +116,28 @@ remove_zabbix_repo ynh_script_progression --message="Removing various files..." # Remove a directory securely -if [ -d /etc/zabbix ] ;then ynh_secure_remove --file="/etc/$app";fi +ynh_secure_remove --file="/etc/$app" # Remove the log files -if [ -d /var/log/zabbix ] ;then ynh_secure_remove --file="/var/log/$app";fi +ynh_secure_remove --file="/var/log/$app" -# Remove the pid/socket files -if [ -d /run/zabbix ] ;then ynh_secure_remove --file="/run/zabbix";fi +ynh_secure_remove --file="/run/$app" -# Remove the sudoers file -if [ -f /etc/sudoers.d/zabbix ] ;then ynh_secure_remove --file="/etc/sudoers.d/zabbix";fi +ynh_secure_remove --file="/etc/sudoers.d/$app" + +#REMOVE NONFREE PART PATCH IF NEEDED (snmp-mibs-downloader (non-free) installed in version 1) +nonfreepackagelist=$(dpkg-query -W -f='${Section}\t${Package}\n' | grep ^non-free) +if [ $(echo $nonfreepackagelist | wc -l) -eq 1 ] && [ $(echo $nonfreepackagelist | grep -c "snmp-mibs-downloader") -eq 1 ] +then + ynh_print_info --message="Removing snmp-mibs-downloader (non-free package)" + cp /var/lib/dpkg/status{,.$(date "+%m%d%y")} + ynh_replace_string --match_string=" snmp-mibs-downloader," --replace_string="" --target_file=/var/lib/dpkg/status + DEBIAN_FRONTEND=noninteractive apt purge snmp-mibs-downloader -y + if [ -f /etc/apt/sources.list.d/non-free.list ] + then + ynh_secure_remove --file="/etc/apt/sources.list.d/non-free.list" + fi +fi #================================================= # GENERIC FINALIZATION diff --git a/scripts/restore b/scripts/restore index e3f0315..f72f47e 100644 --- a/scripts/restore +++ b/scripts/restore @@ -14,6 +14,9 @@ source /usr/share/yunohost/helpers # MANAGE SCRIPT FAILURE #================================================= +ynh_clean_setup () { + ynh_clean_check_starting +} # Exit if an error occurs during the execution of the script ynh_abort_if_errors @@ -25,17 +28,24 @@ ynh_script_progression --message="Loading installation settings..." app=$YNH_APP_INSTANCE_NAME domain=$(ynh_app_setting_get --app=$app --key=domain) +path_url=$(ynh_app_setting_get --app=$app --key=path) final_path=$(ynh_app_setting_get --app=$app --key=final_path) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) +language=$(ynh_app_setting_get --app=$app --key=language) #================================================= # CHECK IF THE APP CAN BE RESTORED #================================================= ynh_script_progression --message="Validating restoration parameters..." -ynh_secure_remove --file="$final_path" +remove_previous_zabbix + +ynh_webpath_available --domain=$domain --path_url=$path_url \ + || ynh_die --message="Path not available: ${domain}${path_url}" +test ! -d $final_path \ + || ynh_die --message="There is already a directory: $final_path " #================================================= # STANDARD RESTORATION STEPS @@ -46,20 +56,6 @@ ynh_script_progression --message="Restoring the NGINX web server configuration.. ynh_restore_file --origin_path="/etc/nginx/conf.d/$domain.d/$app.conf" -#================================================= -# RESTORE THE APP MAIN DIR -#================================================= -ynh_script_progression --message="Restoring the app main directory..." - -ln -s /usr/share/zabbix "$final_path" - -#================================================= -# RESTORE THE PHP-FPM CONFIGURATION -#================================================= -ynh_script_progression --message="Restoring the PHP-FPM configuration..." - -ynh_restore_file --origin_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" - #================================================= # SPECIFIC RESTORATION #================================================= @@ -68,14 +64,36 @@ ynh_restore_file --origin_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" ynh_script_progression --message="Reinstalling dependencies..." install_zabbix_repo - -ynh_package_update -ynh_install_app_dependencies $pkg_dependencies +# Define and install dependencies +ynh_exec_warn_less ynh_install_app_dependencies $pkg_dependencies DEBIAN_FRONTEND=noninteractive apt-mark hold zabbix-server-mysql zabbix-frontend-php -ynh_replace_string --match_string="# fr_FR.UTF-8 UTF-8" --replace_string="fr_FR.UTF-8 UTF-8" --target_file=/etc/locale.gen +ynh_replace_string --match_string="# $language.UTF-8 UTF-8" --replace_string="$language.UTF-8 UTF-8" --target_file=/etc/locale.gen locale-gen +#================================================= +# RESTORE THE APP MAIN DIR +#================================================= +ynh_script_progression --message="Restoring the app main directory..." + +ln -s /usr/share/zabbix "$final_path" + +chmod 750 "/usr/share/zabbix" +chmod -R o-rwx "/usr/share/zabbix" +chown -R $app:www-data "/usr/share/zabbix" + +#================================================= +# RESTORE THE PHP-FPM CONFIGURATION +#================================================= +ynh_script_progression --message="Restoring the PHP-FPM configuration..." + +# Restore the file first, so it can have a backup if different +ynh_restore_file --origin_path="/etc/php/$phpversion/fpm/pool.d/$app.conf" + +# Recreate a dedicated php-fpm config +ynh_add_fpm_config --package="$extra_php_dependencies" +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) + #================================================= # RESTORE THE MYSQL DATABASE #================================================= @@ -84,6 +102,8 @@ ynh_script_progression --message="Restoring the MySQL database..." db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) ynh_mysql_setup_db --db_user=$db_user --db_name=$db_name --db_pwd=$db_pwd ynh_mysql_connect_as --user=$db_user --password=$db_pwd --database=$db_name < ./db.sql + +export mysqlconn="mysql --user=$db_user --password=$db_pwd --database=$db_name" convert_ZabbixDB #================================================= @@ -91,48 +111,56 @@ convert_ZabbixDB #================================================= ynh_script_progression --message="Restoring various files..." -# Restore frontend config -ynh_restore_file --origin_path="$final_path/conf/zabbix.conf.php" -chown -R www-data. /usr/share/zabbix -ynh_restore_file --origin_path="/etc/zabbix" -ls -Rail "/etc/zabbix" +if [ -f "/etc/zabbix/web/zabbix.conf.php" ] +then + ynh_secure_remove --file="/etc/zabbix/web/zabbix.conf.php" +fi + +ynh_restore_file --origin_path="/etc/zabbix/web/zabbix.conf.php" + +chmod 400 "/etc/zabbix/web/zabbix.conf.php" +chown $app:www-data "/etc/zabbix/web/zabbix.conf.php" + ynh_restore_file --origin_path="/etc/apt/apt.conf.d/100update_force_init_zabbix_frontend_config" -# Restore server config ynh_restore_file --origin_path="/etc/zabbix/zabbix_server.conf" - -# Restore agent config ynh_restore_file --origin_path="/etc/zabbix/zabbix_agentd.conf" -if [ ! -L /etc/zabbix/zabbix_agentd.d ];then - ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d + +if [ ! -L /etc/zabbix/zabbix_agentd.d ] +then + ln -s /etc/zabbix/zabbix_agentd.conf.d /etc/zabbix/zabbix_agentd.d fi # Restore sudo file ynh_restore_file --origin_path="/etc/sudoers.d/zabbix" +#================================================= +# RESTORE SYSTEMD +#================================================= +ynh_script_progression --message="Restoring the systemd configuration..." + +change_timeoutAgent + +systemctl enable zabbix-agent --quiet +systemctl enable zabbix-server --quiet + #================================================= # INTEGRATE SERVICE IN YUNOHOST #================================================= ynh_script_progression --message="Integrating service in YunoHost..." yunohost service add snmpd --description="Management of SNMP Daemon" -yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" -yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" +yunohost service add zabbix-server --description="Management Zabbix server daemon : collect, agregate, compute and notify" --log="/var/log/$app/${app}_server.log" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" --log="/var/log/$app/${app}_agent.log" #================================================= # START SYSTEMD SERVICE #================================================= ynh_script_progression --message="Starting a systemd service..." -systemctl enable --quiet zabbix-agent && systemctl restart zabbix-agent -change_timeoutAgent -systemctl enable --quiet zabbix-server && systemctl restart zabbix-server - -#test if zabbix server is started -check_proc_zabbixagent - -#test if zabbix agent is started -check_proc_zabbixserver +# Start a systemd service +ynh_systemd_action --service_name=$app-server --action="restart" --log_path="/var/log/$app/${app}_server.log" +ynh_systemd_action --service_name=$app-agent --action="restart" --log_path="/var/log/$app/${app}_agent.log" #================================================= # GENERIC FINALIZATION diff --git a/scripts/upgrade b/scripts/upgrade index 7ca7718..dcc96c6 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -18,12 +18,19 @@ app=$YNH_APP_INSTANCE_NAME domain=$(ynh_app_setting_get --app=$app --key=domain) path_url=$(ynh_app_setting_get --app=$app --key=path) -is_public=$(ynh_app_setting_get --app=$app --key=is_public) final_path=$(ynh_app_setting_get --app=$app --key=final_path) db_name=$(ynh_app_setting_get --app=$app --key=db_name) -db_user=$db_name +db_user=$(ynh_app_setting_get --app=$app --key=db_user) db_pwd=$(ynh_app_setting_get --app=$app --key=mysqlpwd) -phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) +language=$(ynh_app_setting_get --app=$app --key=language) + +trustedversion="4.4-1+stretch" +if ynh_permission_has_user --permission=main --user=visitors +then + is_public=0 +else + is_public=1 +fi #================================================= # CHECK VERSION @@ -40,6 +47,7 @@ ynh_script_progression --message="Backing up the app before upgrading (may take # Backup the current version of the app ynh_backup_before_upgrade ynh_clean_setup () { + ynh_clean_check_starting # Restore it if the upgrade fails ynh_restore_upgradebackup } @@ -53,40 +61,93 @@ ynh_abort_if_errors #================================================= ynh_script_progression --message="Stopping a systemd service..." -yunohost service stop zabbix-server -yunohost service stop zabbix-agent +ynh_systemd_action --service_name=$app-server --action="stop" --log_path="/var/log/$app/${app}_server.log" +ynh_systemd_action --service_name=$app-agent --action="stop" --log_path="/var/log/$app/${app}_agent.log" #================================================= # ENSURE DOWNWARD COMPATIBILITY #================================================= ynh_script_progression --message="Ensuring downward compatibility..." -export mysqlconn="mysql -u$db_user -p$db_pwd $db_name" +# If db_name doesn't exist, create it +if [ -z "$db_name" ]; then + db_name=$(ynh_sanitize_dbid --db_name=$app) + ynh_app_setting_set --app=$app --key=db_name --value=$db_name +fi -disable_guest_user +# If final_path doesn't exist, create it +if [ -z "$final_path" ]; then + final_path=/var/www/$app + ynh_app_setting_set --app=$app --key=final_path --value=$final_path +fi -#Patch timeout too short for zabbix agent if needed -change_timeoutAgent +if [ "$language" == "fr" ] +then + language="fr_FR" + ynh_app_setting_set --app=$app --key=language --value=$language +fi + +if [ "$language" == "en" ] +then + language="en_GB" + ynh_app_setting_set --app=$app --key=language --value=$language +fi + +export mysqlconn="mysql --user=$db_user --password=$db_pwd --database=$db_name" + +# patch if zabbix-release installed +if [ "$(dpkg -l zabbix-release 2>/dev/null | wc -l)" -ne 0 ] +then + DEBIAN_FRONTEND=noninteractive apt purge zabbix-release -y + install_zabbix_repo +fi + +# patch if zabbix-release has Candidate version but no Installed version +if [ -f "/etc/apt/sources.list.d/zabbix.list" ] +then + if [ "$(grep -c "4.2" /etc/apt/sources.list.d/zabbix.list)" -eq 1 ] + then + install_zabbix_repo + upgrade_type="UPGRADE_APP" + fi +fi + +# patch to remove old zabbix-client service +if [ ! -z "$(yunohost service status | grep zabbix-client)" ] +then + ynh_script_progression --message="remove zabbix-client old service" + yunohost service remove zabbix-client +fi ynh_remove_logrotate -# Cleaning legacy permissions -if ynh_legacy_permissions_exists; then - ynh_legacy_permissions_delete_all -fi +# Check if new zabbix version is available on repo" -#================================================= -# DOWNLOAD, CHECK AND UNPACK SOURCE -#================================================= +ynh_package_update +zabbixReleaseInstalledVersion=$(apt-cache policy zabbix-release | sed -n '2p' | grep -Po ".* \K(.*)") -if [ "$upgrade_type" == "UPGRADE_APP" ] +if [[ "$trustedversion" > "$zabbixReleaseInstalledVersion" ]] then - ynh_script_progression --message="Upgrading source files..." - - # Download, check integrity, uncompress and patch the source from app.src - ln -s /usr/share/zabbix "$final_path" + upgrade_type="UPGRADE_APP" fi +if [ -f "/etc/zabbix/web/zabbix.conf.php" ] +then + ynh_secure_remove --file="/etc/zabbix/web/zabbix.conf.php" +fi + +ynh_add_config --template="../conf/etc_zabbix_web_zabbix.conf.php" --destination="/etc/zabbix/web/zabbix.conf.php" + +chmod 400 "/etc/zabbix/web/zabbix.conf.php" +chown $app:www-data "/etc/zabbix/web/zabbix.conf.php" + +if [ -f "/usr/share/zabbix/conf/zabbix.conf.php" ] +then + ynh_secure_remove --file="/usr/share/zabbix/conf/zabbix.conf.php" +fi + +ln -s "/etc/zabbix/web/zabbix.conf.php" "/usr/share/zabbix/conf/zabbix.conf.php" + #================================================= # NGINX CONFIGURATION #================================================= @@ -98,28 +159,24 @@ ynh_add_nginx_config #================================================= # UPGRADE DEPENDENCIES #================================================= -ynh_script_progression --message="Upgrading dependencies..." if [ "$upgrade_type" == "UPGRADE_APP" ] then - cp -rp /etc/zabbix /tmp/ - cp -p /usr/share/zabbix/conf/zabbix.conf.php /tmp/ + ynh_script_progression --message="Upgrading dependencies..." DEBIAN_FRONTEND=noninteractive apt-mark unhold zabbix-server-mysql zabbix-frontend-php - ynh_package_remove zabbix-server-mysql zabbix-frontend-php - - ynh_script_progression --message="Install Zabbix repository" - install_zabbix_repo - - ynh_print_info "Update zabbix via apt package" - ynh_install_app_dependencies $pkg_dependencies - ynh_secure_remove --file="/usr/share/zabbix/conf/zabbix.conf.php" - cp -rpf /tmp/zabbix /etc/ - cp -pf /tmp/zabbix.conf.php /usr/share/zabbix/conf/ - - ynh_secure_remove --file="/tmp/zabbix*" + ynh_exec_warn_less ynh_install_app_dependencies $pkg_dependencies fi +#================================================= +# RESTORE THE APP MAIN DIR +#================================================= +ynh_script_progression --message="Restoring the app main directory..." + +chmod 750 "/usr/share/zabbix" +chmod -R o-rwx "/usr/share/zabbix" +chown -R $app:www-data "/usr/share/zabbix" + #================================================= # PHP-FPM CONFIGURATION #================================================= @@ -127,36 +184,77 @@ ynh_script_progression --message="Upgrading PHP-FPM configuration..." # Create a dedicated PHP-FPM config ynh_add_fpm_config --package="$extra_php_dependencies" +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # SPECIFIC UPGRADE #================================================= -# INSTALL hook to verify if conf file is broken (after an update for example) -#================================================= - -update_initZabbixConf - -#================================================= -# Update db to utf8 +# CUSTOMIZE DATABASE #================================================= +ynh_script_progression --message="Customize the database..." convert_ZabbixDB -#================================================= -# Add settings for yunohost mail server -#================================================= - set_mediatype_default_yunohost #================================================= -# IMPORT YUNOHOST TEMPLATE +# SETUP APPLICATION WITH CURL #================================================= -ynh_script_progression --message="Importing YunoHost template in Zabbix" +ynh_script_progression --message="Setuping application with CURL..." + +# Set the app as temporarily public for curl call +ynh_script_progression --message="Configuring SSOwat..." +# Making the app public for curl +if [ $is_public -eq 0 ] +then + ynh_permission_update --permission="main" --add="visitors" +fi + +enable_admin_user import_template +link_template + +disable_admin_user + +disable_guest_user + +# Remove the public access +ynh_permission_update --permission="main" --remove="visitors" + +#================================================= +# SETUP SYSTEMD +#================================================= +ynh_script_progression --message="Upgrading systemd configuration..." + +change_timeoutAgent + +systemctl enable zabbix-agent --quiet +systemctl enable zabbix-server --quiet + +update_initZabbixConf + #================================================= # GENERIC FINALIZATION +#================================================= +# INTEGRATE SERVICE IN YUNOHOST +#================================================= +ynh_script_progression --message="Integrating service in YunoHost..." + +yunohost service add snmpd --description="Management of SNMP Daemon" +yunohost service add zabbix-server --description="Management Zabbix server daemon : collect, agregate, compute and notify" --log="/var/log/$app/${app}_server.log" +yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" --log="/var/log/$app/${app}_agent.log" + +#================================================= +# START SYSTEMD SERVICE +#================================================= +ynh_script_progression --message="Starting a systemd service..." + +# Start a systemd service +ynh_systemd_action --service_name=$app-server --action="restart" --log_path="/var/log/$app/${app}_server.log" +ynh_systemd_action --service_name=$app-agent --action="restart" --log_path="/var/log/$app/${app}_agent.log" + #================================================= # SETUP SSOWAT #================================================= @@ -170,30 +268,6 @@ then ynh_permission_update --permission="main" --add="visitors" fi -#================================================= -# INTEGRATE SERVICE IN YUNOHOST -#================================================= -ynh_script_progression --message="Integrating service in YunoHost..." - -yunohost service add snmpd --description="Management of SNMP Daemon" -yunohost service add zabbix-server --description="Management Zabbix server daemon : Collect, agregate, compute and notify" -yunohost service add zabbix-agent --description="Management Zabbix agent daemon : send informations about this host to the server" - -#================================================= -# START SYSTEMD SERVICE -#================================================= -ynh_script_progression --message="Starting a systemd service..." - -systemctl enable zabbix-agent --quiet && systemctl restart zabbix-agent -change_timeoutAgent -systemctl enable zabbix-server --quiet && systemctl restart zabbix-server - -#test if zabbix server is started -check_proc_zabbixagent - -#test if zabbix agent is started -check_proc_zabbixserver - #================================================= # RELOAD NGINX #================================================= From 40f1233f603ee7a69e00ad6c5dfb58dd566ae24e Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:45:40 +0200 Subject: [PATCH 47/58] Update check_process MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Éric Gaspar <46165813+ericgaspar@users.noreply.github.com> --- check_process | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/check_process b/check_process index ae592f3..0dc9c4d 100644 --- a/check_process +++ b/check_process @@ -1,8 +1,8 @@ ;; Test complet ; Manifest - domain="domain.tld" (DOMAIN) - path="/path" (PATH) - admin="john" (USER) + domain="domain.tld" + path="/path" + admin="john" language="fr_FR" is_public=1 (PUBLIC|public=1|private=0) password="1Strong-Password" From d7016e0fe742319ac376942224255f238871ff55 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:45:52 +0200 Subject: [PATCH 48/58] Update check_process MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Éric Gaspar <46165813+ericgaspar@users.noreply.github.com> --- check_process | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/check_process b/check_process index 0dc9c4d..9b9bed1 100644 --- a/check_process +++ b/check_process @@ -4,7 +4,7 @@ path="/path" admin="john" language="fr_FR" - is_public=1 (PUBLIC|public=1|private=0) + is_public=1 password="1Strong-Password" port="10051" (PORT) ; Checks From 002b207b438a47131b89ac0e0a68d87e070c4150 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:46:00 +0200 Subject: [PATCH 49/58] Update manifest.json MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Éric Gaspar <46165813+ericgaspar@users.noreply.github.com> --- manifest.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/manifest.json b/manifest.json index 10bb595..5861090 100644 --- a/manifest.json +++ b/manifest.json @@ -3,8 +3,8 @@ "id": "zabbix", "packaging_format": 1, "description": { - "en": "A monitoring tool for diverse IT components, including networks, servers, VMs and cloud services.", - "fr": "Un outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne" + "en": "Monitoring tool for diverse IT components, including networks, servers, VMs and cloud services", + "fr": "Outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne" }, "version": "4.4~ynh2", "url": "https://www.zabbix.com", From 570f5989a51de3ac85ab5ceff99c98ed78f07e7f Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Fri, 27 Aug 2021 00:46:02 +0000 Subject: [PATCH 50/58] Auto-update README --- README.md | 2 +- README_fr.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 85ebb21..53c99ea 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in ## Overview -A monitoring tool for diverse IT components, including networks, servers, VMs and cloud services. +Monitoring tool for diverse IT components, including networks, servers, VMs and cloud services **Shipped version:** 4.4~ynh2 diff --git a/README_fr.md b/README_fr.md index fc9d390..0ba8ec8 100644 --- a/README_fr.md +++ b/README_fr.md @@ -11,7 +11,7 @@ Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour ## Vue d'ensemble -Un outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne +Outil pour monitorer des réseaux, des serveurs, des VMs et autres services en ligne **Version incluse :** 4.4~ynh2 From 0240ffc818e480cf0b19dac61235eb2fd179cedb Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:46:20 +0200 Subject: [PATCH 51/58] Update check_process MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Éric Gaspar <46165813+ericgaspar@users.noreply.github.com> --- check_process | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/check_process b/check_process index 9b9bed1..dea08bc 100644 --- a/check_process +++ b/check_process @@ -6,7 +6,7 @@ language="fr_FR" is_public=1 password="1Strong-Password" - port="10051" (PORT) + port="10051" ; Checks pkg_linter=1 setup_sub_dir=1 From 0fcf8f63c3617ea1fb6ef5c9e6c2034dddd7737a Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:46:27 +0200 Subject: [PATCH 52/58] Update manifest.json MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Éric Gaspar <46165813+ericgaspar@users.noreply.github.com> --- manifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index 5861090..d546843 100644 --- a/manifest.json +++ b/manifest.json @@ -52,7 +52,7 @@ "type": "boolean", "help": { "en": "A public app doesn't need SSO auth : the auth page is opened for everyone", - "fr": "Une application publique ne nécessite pas une authentification SSO : sa page d'authentication est ouverte au monde entier" + "fr": "Une application publique ne nécessite pas une authentification SSO : sa page d'authentication est ouverte à tous" }, "default": false }, From a6ad47c2351c6e622342c711c5815761994e0eee Mon Sep 17 00:00:00 2001 From: yalh76 Date: Fri, 27 Aug 2021 02:50:53 +0200 Subject: [PATCH 53/58] Remove not existing port --- scripts/remove | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/scripts/remove b/scripts/remove index 88f1c01..1cc78c8 100644 --- a/scripts/remove +++ b/scripts/remove @@ -17,7 +17,6 @@ ynh_script_progression --message="Loading installation settings..." app=$YNH_APP_INSTANCE_NAME domain=$(ynh_app_setting_get --app=$app --key=domain) -port=$(ynh_app_setting_get --app=$app --key=port) db_name=$(ynh_app_setting_get --app=$app --key=db_name) db_user=$db_name final_path=$(ynh_app_setting_get --app=$app --key=final_path) @@ -98,16 +97,6 @@ ynh_script_progression --message="Removing NGINX web server configuration..." # Remove the dedicated NGINX config ynh_remove_nginx_config -#================================================= -# CLOSE A PORT -#================================================= - -if yunohost firewall list | grep -q "\- $port$" -then - ynh_script_progression --message="Closing port $port..." - ynh_exec_warn_less yunohost firewall disallow TCP $port -fi - #================================================= # SPECIFIC REMOVE #================================================= From 03756340e30e1cead862e91454f11604b6750bb4 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 31 Aug 2021 01:18:20 +0200 Subject: [PATCH 54/58] Update doc/DISCLAIMER.md Co-authored-by: Alexandre Aubin --- doc/DISCLAIMER.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/doc/DISCLAIMER.md b/doc/DISCLAIMER.md index 7b173be..b5d97c0 100644 --- a/doc/DISCLAIMER.md +++ b/doc/DISCLAIMER.md @@ -1,8 +1,8 @@ -* Any known limitations, constrains or stuff not working, such as (but not limited to): - * Only x86_64 architecture is supported - * Do not change the default admin user password. The user is disabled just after the install but he’s used to update templates. - * The Zabbix server port is not opened by default for external monitoring (active agent). +#### Known limitations or important informations -* Other infos that people should be aware of, such as: - * Configuration at install. SSO works. You can add your users in a group in Zabbix (for permissions/rights). - * A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. +* Only x86_64 architecture is supported +* Single sign-on is supported +* Do not change the default admin user password. The user is disabled just after the install but is used to update templates. +* The Zabbix server port is not opened by default for external monitoring (active agent). +* You can add your users in a group in Zabbix (for permissions/rights). +* A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. From 723006c9394c3f21c67ba4d0e4063f23130a1524 Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Mon, 30 Aug 2021 23:18:26 +0000 Subject: [PATCH 55/58] Auto-update README --- README.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 53c99ea..a2c0813 100644 --- a/README.md +++ b/README.md @@ -27,14 +27,14 @@ Monitoring tool for diverse IT components, including networks, servers, VMs and ## Disclaimers / important information -* Any known limitations, constrains or stuff not working, such as (but not limited to): - * Only x86_64 architecture is supported - * Do not change the default admin user password. The user is disabled just after the install but he’s used to update templates. - * The Zabbix server port is not opened by default for external monitoring (active agent). +#### Known limitations or important informations -* Other infos that people should be aware of, such as: - * Configuration at install. SSO works. You can add your users in a group in Zabbix (for permissions/rights). - * A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. +* Only x86_64 architecture is supported +* Single sign-on is supported +* Do not change the default admin user password. The user is disabled just after the install but is used to update templates. +* The Zabbix server port is not opened by default for external monitoring (active agent). +* You can add your users in a group in Zabbix (for permissions/rights). +* A Yunohost template is imported and linked to the host "Zabbix-server" (127.0.0.1) for basic monitoring for YunoHost. ## Documentation and resources From ca3a1f00406d09c838776ba0a057041a3c8910bd Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 31 Aug 2021 01:19:36 +0200 Subject: [PATCH 56/58] Update doc/DISCLAIMER_fr.md Co-authored-by: Alexandre Aubin --- doc/DISCLAIMER_fr.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/doc/DISCLAIMER_fr.md b/doc/DISCLAIMER_fr.md index 8782f3a..7d58076 100644 --- a/doc/DISCLAIMER_fr.md +++ b/doc/DISCLAIMER_fr.md @@ -1,8 +1,8 @@ -* Toutes les limitations, contraintes ou éléments ne fonctionnant pas, tels que (mais sans s'y limiter) : - * Seule l'architecture x86_64 est prise en charge - * Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. - * Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). +#### Limitations connues et autres informations importantes -* D'autres informations que les gens devraient connaître, telles que : - * Configuration à l'installation. L'authentification SSO fonctionne. Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). - * Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. \ No newline at end of file +* Seule l'architecture x86_64 est prise en charge +* L'authentification unique (SSO) fonctionne. +* Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. +* Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). +* Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). +* Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. \ No newline at end of file From db76b69e453b5ebbc2e70ffe6e435c940d4d2912 Mon Sep 17 00:00:00 2001 From: Yunohost-Bot <> Date: Mon, 30 Aug 2021 23:19:38 +0000 Subject: [PATCH 57/58] Auto-update README --- README_fr.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/README_fr.md b/README_fr.md index 0ba8ec8..36be783 100644 --- a/README_fr.md +++ b/README_fr.md @@ -23,14 +23,14 @@ Outil pour monitorer des réseaux, des serveurs, des VMs et autres services en l ## Avertissements / informations importantes -* Toutes les limitations, contraintes ou éléments ne fonctionnant pas, tels que (mais sans s'y limiter) : - * Seule l'architecture x86_64 est prise en charge - * Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. - * Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). +#### Limitations connues et autres informations importantes -* D'autres informations que les gens devraient connaître, telles que : - * Configuration à l'installation. L'authentification SSO fonctionne. Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). - * Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. +* Seule l'architecture x86_64 est prise en charge +* L'authentification unique (SSO) fonctionne. +* Ne modifiez pas le mot de passe de l'utilisateur administrateur par défaut. L'utilisateur est désactivé juste après l'installation mais il est utilisé pour mettre à jour les modèles. +* Le port du serveur Zabbix n'est pas ouvert par défaut pour la surveillance externe (agent actif). +* Vous pouvez ajouter vos utilisateurs dans un groupe dans Zabbix (pour les autorisations/droits). +* Un modèle Yunohost est importé et lié à l'hôte "Zabbix-server" (127.0.0.1) pour la surveillance de base de YunoHost. ## Documentations et ressources * Site officiel de l'app : https://www.zabbix.com/ From bda59524710413b04e6903ea92bf740459cd1b75 Mon Sep 17 00:00:00 2001 From: yalh76 Date: Tue, 31 Aug 2021 01:27:45 +0200 Subject: [PATCH 58/58] Removing not needed source helper --- conf/etc_zabbix_web_init.zabbix.conf.php.sh | 1 - 1 file changed, 1 deletion(-) diff --git a/conf/etc_zabbix_web_init.zabbix.conf.php.sh b/conf/etc_zabbix_web_init.zabbix.conf.php.sh index dc3e2e3..7ccf609 100644 --- a/conf/etc_zabbix_web_init.zabbix.conf.php.sh +++ b/conf/etc_zabbix_web_init.zabbix.conf.php.sh @@ -9,7 +9,6 @@ fi if [ ! -f /etc/zabbix/web/zabbix.conf.php ] then - source /usr/share/yunohost/helpers echo "