From 4b5f2a463c8480202fd38661bb12e1f5357c4acd Mon Sep 17 00:00:00 2001 From: TrueCharts-Bot Date: Mon, 15 Jan 2024 00:44:07 +0000 Subject: [PATCH] Commit new Chart releases for TrueCharts Signed-off-by: TrueCharts-Bot --- stable/meshcentral/14.1.7/CHANGELOG.md | 99 + stable/meshcentral/14.1.7/Chart.yaml | 38 + stable/meshcentral/14.1.7/README.md | 28 + stable/meshcentral/14.1.7/app-changelog.md | 9 + stable/meshcentral/14.1.7/app-readme.md | 8 + .../14.1.7/charts/common-17.2.22.tgz | Bin 0 -> 97585 bytes stable/meshcentral/14.1.7/ix_values.yaml | 1001 ++++ stable/meshcentral/14.1.7/questions.yaml | 4721 +++++++++++++++++ .../meshcentral/14.1.7/templates/_secret.tpl | 171 + .../meshcentral/14.1.7/templates/common.yaml | 22 + stable/meshcentral/14.1.7/values.yaml | 0 11 files changed, 6097 insertions(+) create mode 100644 stable/meshcentral/14.1.7/CHANGELOG.md create mode 100644 stable/meshcentral/14.1.7/Chart.yaml create mode 100644 stable/meshcentral/14.1.7/README.md create mode 100644 stable/meshcentral/14.1.7/app-changelog.md create mode 100644 stable/meshcentral/14.1.7/app-readme.md create mode 100644 stable/meshcentral/14.1.7/charts/common-17.2.22.tgz create mode 100644 stable/meshcentral/14.1.7/ix_values.yaml create mode 100644 stable/meshcentral/14.1.7/questions.yaml create mode 100644 stable/meshcentral/14.1.7/templates/_secret.tpl create mode 100644 stable/meshcentral/14.1.7/templates/common.yaml create mode 100644 stable/meshcentral/14.1.7/values.yaml diff --git a/stable/meshcentral/14.1.7/CHANGELOG.md b/stable/meshcentral/14.1.7/CHANGELOG.md new file mode 100644 index 0000000000..935e39cbbb --- /dev/null +++ b/stable/meshcentral/14.1.7/CHANGELOG.md @@ -0,0 +1,99 @@ +--- +title: Changelog +--- + +**Important:** +*for the complete changelog, please refer to the website* + + + +## [meshcentral-14.1.7](https://github.com/truecharts/charts/compare/meshcentral-14.1.6...meshcentral-14.1.7) (2024-01-15) + +### Chore + + + +- update container image ghcr.io/ylianst/meshcentral to v1.1.18[@71f8c8d](https://github.com/71f8c8d) by renovate ([#17248](https://github.com/truecharts/charts/issues/17248)) + + + + +## [meshcentral-14.1.6](https://github.com/truecharts/charts/compare/meshcentral-14.1.5...meshcentral-14.1.6) (2024-01-09) + +### Chore + + + +- update container image common to v17.2.22[@e7c9056](https://github.com/e7c9056) by renovate ([#16986](https://github.com/truecharts/charts/issues/16986)) + + +## [meshcentral-14.1.5](https://github.com/truecharts/charts/compare/meshcentral-14.1.4...meshcentral-14.1.5) (2024-01-02) + +### Chore + + + +- force bump to ensure up-to-date catalogs + + +## [meshcentral-14.1.4](https://github.com/truecharts/charts/compare/meshcentral-14.1.3...meshcentral-14.1.4) (2024-01-01) + +### Chore + + + +- increase common version for oci fixes + +- remove non-existent template refs ([#16738](https://github.com/truecharts/charts/issues/16738)) + + +## [meshcentral-14.1.3](https://github.com/truecharts/charts/compare/meshcentral-14.1.0...meshcentral-14.1.3) (2024-01-01) + +### Chore + + + +- bump all charts for OCI test push + +- move everything to consume OCI-hosted common-chart dependency + +- update container image common to v17.2.19[@4ebb688](https://github.com/4ebb688) by renovate ([#16733](https://github.com/truecharts/charts/issues/16733)) + +- update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732)) + +- standardize ./img references ([#16704](https://github.com/truecharts/charts/issues/16704)) + +- lints some docs, uses front-matter instead of # h1, and fix list items in changelog ([#16589](https://github.com/truecharts/charts/issues/16589)) + + +## [meshcentral-14.1.2](https://github.com/truecharts/charts/compare/meshcentral-14.1.0...meshcentral-14.1.2) (2024-01-01) + +### Chore + + + +- bump all charts for OCI test push + +- move everything to consume OCI-hosted common-chart dependency + +- update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732)) + +- standardize ./img references ([#16704](https://github.com/truecharts/charts/issues/16704)) + +- lints some docs, uses front-matter instead of # h1, and fix list items in changelog ([#16589](https://github.com/truecharts/charts/issues/16589)) +## [meshcentral-14.1.0](https://github.com/truecharts/charts/compare/meshcentral-14.0.1...meshcentral-14.1.0) (2023-12-30) + +### Chore + +- update helm general minor by renovate ([#16579](https://github.com/truecharts/charts/issues/16579)) + +## [meshcentral-14.0.1](https://github.com/truecharts/charts/compare/meshcentral-14.0.0...meshcentral-14.0.1) (2023-12-26) + +### Chore + +- update helm general non-major by renovate ([#16545](https://github.com/truecharts/charts/issues/16545)) + +## [meshcentral-14.0.0](https://github.com/truecharts/charts/compare/meshcentral-13.0.11...meshcentral-14.0.0) (2023-12-25) + +### Chore + diff --git a/stable/meshcentral/14.1.7/Chart.yaml b/stable/meshcentral/14.1.7/Chart.yaml new file mode 100644 index 0000000000..6e1f6ac7ad --- /dev/null +++ b/stable/meshcentral/14.1.7/Chart.yaml @@ -0,0 +1,38 @@ +annotations: + max_scale_version: 23.10.2 + min_scale_version: 23.10.0 + truecharts.org/SCALE-support: "true" + truecharts.org/category: cloud + truecharts.org/max_helm_version: "3.13" + truecharts.org/min_helm_version: "3.12" + truecharts.org/train: stable +apiVersion: v2 +appVersion: 1.1.18 +dependencies: + - name: common + version: 17.2.22 + repository: oci://tccr.io/truecharts + condition: "" + alias: "" + tags: [] + import-values: [] +deprecated: false +description: MeshCentral is a full computer management web site +home: https://truecharts.org/charts/stable/meshcentral +icon: https://truecharts.org/img/hotlink-ok/chart-icons/meshcentral.png +keywords: + - meshcentral + - teamviewer + - rdp +kubeVersion: ">=1.24.0-0" +maintainers: + - name: TrueCharts + email: info@truecharts.org + url: https://truecharts.org +name: meshcentral +sources: + - https://github.com/truecharts/charts/tree/master/charts/stable/meshcentral + - https://ghcr.io/ylianst/meshcentral + - https://github.com/Ylianst/MeshCentral +type: application +version: 14.1.7 diff --git a/stable/meshcentral/14.1.7/README.md b/stable/meshcentral/14.1.7/README.md new file mode 100644 index 0000000000..8d51bf653f --- /dev/null +++ b/stable/meshcentral/14.1.7/README.md @@ -0,0 +1,28 @@ +--- +title: README +--- + +## General Info + +TrueCharts can be installed as both _normal_ Helm Charts or as Apps on TrueNAS SCALE. +However only installations using the TrueNAS SCALE Apps system are supported. + +For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/stable/meshcentral) + +**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)** + +## Support + +- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro). +- See the [Website](https://truecharts.org) +- Check our [Discord](https://discord.gg/tVsPTHWTtr) +- Open a [issue](https://github.com/truecharts/charts/issues/new/choose) + +--- + +## Sponsor TrueCharts + +TrueCharts can only exist due to the incredible effort of our staff. +Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can! + +_All Rights Reserved - The TrueCharts Project_ diff --git a/stable/meshcentral/14.1.7/app-changelog.md b/stable/meshcentral/14.1.7/app-changelog.md new file mode 100644 index 0000000000..473273f86c --- /dev/null +++ b/stable/meshcentral/14.1.7/app-changelog.md @@ -0,0 +1,9 @@ + + +## [meshcentral-14.1.7](https://github.com/truecharts/charts/compare/meshcentral-14.1.6...meshcentral-14.1.7) (2024-01-15) + +### Chore + + + +- update container image ghcr.io/ylianst/meshcentral to v1.1.18[@71f8c8d](https://github.com/71f8c8d) by renovate ([#17248](https://github.com/truecharts/charts/issues/17248)) \ No newline at end of file diff --git a/stable/meshcentral/14.1.7/app-readme.md b/stable/meshcentral/14.1.7/app-readme.md new file mode 100644 index 0000000000..dc6ab6c435 --- /dev/null +++ b/stable/meshcentral/14.1.7/app-readme.md @@ -0,0 +1,8 @@ +MeshCentral is a full computer management web site + +This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/stable/meshcentral](https://truecharts.org/charts/stable/meshcentral) + +--- + +TrueCharts can only exist due to the incredible effort of our staff. +Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can! diff --git a/stable/meshcentral/14.1.7/charts/common-17.2.22.tgz b/stable/meshcentral/14.1.7/charts/common-17.2.22.tgz new file mode 100644 index 0000000000000000000000000000000000000000..87196d1ed477db12aec7b38a3c01b58fb7f28e2b GIT binary patch literal 97585 zcmV)BK*PTuiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PMZ(avQnPFuK2a6)0*`vG#}*zbP?s>Xjv}SMSQQ9#QrtCvQpt zXFw9sa46i(P%V)?nZaRBeNL^_m8JA zX7vS}1>bG{X*3#*UZ*4eZ8RF$e;d7a>$_&B+vzpB{dTYOU8C9RHX7f7#uMO@dlJfE z{9WVGZDl+6jXW^IA5ly(2?t=_s=z2RKLf}RWfdP$FUAoQ?|w`|kN*V%Jc?nw0Amt^ z>o`GzfoNq)W@rGWj74;?zdyljnvCimneDSUL7phH52J|gvlyZM8Kexw`|7=9#R~R# zLmC8}Lk447m!J}gVvmFjg-k$A_WQj~qtWknE4OHIM`E82Dm9QcR;g)BYvM(v22?Y* z$q1RQ{`qgOoAqX|-l#SHT$w=}GKfPI3t(slaWDWl9FzZ*0 zML$zP7FQUsMT7<#y~+&X208LX6Jvu)7sAe z=XiENtp?r(WCQ~snV>QezXlZm#K$3G0Qx@W(;fyuegy#>p@6fy{9^zh1)yYx02%!Ud5i*|fRHdilPDrF18j<^ znw$c_0930L0A`56AQiKjy*(0Y3Tby`TNMmoKNox04#=R zjBm4m)$20A;MLs}g&;)8NB-^_&2ZSKAshvW0ulosQ~5WWA~43EkPl|q_XBhXV_qTz zFbDt+Co!T_^b)<%$GPkrHF-$#I)0V8kj~4G6hSqN<>h z;RrB-6#1M+`n9Q&Q=_cn@x1;At8ZE|-^V*YkA2@t?k(a@J;s=qJkCG%<| zLZL@uS`$5fp}q>KDy-7NvsQe{^0OJy&HhTMx&u?NTw9L%}4}hgfb8j zp8^>AfbZ9GHw8HKg2cz+1bAUI5w(4SsF=I*8v>NU(67OOgh;@s00HzU2nJvb1Bxn@ zF`vcIyFHP_pk}E$L1P>u0C|lVPS9}xDZPL*1lSZRqKyzpI61iB!a4Tx<1ww2vg+l> zV~KzPXE!E>B8tff0lt}6fc$YSHg+xoWXr0_4K8ECh(`hrTfWk7I4_h|yOxcpDzcg5 zAmKvP*<}tdE>KX0LNCQGeI+YLb1z%%3h~iW9gpUo{HLv3 zLnIMWnH(7PTY?Di9EFIQ$%sSDFbqym02f2#ky3b2R8 z_AexbbdBTFnQ!|*NZWvf!J^`>ZWTO(6T~|cqli$y6tZzuOu$dk3vir{VW|qgLBTm5M<4m@74(7{~7D^76ygxmu7T z;vb)#T&Z7l?wMZ|B`|qOjM)Mx02QiUSO7)AW4#IkT|z9(=o2$5VY*P4uZN~g1*CsV z28omKh<>0b9)ND|Abs^VCP`$yL(qR828$~~*pE0sbU_)KS>lD*FE3*}#{rt4Q|iG0 zO65~8L3}o=&%XVZBF`hU=rSf_93aiMQq8(bLe7e6eGs2K7{L(^FvIDF41Iq9{`oKU z%a4iSe!k=!ou60qUi%A|-8dIAB2m}_SZy&dVPpmw_Fxb!Oa}TmJ8l?|->Cz1jmON5?nsKb~G)ot>PTdN!Ki{l)n|fDjuE^*NO(fD~N4e}AnJ zm!jdYcMKzHlSuHw<%hGA;!$5~+<^d)j;Mh7;oZ^j=SKk*5C)*yXtY{J7P%yTIm0UP zpagnEd^v&S2#&Lis9qdTVK_m0#=j3aU%tb12AMaNT$MyofMzIUFc3AU;Sjo@9t-4e zIUlbOB}vS+hLwGeby1FAfM;0mOJ0-=K&R1Y%*4+bnu(R_Kx~#V`ZYn+DcZ~w>^9!v zO2srJZ+Ve-6gb*h;MFPCCSPEZt(1!qGkRu36uXq*H? z#Hghi@IJ}EhN5n&qmqaOWU`R2k4Z>b3~|Ub+KdD!)(WS1L%k{TlK{mRf(UXyiZKz} ziX?^DJR`feg?->_YElt+9_LeBdGbp!x^+xUvDRIS1fAkB)%&tfLVT3%* z7wPhr?ha|Q^2s-@&m8i@ocj>@%Z=M-Hh;kkIphL zda)kJiOTh?-?#!VG;K6T@#1cZVkC?v*yBB@T>sw#@ZtK{nc51xJ+sxT`%i3vou-~U zIg4pnJTW7qmkWJf<8zKFv$lPSzNKE9L52e&<8d!hw(nIt|ST{C$j-~CnSqit;R{|@T}2joP_snlg*+B zHpphteH-)9oK9yCY|lsYeL9`pugx6*F!d-N@V~N+?xd}XLh?mXo8p5FNVmu5I1IS_ zSZ~x@^=5a_ZuJ_vOeDT?S>VsQKu;9-^Byp7`tr@czz$JXN?jfQ8V>k>>a9kjS!;Ca z9+}nACpe1&G*I@mIv0%UbU~Z-PmAAl%^(Q}z@Rav(o%&!u@2aIpKXPA>nvm_9t%NG zuUGkk!gj%kl4Uqz&BMb^tT#mJvRHsGRLGhZ1dY&t|#9M9=@fUj+_6c4ME%#i+B zO-n?O(mN9Ss)YVo&BHj;=w*PJ_XSY1b#m{kHvT7=dR&HId~-dRdu-JVn0qYG|7xk+ z0l;5`aE85FH1}3Piss%jNK2-w)kw{U3=V~I_jK(6kZT2iTO9JSy3{)k`$&RBh~;=@ z20#rt`h+RN;pFn;vG}Ba*F0W&ZNzmo(S{mG&uZ`99n%1#`O^*<0CPc{i*yEDeiTSk z1{wBh;g~)(2C^kHd^6&6ZF5ZZ3odOSK0Wq1dh(YUN707DT>Nb#PiLbSL7vV=k3e3q zH4)O9{3L&vZ;3E3ngzzZFIcB+Vt5H$RFn0 z4mcJd!SV2n?{{KnBO&1OwJyW=dhq#+oK0fOtw~;|A&lshtXxnZKdXkSC2HuQjVaaH zLZe~r32rUhj*u4j_}eOYrDcuXiY;5GBDs%T5xoGmAWy-2St<9esC-&>r?}54;+h7_ zIw={&P{!`1tW4dd9_)Y!d$)juX4up7J$v0ZEktuqZ0}rKQHQP*!~hH!ijlu-pk%O= z?pC?MkdlH_f6l`HAdev*jAJqb!{ej#Q|q|AvIE|Sfpis%(HOFa(7Jkb0 zO%$`nEv;+4EN=Jh<%hKN+sh9c_Qm__(_x)`VwI3EX|tOm=<@~rzs8>ghPPlr5;5#J zqzncD4kzIAXHb{ExWaAW%NH&VK0_Tg|z1|@((x*j9EvSk#q^!-sjIXfXBv& zga0lyKVDekvjdJv7$T30U0l-=G*d@c{~!tQV92*#dB7?#;b@Tvg}ed@5g=pfg+zjY z-0_zI4sR*IA@5`iMlreLTX)6a6T@(V%2BF;v~P9&lGj6_4{Dj;U%pgyKcqY?4>5AI z%(X7R>N9M_-}Byq!D|h{a@MMI{%|nFW3klAI{JeR$AI~X%us3Ph6sTfiRDT6 z4?hS~p3}P@egKexSNwwj`{m1S1%NRj%;LNqa6-I99Ak!qWS6#FRF9( z$Du5?v!j}ojz`iHPXQO>bT`G`6v!1*IQj|Ku@M3j6rvb1I-bFs2GWMnP;8vW! zVc(o;8@r_XJtdTxZzNWKM?!K_Zfv&9rjMq8cE&TMjC+ywMwyROrvowns~q8~>hE6a zRV6$#m8Dl6DdJEsDfNow-cXqY31UfjR_K`Fd2t<+eg5yhDrkH#+Vyt7-q1c6ebnq9 zq7L%fy@u!an-HOXuixo*+i2{!4;nsfz<#512pf%2tAE&m9si)wYk8gSL95$ zl@KvHC4{X;QkOJXHtNl0isiwm?L)tL=pA}+JnD4dxYs`DqW0mT*YLbvvo&gX9vb&s zt#P~CZy$8pqtUq8Y$jTzVW)d=&^#Q&eyiW1q@;ww#XHKM$1 zO%^t&cIvH0O44q7bcnjGaktlkje|opZo

uX8Z!9(G&fM%U{dG+K>O$A?Y7(dxEF zJ=8yh-oYVkcKyZ(EkzXu5f0a&rz~f&X7ixl(HJ&cs4+h19CrE$^~YYbIqr5_sL|`f zPS5Yc)~JJ8eQ)gbeB?LAy;f)J9d-`9cC&pj9v#BNr5I8#hRmC;Mo|^iILg2djpEqr zBjh&@54z1m&ubiZyZr;$IBde!VYl1ucY0megT4w2i$_ZwdCu;X=l=%CZ?LLasJhX=6L z8+iv~c-S5{dZVV-SWd;e30h-v^HSD?v6!&swR+=mw}br72>FMo!@02EY`2=t!x3z? z#{F);+30n~xTK*z^zDtxj{? zYqa~z7t9%qG4x0G#aLAIo_E+AH=E5) z+w%_&#$CU8=#Sgo)@a-xb-Vq>xOvd(j(h!47d2ta_mS6JMO_k3$OEV=s}&=B*yBgGFisPt z(Q-gh`g6JD{L;wkKv#5T~@fMb(b zEU&FbtJyegnvJw~&>kI(`W?U5K_kD>A0HleyUk9&+de#Kcf1y7$Ho|;ZqskUc5e*( zz0n~Y!QR1PuhATh*TLalMAjxGBtV(C7v+eIlppdG#i(A{0Y_;(R9e)Nu65A&k#=7fN^T^s}f1<6GndNHq%e5OErFJgsk5T$tl<@QXGvE~Q?<<| zjvl8g*#HGU8y7|(LS+vtmhNa7veS?$9h}3tR&$BcEQSA~e#g~ERi#Kl-4XvYDydak zakcobWyZ25CD)15328I8_+mMF?|_=3)lY_>BW|0^4MH$pM@_r$iu_ zX+&E?hN*X${dp-CA)J+>l7l0TtnLF{c*3m$7^Mjkq#oly$1G~6c7<-uYBs~?H5O1aA*Cxm zXQUAV9+{1B$Xml4Z*5Xf3wx=7T_RxxTrP!`tC&_Y&A71Se6Lv4ua!<$95OV~p3vIi z7sc!y4B-UD1#X1tRWXMqPri8Gp^=DyKvpFdFCrqGw=GA{T4B)@!Ms34 z74!X(@^QDe5zZ78F;h;sreB{A^Vr5DqF}`N(?omwK#(*S;47KW4v+(aMVX$YK7>Y`U8rM@@Q#{cKUQP6X`|_rhOSxHtZ?ViEpR;Z89@ zE7{)gtXd%QfyNG1a>cDQBc_m(dZf5=NWdf}No2lFWR%acrm$zVA=8am#qY2`L2TgA z#s!ceopQUb7S-SrSPPtd5dsaXl*km~)Klkn)*B)H2=^Jra5x!A>$;A}cI(~Fvo&j6 ze^7O9(IWHJgtAyLD_-W0b-J{brd&M?r~b10Kx&QQ#TGtCQ#t=xRk;9 z8VnGO11{tV}Yk7}MLz z4*2IkV>JHPzh0SyK$7G&7~wj_6I#DL5HV3kV50jpLf-z4Dp(I?*cc8cs_36u<9QPX z(G<3JOEq6Xq;RuT-#)?s`#Nq6@PT}Lb$NWni|v7*uCFiEpV!Cc zuk)e$>%)nBCqPNpO;h7Z6~c`vtL}u-5sen5AY;&*ii{abL5DF4*%ca_IDRgi@-ar?{e2%MFclQ^BCcNuU-!K3bfTj@oV;cy#2Cw2|<7X^>7b74-Y5CftV^;y4k|gjsi%}G^y4jXg#gscF{QQ=#hfnE$)_Z$!3aJhpy-PlK z2v4R==V1U@ZQUcGoF|sG#B>UW9+}y_tEc{4W;Un6qoN+l$n8QwcQ$7&Rd8kBQM2`< zcJBR3B_jR_rg0*cpf`yYUJ9b6GHaUhBh~g6aIRB2r9MXTRjN42w?A{4LjL*D2qGEd zO=^~z;qYhlLuFBWbeJ8vobzF;bp>(`_vrfKzp_0W4yl?feHf0hq0}r8@7+!6UzLamy z$sLL>6+Wu4RKSeDDtjwGx#F}C`m9&NyF)OB7bD1!ll4aClk(9FhJM9Kha-vNX2{tr zO(Gb>8Db(3Tsk!iGpz_R&;*G^mKya+Prr9H4<%dpQbR%F*J~90e#QT!0c@iSuT?w+|y+>CS^gq*@s z4uwGgJ_;Te!A?0ovV|qt&7!ttOX)D`U4w)_iak5@7KRp6atFrpEejU9an-J>DCJu@ zZhE})?H06>qL8Mu0zQ)I4-f@-4CIU!I_6!B8IrWcw2Zy-?e3(ebdu)C+7o{Y!9<_= z_({wMbB49CQyA@HBuGm&xD?Yt3Qc|UV&tQcVHns0d-Th2pSG=!+UGG!7{H-OfXKCZ z@QQCHPz*XAr<3dTYXI-)K5eHF3Gj|uVT%CsUEH5ge>|Cr|5)FIy~7_*{Bh>fjx&W6 z3W5-$g-znjI*_uFy%yNuxUMgBUX>Ms+6@S{mEBLMJu5k$X2dKbgC;|*_~^ba)_>vO z3rA$0F3@}#@{#cE<49@MZC^)`fH6jaFSjk>f16#GWHZ(dyTdoxi52s@0|0IRNMa9h zsdUH|0dhWlhy&~Q?Tr467H9sz1}7C6nTRKSe?3Lu?8FRBGBPrWrYUDs@lCNml+glv zoN;_SRtlGhuMj32d9?BW{XhRNb->lZtE1oehD^d>v1{ROm2ogu?djlz^h1=40_?dx zwzavp$Cv48r>w0PQ*$I#I;AZi1q+o7GYw`bk>>&NG!8Dj(PLqOk#M8qwDkGN3o5lqXjiJ zxM;SgMou`rQ0ybU>QZTXNf8(aa8d_9l2|X#s?sr;&BVC_zD0T=RWz1j?g;H=-Unnt zQ@?EJ`_cp!zzL|;G~zYh&l(G8O>TiHCWT!aRCdZ_#g9&8)#HW5c_F-qNsDfPU@9&a zw_(YPS@H0{_BtzT0}VDSAnNzhayAkcN(OIHPLRn7rS*Ef1hvADymGNFqZh6v>t%bj zO2+%0ZIs2Ntpo5%3nTkS{v3v$9aXrI?Q?k(U;CaaUfO%AcmX4<@{$hhQn{^CykD|a z${Cem&Aje)|2^|;to;aiZ5U9ZNkPHCT}qa4hAdQfI`wZktdz^_xm{VF*3VZCzm(5$9T5;7}@ zvX&d(oGnl|AAm8@mJZuEUtUVLJpk1PXn-I1|LLgdgrfI%A&Rfe;mKJjd*`CU%(0nn zhOuA(s;y3AnnqyLtZu9m%IN|sL9=fR-WJ|9g|clvDhPJAY)IJ!y4-S9WD?Q=^1_fL zf21}f9|g!ZmR;GlAxsNRV;LJ$WrkRcJ-X76TI6r2lL%@NYDPlLNW2Fk;;X+c^JCR5 zrJYuM%MP#op)3O}HFj2Y9D_pN@d&A@pskseOk9Lv&0#PAU1N}@UJN6h7}@^dI*my` zEM*RM`cGzvO;JLxk~HONp^Lyo<<9*4#X6bi11Qb=jxWUy2ry-0(d84*`6dq^Y)=ZS z2B(&~1VG77@{D7Sp;+Z)^!3{hXXb#D%u&o$?WvZE^DU;wWZAZNz><;5Vk%qa?H^0b}WdLD@t*+_(9F7?og{>ylz zi|Z92FrnyLAl3!>Z@$s;9nDS)4aL#AE>!`hP$s{*kmND)!5tE!x8C|woU#e0x%_I* z+*Lp~@|8(Nwjtb|=1ND%uWUe{%e;fP;!HoRjY$&PZBAkA*TxVB`nZDs{XRU6W4;o& zP@rKF^ohmLg2FdE5$iiv3sE|P?{y)?K|2DJ5dJvnggho~j>04e^_3ba;W4L768bVy zUEjE&95hxz(-&rxK-1oHYeGxcrZRwOiFILm0ZIH2GCW7MXi^5(Ewwgm6tmh)dKs2N zw#r!UEnF;=H~A=bRMVU**>e=bfRAyFgtX3!QsXbIr8nd&yQ|>nTeK*TDuBMP93xk> zZ2V$AUS6o?>)?#7(KH90ZQKgt=CdfW-8$@;4&E5wSnCCz8Cp`?11g?)PY2uV0TZmk z*B?7XRyroh@FhN*e=!ANoCdBVANVMWktbrh)7@P+SxK?I*1*f6b7aY4>dS8?7XS{& zBz0UWfKqf5mu}zsYZQ>tJ{J|FY2fyN?#D@3r&D#btIDOG3w#Yu*i>q7M4txeWth{- zJ(`CJn+lE79OCbQBR&f_^*k7h}X>TxK-scO0QjBQrbl+vBby15w$D`M?dahIAA&QKq_CW`XWR`EaL zK&}RN4GeMcAa`}0s!LvzLz2nV8q$oLsFl{MYW46a2*4c1SUPYS-Bg-H_2HoO&(nso zDAe@JWSy6jNgP4BX)ea5Z!$Q{N^L*J6Ma{f+{WjYRJ#LAX4|hAVPn5DqpW03E^?x9 zZrP)s%3(0hCt1e2&WxI!utfMnARka91QVpP1MRqj!Z%2Zl6nyzN&BfkFeU4BnkmfR z#E1_G7n>A#MF`QIGE#&lW2Ckka?VeQqAeSe^;J=wBFh0Om1=o&6~`KflDIA);eBlPvUE=t|vAQ;|Z=1r}g z4t-Jv8tE8GZ_X~~9W%*`zV?)xQ(l(S*L&urIV&rNlIleN<#kP*ZRp0Nyp)bPA6_mO zgn5M0OHq_pfV>1GXOXaEN5r{y!Pi6_laQ~c)>6$!!G>>^2EFD#W{tPl!czEo9?yZ!o{@)oOhpT(j8E#9(@3Z12)IDR#wpeUbZ zAShtpO2-8+6PsuEnyHIrfef4$&i;6gLV02eqez0V+&=hwv0z7VYErY|m@Qoc4eq%?SYn5&T_ZcDVDc4Wqq3)iJ8!K;u*98 zgq#%r`Q@U#ZLs7Xj!eRT>w~bTHe2mhQxeCDug?)DG*LhIppLDa6#4GUR@~cUbabdE zoiW1+4z;Ur#$n%yf|T<^#Vr#b)yspIK{gy&*Ungo4TATGDYoGk#1xyml>pGmwU+G! zy3CVo0|t104-lE)HuF@t6efHlJlp?;O2IRVQB4bIB(@#Zq(>KuQ0Sx3!-#^NO=4B? z!f5iK!w@d1B}^Xbav=Jgk&nz2b553P{*3stihh|%v0xqN%2Nm-6TytOEOtNMinfHWU)k(ZCHv^j@csFR>(ldpfRoeV z_0@;t>$8vYVmA>=d!;I7*pW{Jy=os{T)q{S!V#pX4vZtcSU!zo{tw{aI^ol=!M`&v zF}2<>JVU~q;E(=onW@s+8VNmP$rxOkkIKhrPw&8n3Lz9B5Y(HZ8A@9V&;)u5-MqZP zSvY6QJb_}PO#NHb4d`;v%ysAzhDJ;67lK_lZieJGZD#2;p#lwYrL4G7_TQjpHWgl~ z4vxiPB^6^zVvt0>_-ShuVhmJI>nYS2i42Dvqy_?kdT9tFj@L_pDWcdgB}Z_eLlNUo zL5e*XB}|>Jiqj9L4dv3bXFH}M-laK)Ae!8829iZ&A5^+_16))1L@}H8d=RfS2M$0L zM(Q+5x&WKpi3^35(tC>{#w%#3`hq$ISi-pw17Yv|>Kt7= z22%W6Dr5Mme>2L-f7=+{Q`(42cX*O z_TJ*^8d%-IV8ck=!C<&9UbUJ`Zy^^pPWuKIKJ4uUQ(Mm4k(!l8#N5OvBfGR=-N3hQ zYBcZOAvTq|z07$mmd0ojLm%bh=1{Dits#hsO!O=l8kx1j7eT#n%qIxn!PFu`!4%FB z7$FpN!c!o?x8)C&sCV3@!Fyh;nC=IK)@_KFjA z7gwq}Z3+3nZe(D!uBxb=TN8tD_J)C-3dnu(J=a9_(=oJ~w;MNpSgLpWo7SRH%yp)c zrp3fe`NhTCo?I$GTzU^^>N27aw;Y1#9khtMGzSfw8Yzcei)=S)0sb=x$OHsvj)J}7 z6ywsqF#srzNxTQ{V9fP^J$Wc*D7OcEG)g9WfW_(YQ9vf=9P&U;bO(d1DOIj;$4BZc zKM-SWc|E6V-Vmv4-|1j~-#r6XUbm?cXJ5&e`!K>cCj5PW$G$?~IJa3kNfGSjNZdv& zY-{qsQ=YD<(@w`TLf8sqGIs=qd=&UbF72UmLYoj5EftEb-t6ybcBwPRMbrdxi7a_V ztvdH2Yd0|xqWaQqq^Gudh%%v3VOKnPZ^fQ;2Seg=W^vA5fP}wiFyMpCc)3vk!&{Z8 zOPyHh8RC#-v@mulEC_h<;rzUwj*Pk(S7RsdwO1;VDddc_Zb!-8!~Z!4CJXZB7)?v{ zMNF2e0~U+DA%yYeFggn{J9(oWqrD>3N4l&@OC@NJL(Keo31bM5?<^W&V~|AD*6{9$#y<|3+&(uXee}>O+x8VGqz`_G*e?bTbNWDMxu1>~onS z_xAtF6paz|cLglbNATm-`*&O|6PHGj8@@E$Fkx-_i`#$86E%IwnL*){{Q!h&#^q*E zJwJMLdR{Fk;6{SmflIzo|I{DZ>NVMcCC$D)`tbI2WuwP@(7_ZlU=8{X&^D3ORS>Jw zjwzu?+KKoAlB&u&ZKuB8P&K=gE?m;%+d!5=ZmMq@yMZy}%tQ&xvik%0x73}vVy*yj z72MY5wH_|ssraH-muJ^k`VbBIyWqk)QdNn#gl=S6#mqaCx}t95A=UdEq28~7%?QRb z7`jG*ELIMD$5gPafjNed%f|?+^cQC3GB)%&_(0J(2{LhNS$R~3pr$M*2z1QX?+dYh zU%uS~XpTbJCz3D`9+svgb?hiWjov_wK_%7sE(s2qATgd+ zv!A|^NBuuL&U`>A0q$FY!C(ofG>O2F3CY8O=*Hd_e9GY$Yvt6 z#%%yb0U4PuIGmywvmawJ6Qh50l8I=L+Z0R;tqL}ZCL;w!UTX?{;nXiDvKB){g{$}O5b-u-wizmK+_zi1-zkrC zmZzaufu5EcGJ~IPWEP1VzCsK@wb^Jis#XcLKHhNrZp<;1F0uOPF}21RmkvAdABH|i z;(&7PCQ8Khdg_Wm6{E!qYfu8r74k7nT|O3TUhyLCE#h4-$m7eAlSe9vvha&*I7Bj9 zsz(p=@eTN!Nz-LabtSF%dcJo9d_ZzdK6Ul+RF|HlP{`TV9S{yvEl_sdG0@ zR(g(!^Gy^5WRa#9jFCu!T@eMZqd;u)-+kMU^!MM_IU?x3jPJBB-`u}RJ!|VM3hv!T zqtR&eI-T!iQqxBE-)_6t`>xsPc6yC&zuoJ6*Jw3c{pNR|@gzOYJPBnm{;u)pwz8f3 zMxM`~_kXD9#QM@0DdIFT?#d*roGDjzl?Mdu11v7KS5re7Ee#{Nw@nC#bsgSO`C!P{39bi*a#lLqw?7`qQ-;;5emcV0k6}p5&>o)Vc)#X*& zMSx%56N-IHc;>eCe0{YDndbL@07nsDr*nSdPRM}{9ta5ZDG(%7$fv~yug&l*r)k~P zse(HAuP{A}%hpqxa8jm_?Q6-uH#z18ufYVdlvw6NmY`1c8(xp{db)f)BK|N!UWyiV zL#%R`WbS1baHo)7O6!FVM;*LY)~>XYy!!onI`=Nbi5~w;-JL&pZAMMUHaK|efg8LA zuZqbW;88tcIM8EU1+RSUr7EobRAWNeG5b^n--D{$b+|TGwJ<8K$2GvJ=>e#EFbFt} zs>j4fA`%zHIv}@N3_=`|R`aZ>x?SDfbuYZfV}O252~g!)RyA{(J?9sLd0o3drDaM7 z>9usMbfFd9^ItOZeE#_P$)ktRnkh@CrOt5gPEUok`j}^wQaEKS??S4&^Q5|T;;4X% z0us8kD{oDWO4X%!5xr9w*(u@9OSgghjgStJS$BkVtV`htsgLW7kZ!k#whox$4MSGp zeWEm(A$67FNZ!t7U2sTLS{M=fYRAo~{uT_E+ld@=h{ePm0Q<*o;fPiWrrw#NKxTb( zR!AI9)C!5iNlI3;)@P~sB#Y#-WzwKkR#PpMsv{)}r6NV~Lb+tARNZ%$%Jmk@bh$J= zC|oW}M=iHt=BM!TMRduEa#lR5r7XI7MX8wia*i0F5xnEO_!P z%#eRy4bIj!`1EsQa^+Rgg9-ov*Ah)gZ9Z~WhTwkwyoMAfVuS4uVmnrAjD2htBk1Gj zZd8O|=%k0w(WFQakY3JXt)k+pcU9ohy7Js=JyW=z-i*#05-G4TTO5;+p-;kYA1C1v z{UGAQ8v3WqWSjoJAmJ4u)^TL4E-2t{f5ZWz3(C+;e@EebP_d*FmC<0ipr;EtN-dYo zboIK(LTr8s`vg#hGljl<88|Ox+5duH6T(cL8bDl{vbM4@!~v+P%l>r284hq?0?-*I z)XXc2Kd!E^u?ZXHQbL%bih#F!;QP5CU)teY)62Qtv!aH-e5uIP3n|F*=6Ok8qb9hj z2(;U}NxOG(btJ&VZ^y>WdPuc#j!`&af`LEvpo4tN^ z|8I2L{q6q$9M2Q(|C)uC@BS)@4Bs|tV1IYk{*@_BYV06ZAM5e_iJI-DK)ewys&;`I9F=;Ynmh4bd>=$B=i zW!A232I(8wD@_`XN9~l$sPOa~Wohec?US3`pH{E`2D^tY|0~!3X0w}J|2vJ&cKv^j z=c_&c(`h-_T zZM59=zuE6}+S~R2IUXbbtAwy)JP}f#O3Z5nf0;aVy`_5|=_`L`Fe;MyeaPUT)NaA6 ztLE!TB!#Xds?+HJ{I_P7G`@s}IP|&v*U8F7Yr*!(T_~aRzwQP9_p|6No&PFL{_!I% z04wHyyOGoXn~kmh|2&VG|7xr^r2F%ErXVg?|1+w#sv{I_qwAMAcJVf}5#W*+m6O@F z3-FqZ2r0{+&n+{bjRv~ZnqX;Pk25T+X*syJrNFi~bbAMnu^s5&?|!~`e`0}=* zvs8yFOSNz#08xxXHU`x{&G-H^ucoj>(o#iBF3%pHom`cCrE^bw-OZ}^1$Y%E(zd+? zb66H3nJZMc8n<-$`{B`BhR3}3U`zn`@$BmKm!tD@Gl=@d&HE46Z{B~nIJp^qcyn=j zJygb>EYz&I!ptojvSta@Y`IBB5FnhV)*?QE)m$!`$@b2_+U%vEzlg=Fc2AQRm&_hw z?OIM-ZEMmAwAUl??@IRBJ}cxubr;N2%YXfDJ175b^}pwNo>2Z%+;cDaPu2N@%YW9% z(NoKDo7{hM`)C13%@q2!r=^8V<~;%V|RK$b^q=YZnx5s_Toe zIGT5YWnxF6bgB1iyPZPuHrLE+0Hq;2eYF+@YdbG(R7=edZ!`lzi+zqz`2M0=$+#Z- z=+hqfUdlk6j;0kcI9KmKT%X>2{w%KHkflL0J(4Sty^8z0Qr=!FZVz6AYBe8Sa!;jV zU2*;|h2s3YX9Rkurz=Q$KLQAn_Z~s>0_kxpt3Ro%zLueKsr)A+@gHaWU&H?2Ze--Y zX0PAdp8r0}W8^=5ZKS?5%_IbVkojL$FSq@RD_q4PfopWn^S;7oi821AN%&1aOXt72 zeDrY|;EMU*>Gre!AI)~FwVnUZ@tFC4oxNyw0~(;=pL^+mRZ~s*+x`CZK-cLpq4B=B zaZ9*A8d8l2VMQ9_5;CL&Hy0!;WK%7(*=S@HP5af_XAde`!6o0l{2&#CRfii6)gP=6 zR|KaI5d%MecyoF)JUzZTy%uS)MV3G+(!r@)o;+k-0j~3nh&%K&cJcxvCVZx1=-uLQ zQm_1iMF^<5gVg=5@1OlM12DLQ3tG7i$(>Gb45LWKktQPlt+)eB&O=|gT~#;^`r20= z-K{d!2|-x+W(5e!J4s-W#7Iq4bzXBlys>(&GQ?dEZ-(!Wf9AjU=P=%nld$N5aKBE8 zcdN=@A6=i`oSa>$Dgho@RYad9bIdj*m|-uWwE+hU*|>E)36W1*I~2TD|iysUadUn)ygt2< zfj4;@#M-UPTg^>NLT?*B8mhV)-GDtg9bVs@T|OGFeZjf`&N*_}z0qfik8C2nkli$J z`uFRrqno3vx0*18itGIdl)e4kGV??=!D|m6cU!Uf(RQ{KD#6GqD-);B$S^vLAYa9RjERT`@UU+ScMJ&!^yXp76GWe#b+@|l5KwcxJcH91h5 zXEh0T!<;4n8A6C%)TTp*6V(8dc!`ax&?0ZAQ52&pSXycs%NUgFK7vzp16D-1c~#DK z`G)PelMk*fu2VL#Y^5E|$$eQx;AKmNn_`ErZfQ?>K$=sGf}#ffzC&v27ugHt zV2FlJaJ+G1n6?W@lDBxQ(lFNRZ_0g^d#BCDYMrTl`67eY-f)dbeB?UNdp^tDG-~MA z!p<)u1gdv9Mw0}_e$_pIHVyLj5cBrkf<-O=qD$D#i&c3A4$9wX83uNdqPE{EmnFMp zM}JPi{l0=WHux;p|M+M(ijR)#IzJ(4fWb7I!dBdzb|62Wtlqe zk*%Yiue4^44j~{FHvYLNRY6++%q%AW%-b4RiYX32;`lSB9?M^=av)$SH|3Ay~gz=w+3*AcZUsLOk83QVh zdh+=^RyoPSARu>_F`nZ9P0%S{Mbw3S`dn$b$^62X5`u)`aRR2<~0C0ABee~x1ba?aT==kT;i<1GUhGTY*tRn#Ye0F|5 z{N?QW_@{xotD`jDuaiwj@|Vq|BLPnkJJ?w-cCb?xJD8H?=JfB!=O0c^PcBZce|dlP z^YG^E@?)ns3CO&YO#^bTSWD~Z=9>$)TtTp2spD}mDORMF-NsLT9r2Uj`jeCYyZ}Cp8q||Bb2OTbKG&vM;|B&kAHzdAfr(NpW1rHf z`^rjh@JfFOmz#&>tukc?YA)3^C|Cr01JK3Px`d zZr@9pCcvY*23a>13V26%rHqA~``t8QtZW|NtAXbt+$^E&9f~Iiys|M@B~tG`j>GP< zd+ZG6FbK{?Z41-XXt2ARjp|qjraX#YMv6c;DgW5zds>WVs@IC^%Tt;b`pnoozl2tH zu?G_DCX=&oBz4jYBaX{|8qQY zmyb#KzsYDLyT9a{XW9EjQTbc$ztU2bP~=;lOuVk@V13PfRrg^dyQ-yfl`dY!3a^^} z2m|bkmB$cr8S%2a_6Ra>x}WadviIM_&Mi^h?%Uga`&svG8X<3R?`b-WkoN$7=jggy zK7Z0BRv*>b^EG|eoD=#yuXt`a5X+wp%%Ban6cJyy^dOo)1x{2QT&#=O^&&!5P>qOR z)vqq(HPzPG(J6_=>)oPR<+8%FtxEc_S0@`0dxAAvpa50(g6j1Bx=WX4=_O0pnj^dZ z_^z|uZM;$RiJ>@z!CA;qJcb@zePvKxO%N>Z4nYD51b26r;O_43?sC!K?ry=|oeKo_ zKyY_=w|gJo)2dgsKhCdHTQ#+_(>>F@o#eeCLrwMI*JlZW`?L$hlRMF_kN}si(AXuP zNxPm!!U%n{*w~-d(CA;~H^~UchW{iXrBV78HEY{<}w8*2U#`+nNUoH2wB6#6-WcrMHQ4*Qr8T}!Eh@zob3y6 zKnwfX$%WXHkbg)Pa7LdZPyx@u%YzJoVvi(DF|}4J&Gf0WhMAH-g7Ki&mXlh;md)35 zURw>rDFrZeLO)|wX>Ur@>-p(P+wUyFSe@5kTI)jIPTaam%~rVA^;OF&x=Fh>|3z<^ z2SD+Vz$Qe!3fS?<I)!F35P@9~lK_9=d6yelVe96w8`nOha{Ui5qlG62Jhc)Yl=>OqguHAiMJoO^z(-x_;|8F>SlPA0 zZvDg9CH@U@PEL$wazhTp{@Dy!-`{nyM$HL`N*GB%2U!QbrSpP*6h_p8kMfU!kA2j} zMxq(d>acYnF(-sd--6Rtd()OKiQS`Wlq1vAM4l+Thc)O=HLMWTKg3BOML(JpC;00S zA6mrM1aI!50~JSSF$caPKufDLKG~Z*iaO>^g$sRd`xfY{6i2}fh--|G{3$He))_K z*c$OkG)e+T7>NWQ77^<(GbgHhh0VCa-DvSSn_jAYF-279NQ_A ztdZ87u!afKl1YtOMb7v`GwzZB&`&w|Lvg6eEHa`lkpbgEesO?ZNQ-tbGd?*m#z;x! z5Gisp>H+!Ay<|2I?cFr&p)46I->`i8`b8r2r0n;MYUB*Z1iZ}kLyMMw-K^FDI-?WI z{?)-h46Y*C*3_!U8SZ-qlU~|PAD5a3sZo=G7UdIX75Kv#{#->gFJDHjwa{|*KRaKd zpw2~3|21#wE@W3?y{qZb_&ciGRLMjPEjJxUj}Y+3GYR<_arXfu6Wf0_gp0yaNqN@6 z?LVYxMkJ9xCg`l2KCrnXCAeJ|4R$A@5=|+iP>tIB4%DftALZ@C@i_RFmFU$lwmAti z8180;swW6eyzQ)gOBn-m=Qs(x5ZnSe2zxXx-+>G3hXDUHNv-FZeIv(#+q&mNy1RGH zZ+i2?j<5C3XM(xDouf(eTayAuGSwrm|Gum#*x%K;!HM_s;#ZVDcZ&AZAJ`Ud!Uc-` zqHMqt*TeRaPF6tuVU$`)Gx4=myr5;(-K;dpf}`P|Q^Z&yN6%>zcDkN7eE#~<(snAh zpEjIGyc_3@-&CjnMLG>qe?lSx5iDe1il)%$D3) z<_6{#d1#~j#orQam3RKI&(qMB858%Thtu!fgcd~1G=M5I`$fu#xMCCUDn0k%Q??_} z=u4r~(P;x2p1dxSr85EyBV!Lc)%5mg6}Wl*$n&y}73i`WrAgA2Q5gv1R!S$NfNacC z#fy<^x$vMM` zFqBtQXvP+JMvEGf?`jmMAahfHQNs4e`;DCv z{ZnY(f^Fk~c*?m{ilx@Z>_e2%lzlkAva2KkhX5|Kx61YI+}5{HeWOi7`zcat^7a7| zA$bL1h!MqLF-+Oaw_X#WV@ag%$>Tqz>v7B+%#a^A*`x=(z8e5?kbxqbJa=9Y{;u3U z5Yvt@k_c3(_=o#rkycIf$-e@lokS?L9&GLS5Sql*m0e*=ztubprSq0-xIKRz6@sfA zI*CMs=`_DnULz!pOkL+V9@=e5B)JL5zD^o^HHiL+H9DHg(kNXQwDN7oNK+}!oMr?n zO8{QF;wa**ueZIy;mf$VkM>rIXNs!e(f8C7%qryM6PBnIq~*oFC|X-IN9(Q^>jsav zczYfxYOx#VsJ<+DUFxO5Zv)O3ip`Z7%@_^_Rim(?2Nnq%9xMB!_Fj{@X)B1$b|Jbw zN&c{pqpWXRrI!KE4zX{+zI@^Tm$ZVYTpC(G5<2@Ov5Rud=CiO~0naA6i1Lt86(P-YI#w@<+V6 zZPmL%(pEr0*WH$NtDzd8A^)Oq`)y&hu`!}*X=NTy zf7KnAF})Q>^{h5?3of9y4VF}+e-?lZwWRr&G6on&Jc?jBmbaufqw+)UL&pSb9D+|D znr;9!8jil;yC#0o-(3kIsB?eePMjP?A@m01ndra_7cVZ5PUZ{lh zi%U4c*IbsNPwnN~wFT136RXnyB3C?i@J{iPm{){HIr@&ZhGlnMxqWhE=FzU5GmA(> zS!xI~iaIypE(=R9(+W*I=+5*{DGF=_cEp*gHt<-Nb$aRHGjIGn?AXdRswhS)-eX|t zr_v#FU#I*efVipUS=2_#oFAg_+xe88XNClDOhI93fxHU|i_j&rl?>1o4QtRe_vXQp zd1_dlFpS{o>WAn}i zCY8%zP0|dVS*kO!_>sWDu!qw{Jv`>|sLw)%+c2Vr6WO3%*h9|6Nl(Y+lxbu*j)Yb# zadNtyXdDo5@;L%bxu@aqY}kGM~$mAd}>kru}-fAU*-(8{z_A`3m5lAmis{WDDs*Opmt$HRgRwCrsKE=wOnef~&oe)v@$)w2Us6BVTG9DF^aa9XkOU2WJDtWv zRa>f8r5%FXf*MW`DZyn~ATjMcD23gV4npZYy9fb1aZeVVs^0Q~TX%9bG2(9O+z1zO zzO&sDRHi65%#0v0+ohgy``AOLy*iaFj_>6jEe4JWrbQd-VRT?lvm;CXCCBmJSzy-T zapND;4Y8Zad;8gpB!#0k2(0`mzphJ6@~g5Gw#$e8>6f40;(0A~Hjlnj(d67!CY;%B zln?yv~e1pU*^xVDE$%Y!P2@;#*^R4kW;5UdCedOsLe!zFM{3_RxL>ox${$=O`x!( zL5Pi`?tDQi%@dDWS+;*-ADS))ID3atauwlN21!?D!v1uskvihNSaODz&{Ku`8qk$v z^I#&8lrV;YOOd|j=zIFFbnYKyKo0%q)}2M#VRO#_o#BbZ)b4!w`f-3LfZ4Jygg)U+gR=__=I z=CoD3)X6QCTYTZ2aO37wVPT{ym}8;aC%Hfj&tO9=;@@7-;w|Lkc5BV`9@f+4dR86yF_BcxolH6iH$u8f8B=2x6>5!rpPC;4Cu|M|G$ zkv0XGi!k^6L#Sty6Lh4Vw=l3H*VsQlc>DYMieNNZV_gm>zO&sP`-YFk<_zZQcZngj z3l$s8OMR|fP+7MPn| z%~;o_!&0z`^CGR}wzgH$1Lu!D0)=GE6V`eJxpo(5DS(b)qU)d|W%=dI$G1b|21z+) zmVR98hkhGvoA6-(59lIiy-w6%2?>(%aJ zsJ6!oE17(}i^uhH9eOLej(DC!EzKh&EqyW}YxLKlUcU9lmkauG4^?;NQN)`RN=a*b zy(htRm*?511~>0DIayetsgEXDHMwj6guu=6MKoz0Mi#Om9b0$%zh5~++}N>+^oc)F3EJXZ-&8Vh?>+1VivLa8 zUX35=@X~=e49>v|D<5;*z0@Ik4aDpUXzA>dpufJ+>F?9nP9MEd@xtZGc?oZt>i{OdOS5xUYxE@RmlI4G!~*Tr&B7fYq< zUoO6|FT;u$7Vq{M*GpZ+TJS_JKVk*n<978%cQm>|e+0~L0sO&)st_8Z;0*^pU$9u) z{KjVmH$g`JR>dVbl8y1iGv8g^&9v-M(N`y1O?GqEXpo@vYuB(op59pR3q-~#)Hd21 zLIQs1&p}5S-I(+A`Vh12xu0&*(FdpLx;6~fdRU-}U`|+4W@A;Xy{#z6)%SOvsUTPS zNM~^s)PNgg@iI-Y>$Y&Q;x_rsjz*C);wz<Bv3k-%ca8N~$tryMohIV)=E4gZs9 zqZZtM|ZX3_WluKyO`*d%U zM3(voF{fAi!4is~GX&ZH=r{H@REQOl?sP)vXddB0n`Zim3*7l(Z%Gpw_~Nzweg38X zd_EjomG0Z(=ah$6N%&1LGel4XHk8W)PV(bI{;|VCaLZXtw(~^F*A$03HDflSw}p1o z)#!KP0c2PC1^Tu!fuJYzM2-9P-i#-n=4hiBQID`;3OtmOEmge!$bTz>00l1KTv%}> zKc}iB4_k-aL0hBCmr;R*6n0m72_Pl6L;!CSs*a205Ie)4uwJ35AT8khiEZf#V|mwQ z!DWp8LP}2XljBTQr^a{)uQ+MpTv$lrgUV)vS^6szGhP*5`?te@6#50(G(B7W1vzGl zlt=}s_QSG2>l9(K{!|nE6;tRVjK?k|2Zh?uWXBstvrGJT>2y;k! zE)E>Fo+DrzP1>?QO&xLTjZ^%>x`DSRrTOL&D;F`au zju%2RHwYi@)Spo6J4BMb!6LkH!=(ySVDltz0ED%5YlK?#d)@of?)~)1lR81J`j{`3 z^P=098!aND<~qNC7i#4d*|TkMWoCw0Z@ji8WH75b`VdNd13ZBXG^2e+oyfwJ^$^sE zi{(~Wt}W!uHjF-{2y-(pP=ikJ#zFZ!(J6)sTu4rD!@6X^bDvan)_x@Ok1naEJ;@fb zcdOx0_JyB%*Kxz8jVgb}GnWo_M$Aar3OIp@v2d}dfxoahLG<2Q(4jE$hcs|b^5dZBu6 zYl1V|fbj!>HU3s8RJ|U^v6b*6=Y7k@?gNm2pnMDD|F;|gRY1=>QvfMdrya&;sQkF^ zegA1X$}CD!IGWDl>Q{^PlYC5n2byouJ>A+Ru^oUK;ADwTSxT8`f zsvF4wi!qY;Yn$2yxs>YS1Wy`Y^QLw90}9(lJsfNaeyrv23H3M1meZ7mQ5i&2a=&ol zQ;#Q|=@bpRUX%5ly4&%EilSm}je1L9uX%p&K9(mWE zki2gx6>4IuHO=q#sFK++M~uy)IoQX*AV?Ge zoG!YlBm~Qn02j01J1(^E=ou8UD9Ywl;RX`1C|*K?|C6k%jeLf_euJBITk(3t0#UF0 z(wNVHUb;c-ex$tG(6`q0MbShagof{H+6@r#+nK#4=@wIc(RTK5PlMl%C4yiIeuLH~ z(q7<-d+NdcGNS*8Ia&@Y9@qgK+FGD&`ZsNrT4Zwbji*&^8-cKPLM{_^twz;qim^x7 za^YF1zb0P7-W9eWsp>&?Jw)T`(YzbvFZ!2RiSaVdSWJX&X4TBbLXF@K^l-ZitCMCH zh}Ac7p8cvor0mEx-;ijU^j3U_lfl1|d$)FU=B<$fE+3twngVa0ay7jezHV4}`hxC= z;$1<-622iv!Uu^xGp87b*SAO`^>!-{M1w9ZSQ48z#7q0Q9W+Fi!NZHzDU^JB;_|N< zZ$$D0tU~HY8P(!)9M7l(!|bkrPv5_q{uA`=iu(iEusRr%@h(-#8syBA#_D=;RqxeK zL}$Ap5HOLiPxA%P_O)gmv}Nu1AJ?+DW|()6=F}GJy9wUanC7MgzJD+=`kav?JK1*6 zelWp`C7~ZPQs1XM0o$iiH^8iJi#1p;zaj3RFb~Y3;*fa`(J{Td^SYGEP{poKj)fR#AeK%u*DA?3Ean|GM_wGXWTDrPuQ2eoXlTn z0g}6Gfx=r3ATpGCrcfxcf99c+1G0ZNvaVVWyXvkb;))3P{GO+X z9GG+H8iWcb+gq7LGP%qT`L)O5PlkV7w=EJ*bT;}hN)8eujZ_Tq^!(d$^RJs9@oK5v zlKJ`W4quoc#2Gs??<(N{D-{k}(NF}zOb?DRL4>s_9lpOW=_zxJFluWr;rIEnT#bM6 zDn|V})0|M~_30%l{XX(?x|!a!G{P}n&}!!^6aEUzNdwyFq^)QC?8o`6LD99rH@Qcy zbR%*Veb?G5RN64(P-H6WTC6h6cB$Q|-mf*(MB6hX{%{$y(0IB-U#>cWsuTsEDx2$RiD7*824B77;BwEbz% zVIE*VF|+uXyI9-Gjq~EC-ykn0Z6O6wlwsy5H^qMMWB##V8R$bcx{1Noyjb|QdE3~6 zZg&B#=s+A{!a9-@uAE~kd6tb!_A;m8FJ;=pUxy(?RlF}{r`YGsW#hZLhHgA}|->P!iB-7!Ubk&HJ;*%@CULspZ za9$mi{lBT%u)?Y}t07;ZlG}U?z3~4`Gx_b`4ZG$?U%+m@x^G*bY-~Yti2Q<)^W!%)m(>3HNx`ST+El%;n6zS@HRLU+zYWIo zsV%!*JoOvU$}V>)h!0vcWar$t1qsL_-EpGceYYh<50ID0dhtI!u^(9k6kB?hWs#T5 z4|-_QS~5@Q4Bx~?Tzi}Qz%!d&o^7$8t}jnlen>>1oNsi5V~)PVO+2m}aeNmSgO95U zPq|YT{#IB?+@%P=0{7dK{hqe^lf7;V!&5(v0^LSPgG37J_=tgv#%ZcP%#OkZFQ{|qq;{t(M*9b4YLOlZUW%Oq5 zeJ)Ao*LV%}8q*!DePn?5>@JZPZ;-1yFNUpc z9%vdzKw0m0yE2MOoxpX=-(#;?w|Rn&wg>!GMuacZm2+m-^U-{Zy>LOZ(k0LMX@dSk zgiz_6JiYLD-^KB|cRpsF4GCU*T_LZ1Iqq*_@+=>!D5f(QW&{nttx{Eqg+`|N>qjZt z{-KQ=YsV#3K>{HWdr=Lz1xAIUNQQ6kKOZb$;#DLIZU0!_T(bls{k5l&{a*64104V* z9DIY1n_fR7LgQdGQTFwY*Ib=`i8mA1KqAP}eAzcqXVXM3psREdX~v!U%6F77<+aNN zMwdBQW>nS)Qx-^^&buVjQ?c)#w%$5fl$AGOMrNqIcBgk?BYiwF>ruH6rYE*rU;p)Y zgBx)EOw0#A{Q?H{PmhDTQp%+7CvQdK6`{$Vx85m7V=cGoi6~b3q-004lOR)?BV6C1 z(fKW}3SN;>g|npyeY^%D35`P}>Hak!sbrvzGDEES^5tsCQ&a8+ZHeXxba}xB>_X47 zls`%IaU6#`fJbOq#$PsMO`W0~(^6J-wl!RGh{bV0 z(bz~2xX0b89(b@0-ZWeRq~A6tf(O~P>LI8_r7YQgB^bEs=4wt>Y1tWy?_(cg$R6@d zVI_rH-@;eRoaL?$knSzDq8SE4JiHCpQxH%Z0&zZ%rVlDA*ur{;o~AYj?)mtvWSq?z)Z+pG<$MP8{gpm8F0<^XBcBd`U#5x zz=kC<^}1PWsIxKX!wI`N+iyjvVs1yDr<1X!jf))9$PDtw!qm_}-xrYF=$4W&zPaX% z7lW#k!o=eCGAd@9W~LY;?`KA%t?CXki!c$)c|wf*Wo1&cg@bDF2hl7&EQI{5xKE97 zfDhriJ#ZUM&sAuuvtsn|N;! z6bx*|2`mjYIo3O*LY)`4Eh{Sg%H7Dv_UF#MS|R&i=W%Z>Pogw}S>G?^4 zN@8|5{FlRy$Ys2pb)M0OZ)pzonM{x!KQF&b8ex8I_lCk#I_$`=7N&ey`r=DoKGq)>-NVP%| zW{IXb`&(ZTYC&byJ#?eBn@o)5Unix{A~T(A^<;(BPE~5Q$L2)b%5@7`6|1To5V;mI zPzAO;<5z~I&%>RNYV`5)`iu(eyX!2C23erD>SdA{j5AItb1&*wmIA_OWhM>5`jp*3k87>{XUmqigjiA)#ze#3<#{Z%wt`BlGd z^vrh^$9B%4CE`Vwi?%IXYWX22JY!tqk{4!v!uYw!uTAZqfWwp)E-$zNy7k-JfR3e_p&>QJZ$E&y92De=26AJC=h<_5gZ9uRqyLVn zY?zeRNB`vV)K>nSnvzHV^vz#0&xbB|T20rjLHcSLp4y}l1WgWyL&#@~vV z;i`DQ6ycJ0Sg9;jjjYXS)4mmnE?hq_O71kO|eF^kCg07br~z9X=pa^ z#~hc+FsncQlCTw%OF`S1gSN=4MzUsUiS5f%m!L>GUtAkjA}Iq+Qn2PhVg{jFWfg~; zt620skD)6#R?7YPRAn%uxQhZ~!IUP~FIFM__+R*i!t3{MY5okUW(qL6RSVut`gjm^ zSmRaC52~sh_4o1}Pp3@YKkK-RFL&^WGXy4)#bQhO<8Z%`fUPfjU(u-c>f)i!;f_pa9{2S%3j4cz;>oyc6r${3dem zR*Jfd`y*Jo-!eyn&|>H=r<9|{^JBE7Ebz%qm~Ci?>7{cq5=RVs3rfNYDmt8}fuW!M zpwb01yGc4VMO5MaWwb@VEbgtlm-{NZAH^RtAPsrsNwuX;ss=0>r^E|~U3NiV1 zTt{Ed`weBUe)jn`BD|nG_bYP|U6bgYTjc>{`HAnINX5GWX|q7hSkg=iQgjJtEU-6K zW$FYLpC)#trBV6SE=B%P!jln{!Mi27^1(J)PG!@}C?T7*(se+0&y=*xg%9TjkC`QrN&U-Mwi0HW+^ zFzds-U5fI8{c4I+Rk>p0wVhR&~{EG=Yz{eKrE6{&MEM+_uA6Gjq14AXRaS;N}*>7+`%FFJL`_M3R~Jzo}P{{wP}!Kv-Y2-8Mc zq+?xFh%4f6)S&Mwmd_6!nzimVw_4j0$ z5Z?74e2YYU*co_YE5V%%aQBm4#k-kADEi)3bf}bgkS6oHiQ~xMZ{%qF#b)t%x3I3B zyfzw>$jgdqnN%Ke}z@(IQw`A(h7}UcfARMHl-hSOqe70=}9Cw71xs40Z-s z`u-PiLZv{f|LFDV)Hi9ifpx<$Yxc@+}vt-_6*)wWGTGP!R6RL;p?r3KN9BV zpTO*+0E@4q1gL%Tw_BU7xnN6QM@L5rFvH%>KEMwKx*izhNJC)8hwbE^d!j0;U`@R`w6L z!$-vMH>Nycn?*pMr(~t|0?@@*bq6lt*Q+l!MNw!(JT8XnCOV>-m|<@^A2~|E?fIE6 zJ1^x=vi(B_s(u)Z(T}uvxecwm!G;i8O$|oP$YvMW##PDXEd{uwO`p-e6V9=7-g_2a z-s+1Z>4?5p1R1qO9aEhl(RcBPZOsGRt!}u(-HuN{eDwnv5djE3wk=5k+RB!3AI#Dd zQs^T|Bn7gTnkof$Kc5=6exAErU(y7iC&hqeqe9Ukv-*mpOh)1Qb>mUQps-K|ngfmB zNhB!J3Z7wxwp0$m8QV(33>&=dUG`|$}iw)P@F5M zsjY(-tUdlG^Y6%26kokDsA?beo7TMc0jSVj!#2?T~mKM5&Aj3GEh z5{lj+>|Bzgegu9(7#^)Z^%>-eT)si?W}7~NG%*NnwcZiBKg#?`swlL6#zgt{qq;ogx(fX!-@8j7OSW2U3_h$u=9DujYXG%2~es>N1AtL(_Q`_>dC8IH7@m9_Ljd z6Sd@F_>HH+j6J93-@T8`=ffJOfe#|cG1h+xln&{gb#gAeH@WZpi!36CEQMzQCMo`? zVxl$go)l>`8^?zU5ZU{{TxdxUAGcO6nEqgAr~9B3%|HZdzg+d@69(q;Bytny(u@-5 zW4Q-sxpnOHSTnqFnkyG&Qx7VB)q=b!8{^z{QEhg3>6Cn`y)U*G#KHg~zGDr% z;~$_8AQ_GMKb5ze-rV|rv*g3m(+y_pD6+=%iV|tdF;Y|7p@f(WMEF6e#D47l)f}o=-6%n$K0qZjiSAWREw!a5=p={jIl>hDv2$JX{`gKGSw$GGtA&v-nZJI}^EIJ1d zcY{P@%!9Z++%Qh zT{tS0bF5$Pi*d-1ghKShqL(>0C1LSnRg?BBs&j-<${(+Z$WuV$UZJcA7)!`XnC z@+t_J9Fp{>G|4Ka`FXz~+`lc5OEy?$Wo_A--Hy9YC^gVAUn*2fM^5obNajs3rg*zo zF3t-lm8d9Y$ZM(KA~EmSQxX*1V(G$oLs}b>Ah-OcxS4fUgIe_TQ@WEffW4ixA}fOS_DeMAIkf}ReZ9kunn7!-M0mZ)vEO_F?nP0)^va3?L|IX9G+8|1z6!BJLjoh6}(GO<+ET|BGVZJjNzE_NSY z&w}ke;6mHY=bOUJ;}&Dg`jH)>~kB;7-WE9{vqaJAeT1}zPN%?3k--7Z3M2V zat!gB3VwHULP$3S1;Q55TjdPfVfUJ&@nUOX;M08s1%l}Q&_gl&( zVSu?*7Z&!{1m(T{2wf} zxZaL<5rOh4Ki!ba3s-q)kk>5-E`1c-MH0r)PE2oeKJZVlc z;Z23#GnGq$3f7E#f_95pMCh?yAP2fI-d&v8#kqcYYsLFf7f`JjnKoV&^)x?R9e^?E zrRFRJw+XpQ0^Xz^w>G8(-ato(pvBX701Z0VS=yd_iQ}Ifmh279Y>{5!qndRt2DU3~ zh*cdI^PHkN{_3X$fUWse&FOHkz-vj33Xnm))i3Ik%c;%w?+eE3L2Pn@KrRl~ce-Uc zI-Ec;*XJG|gZ4TK^fS!d-H4vUFb+PF3<!uGC09UN)c~=0d0ENA?MHuW^UHCMU ziGBcq>6|KjVyN)Ofrl7+<7gFb=V?uiC~&{>yX-f^q|{9xqe#ZjTIR&MzbZIlhhE(D zM~z|mwGwEEW9VF*PzD{Uwo;BE-Lb6SP-W2NZva%QZW6aF`nV`M!Me|<@b0rnQ2K9X;Spr+B$bulJR0*nD(Zt?a>{8GMnl}1H3{gR2ZQ! zznKSNnArft-Fq4QOO8jq=(H%aK90DVAH~0Z=>)#fB2{ZHUc#uWI-2Lc-0=szHvnO z0xiuijpAs7;oRA_7=nWqzq1-G1y-A~>c8bVA7`X&i+Bo#KpoP2&^K->LeA-nOl6R+wt!K3HU+;+5qY1OWy zH7Lh*9B`p;_b~bTZyXRoFZNmct#7#O0~cPlT=F>A!xW%H>e%fY#PA#IwR)^+#ZBdA zt;S{iLn9WG{zMRVQerZ!aI=L;r}Othc>Sm^h22|i&IPWrQ}Su8;WM!VOp};fVsAtr zV*M`=JAJ-C+}r`uKD1>w9@}q#t)3pa&xYA_U|^pDx&#fO-ChuWv!ncebe2rN+7| z+3Dba*Wl+zEpg}rNq9C|Xw-KAU@a2d)6&t^2xdI6J_O&?;8LWCHx#iMN7V?|-qRCb zN88=UKYqu#xe$-YT|e@UxDlYGw@~TBuL{(R@rBJ86tR}2Rn;MOu;b4q63l(yDob{7 z2DGzTN6b7;)(8CX3Bu5|c#hF{K3=Fq91`o# z44Bsg&XwveaD-0p*VHiZmn{h$P+vxI5su30N*Wtw|1?d^UD%Tox=3rKcoy-dQAryQmq6L z3z+5ZjkD7YzsfGwhuN>CO|h^7p4ehWx#jwKVYd?7UbM`FD;=)4dtO2qI-==V zfCKOi-w?6XJQSGB*z!(i8}#gVf2O{rWU(-uG6xL87lub-GH)4*IAJM=ec05h)%qwa z_FC22sM%_UF$E}xf$EzF7x}xB%w8uKMi=F{i;EPxHTKzTbjj_=ip-m;0zg*ss-$r_Vr2! zpXPr_)JA->eF?K?Ud5B36mytWvN+byvppE1r&VqS`ph;*x0kO{$hlqAQH~4dSJMoC z$$s4CXwChbXbP|*cKPAR_G9gv;%&koF(+cbaCWm`E>927oacDos%Ift@2r&(DLDwiZ{t-m zw(nu=?T^j*U+9awk)D4_L>9yZ4^ey99H5&_QCby;QhS9hh~^ZNlU1vvH*AZMB6UUQy$($__F6k@3pRnZTtA1Z@p#_xdUy=qjd z2z;p#6`ulqOd-xo)pe3e&$6J}19H?(TaG2n34bD>KQw}nKLYB$O@GWx^`wGlKL2L;A?xr2-U$Y4KYvqVzvB!K68SR{1Y-*tVGi6uk-gO(-T|G)%`7=;<`dgFS z)PcvDD6!e9sE2&YJ&&~ZU44-csJHBeI?1lhs@BoZtF8eLDT-`h!2KIITj3piG1Ze> z^95`;JUY9QJ4gZ8?Q_f z#vaqZ&Z7#T9M(etG0_C<{l6Z7u1@u)Z-8^+>P4_h-XaJfU@1t%HdH@CIWz!GtXbL+ zW8Sl@5M5FG+|nDPX>hE2w>@@oIM-W3>^dPPpJ|i{ni`!=m8?X<12`}*3e5iz$!gj( z=q;Usg%dZ8kWON`^u@fjHLwWcJ4%((9v;P$`nGbb@Ndn}*!QvlNuVb}c}b$8s8@e7 z&>7yKz1=@)2|xC`lyx%&$VD>)(_g!Xz&BpQ%;0yrui-ap^TpQi3|ajy6jAMl?z_%M1N>g9Vuuz$0X4{@No!o>^;k|cAiC<^5fhMg&>f*S1+Xnh(-7CQ{6StY*YJ2`6!b$ff zu7h>w`@fd{xxgvwKjw|yMr6lYTyR`aRBCY+K!EQ{7UAuE%j>}ec9mmy%*GCrVIH$g zdS2x@H;Je=+={%1!`^Abo;-Tg0K zBq2U&npRg(S4#(w7py=2xwUXljYi^4ZEcVS=@Qoumz~@?Qiq+~5sWrH6AjcVkx?kL zdjx1U?4&=+q5oF%LLv_Txu3gxl|A7+4Jbduj}Q2!#r|OKe25^W*=z_MXO1En1`dSJ zx7WmY`}w)JyWgFS2{|el3PJ|r@g+HxhPb%9_<6fb$r;fRJUHjsyeOW(5poScZr{9v zJv`6vwx*_1!C;p>>ra;(;ylB}y=$}w+3Mcdj56qh^&s#RwR#%%o3y6NH)a8xY^hKQZ%7seB@YBR0C|TOdQ-XAD59^wn@dYi+l-(T@PMEa z>YB+dn(n5IxTVI8&`Pr{R7vMRvZ8mwc-0Fo;1~Hrd z_MXyMQW`>q^`Qdq}?dNS9n%11w7qe)?K1AHriVhxG5I)HjmcWA%>iX?_FtyJ{(bVNNN=2 z>3Z`i|FX>=D6REllgVlU@K9Y?L~e=xfEMh@54k_!I;o5y+hpa#y+s{WEqK7`{zvJn{k68Q<03AW%zQi688-4dNu+ly>VCR6C7t2busD=DLcL0ET z`G0GBXY;^5|2^1U`Ts5DX)piJ698bXfFH(50pnlc0}s&7gt0*G8-WP7tZ!gqVchW` zQ6>bB=Z|ggU^N>OWuINV(&Gz+dW3xlAl+kx^A-;nOK2 zvWaxOT^)@v`6a~Od?6;p=?L&n0FgQIWg6_K*v*RnFO*~;cn$)mMGsaBpx-dLg+&$; zSV5C&*(D@{zI(G!^P}NBvqy((%?W&^SGe|Ph z0bA4cTGf}m9iQ;(WfnK{3=9jBb<&3dqC`({R{! zB{9Rc)<}zKBh0=AAt{(y7LsVw#%KYwWVTcvEw3MPgO+7f{y@{h3}v!CIhm-dwKF3* zDVSNvDcZC#S^zo4#^{ow)*_Um!D~2yX<*ZVqszYOV*!f-6#)qD!y;o*7lS10qW}ak zydBe@qzEJEK&u-OxuZ)|jHY!!Qw@*}b(X=BDAZwV_tbW<)kd$~h~z~w3X6xgc}yj4 zQiKE!9x8@Md`?W(GtOZ#NidA59Fu83XBibQI!^O*50kfY_jQR6^o+G8X-Eqk%>;d1QaGub$7V%lRQ<+5H! z4t0_d#zD#cZUBOQibDEV#~hcLM#hVwk{mNC55WN}szk?L$DJEGm9;LS0<2T1ucsuu z4p<);FE+P#AG=GpklaIP|15LCWEij?<}ATV>cGu z#yCA~o$b7AyUEYa%a*5{2^u_WQp`5Ry+WtFb>>V8x(faG;8-y2I^TNVF3J7!45ff? z3v_xGun&ta)3|P3NvUpzS}hxGwb~rrsF3eWm^0}J5`k(|t9C%0a0MK|kK#_j;R_J_ z@4Kz;-`>C5?EdZjvv=|R==~a-68uc>8086!xyRKw$E1MasC4CVDS1hOzX?e+G#hGh z!C_v)THqLk*?|>chzJ^&^qmL4DHcklO?&mUf2!^OJln<+;=k`4?Cjh2|E;Z6{)eSJ z&Gvse{(Alw$?z8Alv&|L0|L=x3-1|Kwkb=WNI)Z!RQLid`K^$$mdDytZFw%MiEa1- z#c%jKM>jPQYYC;jJmL2_;zTRGEbq(V-FOCm<0n24T<~JLze#<#dXd4;6Ry5CX1r|p zil7`ErKvA}BP#r6_PPw1W0IsjOi+H5rlkw2VV(fi07)p4!K7VlsAt313b~nLAXp=q3-fVQZ;Ft!_0LCEBE!oMyqGz?1^3S55ugnRn%A?d#L{ymA^Z zaUw5tDt~*Ed4}nXrk&2y$i>r%#m(~HqvwCvIl3`d977kZYoop@{1N{Iqdh4<13x{ zb9!D3oTGdmDS@ADW;kSlob74ip$7ej!fI_Vwd)xOwXm0ZNGV~>Vun%;*WlQOywmIe zHT+-P;leZL{g6)s|KHx--Lm=r_A39!a-J6aU(5p)jz20O(bB-$>A@=#I6BeQ_2k@k z#CAPYSYZ0OTEW%LoZ?0x`(_xwp8V5OpEBs?x+ z7mm*gAy+ZsJm)DMYW)fyI==UEz`eW1bfo$fKKRIFHM9^aRm&;tILTQQ6_b35E~6}c zP@7^^_n(7hcYPie>brhg?f-lG)wFpiU{Oj^t9stGv@t~Pb2@|bo9U7%~kw|r94yce=!SYR{$&W zPw48CKflGowJ6b*nbasv_OHNpdR0l_S8VBDP3sWU zWdGaSw9kKbb`K6#{C^qG6ikyde(4W1z4YJUE#xNsuz0SP48-BB7m@+;DGJ0K1zm84 z6uzz)o*hQW784!`uql<*qR_SX|>Ha5}i1fGMpj~$hJyFk7tP=J395BSR z)R61_;NnxO{oh?@Q|W?@`rp1C|9fY1YkRf-FXNeF|Mzj*MOgs-9Czs^z;ZjXY=H6- z&;qQ0O>tPKzL!;H33O<>G6k+4`)S4hXUzL3pC3cc=ZC|H7n<-=0VI{eF6~Rod5*Syp)4Yn02B#%N|^h^2 z>j_-8Un`i;&mF7RKaPel9;Yzoe1DFMz)kYs-tL~g{`Xh*|K&W*>t7DLH6QTe4gk!6 zpR64rYgG6N*{D<*2;IOL{HmAU2D{tU9>DAH7N*z&k+PTVfgEKSB8-#Tkiznd?vlCj z47>^NAP7N(@(0RO$PfYzuxVz_;QhHVAe7I&gfKs*wbz`{5ltM$F@vkfD^3A?X=cjq znT-XkvM{vhLuopg)?0L}@ol^fX`s*n)7;cmP05p+mNy-(Ccj(3bqfAJvlQ6C|93X` zZU3L`o!wRZhow9%_w~LYoir`nUL-M+_j2b|SMHW`gzoXipoyF^mKn3whn z&@=>}Dwehn>4nl0k8uvOcn)d`2=mfXfLQ`1CBlooP`Y})tH&?@u~d$ua2}ygdm7Jw zc5VCL=Jvtr{C_Erh(##I8mOh5&hfb$lUF=O{S})4+_^Ri-pUu{=avu<#>k7u+fJ*f~vf|v|!PCV5VK$jp z{BPp_`v-fL|Hsz;!Tw7AU&>?f|C4O87`6|y$q&KuSw9|0?tdQm7xOd8VmOii@r!;yokiPKHysa0M!nV5N+ilHK77RP*whhp)zOWYz1S4JTK#syY zc$$&(;tZiYkS+UmQ)?p^q}Ceyxj>^sGbfF4svAio-mmcC686~vuW&KvKl=$xWBR8@ zp+p5(&mdS&VFuRMCg3x;gAcgF6OfsS*VI?=8T69^lMYA4lMBqTGV)1nSQ%k9dC!&K z5EQUa7xyrnw2rRITGrnf_+eC#qck6eolcu9Kg?gOoW}Y$uS(xQa+e@UAIQ_n2?wU8 zfc$xAPgZpMFWMx}sl-dUQ(7}Nn_h2I4u@uSrsBa<%%HuuQ)O3@(T9(V@f_&f!G{KH z)XO{gzm#V#YLOs3=R@_ZQu#4STPvo^eOW zJN=@gByLbwkzbUg`$VTxF{to^(er>5V;FcxcP$}s#7MKoX-|q|bT#hxlaC;f>*X^@ z(Yl#sCGi$i<6Vw}I& zgF|DLwnpJ-Zi=?D=26f5euz#;atC=o+Ka?m3s`RGnYV}xr|*auJgUXgfn(!uBC8$p z%CV%yyow?nH=iyylj_8%sA+TFMjZi0o9t52Vdnxh+R>xxMopSguezobpkRMGwWw5z z7?ZFSqbbxPjhI%bIim!(*Ez;Ct1;dWgQIvAA<>>+g(@B0^ii%*sRUjxG;c8F>o z{XY(NHXZqYb9Mf=l*f_(UoXt}Lrk3?MgHe~d7Q&QnE8$Z*-&^cB+=rw&^MK7gso^H z<#`wmKW{rJkJvzh0XvdwlLq;5Pbc{(h+RR_!M)SSPa0VP{>vhxa|Gy?^c@41rJUnH zV-F~Kz8Wfn<1g-DaNeDviU0SLk1#%&&k3Y~{~zqT{@(|?tNTAoc?|ylGac;3d4b5e z^F!?-ZUDGv*g1V3MZ91_XH0jzF~>PfXJ%?X&O-Vew2?1 z-5kdxNfYuAfM8IB`7nua0D?&pL*z3aMj?-`qmjlVX_PnnX?cdhECxY8v0B}~Hz~yt zp#MyhW*EchSn!X-7c8v!e`1u?YJzInV;GH#gggiUy(mnhG3A1@j-2 z&SM|0|JxP@6#=jRTZ?jOugvTJ)}g$8b9D7C4J?*vDC# zVHLYN8&no-kE2*s)13}jhac!rlbS+c(_)~k@wy(llT9#lH9z8?uU-{soKx934>8?` z=*(kVP>y1q#jjnwaw+Hna_0^Y>~xgp6bbQ8%*wj}1lRvfIY2-sl+FR#Rc6C1>a)LR z1aWh9a_tAR@eEv_zdSz#=lwn`z#tz3%rmm`Tnb$5$Dof2kcA|fKrn>qh|PmA{?`~2 zE|-X9{G5_D1NRU_A+0__6Ue9?Bz=%%IEf)hJ|0uaLCm(m+GqJhY32zEwca2f&!o{5 zOyK&7#gib#7dHUPQC1tHgKb^ily*@p;;$)Znvu2|aP9d6~B@5G< zWZ>%f==F)E^_7SG)?yx{=r&A2U{l%BsHW-FZ>LwMKfOM=d3o~N>9OolKn13t%?==@ z*=ZjX<19)Ob4tFpeW>LNUdl_tBR$@p-d0r?bXTU&HPa2hCn%@1o3J%5U(!J z-(K9z55^0jVv-?5e!ikps(@k47Sj18h!Mn0ni6yGIY=P^c)!#{FqMMtGIS5fFeIRl zB?u-*nlld-=0p+=UDBqL6ygU=;K-e8XDFjZW+1@T{>|md(aW3jv)BK;xja7?+&tI{ zYJ^qGuEl|NzozY|)P6MMk?Z2l-c}iFDt3noYYj6Nbrx%`S@_dr|4ByS0A9fqMg+|e z`jtHm_Mh#8?Oi+m%fa62{^wF2!~R31B{tw%AdkhEf{bbOL)e3?9xd80h=D)nUj52k zQ!2E)S>^!1O6mwO{}El4Fi7-pn4`68{5K;6n^Rt=8Q`|tr%{Qyq1aFkw?l@D*##Pk+F zjfN$_Hj&=d{MId5B_2LJ>&$?P#-9N}%#byYFwwOCr%4}1578XizgxurJvgxU|E=v+ z{_mwc#{RDcdoi270{25~_*!okz1a^Dy3?6nUcf6tb%-EGm|T&tAO@>rSt|7k@FR=@ z5DW>)#XmT3(sk-0K{?Vo8x&d_MdvyHN9@rou#aiRao8;_F1j+?B~OLZd+?5eX~A1{ zjw)Ja|F*ctDR;NBmpvoF@N`ZUI_@mnux<6K#=xYYjtU><`H9KXA5TS0(Xx$_kFIP5 ziQzAArj{mEr(0sS+P!KOQ7qy|jvPWubAUFFORwH?HFw0dL+}}7NfyJ5fNi^*!e6y= zq{K4xuD{uONMXE!KIf@N>!j_eUU8`QZP+bV&tje?`7cKWnKuArQ~a0h{T=8#oWRJJr}*@ z`Gl;QU?8$|_If?%bkD?~CrX;q3x`LBuwc+app;xK7>ges35x+FhB->xB{!adqbz18 z7%l|yH^Pe`gv}uSBP-XzD_SGlcAC#308MKsK6zmMxTAryr;ARtZ^5r&$r!d$VV=# z$P2K}+}+K$q45X28h%hO^$zKdy&#lflf>kmbr|I;ItZoysDwrqc8_&S?xL}?<6o)fN z?on|EQ1%=o1Vqez2P^bII3{Qml7wo+56o$Yh}sEZ$qfPO_e%$j(rIke16Pm`*$x8+ zKjvu?B_w4|tF+_bK1oxf7VFJ5+f~8>0!(OuD8vwR*A4|N(OZn4GbcCrF&yP7d`@TH z0~&Kz;t*UPUoh0)zP#WphYcf3)JW$`HXhx=q9@|x4IwSBk$|Ci3uQ|j!=n@<+CJo1 zVY{oce<3?=VYFp%&d#qv*zZ#@TOlhbwYeD_K5ZS-B%Jf4$jru>|lz*Ei4N#N+2UYg%{J;CF`#(#0Wd0xNi1t&6 zlW1{ifTa3t&!Snp=h+r8mD29E+FCx5Y9ZkA3iKc5Ko z#8!P6@K*?+iD9>ZnRz)#Xkr=H!b)M)@+GILTn?k2=5W|Gk_(^qO-Wa3O^#_m_sp{u zE4xpcc&^(G9L30^Bj{eX(%Gb}6Nnl?2du9-!|ep$*mwqh4wIAuEcLy#fMNUqLe+W+ z-Yd~-L+Ofh?ita!j2csdjlzuX!?HappwTTZMPcj@OV)Klrf5j`h}$|Qn4Dmj@WVKv zq6z^i3^8FCI|O;ohvLDW71|)_!_H#~m8g0=Eeui}>5a=KO0rQAyoqj=0^`@_uHXLC zy#J$HIOhRC{r)qr<8$&e>~L%r)N^g069lhV zmxRy^kgXG-YYH07F~Z7oB@y$byK3VSAy}C&l&b-;#u#DRza{q1#ovzDRT8rLVy%Lr zlVgVNaSWz%^3dBWe>B9eTT67I)iA(X_D7K}nE|d67ZXidtSDJ|KvCAUq@Z$L_>RvU zn_yYmf+Ngj3@fj1kk(Lz|8$N0%RdtsFl}MaY^KWdzQ%E|lX3)?&_ z_a9&9yuLEab(Z1uDg9&wgP+0^h@I7_F1cpjX?sAT{0c>PU$YNtqDc*y~hLi>6wrfx+o3aBbKIEp^KlAb~`3fr4aBzrRy?vh2~K#7bML zWM#@Ty@YA_a0Mfj#Z-2tTkW`j*TVwhAxdK^ zhmWHOVywRs&6m}3SR^QxzdgZMr2NZ}Fx+_fVU9}WQua(wu;7y(RDNv^p(8uiPf+RM-H^<)U4IDN9SeKT|wDy;=;>%>(|Tvsu&m7$U(@)o@$T+be_ z4%nKf>ozz^h%JCJP8e1+Xq2Z7QOYy>_>r#ahNlFrXire9mi?Jlv3p=uu|Lx)<^;DY zm>+3zWBOaAjc?#vxdi&>DKfn}^CTOPATv9e^fq-B;-qDA@IFGZE#>wx)o?Wsa0O+077C1p!2ge+OW z4`YZ4K70Z|l#dTZcx?$ye(pv2n7by8;0P5DmF4(npdVmq#nNPy5VkMzzYd?6wjjHt zXqL;g7a_(;HUOK?xhD+w?_tv}A(%CBZcW-Dppw=jh{_9i#J$Pn}Vb>S#Qz12Fi3N=2};cp`s$qG>g(l&=vEUXKw

rQT7)CL^xa=4PiV^A=so_nJ2w<(gy<~3>}jW*p#O+?EW=R zEjWJ~L2WWxT(xExJV7j5xOMaWS-9yztcCt02#i7!4M7Od}3TI~*ziq$ND=;JmkjVl5++0CK#f#v7*Ej#?e|qn>x_^8Bnf?FWX7_LJpLN#h zTl(kc(LXwCZl0}x%cm5AR&D*=$;I`nH^075{_z>ISO4Dm$C~LO0gD0^Z}6ZRH4VM> zi!@9!aGDV~U`rbgdSI*b9IXGGqL7Feo4q~y>P?a+RQl&H_ck|29e;wb68UwW*%-!L znm^gN*tp(!wee=-SJ~Dp3fU@^Y+NK8*U84KWaCY;@oS>WCbY1La*~1D2fBnrna%B8 zTIl3sjxs7pi`P55aKB^vfv9O@yOVIzh(2^Yl35fII6#G-@?2_LftJ4icOI8FOfdps z9D{&sFah8$nSF2%!F`w!F4%IvM0O{@7K=*P5KUv1NX%f@*4TEr)_CM57piyr6oeqk z;lLne*Y;{v9jNKWnjLLp-tJgEavNx|7u5Ok*dwpTx8t`$9P6{jri0^-qigA^rgete zb`&f`ev`>!Oe~Ho3FTt+o6H-d1yB}yIp4jcgm1ctTj11j&L!ogZ&*c%6J@Rf5lu)j z+VA+Y!?iixu;+=Lv6Jp>eUzr?o;KS@#V91$AM1>r`|yw`Jb|U;zXE#;XODnYcYDlz zGsQ{u*S55Nn@^Md-wx0}%PByE{r_Np*N*?TwY#;mvi~pRF)U{#d$-g5K!pZY6&Z^)FwZgml-tD3VE%!T~&?dOg#?91v9n*@3ux9Xr*^PwZ?S zMiCn27X|7kDf6YIyQWjgEXG|^^#cta7^Sv&@ES#7Iz*TRylN_c%f=fT&H2B;c4dgd zJiJZPgd~uio|NXLsGL(}ksehA7>qEE4{eFMu@V5?nlp<}#+`NA0C@M_6TH73!?-{> zhd}>ojbmAD8YEd0E|#vf-bl7jqv(AfFCs}XyIJHsr0THQ{t&VE$wDwf?*;Yi_bqz?+ar8!Z zVju~??UT0JD}9M=#09I2;UtNmYr$QcpmZ#<*H5?0@``WJI3v9T%NQ|gIayTk(aFKp zNBEkw7(UARm0ZzDrQM$PK?uZ4mZgNpXJ9cRMlj4opbIm2&M?Fv%s_~7GN6huC#g>n zwin5aCopY~9a?51Ga$D+0%(L;eNSqBp|945q`sFDgYyY2iX;{ey4sPTr*$X1u+@ag zjWksKo+w&@UJZ@Pd;OS2Ai0NNlnjQ1798gsDHg>v*$udA`WtZcOBqJ#9$pnU$9lXsV zlyRuFX-gV3ch&Cn8BE%Bz5QKLfkp$y^%-WSv{m>Vyqb*^t)0FaNF)JTvjm__%y@-q zg_~I0xvg6gW}ewPkSXRhfusD~&}W5OqWq_V>d3k(G*5-=k{P}L737j}(w25go@mdN zU`3=%2CKE9((Gr)T9eHCN+H-w(LGpCndS$5y)4wJ?s4MY8TXdsv;U8R$)%{&sv4NU-*HAX_s% zy~NAF#&!*l~Jm55(J_l zy3ZH@&aH1@9~BVb`-DWpBpc8&VTQ;M7GR8F!J`zuh6J<0F(XJ)HSGA8^WV=v6y~&~ zFM)8ipbKoTJKr{4X;4gXc$>nj{o@(4u-EYi6Z$mUdnlzH;cwNWu`p_Z{cf7lapzG{N563WiS-lc^a|a`~8aS;Lp98oQP-x zm`Q2^-Ha51ThW=@FFC`00cq#LMB%=opK#hybe|8NvvQ`gKokv**#Ex%Qu1h@QMYV|zU)3pCtLyH}1&72XiVHBhl@RXW;tv%gaL`W0C$l zI70;dc6`mm9W*B3>iWvL#H8*r+nz}*dir{K)w#kai4W;|=3Ij2u@J9FNML`QUO{3x z_Q>m|>bB{Kt#&nUHZUwANH!)ByNN|79A*>F6Q18h)qB%AC;_ioD8s^d<4Np;KQiiidKP=h6ua8PC}WYDg=F0+=oRBa2nzvc(>7r>RMh>)ZW|9 zP)3!zUl1nONa!+-3oF>6Ab9<-ULY#)(4p?dPRFzES&QtTzDp4*xR!p{Gm6ET4 z(PM5_aTp3KBYxOf^ZcCG0_03Gtq0}XdeEP0;wnrl&>H)pepGMmfGo7E_0C_slp}lY z+v&vP3cpyH{LzzuN#C>B=B_p97XG|54G9MnDJRw%7Cw)HV zIejlu1A4;(HSVGw)XI6UXA*UaDZI*3f#IoC=RY|YGFCIj#BSKodmW5?yuT7i~NPSCD{cj0qY6wqj7m z{4{b{j1r8QcX~x|C0+IMD=ZeEpyNZD7P`<{a}3MPb-bCWYdYR~(aCLjgT2HXPbV%% zo8la{G8-~|VG>K97cz>~RFt*^w-w>Ri6Emd*|vw;4a*P}wayUCY}5#1Het|;`ljNC zzoXmo`znF35tmv4mrq=gZ{JP7{>h3sUggv1W7!r}KZ85?;5cQi$x$n1Anvcy2(LP_ zUA@-_A3?L(rc-iq1PX>DgS$+Phcup3rf_YhJt^Pc3_rEVePYIJjFNu_fbCH*9- z%ZRzwha?)p_^M)pTOIJ??6rYSWldx=!;6VGs-qw03Y04b0elAiq`<^u!Se;KDR&D0 zO*i$q0=d>(RGYmd>4St|v60(m-IjZ{cbZjTX76EixXOT-ly^|p95$qb{WO0_%u336 zjGa8L6Dz7abSLC5<*I%zZoM*6>St!As-_0lI4?JKDUCt`W|#raq?o>HKxA)xz~+c{ z)NuaGvRHJ}qz|KqD1}{-Drw^eeuPom^WX;mudSWkE$jSuXMb}Q|9>fuasEpO74RWm z%+YT{X04hF>hgqcjsNk@9tN8|T-0f>Jnm(EX9dKc-P+8Z6vNQk1*QubNTs}Y0?d1s z(}s5JJ@fe22E*h%U%ot{rC5l5UbT#p(q@*3N{fjVzq|5Dn&z36{|}0Mar}R8$Kn55 z2P^)+jK|>rbWk6K|JS9r{DC$BJ%#4uZvs`j0J~r~=N3R=aQ;vG)WH9B12t>h&Vwuw zDt9jXn#!7kG=Ia>>hizWTndWahvG=L99oPY=dlW_ouK)dmH&&ByREi>2L8XZd0^-N z+TB_Ce=g@S_`ev`N7(|Zb2R@z8-VKMS5^cTy9Ll*EouvpWkNEfWr7WZRyZ0$?p+}A zgFo7?(XF{Mlk3h|CAt+U-u*@-pTkvdxLCCu7BLv@+^c37F89Kap6Om6m4^O*`SL_e z|HCTKLxc(UVxfPro!SCvL-g(GfF1gZccm8&LsEn-gPW2+D%B>x45F)Xma zt9;=^`pmeGw2H)IIpiouKN$_)J)vk^csyB*8byK0d;9*jA`Sq$FI4FQMIQ!B(OA!I z!{Y!cn%lWzT6!0K?VW4&EaI6}{! zb@Ruv1dwQ9Qs8450u=36)_|6em;c8wr^_LW5{Nf$qBM!_hG>l8Y4$JfFfrXl&<6g$ zyT5Pi|J%F!EB?QfM}*h9);T*Ezzh~FwtPs1-XGsTS?n5jPJdgYYs$yuWKT7H_kyY+2R4r8Qw-+oQDzA z8}`CNX*>o_&H$ssxZn~3}P4+ z4>>Usv`Oy?jV1;g7nrcSp)vfZ7wpA+r&s;x%IOw#z-Mr~zZ=8I_MR}?qBLvU97^M< zTeN&>E((}aS}`#CoQiLMp-Qekp(fp@6MGJ6Et~f&P(fS(hkxDL-U$?Ny*$dru!>5z~`*gzmRy`}M{PQh_1)IH+$Ym?F^{5PR8yYd0*ZvjX zMmjR|_hB^Tec&FndJiQ1#q~#wMo@XQA)vQPSHg3E5eV}fgE32s&Tot4&sioyaUa8& zzon0_uOk#B2=X*cm?OU!4WT{z?*cS{;XzI31y#Pekdv6fWMeZAdX)6+%7Pq%d4b9P z&JB=F?sY!>XQdh%W4brhavk0jZk!)K`2;SQMt+Y`uc+Vc3NXUqb`E`&Ux42d~nxSWm4 z!eUx*JDQw>^3yNMKxYhDDMf1ql58N}(?MYG#zo3sQF^jBY&o-6j6St4YtzdHiI7K4 z8#1Tz;fo68v`NtDfzRx2*+0Wks=*bJ-YIBfpK+#$9A#aicF`j1%`h4YyS& z+d}0+G+N-W0evL$nj`nhq3`$ z+}LqwtFaSf$I0j2NZGf(DR+`r(JJ<-k!|EOf}$ z3W&!ksZO(~)@7CtY`S|c3F|POOXG4$!Gast{JoTJxrPQt3AsHigwdEJ*#Nx!3DDV%d%Yfyi1_Xu=w={TGpQ1Q_wT{K{TrnL zDhNmH`1R?{(c9}^UO0vS{zTA=mVJHt+sO+?DgK&HqZ9;d^t~t2d+{GnaQw^3b3_F7narn0GNIUTbtrVKan#c<4vEO|2z}7R*LF$ z{9067acsu13y9IUh@FCdSe3Lu@AWcSzQEqp0(<=Gb zSBcyY-W*+?9=-f&DLaA~-sU|)B6WFwe!aA1yr!(i=`K7d~W(9N}X2K~MSjI%0c`)~iY2#}bBWQ_kVV8%$WlU>#@gb!~EMk0`Ud31gB)6vz*AqYNwatwUpUv*^u<;xNzJ$-5a za{lJz#RiWH&Ez~*Ilk=`+vB4B%Do@J)q-8hf<1nHdi?7z=Wnl0ZZ1yGUOo1jb(y1P1m zeYuofl1_u>Es~*ge13UyWp0kl^iKbGj0%X^o+t{RoE`o2`h*!DPR_1RkB_cT&(A6< z^Gpp#W2#w`B$9EL6|AF|Z%)r{-d>$to*lh8sQ{vU;GBxf(haIf$xP`=Ay_;E6Lybk z!gFKC1H`rkgR{P9T%@4eWtS1U-7)6e&O`ez!J+v<6Y}K;t`Hpl^>2UO*`OWYkRRCm z`4Vg}U4pqoYV1??@(QH|s5evi7^ulYbtYPlqubYS6Xkv~n>fWzBBo>LIl^R6z?J!X z8LWLuZNbtNK7F#Ty|PoX!x!eMnL1YCCr?>EPzPt?QzJ9^^oduLVdZOXl(9Qq6dl~_ zkJD5HYuAt{0U7Ss?39T4607gVU0IIfOGx+)sLS6$j!+7V=YT-WuvV`?I0=)KkMe_8 zZ{onNMa5X^Zz$v5ktUj7zI2OwxkB^7O@isfegNIKEaE?7jbFZiZp?nhr7{S*Lk}cd zb=or}JbjqBXm@#DMT2vf2Ir4Q1GF$2pk^9qx2NlV>D6tW^J{zUE$(UI|0(Q@GhY5` zzW=qqvuFE%ZXN8b?td-iVfVkjvD;tLL9y=Ym*0tTzI$J$wf!5v^kpL3`o@=b9r^pY z7$#3Ts_$so-D&~MI5v6YduEI2fD5lpAKKqs8@9T+W}KteUt8PR+1w8lWUaisd!v`f zAJVE@XmYWOe_Px?vugNmo{ft%Ll~#EIQ#?SbcAB~B2F-6B#(@f_ck2pOKm80Brm`QXfUZLkW`YP8#e8M~B)NvTHOM*0EP$%-4Nd`oEnEqO zukD#ZNw&UjEah+KMx(uly4M-KyCN^97MOWYQB4K;nvJKr!^lUs<$Xx|E@c_)%y$Wr z{?+AtSAF3FsC^b}vn(J6Wf9jX@U+qYxhuk>>Hm9s zyL*oQzrVTC|CjN6lls5#fvMI1y%*u;)c*|^o^M_MH<10o^?z|OZ!!A60Jc>9e<2-k z;e8eTUw413*Z-Nbm)8K`Rdfa9S~ao4JR;FbjDx*u>9 z&Eh1*R&kPIyLf{hEbv;G9<0Mtbevfa_ClLe4>n=WrU!dq%%lf<;LNB8S3sIk4>qCA z6!gY|!DqLC&|dv@fRGdmAawT60^}Qwy<>BGkEZJ5-?f^mim1bBu3jnym6K7urzEXZ zK5KNVG_}P@VSY3p_NR?x$bEU6SV4LQRWrPni;+`Caj@v;Qm6^D`xCI8F%&HiK_ae>1N! zx6o5qq=h(PPJk7iSCYEH>RANrvTFCs7fFT(GzO%2pp%jfI|xCRq`dERD&Hq*D!*Xx zE=$t)RzBAf>d-Pd|?{;z-g zt3S$rL%{xVks4%ho!SZ&DmKmXS!hC`YSF@Ljmr%BVHJ)M{)y%Mn^jPX4uIRdb6Rhj=d zms>=pKT#6HVvuG`s#Ul@7#(VZp8D0C6lYg9|#)V8@dR0>mr{Zc^zAC7BE>L3dMBk(w z+Yi(9HjM5>lnW}@GHS|hl)Hl{L0Pt}1SI6=eA7|C>E6KyAujg_O*v+mXo!=r7(hbj zrgqk;7tk}ya!7PqGbILSm94gtzGoMtpv>6jC0Z}Qx|@c!W6{$S{$5n3OKiY!%v;E}TaWO`v6{y(o0*r@*<*!kZ# zxAs={zok50{=YCKkaNxNSrasRuu=zC>flNpT&aWK_m*!w{{3GHJQ;ySKcq6iButZ- zg-c!d{r}zV9XtNtHvPQX|CjIx&dA3br~wDRsqvmm4zMRuubf9pAgJB_>vna5fB**p z8HPk=t-@@xmu*uvD>}uqS&R$XKFWHnK z{tQj_$U{C?pB0e0#@A>8U9gOYOtQozBuQk*l+p;G1OzX_9N-*Nu0&hRHk3gsoYN`h zOt^ocBm=>75U6&&Sk=!uy4==L;a25DIK4R5ctYmsI4^gJ#)M+9p1}&**i>yltoo4p zv3k$C@y@~LJ-8pj%pj`>4F8T7YnYnwLqlh5?ZG>jD=2BogtN@=Dq{FLZFkt|vMxQ= zjj@HdNEPfzy@D9Mm<74!8>K5fPuXh?*n5yph@JY24440aUe3ljUS`O_<> zPm|Ek&4YnuOqsz1_yjN=fmhLOfHrPzlz_Vav{nHc42R{t=Rtx=@o=SFmsP@a<(5At zL%QeP?(f1ZLNVm`atPfPX&3K@C{^y@W;xv#KcrxcdoYJjaUe`u+7?Nv$I>wHs|0Ff z`~}rjp|ap-fq}Q5Mh`1C>A0k!UHgTcP!d7W0UyFaUS2L>Wn5gfP11b=I0}@cy_Ss+L({BHt$NJao|FOUC#Q)q~?f=Vpma_lPVf1?fKpNh{6!V>&|6RG4 z0}y5zB3x1AHMAEs)gDh)nA2QnYuwIO$n`juOAXLwf#60J8fHksX`DeuVIDZ`*BO9n z5#h}%LnECD3ChCaLAU)(DvXV+<(iFE9E;xZZB+xaF(Ge*T{g3W)K>jX2$%Rq+!~lm550<@kSW9<1*FFXgG{Wqcm= zZo}vfX8a2EG+q#R5-AQR|JHfn1QtaSL(T!^4_#K4Y5rzP4Cv9Wgl3^PrBn*pPEWh4 zFFx_xurfp8dNn3vlBB(|wAk%R5xK$lr3V6mJN>7u7KLdFivR?td_V#a+(F8{WKXX6 zI^_~>r=#0EMOXwYmKFS%%kHeH{+2a_s|00)5XQP!hGsd|s1oo*x{j=&NrClb zL&`Pfv@aWf&TgrzS*D?4(dmUY7cHx1%47d3&~)qYga3EX*ou8$xNKE)*>6&`~UvtwsZfR7GLfE zOL#Q12Nph(DVJ0wuSG@az{i6pmTbF~^k7b+#d}dojKwC%HV>WE1%YI8o1F^j#4*$K%Gv&N!p|)fSCMTP6Wern#^o}vnpl<~xR9Z2Gnm4?+^D1p z^z~y|JDP%C$5M_?2$sb6cri2S+#Ph=LqH;|OUSnSZ^={EEaBI)+Sfb-P(9YU<$~=W zZsq?inz7v4?Jm);75(usIA5oH{tH!ar}K1}hQ;}oqT{lM3J^MLr(|_?Yta(#)s825 zwn=V9Gmq0)S+~Y4I0au}`yU&2VIq@r(2IoKk$Km8<0_ZEePS+fHK{5WdFAqMX4SJ1 zRMF7k)~yK1)O#3TmGaJ9CK&I`cb2NRX(Lu6Q;Y2qYK~O*N59sh!lm;|HU@f>dCD;^ zFJ6dyIF_WO-HkB5dlhI)O!X+_Mwf)l$_|^?HH`SJ7lN+X4V8{@zAf+xO4K^FIINWU zKl@X!|Ic^sE1!D(e`{~gIse_<+*;ZHm+}Y$G2cuUbowjwe$T0IxwlSr0^HXB3jq7N zi0m1E-|hg{gZ_d|7H#bTEzV=DD;U!%ch#3bMqxhB9gs?Mv?%D@R;{v9q%gB7vOXX> zpe?i4vvryYo$zBA@t6gWHm`R-W`d|}v!R#rDEc{An>6&ZYwK=II+{32#B4l# zqxS}2?XLC&!9VBJRoIDp4|Z0xYNI%;-IX(K(y6;oTXSCSU1?%%AEzP4XU;KS5@kM* zJg1T+)*6x{g%OabiwVkeDr>h@?d(<v!PZegwz1qfL)H;`V=*An?<`jk7igWSinmtN}_7Zj} zB*{4JX^Bp!CLgQZbc1D0W@%;9R5VyMBiDx^z9?Wn`KY3X2OPrmJB5a#oSIa0BK%PO zodEAHX0tWl3icq19~o0T2de6pX>hnm6a`rD?r<8!JX0_a${M4K+X-`m(Gf@GNZl|%q=%z0g~zb4#TAuB(L7rlr06zGd&$RR zs%sw${oBhjG|IdqDK1-j&k}>MqwHHqCDoYDrR!o0&yKFZ)$!5m6PxR{K1v~$Sk``| zD2k@|I_0iMY{|8?Zlqdnz2^~2Y^~q(xajI9jS?6d2hl?`n33Xv-39hhubN?-!fO?; zZY{aCB(x9PIb_(X)!JT;eFVJQNVIi`*GshvK)Ahp+j8ZvMX(^}IltObZsv;H1R&sd zAh|1UK#NlmDJ1X|<1ss;i_$SBusAM1S$6@}P)_g_zlh1;|Nrd0YjfMUvM72!=U1S3 zoZ8l$SeE?U$8}xndO67~uRTdzab~8@&B~dANyx%7MQ{j8j`t-0{T5y%UVKTE63+-# zGqFfK8V#_!(dfsXYnVV%L2`9?Tm)05QkxP7`$A*UZ=W@qOj>5{Hqo)qA~ zn3w04f?tkn*Y98*(_rl+q*XON>@kn|qt-Y^XHq4S&v`m5M=ridB7LX|Q+5@8W(q0y z!Bs5+Sw9$n-5qP!*rZ|q2k@GGp;%?@;|!Un5o`7@1i~NfmDiR+U)o(E{S<)u0{4`7xzGnz z11KCZlI=lKB_;dTmwsBQz5m5Yj_zdGo&Db!Nq++qc!xS#f;ahp9UR*EUk^@3huiz# zO_Wv~P1^@UZ5Q+({6g#8KE&#KQ3t}l?a_Cs9pIMNX_NsfW~(lQQ9B>zlDU@g8no%? zZpmCS-J8i_Fxi(<=^mD1sxc`?j5X!e?xUp{Ucemf-J{37Ojg@VNsL3rZ7<>n_(%hv zbmq{vWjB(B+SWU&zb(W0Kzj^Vo{pgrz^r0yxAUc9^Vjy+^$M*6tnDN4*F)&Nb^A_P z1Ofw>qnEml5l^tD$b`P?mx{$W&%jt+H_GLSM zN}iDg;%8tciiA^`!7xV|<*BS?dUlzXf%R>=59*_ygACoF&+kzh!w_A>F$n(kuV4RH zVAcvOd-z-dY;Pt0LPLPwiP3}1bnkS)o*NaX8Jd_i`4jKeQ1M3F`V*CZ-!<&fJR_Y} z*Yd(yw3oI7H4TjW4$;PMu;aVX=A(HowT%JT+)DolbrbNM?sGp0KG?44_6x`}JS#7v zTN;$;sF#Dv5Dhx&EYAY_4)+ful}AlG>&EpDP{CZ7spk^Ub5>=RIm#}G(TG;4(>$8EM z(?J6`>Mkq*!-_kw6%d}1Xpa_w7D{k!!mdkxtFLm&Pj@)m~MMcvy zWlG|m>b*TFIoTn<+Fav=hxh0a$T`cwdYgCc{Zy|yQ15xDvkJ8P!TDKh!spdO3cIIa zcY`M{MEba`4WX)ur(ccQ^r`yhDV(kR4f~qA(P>-vs|t{M!HD)n*Q|YI-W-F;2&e5!fvK!=1KP0hsoFv(lrHujNJyLl!TA`w?iDWgQ()52F^uKuq(FEW3 zo&RloG#+{Kzisuu8!4SxmfQvXtAAz3wM(w?`E2drG z-D^?~0=1wD8}dn-r7N^JEvz1Oa2q?*D%W)B#Z_b9-c~gSI)S%J-4>oAH3Hl)VghxNhQOVarL+6|nYX6=iX zJD}Bk*+le-&g_-SrwDkrL*?QXwcD&(*PX_(k!O!0{k3o)D9}+p*DhRy-Sq>yr6`zWV-A?f}s|jk#qA^;nVXgEr|6V?yrdX(Pi*VMd!dAX~nwWn-i`i64O&u(ZsD z87i`vd-p{hpu4g+#SDj->@UVJPN#4jfS{}`;+fj_3&Q%jgoB+&=nIgcJxD3O6De&L zFvINAsjyS_0Omd#@}6DAo!j=jO>3`CZvO{x%~pwHcn?Kjp4K5$9^J&b&4t4OwYWi^ znYTawn*2`4S6#d?+wA`UE_rS+00EuxJ0Y>RIHBjB6uHVV@_@htOma^+aCeKEULo## zGm@CFrq?dC%87J$vYC)<2J^i6lTpinBY~}2qW4zEY!LW1GXy1;F$H&cff5l=od?8q z_b}_Xa%Jpc&#S9f?MWWn-3wHnJ%XHo2~Hw_eV}n2fib=V-Gs~&j|gpHS2(e|8^EiC z<&o^f)-ERNRmn2siSg~X^#s0zKzIg~Ucdk+U^b6)oW`g`86ARGpBcHwdHe_{cUgY~ zAB*>&f)Y?$b?aRh2Y;3wP3`)p6`Q45P5jJ49$#J`0{On-Db^lv90M3r0wPS)7(R+D zwu*;{ti5!erXc1&<~`IK$SiQT2#EZKkx1S! ztXz~9nsbSQ*PMuGMBHJDUNU2nJ#Q5=VZ#4gUJ`~`6j*Csegw^?5B||CF`%8G)k4(r z4K}EH>{T(g5x;bj+)DiNj^CYyG+*i!LXXsVn0LJyndjV^zYqrXYgE5v+IkuLgHJ=R z0bl(pR&79%X$NkSh3LaiH)R+K?X*=Zn)fxgJf>cgk+s~4xjL@SS7J*l6ZKP@epqR9 zBjRbd;$?`Z#}0u4Jm7S^AZj{!Heq5`t#DZq6IzemF){NJu}+w%RTVU$!*1LYPV8>G zBgO&jTPCF2mW>wg{hvDL?*9hk_@ZPMO9laM@c$egkL~>Lqtk8vpUo8M&R)s`{BX@A zbQncUb|e7Cv5cQfR|&CDC{N5i6@VR};w#ij3YF~@ZDK&pvkWEda4D|V8Q}|I!sY@P zh}jD}r(OLGTrsB5Lec>Dctr0~y1Eb(SO zeKFQjU%hI|zO^ZeXG1#O=aIk9K<)5)ati*p{CHU(dl_0_ib=xzC~Sn^%ctNA_}<3cIfX*88n-4a9d?>{RPTOu!UpLMVkI1p4Njce7~c;+edRS6_-ym zS`w+5=*&NjPSjQ{_YiE8Q>?8t(0}wjLjsLNc zBBN@(lIskLg>DcEQxe^zDC~tRIGgO6M24v4$sWPRpUNyoJfTtfbHK@vv@pXWt7T=< z2rbhDt1Esf?I=#}%KJLmDkV`Dw$(VdzRl<`8{{g9&}Y}&LN|0}HD1W--duVijL|C_ zdQCAPubj2;{ugn~a7a-OpwQVfgz=FavxA}C(9&BP(=hJ=j8|eJCRndxifq_OR)Cg7 zY!Ssznd`J3T%Na3UXt7S8_K}Ix^tr1igtBJJ=@1L6B(S3+Y#N81riD$IY$*FtKAg! zS-4sBRs*>~&n8;)+ZyYBS!v;{9g06Y+ml|BWPbu9YDaDIQWO*IKoQo~B#%~_1XP@QqJcRJPea? z!jC{Ge<0aCP?P@m@W_t;Gd?=p=6~Braq_TLrH`(ugDJ#?W<{4ue}>=uctbcR^R`MD&WTN|6pw2{~R7} z{l7L+s=ohNsDwLz`nry`m#;onT0rxI7mv5!`l_Yj`!6j8*LVMOaC9)T?|)9mqwV*< ziPG-d)@;c&Rg?&N#E-x7&%TverUAY$kV|R4`>f`iFNub0?`w@B0&fj{iOVf*g?E_V z``5HFJ@%~(mAH!?J1W0Ncj)sQn1@pk{NImo@4rWT|NGPK?%v{Gk3G{B6hd zDAtBYU1|RQ*KhxIc|OT^xkVz52@*RRiv0GymJNC>ukz$p#%Unu5QA^t7& zKciDe|8sD-wg25nk@{b@$`nA6wt!45_3uh_zlCmhM`?5UXnkH2?HCtB?eaJ}gJ>jQ z;)O93`KR_$zcXVs^xqwnUKF9^r(zt-4u-$IFbA?tyoBz^fX}d8DdN`-ty8oL1afZ& ztNp{5Nd8_2Rju95J^1>S(_A+iZ6S=CmK)l9P0J1K#m;@D#m16K0D&ZTiPngz3u`Yf zk1l-!xH!|__KCPH@BH(X2L7)ih_7@AY&`#s4jlc@czgf5k>Wl7DfO~i{eA=ib1yZg z+4#T%%I}mv)C+0zUH%wIsh?Z+NsI4*mgeE5>GlwOm?ECT^^we#2p|m?mEQY-WcM+F zoy@%Lxph6Js#HHi?Wa?zFgDeGD!Qx~lGc95toFwrTJjO;i=;~me-LO5y^;jC{e;Jp4g)?9i{Xaf-=>K@U_5ayO5pj&YsFX<9^<*t@YBgWSmvKf!i!zW1TRKb8aQo7p0!NcFgW{h&Q1BM(UZ zy!4}ehskNpR-K^_f+u!j^3wm5MEk$Nc~0Jtd6G-F;EOP1zdn$A)R7r9(f<=q{`c|0 zmi}*|81|oR$!8Tyz6wKNf_GitUOirAK>O0WQxNS+-_D`VKZM{f+&ej$*DPsr0)(!Q zx4kCOu!Zd3JgL6#s*2IfFrkGnP=a#|WBlK!O!pZGBc1?|wB+jLrH>Uf-7)}5N%Sri zh97kkwQh(?C|#%0mOa)uJQYFkx&AIC(SOi(bJHCg#jWPjlj_)2&Fx*;?YHuas;2+a zcy8s}pGNwBG8)_WKPRV$r(62JiDJzO5FzN|Dc+V4(0h*HxCwBlPi~pd25`cyK$t{ysPdPlPYQK0WS(KIAfXbr}ze*N;t(D7W0LiS(=nXeS8r2yDN&*Qi}M#hw%VuNdJioS_%mZ=t5O{UMZ+Gc31> z<?2A^OhYQonu$wLVOZ(U$Wmg%$lPYl+go2VZn7X~)7lE2>5W|2vY%^#w4hDoz^XnB zLod?&S|KIWP(U$*jq!{}Dmv3)?RCB>3 z0wOlysv<#D5yAH@k1hVvesC1#I?OJXjqiZ?0nyy>l^Ey#d6s2ByR{lPhp3bY!sfatw$Jb_1 zg0#y$K;%z_)q%P66EGz-e=A~c0!)FFvt-22IYmIE;FltChUZFWQuU`IkDVz(}oEEo+QbW@h2p zYkaEJodz$()lUF|woVc-l?=SF3!NQ+LzY>z=OBN_M7PQb^*PdXyC!9Lk$m2w~-3i$)A?U@sMTi&qkDZja);Z)FSK|HuA z@K}eKljRU|VjxD1)EO(P;igccwi<6Be^idmMlUY(ISk^2?7*Q7G+Z#Lp?t-Eo_QwW zafh_0)A}Ra>b}cTef|@og|uh;2`BeU9|s%#KTb|;{qOP7HvY>-igEsPmweU3pWEY; zJq!A#()ZEOvj7`6^>tyeBx?_lwU)k~`kS%uU2-O^da5}*R8;;xIZieGXUD3G7(g2%I`A30Mdwf%sI>-mhAK4n=tZq|t zBGYSZIhj%F>A$@DTkrXAd~|qVpZ~V@pBpMJ{a3fkJ@A0)tK+A`2Z}kYgBQq4_|5YI zIV%sHWgs>31GPssqsMCnaDBT5=D_;+Ychv=`hR`(^4rM&hoi0jZzIK}|JPS9`=I^T zS1+G5-RJPHgXS~*eiNF1ef82qJ{dTT^qy7PnEYQ0XLXwf60d6f^+QvePh9$cy3PNxnc~uazUEsFAUFSdc!0pM%LRlpRjudAKZ@oKi4>2|L7vS~8*;rC zF2jKs*!MJT8d>)!Ra2_FrdSh4s+dznBAdV1h%}0W1hl=$;fV=@}e`liS3nRBh$>1WxXshvZn`Y z*#7~%V#hOVLP#>Jx$AN*H?Q8lOLYdw;99K6Zi4^7jtU(e}ePNUSdEs z@c+}pBRl@nczn3c|FV%%+&uIc1j@H_o-Wt-PNsL(ua6?!&N;e3Kp$z2W&!6m8hQ7Z zfc4Y9F3n*ax2--;?=l!6QQe3t#ZyM>zVZrY2~Igu(TUl9hO#>pne+D@ge@$&^tnx7 zD`zl+3+yNfmyc=y=_*N+BO4uYeRXY5rAFK3wUxY=F@7Cs9v^>aG1#W7 zaP$wZ^o^ot|Iw`QS^G~xom3#_Rt&6?^zqg6fzuFctQ73bF2(oL6ttjnPGTnALP5w8 zO+c#R8T1{&%{X$beCn`p=|)4_247n;_?k|O-lG{=AQAS1=LwC7AV6svKLU~fMw>xs z$q-HBYjMuCP{$20%jnongZ&@C2Pvcg#6J!SL}gJ|u=xm}1xh$!lLV&)q%tHo19*WF zL`#=8*-0Sip0nla`pOWDa9^Dtus|^?v zS1o~xM~SgSh^hl%)qP?`wLR!b%`>ssCF7{Qaw4zME35|4B$xr>{}-$0;GeJbXCPzgrI zH~^i(0IWEEkuA99tT@kcJft~EFXC7~Bl574_6a9=3DJxsH;D17uV0@9TsQC;(;O#v z!I@N=@Uew1#1%sBUx1wj*A$gg@Sgm47Cz;QNXox+uTt-Gy~3hn;5GrD2obOZ->ato zY~9TBzjK<+O3 zA2OUHqe2Y_+PO>T7f~c`2XsZZ#uI+L{#mu~^wc&7ls>#c-B6fXj#KtqOLld-}q)ey)1D#D@R=z+hO`G{xNoHH-x0T$TRP zm})!ofLf>;&*VE1THp|IRg`v{bqvNMa4-S~M@IHkQMqzARGIl(Z?92CG0jmDBJKW6 zL|>i3l!rkU#zq1EpkLxF06|0^k_VVY7uQz-SBUwi>z^;4o<_TNvLf&lAq%UagjU6K#4Fiy@G*ROFtg*h=RH=!kGy>tHEp4Xjl9(Dg zQCyTPgVQ!wmwGSGQu9dYE*|(1L=X|reX34fYT>H8Wvm$0M|?cgz0zZ)`8?u^6>s1@ z0(71skPsfK3F)EEm3ZH zr#VKI3qjD>FXfe|=r-p@ zH&eJkfF$uFm?!x6ITCS2X`S^=JD7YJPf3=)=XA6snVX`Ri2)9gyF>Z4>T5Z^p@0-8 zJ6K-Lg9n)8lq+3u5&_6FyMzDd9E?W?M8vl*qn3g`GAiwFi)KyrZ5Nek%oD!4xS9>Bx7s(Fhz+oRZGd2W zVSGC5v(oJj^j#$?m|l88g7P6w7e_;!{#Jqe00eyd2AX5YBCzp1=ytQOA2x8py$H>Z zU?LcSP}J|{RcF%|#F~5pH~}9e z7@C=|@93+B5&^}#jm6tE4JKEsF1eDGAIZw2Bp|D*T(g>T8QdkbNv9buXepZck22=U zdShN}OId2}e=|(D#27yJx@sQAQ_Fee8gL->3@d!iBJfkD;a<` z#s4@wwB!Gso*ZoBe{ZB1^#8qBa+L#qMbd9eSsx^&^pCng(46 zzA+DzvKFbbyHk4IeW*};;z{9a)rRi(2bo`+@fI!kHNU3Scnxtp&(@Nh+n9|= zZjaCPOO(dsksZ7P-Lw@1H#yAFWF8Ac*F9Ucy32OHLQOHQHwH=Wb5`w)i;rTkPhdha zA4c2}n~{;0duPkzJCz##KTmQzL#rSEn)v_W>G;?_|84U>Zm5|2Uo3f#$3J@$JzX)t znMmJ~fE=Oi(Qi2+z?y~0Z50IHOc3Z5I?myykp35PO_9a983g$ACEGrhO?P=C?`<|T zTMc0pyJ@EI7B#A2{;1Hg@WCT=%kpY97zKc2Yy(?Bc>(j7_4#z{l~!*$YD{}~@19ohPy%}SfcB+^{-cbWqlO`wC;2K&py~X7I6kt^|Hp@0{r^UaN&m%?1G(n?Z~x^pFFeorvUul$Y;z^pq2x!-zT>T0`~{hurG3(Roj<>$wJgMIEuY=Kx00*nGCPuHfV~ zlUXuGd50d`A*ch2Y7VF0K6H6s`=DZqjb}$Z0e89C-MGzN4$Q%fP*(ZIBpZUTLZx~k z2{-tU_+`!z{C%E-kIxsMzyr$4T2)~$b+GELdn6LKa^C8tM*f?^3|(g=L_+C7Qy4BM z0ydrhPYy?R{P%;yldb%>iDJrsY{`LKb5Jb$$|9g|Cp}#$&_A2r1wr31n@=3<1;g?f z^n+TPRM_97gRWuugpMoCsBM3B%&W5gx8P;f^gl=03@6+r`Ns@~=o)31hXf-@)Ga4) zBmFwRgrZ`>;Os_ttFo}TWyJQ@eRdx@p(?Q*EJe;HcsD%<+uf7qMP(%Moj4~*< z!Acq68|eS>Xyn}g9Ug4y|3->Q|H~y`nbenEJzc`C&!KNJu66EadRzk`*M>7Sz1oYG zWV?hXB~djnKGMA+6or!8-%&}&g$0@!$6<%0tPK&7>lt<49Ttzi0I6>00S3y@!3LD~ z=uvCSezj^QETqbY;&-d2Xfk12x@;>Sv}&A_SaC&esZ`)h=anvcbgS}LpE1p800JI% z#SZFkTg(^OEc>!!`c#>U>)b{)?q)r&4O#r%d^x~P;JIa%g1wmPF3Dt2qPbSdL3>F@x*UlCz{E%=g-C8qOtzG zuD$q@_~SC(LPd-W_vUPwbrF3#m=<7b7n2E2 zaQ>*`rTv2>B$Mwx@YOcotc=L}`7O#4lp{LCWPeI%&aK-1in#Qd6N%3>G`~U_Y4hF7 zcV}e^R>mS;07}3E0wGKQj3PkEj600sNL(_(jLee=AV?n>C7!{11ZJ4#@E*}2_=!C5 zkVK{$X9&K4octd+i@_I=$XSkn^SN&&+%~0J{#%fEK0~YO{{Kg_{C9eIY{`G)lcSU4 zt^Bu%V#t5Lh$UZD*poZw$%=Lb{5=bDrh)dKG|ft4=2nqgYMtp+bnrY`=^fx}vOMcO z8EM`VUov@Gm0kyErp8hm${>HCww>5uKC^NSfEG68p3Eh-MSJN?%l?G(oTMn5VM;ae z8(4em8p1ISk7A!ly!okMN&5VDPr+3ir}iLm1eRA5Z5cf@dIz?DzJNx z9%+Z6TC9An;lF>GZR`JwICfXw<6Pd|{=ZeWAq#3Ye$}=U&L~duA=&t)AUN#Xmqe#B zZN9oRWRDpYHJ5}vEiWByHZ_59d<(<-mog}c&bP|M`u5I1zk?uMgn=B?LmOI%8AIMf z%ZU4_p7H1l$TK`M4iU~SDk)-sKMP*ABDiHY8-ST7?1A}oMVQNOHUP6qc()S7s*?@C zt0n7O31qFG4M1IH6I==CvYQRSoJ{D7;PM_eK`UrT@v4ME^sxbGRTjFHz*U{B3tl(h zT}#KetsbbZRO)}^A$b3{f-bEq{`>La$hQ9<9gVmCUmGcg{^yb}^&6N@Sp4+z3;(Zq!c|wO3G4l|O29Q+}mJp{pvke~q@PTz@A;9oJNqGq)0YX=vq0 zxkK(Ts_0x_0IxOMuC`SM#xJoz{GJiU^>$npJE(+$TU@FLjyN%QR89c;jA`<4jvo_Mizz2eNTT8t7a&l|YBDD`RP)(fRkcQ&MbvImT2|lXUg`$QHP_3x( zja!wY%|^w!w|NZ`BQ$wKB0W%Psq5jEmRfgGVZiH~wu^;3jlZ^?W3C&`1qNz=|D=s=O^Dk$6iKZ7)R;F26(JUv>UNW| zqP`vqH}Zux2ftmW{HZp)vN4t0-|1e17UyVI*jVx(`sKgMMOLBfqoe#$? z$zA2UPuHzRO<_J=d05s-#klg(USWdEDxZiGSg>~-~W-obN-5xd1AAQ+r zb}E-$8kex%xFLz&?Vf#OSfZnl1@|Mg*yp*PS<8WjbLS4z+F-$DF_fLZx?5Q5+n9v+ zE-GjgfMCl0mn>%9oIQ z1t55hW2C)eKLZflknofcuh>^} zNBq)P#MUwZMiz zR-K5V8H>uT7Q8_-E`RtojeXaVAxh?1i0ClJGn~`mj5lu9fy%*l6XXoMjOZb{u!W9) z1^)_O0MV_5Bre=5LZHNZ3CRE~D|yHnlB}4NKpcOmMmy8L2vtwcSo{*hm~VXIX7Opt zXYB8v*gA*~^j8&2ZvqDX*qU8D$OScbjwmY)<37#EUH8d#8P-@?E633cTQ9=hT6jU7A%ea?>p5PY7{ z00c=sq1H)!NA`7Ap*wQ5Je&o|R>r8ynbV1$KG{g=#*R!dBy_bZl16b#(pK(xcule# z#!Icd-hng8nw77F2>+few*`MsI*#v&W#~W?&yxzW^D}uSO_@^L%=Pgp;<%RF%JfiD^g{D0{3hW_72b_iBKuzcBn# zT_ja@T!Q0tUB2>m&gR`thU23N0Z!lYg)Ldbr)3+N)eygwwze;J-SNrciCG)Qn7nm zAcg<`D#=kcfnhNR^J!_<=S8w#*~hoySo++7roon+tHtCO4(n^v{~jHU?D(IfgOjcQ-$sgg{*z1H^AWH*;=z+U1r}5Ji|T(F zPAOX6B~fcHC3A_@EgiS?&x;!?C@)Q8ThdQ_azfd`r^yH_%aL)m$j=%3!92$LYo;{T476(I(8JbygTh^LXmbb zpJ+1=4+bg9nEba44n@<3(OdJfWI}B=mTD|a4CYnr$|>lI$F(x5X8NBl!Zp+X!|}00 z|F`*{H&YDyfBnm4zx3Z9oAasBe?E)86+Y=ARJx36RMMPe@Qy<;OkkU!p*2Y%YS3Qe z1;S5{IJvuwA+|hB)D#*#LRwSJA|_xiHX$EU(9w|nS={>+BX7m{RZBDd7xy@8jQ?fmzd_+oNwX3&!an(@BdcjZR~g$Y_k74uC+G$A?>mqowi8SUdgx50JLBWTm)j7MLnCZh3e;i9k6$ zAm-O5)mR7lsREp8fyOzt*lE+83gMjQWG1rjt~6a`Dq)WJ0_X!M9Oy?N-!2g$So|i} zjWS*J`d7_+wQ0wX-+u0nJT*_I2*&yJ@tQ=h7C2-Bh@{4r>Y6>nhF#CqREg?u{w2A8FpMG z#v;`AW?cBH;bsFD?svfc+o9HOwfY zK!OaQ`~Y6?qc+bAP8l0v&BU!nk%Aj0j}o96Xtpo#BBpQVYW8pXHkn7V1kTV4yMfQ4 z%&K9Wtto6aY^%SAH7|QbhI4(qAxhYx(#Z&`&O27^>SXM24L8V1&8e+;Bz)Fj99t9? zuy2Z;Wj$HmHJ&!iX zv-X8_mT;Ssw#`?bz3(mK2QrHs##@} z0JflWwL>X05t!m1Gcr$YzxWQIlzn^(YOT=Jm_<^76~-+3XgTHrWw)!0$J0h*fA;DDq#h)ZhmtdG^R} z6dD%BvKm@-uAIxN`N|m#&6fr$_@hd6hz6TL2_LCvv^Yo-8(kuY|8QpR`xg40vHi95 zIn%$QTC_&~qjOH?R~G@B?thL>ZU3K>)5FuP{I`i>>i^`5_o(xeJ#M8y4@!C#1YO}w z4W%DMC4Jn@(C>4cp{Q9*Dd+&};8Otjzk>?;n&`1Pml=e0zy=X&H2)w)3Bi z&nfi6{3)hDT~F9a40$)k<%On^)!@uhGMG_T5DAlfePr&VAmHiyA9>~hU0PODQ zcpd0N$U$B+sT^~bmLaa@k23_LM*xd4ZB2DKKMmzo4kD61zf<<3yt5D{j8!W*oAmJR z0{bx5O&QI_AkIWg-LgLE7XrVJ_5$l>xY{!AD&xCr9o=4ZT<%EQ{A*|8;P3GP3QzMx*Wh|3(Vm_&=f?=uX63vRr}q+xurIw@-8Uk^m?{ z*S?C_Bz>F)RLv5s7XJU$GifcIH%R#EJ%j7&B{zL5GuG;!g3-VrR&U@v0(71kGZLQE zwg#(U2F4ve2=HfZX4LDL>;^m4n|QUJ`bMe>o2z$Ht@<>r_58E2A(D8kx6`WtQAZ^A zEcl3{Puv%^45Nw@5B$!cjTfIhXewK5;PdMD&&ea5Ok#MaSxaVULGDo$fB=0?*>T8q zTM!oTe01J=DMYcgd`@fd6-dy!BgXU%kn_?83b-`0fH}HHcEVq^Q?w~s=KY;!D0k~~ z5#70FbNKfJH|g&%e`9BS0Xg|6m3dm$dE#uz|5rK-Hl6s|Jz96xcA=3Ex|OncFvnt1q?hdgwy;>@!I7sa^b3Tt$YF`Q?B={myWE4!_~lG zSe;t7;sPl_Q+y;6Zp|=z)S1bmD!7t9UiCC~eL=W*2s}?TfZWOCSuuszJnzWIoaaio zM-pJ1{|A+>yibj{RnUKa5xV~yj3O+e7+sX#R%c$&K>v?V$47Sjm+|T0mi}*|Nct}> zzV~<}nE0o^18uoi;|09q;Y@U^^}2*A5Cl+fzoY%?T}vnde^$$57BIu`Hbx*r6O^GO zL@yXkgTjcOb)(R!wQ9#|s?pY$(SWR^&xh60f9v`xI)xdEWGIML{d&Z0mJAaDMAtlW zg1iS(Aq7&D6-F6of!MqJ0iguU=5dbGSgxp{?{q?fl#uTkUP{H|hVa!UYpGI0-o@k= z#vtHJ7T>y>DSv~ZtUrWNq+A5770@oceq+d|C^wf)jX9hrc!4sChWTV4#xZ%=6O-J- zjAfg6aPJItoW%r2e}^$lLX=%y*SvE5j+9`cD2f&_hC4c&?Oy<^KRc>~k_T={KJ{7s zS##OJspH>PTy6dXCQ*#65y39S$z6;F4K7z!D|^~@AWvVEC9?~k+mbDHI7qb6SISUg zyf%k%3kuiy%759)5NkRKu_wEBJW6}#6n=3HOINi#6zr;xz1s@8JJVSr*D=lNqK_q_ z+8VI|yDt%KyGAN8U}|SEuft4><;AIY9bL2d%FmLm6iz)(iXAALHHk7lLcsf8E>Mmo zrW>-*hYX?#zVBNW%0;&=Wucx#o)zU7g^DHR7~hoJ%P}oQlorfc!qJ*J%la!ZXVnKz z?lMH_@P2-avIOOb4lz+DEt&R*(r}8Hz!XgLJf&6sCw*EY)}Q}UlC9tV`{?jsWb6M% zqoeKlZxh9$dDo;6r&ptLeCK=*_8#ga*MVF~*n2k5-pRxCIwLs=NvwxB%EMHC@WprU z36>}A5E*FFe8b}L9B7BGmG!I44pRw|FUrG&F<}_qzZ3zmi?9!B8lXtPD{C;ep&9|z z^9vz)6~6(dg?MjCbR1p|i3T`-WK=f#zGT38?TK|tt^wWXhEKp+8_zU~ zwP-U5RoOFzq8~Yd;&*%SwJtdD{%xWZ4*Gu8z7A_As5f4fgMC;j0$>!)OcLUe;N#%?uZ#q-fCot zZ?pwwpD zysLgbdBj@3Y^g+Z`!f^@hj~<~cJOQg@0rHDRxxrRSgrKL2s%{ul6G2D)l;{x(i-0c z)VIZasjxg(996Qa<56RMG{QV!BJR(*0hJO1)XsApii+XBczu)Af^>CHwx|uGfEyz@ z4SC1hGYC6P2+7F2Oz3i^sMjCSPHR@2_8<6+g~A zQ7qR)v0dvs`j|HsEC+xV{=DHY$pvAlg!0;A)n zN)xO}tXW3zuZixof02%9yD{;a~jN*p>d{^fjE}xQXN&rGfq*93R{9{|-k-+xR~lDHi=#%i9OZ zSA9J-Dqq6AZm~~|;KE}_B0FNNa<|E2u&mqJqNHqEx(Kob zEKvb#OmRE|duCU)<*>+PQvPyMd6<@%JG^GyR;=2LSJ#W9fd6w6*!#xWX<`)5E?XX_ zUH2I8!DpDyAMjI{1as}aS(_+b`F}dUjWM0RCHZ>Y&DW zQSa=jP{6--=}P}8q7;+lVlu%A&f6UW8|eSx=)|V~M@L6n|KE)ii~iq;)Gl)jFOz&-@hdZYC887V`;s0Kl)kI=_r@$BNqU9 zkAK!U;`~=k!JH@hU3;aW#hhEy$_Se1oKkqRVJJH_&35GKckV^`tQmPeCE@|OXa*Pe|lVBE6t0Xo`nCdcU1ipt!k9k;Ogiq-wf1VoWum?C+uj5 zlj7gNG4e0ECz>x#kIiCm2@PUj{N(z8}hzmwUz|4B=G@o&wswx!R~R{pz5QAi8(FZMp*oBtn-xB8!r6pR0t-uC?p0Oh`Uk`jOpeqSQM zmgWD2Sbl%zk3I9?CF%cLI75Be{~sKkoH+LX+xS15DHZget?zm`fQU}=gn57-UZtiGXf7?OFCubc*;(f;eyw*Ma=j<)_^8z~0=mkYk0 zh@7(XK4JmaboFf_W}0w$A_J>8m0>iYtk5D*u$p}@fi<;pyTuJwGxCKGw$^9Kpqn;` ztH$3f*1!!btcG|xVK^1YYYfL(;;S|Su)^IoEay`!e*T}64Bnyr-(VObO5c#E-od+} zH1YqDbN@dYoo@O6MhYi5*S}n{ubeM7;H$j~zfTw8P}?})LlV$*5w;O89LW1}^^=uC z7{`eFau4O7y7RO)vYnnqe`Pv=JDy>7)q+duFO)~1{;(#Bh%!%T*>__aQMVtTGdVwX zT$o6a&SUQpjDF25)Zf75G0D`u`J5UaX&OAA07~-gvDtG{?J(Vg(glJ;=k=i!;Y~R3PcoXxwsbA^{2$Yh;>#)Q z5bWDi8uR|qg>h5hjWUuL^q|APD15j$dLVJ>vYaYrAJ_;9JAyb@A7FceFrczx&w5WgoEiw57#BUqDX&NhOut3Vwg$ zQZN4{6MA`bwUY4HCjR@_(*KN4w)vkoRJe-g?duzGd2_YWC65#p#g6gld}@?EjQT90 z?0E)2l;H)+L?g~LWo7Yv_zZ9@wW=Zh22fZ?@V8T#A^DR1$xhg;Jwph8ATzzSl9JWb zdomLVDb}ZGnSIh6<~SURx8-4-EnS9SjsOJn1phuqU<#8cMla;-_xZH`XNF<~DcXZ+ zy0;+le1^E+hP*rwPyWFh@{vmw#dG>UpVPnxio~w(4M(m1g0Gb})J2|W_;#Kvdq}lv z9zPRnG|M}GcKVQhhO*2avR97^3z(Bx}kOrN94fOwLe0XHre{Ju7 zH&nFy-y5;mfUhA{K&!P-LK)pc+?y6()NXB~LWwebEAoW@*DfDQ$~RDvA=lJF^+ ze36wO00{O1kfD5@B@_g~3-B<-;S|geOeo0E?{h?RoZJBju7BYQD>BbP$Oh25xVgOe z>DAu<_xh&nijBt&>bPo(BtYKt-o@k=#zXx1lC8w0SRDs_W#8acOp)wWOd`W~IDv67 zIlZmWt??#!0v-@xL>wmoCcqr=1%UAbe588MHV`)Y%pT04N)t765mXnrK!9`6t=E51 z!h_{xt`cs#Mc4=+gcKEZ5|U4Ga`y~~Pq5f21^j2{Aka6WrHVEHHEy$wH)rQQCaG00 zHHcOSUADb;ydyc_o`c|D!M}pQR76Syv#zvlR@bGnM6fIj+U-2YoUiWwU5lpBu6G`1 z;bSq6PsU~`uI7E2MQX6d7iYQ2dJPp&Y2{iyo_7aSsk`-sYz3*$aAM{4?0+>qD`v0P z+E%Lpt+iyv{7@UgtMAJTm33hd8q4whNx0imSK7<}zbx$p(xm@6J+kHhgTwLG{$nGh zjRefU@ZrMpvgpGuvO4@xnvn&jm?S9knW!5_6+fNVdidluM%T>@uif0J?@OgI|SEL2VZqtR!_R0|dWm7sRHP3C?69Vd}(!TBr1 z`D>EB#u;Tyk(JfR)tXG`ev5s4#+-+$=xGdhCj+eo`21PBqd&u|DcRwnxiB{J^B2lWse5qkh-5*MUSbxs$W-4dIss%2JJLKkmJLL` zAA+5$RjBlRTK<{M7zB~E8Bv5O_h(~hoZS`(59c%|v!)D56{Bh+)iabTY-*h?!$>?# zMC);R1IGyFPy{dX9^$<6Oxz2#j!H22t1xU`0bwe1RxSdjn1 zNu+N&@#WqmFr`z%KHOsTT)etu;#P;x;$X1ASafBM4w@dm{x z%t>aYYUVVsx^``{=1Ll8bfHl4k+C!v8=jQS6(IcaEj?u0%72#>zkPkPmixcMLnr_L zcr-fP%72?ET)dMqAL`!_&?o$TbDNMEnJ4+XlmSIWJ^lm`@#veF4X#7pC2L*JNXxmE4CDF2BQ98dwc&gmG#<18P4H(B?ECF+*wlRi z9ekki${adI|8n84@NvIdQ?~yD`0(!KyEAYR$K(N!Bz^=mMIoNxkbOB6?DOkj^V#jA z3PAcdLnZW%y*xVyeD(Iee$~TP$OR*5Zo5J2AFg-#EbgD?-PcST;}hVUMyw#@E^5_m zKFtU9H${b9n&!iM^w{u$6acZRI5FU&?S;_7f`Fr*^(7sd3ozRGGxM6o%B_S|>d2A{ zCu^o7ONvp=6*ZBpZJ@2ka{JOj{=0ee_w~qsCu7(CYqa(M*hn$uzupaj|620j3TDH9 z9{KO)&EKo!KefHqF8_g`^nncuchhem6_zvZUn|D?NX#v(t9Pv3K4j%X@ znz({tjb!KmQ!Sl#1EqHn^>0s5M)mEWZz`jD0D5{dY6DjPIx=co`Onl?casAf?SBsJ z_^$`2qm!-tw~4~3=E7Lqp00pJr&R5jZ*>c7g3;w7xMl+Dw|}DUHJc#6;zI<*VwuKI zKpH=Z=CyWDqRI#B7TVkjT&zp-w^ESuT~hIPx@09gzEqKLN3PT*n5GVZMc7@5OQ2)N zVV1^d=S)Z+o6kDw*^t?GTysfOvkvGp409P_R&Gzed8Ahx5I6sfIS;{WGEbOH7+D-e zL(aees^?py<>)^*fa)v%*LZwlpZ^a}PPh4=H&QxKz_pu!_F;+{u^N~p9c?kKW?hUi zZ9?E02b!JtXO(I8+x<$x=u0>fH}e~x$*tl#q7yII`POpow)jf}{V)0a2UVlH4!D8- zA0LeD{7>W4)2;l!ks<@m3&&3Rt@HH;#e(;t4fbuM&I;i^Jb(r5ol_LCKQoj>DC2Ff zNz_Ga>z`214AD$7u?Taadld>xQyr@tyBbE1s7zu}lgDYE<5(q>kn2)-N|vS3XS)E= z*I1}y`D{QSeCvXOzgT-N@O5yH9`#d5h=PIZm&$Whpx?`h2YEJUB7=BZKqw4exxKA( zrdWjhgu*3-mk6boBz@GH8u={5A%xp>*{MRb3S}Ta)^|XsB$KDAox(m+cXRE>zP<(nqc?l!XqiLw3RcDuHQR*vCk#kt zyts&C7Y7xIUM$~WuXvqS=2~ezlg7C*DC?G~cxR8mkbZ;z8~Ny?*79eWIJk(+ zY+$H{mlPkn;I4JBi@^c~gpmi34JRI-X&XRK1bE_4i7V#?lZ50@+{38J>CZMZLv6&s zfXSJw_OA7W`A?dn@T?UX*0&XF)jAf7wsoBRdq=?gQMcIJj%wsn# zPnbbq8QrkSphyj(1zOpA&d&1fjuw-79Luvr5n4zCztrpsx6}#AW}rMY7#SQ_JxpWMy(L76|AWP%y_g55dg3W$}v(kmoIBqH-S8vCjl`>7E{F^SqLjKhS za65b?|D1AokCQuqlbjU!{*+l<5(%5P7n+=`J~&1u*!cq{cdUJJAx3DCk`q&|i%top z_%=pGysKie+OD*B9p88Y8{OkkI;U6bB7w{xPTVs_4LE`E*6pk+_LCW%Nd&~I+7ik! z)mAW6gSGIXD5SXceSy9y*f3y{k(n^5Ed4<#%5$9DQAYPrLgyK)ouCIETM$za@*X1a zFhvP~dP{L|HPcqMa5`m>KwqK+ns(7o(D|&o zt}&Riy2jwVk4nG`X3y7;t&i5Vo*ma>AzOj{PgWRZ7qt&YD;9@aEz->OqV#*FmwCLtvzdkE}6-gq7 zRuTzU8fsDp_89880yq3Ku)F6o7}f&aMvf9#F3yfdxQ;)HSg%4>s)$oz38Q>yZo#KE zw0=9O59mnOCNM2<-dRJgjbJRoa8MVTRr_2@JhIKm&>|LsBZyZoL&j@^eWxl=FaMwC zINtva&U2EYY_>}3Z(i#8|9E_SV(0%j9dF~mZ>9*APLdpA8QGgH`yN|&%o8S3@NaSp zni(XwASkv>ps_dhfP3Vi$hJ1t!dbZ?uT*@if&5&=?cgJs3xxs_LP!ep=?ngJHmA9I zg>x|HEMA&0y&>}?=NlR1gcP&cxrG!l0Jy?ypL>9mu(JUZoCBx~+&G2F37C>N5@JQ! zlW1$EGUZ+TNB~)&%m_yYlL*{F9`-vyC_;8`rs2m-nNn99d+6FGUR@b;sGn?QuC+xi z37bHx{T@>wdl(Lf#U-pd(|Y?XhII5QB&%u?PRT=3{c=V;x4hhNgNaMka#D#Ow&T2) z+G5DueyxvjURld?dtG5;D#EJSpMcL4z_cp8nCAo-3kGBdsqi1y91ASXLhOGnd%PWHR<;=JdZ_J05uQ3NQN3FQ{Z&>hSooZNwjDa-*3g%(=ink%O@0|m#{N74jg z;?wXUE_-|W%s@V6a)zAv8MniD##ZtS{FB^1vu>D!DT-%9I^CZVavz+5G(&qhp*f7> z7yQROy~|*P?5cYY2;WWf;0y$Zf%B3ZC8NER+aw2PfIp=3FywUZ#VwkU4DIo!TqlT0 z@`C?jdjmz!QWD+B3+)VX$4_D2dwji$HCHs|{CYvW0^esu=6Ox|^ z3o`TF&lF{6U{pK|VG3_?jB||Wnf8&%Xofc@moTLUaD0AIbY>XV?SadGy!-X7_3Y)v z&bpTOZTS;#`*NIL@t66-oQ9~BhS;dj^ec4 z1N*l)*{4(O$(|YwW_MJt`b8T6g;N588wNAa4`cI|f0NtcaH!j8=42jDO`x3qE)1F- zk}N|Z?_VS9Nu&?N2eDX)WfMzcE((;yPe)TJm?;^r)SZi5Vx<76F$uSiITiVNg1};G zn(-isdA?|;g5Je>O+7D5Dw^MAWS$yQk3~#|DT#&?`XjGb2jrc%hB3@}UCnwp+n_09 zkW;*{B`>X$a}eyk_xDmUwzw}Ywy43DZ2*K|>5Sd5P4zE;iCpY}Uv93iU#(Aq6~XP! zcXnwGbFdeJ;5iJOh6AgW0FNh=17E-LKXj;__TbAG3Hxi#L)B%R0r8x&C%g|2prW~s zKmqz0__!nf`qbP6PIAVjJ~mCaqN||8Qok!mM#Dn0<3-nnF6q(o%RE1Oe%HLxCA9S^ zbH0AnqgzA~;1q=CrOFBUn~MZd_UAO)r;Gnk<-Uw*45Z`xK;0XOJ>Pu%?frzhL||C=es{V&grDLp)XRhwMiqPElk>zgJp>`tyT zl)?;^+Em#wCF~0Pc44*n5n4i)zWV*APbabI6?s^pP3#r z`kPefpal^PFuf*O4&$IWiJRtu>h`$><#MLf?ee=MbtVK3O#(q^1aK>0)K}mGqk)qc z-T_QSbS!=!juUWswf}R1bMOJtoU#>pKp=z(;Q1u78OWzFFZ;w)NlWn~xI+obpysM$ zOEkjrOBZJ@RhA0#BGM(aMLG*Py}e>%=^lzfq3F}p9f3f$f|)<{Sw(eZWuEoi>(l46 zw6&9loQB2gPMVRNgyPH_O!GW7hMyA3H)SwBI313Lqv6g9XU7IP6Voo1KPv5F%{e;Z(ceDfM75#R}Ya{}-z zjnNDxIp9D=C`Vx#naaP4S6a?qoZMxI(ihwwf%BBYdew4+lph#>b|qRVJA?)zFUL^M zk=3RMW|$=D#wf?)+{7@NkXV0tQM?n#ak;XVg0T?ps;!H~G=N#gj9c?s5Q>lBQruE7& zWjAPtGvDFWzzy%;8Cp^PqKY8=?RJ>HI53IW{?5@|CS6X9U&B0uXoBzUO`?Tau)LqO zes^UUUVo2;95X0!e@jRl`0K0dcF#H}V9x7XHt!RLbhmObN}fHY1WU7r-Kw$5TIB|i z_8$-EmaDOgNDle{cmnJ#sCVY-Ht+mYmWC}+5d*zm)ciyGj{~URHOVpEhNr<6FU<9g!7o)^}gTsWHV?hf;~0}W-=h-AF^P~^H3 zt`7Wn2xD}KvRwRRGh#9u%+VF4b0k|yf#yY^#CfY2HB&3u`9uVLM+nlg-7?4tv zC1>(DUA1gZiUl{Kc}tN+4%S{|u^71=tx{4@lkq@jg=}dnwv>X4>f4nv7GWbm>JKlu z;XQb)f$UkIyET{mdKG@I<=M;$MW6?~xN#)UVY9{mcW?LDk4aD3d%_BKs0d8Z;bKPZt#z0qpsFLuj_U#H!PP?F^raXN)n za^ZUS&N92lvu!%yQ1KHc%I_KjiyiX?=MSF7{3R6R~2gS{lr7c$$Nyg?8 z88z-#(UCPDU$7vDhuSREzmw4KE{a8TuAc~u{tjc9geVJqTcJFpa74M}X&7r=TwVLV zB=acgZ|DEYw6mDzMN+O??^2&%z<4Kh-G;8vAyi5u?kEB(R#;z5w@#HTYM)wlJelt* zd$4Gg{;8PnS}F-_WuQ-EIIKbM&+mT%zv4LN6hv`Wu0UePOhbJ%&$w!~bkIH9-+xZe zxI1!zLV*sQB&)W+;(W?Jx{D-IXLGl!>dtnG=@q)<7{LV0Qw}bhhoS4zd4scQwQrMG zaHU>8+jH@ca8tUOPk089vxd4EN@FObLpcpw;;zETx%X-79xG*h&*m{EuOHzW=3Za5 z0?^)P-Z1gH!0`I@mUcxZl+Hn^eh#FjI4E?+q9#n!pR+g+GnT(BxC7s0iq`)iG!Nv? zX1`gTK&(VjNA|*ZJpU~xsC^ri_jYWr7v=-s@!k9;O3nSh^8Z-T`>Q$r`>_-M>E!r$ zoBwws<&VZI&*FAf<5l%HnX*#DZKzE2qvaXmj}vuX5T2;I5UkY_Ub4Ks{8RtXHD#4?lD16W=@;A9*daJQ$ zXx0C)g5?yQ@a3-Q#SG5dELy*P_uMr3|L@>vOaC`gTG0Pu8$2l%P(W>6$tlHwmkaPl@5*oi z&NV~}eqi>KK(k8>uks)|S`NUOv2{WNdjxt^uGnhj%Lli(s zfM4*LKyXV)Y}yVLyrLYSg69}8)v_I}s|wDe_qAE(V`99D|J2Zb73KIROxJ1uI~tEq zMmGIFJ~`gf|4o!;`p>oj+X5fROC09ic>qij!rI#bD>ZNApGpH1-h_w!_O%i5z>DhD z>5TM1-v+@cjZAgIZ$#dAqEw%JtUXK2znN+ML|NnS=Jht;cjko!qHdCCC zpjz~7WgyF~YdX4tAbxcy4GT2V&ibN;A2X}!)7}&{Eox~xfb-U@J5k*d*ZJ!z%chd5 z86%40$FRM;yCdZ=-SN2wP-8F)UfoDgvKba=Ye|8Jz!(SJoZ6~R&NU)@-N;~m%HexMU!#iavXmBX6% zl9KhRX>D7m`PEdK?|fHGwb~dlT0-JB^e0)pmMf?n2!76S>;^cI307s_x=YR<6}Ebf z7r4?RP~QMr4WZ}O;P`clV;QUC0mm^9ocfUAoNL^L69vrlh;}oQvHCCpV|$yv05}&` zzc2xqQZo`BEqyY|3_&0w58^Y3*@os`?+gyDA-{CdfvE$bXy;m~S8!{ak9LqgmSeLm z=>H7m84lM-|4&9o4*lQi|2I?G$p3N!bfo)g+xY0d>QOrfs7Icoz?-sm?O8zUbw}?` zCq@dYwr2u0wu<5E>9&WnfeyJfur-0=Y@nKG#{-x2T5DjDUKx|Xl>5takEkOHz4@52KKU>Ik>VFQ#2TuI|lWqL}%@ko#A?T_Mtc;U8FqGN(xN9-hTuXVx zeM(g(H!iA8=81^Ofhpi3X9UW0K^kvSREV3@^PuJ64lhswlw+e{FvGSSroxS}z5P+) z*2pWAzdF-z<;hp}So);(aq!@u;I}_@6c+eKtNJ4ccciO5Z^-rIz4K(lMI3~l4j?J< z-kYrF^uY%EmPZd`jlSP=$F_VQr3L@b$b8wGe^Hvwe+TaQZ*;tk|G1IT=KRMuK*!Uc z*ff5gJkJp_Z2-gwo}-^ux%TKMIuIH_(ZW9X34q!j`&2J$x(h17wZ^Nv4HAv?>mUQk z-|jw00l&QvdU~Y={a0f4`tE;5r>_2Qd;hbMQW^i38fUW3N3wNY_Ruo$P*sSZp3Yoq zD&PLtB_Zj0@>2MyJ$%VZy`8nJ4Y2m(mK^U}p1ADgc~Xb27W7|*yI-0CH0l3F2PZcD zKR(*#|K3RHJN|pIS$rHo^(pjiMH&T<+;7yZmHZ1h8Am9a+2X%?)A|HZb|tTVe$~P4 z@ho6Wz!|*i`lo1Bd;jyRwHm8m0F{vaX|8~ZDYd=?Dv?lm4dl9OYOz$^ys2-Qpo1t%a^NJl9==D6`l8_#y^?TR zT!Eyo7)-Q9sMP{13zXrBFUTqgNGhT$>$sFm& z5AEPqfb5*yG{#c|6L_aa;c1oGn#CD{(W6>86b->8mk8oVhRfnHAW2v|lg601MFy1p zpVJ8DBGR7781n|ERyq(*`k#t?FjYn7iBZdvhkFXcd*XBrfH9kf?yS!B?iMJcm?R}~ zei09hllT4)JW0jShC}qX2RTv?6N_ zZ^;5_>FbL|++2WvbGHbHXap!?J2l9}_r)i+CldScKl5-;tcJPBwRwSxHalML^Q{YV zL#g5aG$-jr9Irk8+vxPz_WwFL-unM;rnFG$ifvG-$~Ddttg>_7tyHP;Jbum z=&Av#pmoXt)ut8QtNH$g#ImyV-u%|Bnt&xB9=0ln(O0*bf#d@Erg|MNh25 z{U5-OgzNc%F8x!Xd{2;&4{o`Hf+x7lDOkweqJatxQ#CS-BAjEA!1!G;gmIfuIAgjY znWS<~$mC|A0_CY{2-hBkqCSQ<9ZElO~a|7%ICR3t5HjTo7gs0kx(x)?ulj69c48yn1;t>w1WGugO$ z!YV9R!|$Nnr-}7H;oH&e(OKQrt5Bv4+{@5JrDN@MOf;QHx@=q9g`>r`RZW)Ow*E2O zBP`9x4CPZar^TtRVGFzSH+r-HnV>wJqUc?!j?#TC%b+vltJ+$Z}&NkaftKy5kPv6BKLw;|BP*3GJ!aLm%Pd{E4fR9+Jt@rQ%EH{ zD^J+mK+3{N-RCIKWKCOMu<*(AG*Wa*=5ZvlN&WNY-COH8?!A&IwqT(>u|^TOhyO`Q z;z<|cp2>@4RC`W!y{G5PH!?xv1O5z z#GWb^m!wLq(I-pJWYJ1b{$Xd9jX!&9sUcI2@Pz z4-SXB2+2vP3;+!Szp|%bY&-|A_6K1okSl#`olhS9SCZh;U!!6YL5U3t;z}jP)+mc2 zp|;5NEL(cXm+7w4VdTpvuSkS=&`ZSa^E}r*7K`W%`8vfo&Kb@?{nI>`n2J-^Gq$_5Bge7S-$LJ}`|9tb$y)QKOCnd?((2FlFf?#j!`JOkil(29eVY==4Pz4T z%4qXH$t;}J5L3JDWyU3uss=G%gd!}IO?X*%TrwHciq|$ZXmznyZYoYK*;9T|GJ*V8 zdF#>F%xEwecw}jev{{3(OIrMHCFk1Lb^@sa#(0s9fwA7I-x`1O0q2^^G~#{&kC; zR#!!FeW3o;+9R`b>dqMi^M#ts2gn1aaU7x#J76oA)H0Di|G(`4PSM1JvbTbXZ==hp z_1wQW*MLG6OApArp|Yg4x2SHcesflBPj6}O#;n+yZFZ!EZ!7m?F@B{Ps@}HWh&>Qy z9RG5hV@$on2brG_R_w&Qzi+*}&KFm&dgCp)w@Ujfm~`7&b-Sy>QMpkm>&{)iVypv@ z7{DF9!g0zZAA(E*dsiQ(ka|iuPB+_D*vj8Xe#*)lk`BbB&P@U{wG zUj6?RMTnA@zYJmUm?d{9q3{8{A%U=)exF-Vx4jW)xc@ucKXBjw9iDFV|LaMDKfD+7 z4PN`E8x-?xyy`#aNJ5zI>y`7W_uFqZY9qO%269C)*+it87!*eNxhBba08#uQ*>dss zs~!OAp!Q1GHt;`y4)mrB9OSvM2Y^vdWcE^{y%6-I5k&22xpl8P9H47`>Q{TAPbit< z5K&7YNpn&;uRu*K$Y<6#LmB5JUD40=u@T+&1ByZvrx->HQ&3bjHw}Z*o5#fn5%tYa zO%dQ`Da1UYSpzLrT!0`zjJ+jJ=+`Z=KKaiwCclgme2ZZCE{`A?y8stALV2Ojpf zWz_E;>}-_UViit>iR7ot}DRbz$1BO`&9!RQy?2BIsjzND1^lc*igm#N;<4&^t zr>1?;Iksx+xZJF=gJBjtqI9_gsY<OeuR@~+r3Vx3`eA!?1R1{0+W}#f370IKN9S)dLY>0`p1DCu5cI}h3eG^JZbe_ z2w=VjcR(O*rTMu-QtxP4)lgV;$&8j6d(Y8s_033syDA2}*evE~i2E3`sE#;Q4%}qs zvcg|ggp@M#%Nrm)DG|xSzUr55eA~1}C@jd!qoT&eyDEYRveFu8ek`xY(xt(;>@^N6 z>UnE!&n^xQe6@4TUS){xKlgN(FDw)*zwZ7dRPL==IrYmST zLVAPXW(>W1iV?j^gF;JWw(Lik zfBex4g^2mR2f$CtHumQp0PuR@XwC!D;|KG#%{oldi zM*goQwc7vYGO#7T@j(Ir^M~f`ZDxOE-jSH=E`YDIIE;|owfe7DdRtdy&YS!l{39bN zD)0G<<}w<|ycvxu8sS;yu3vkH5INKzuLPLj=ZuOLwOd_jA8xTRSx#6vw-+#UwK%nH4J|9=(-jNP4gBAO?@qFlzJ;j_57b^5n3Sdqe@Nu|G>5X z-9I_q#D82*YQ_J>GO%@7{1?g1#lM~ zRq!PBCrt3Slw?VDEAsOqZOCUA)m%NAlA0FL#I!iqI`&_a2 zgCxp+0X|F6&j82ZCr$EKQ*kfM>mDK?)O_~cG#e9|n(rMwiv2A?%B#OfOzo1m<+;S+ zA53$4J#z6wAM__#D*w4{pAT$ndRe!qXnR@1P;DJT)QJDqjF)FJ6(Ou+ zPjs;rOsZ?Pz#=T(je3agI{vj(3ljytDq0Rdr|;d!PghO%l;BrcU6WVubm(c*1bf`? zH}_p!k}Wt}r4FfGrE1ikMZ|8jh~08Hi@#s>YRL9ot*FQCeTMwDo9yLoNSezbZK}DO-l}`(y z!OPZgqs}KunEw$5Ld9ji7jEGm36Vgo9FmM$f zP@J}(9IMWGX29@l;u=dS|c22q`7l&pd< z=&yb`J9ICH*DxHS%h3o0X~_XM5)zUh=NL%g=~MC)@#6Omv%T#PmcPaKZ*$C|Jt5sQMKzkKaj=%$0>S1bQyP3`- z7dTF<$7g?~L+~J8v{M-wcW;hiXt9QCdjHVW`@_AJc0WRl$-W=1q4S=>_-)~*FPqeO z|DVs&LKa{R_Fo4_NBi#m|H0|u=Kg;jsm=Yrb?I+hEb8wqtiN_0<5vIeU0zMyDPCl< zeyTJUEt?xvpF%|zyTa-^OPo z)vjGCi!|MPZiC-JO7R5z4q_aKC{DpaCt_`z_i765eBQgeg=tatm(@h54DLNdZL{|5 z=Ql)mNXBE5(_H$wurTCn>_tj`gp;VInr+h-&__nyl2qOYEsE^l8pyFTx2EL_f)jrE zPv~PrVEFQvfRgxEGQ3Mru(J0*hX?zm_rC`l|Ih15$~zZ{|4N2{PxB%^9`w2y7|W)$ z<1W|5LtCc~wkrtj`NnbmgJaQ2Fd}pU(;dJN0^>AI*sGT>Q9O9Uk2pagh66$$Uh=+&T56v~5qa7H-w-;);SL}a+@d6c0UCe{`PNqi{u0>+3ap^;uVl!+ z!z?9q_6ARIDk+S!$q-TAC7BD1aE#d)h2U2*6xC3aLLA#w@AGO|CY}e6vZ$%*B4@km z4@LDUq$!RcE)WbO9HSfryh~(kO%SRtd~}(D4I@JHl46#AB}0B-#VO!&8nJv%LV+$s z0T|B!MUWAPju=M+g+l&GVl}7wFBMY8%&%i>-T!wFfd5l1KoLNpr&e_x*!3>n-6fg3 zYDHqkM0`KTEKmPj1X6ONWAQV8Lr}gvP_rBH%4yphTKSJZdVFC2TMYAWzkwG*o?14q zdfW>l-GIjT|GjNAZrJ`8yHZ!}b$8`0>)C+6{boDcaB~jGh3A5gT-YBhE-J8<6M@xQImmZiv!b5=A(EkbZQ9MD>rf zBdmOxT)~%#I`8x-bI>ED7C#*Q}dgFkOagc)aMk_Dbt_858uad z3ULI75wE{pnY)ZWp#Ju@(g&K~U)k3?ok`FSEbX7mQ(;yzurq_oo0o26$zB=+i65Ft z5!tGVDC>&8KyA(PQYWa%;G1Sjh z_XF#5U+?gN~MsjvD0u!goLa(JcRu4o**8`;Vjjla2ge zM-ozgsdqombMM1NFd2=!QkMz)W0ENQJL`m2e{OekMtTr28Hv z(ix^G^j@t*v*L0^$Z~!A!Nw$uLNG*tX0ed)p39sBQW!-j!fYa&n!pcul1)5K`YPu& z!&F?PJm4vc#Vv`a85pE^ic0EbK4Ex-RiyGTlTX3SdmV}*$cyrtL=*udIo!sd6w>q_ zPY_7QFwM!Cz?rZQ70u`Y7x`x_MH3(=g4coQ1jn2!;`D!jDU31%CK(e}wFzNZlvg&U z18_AGk#Xde&`xo$#6XOuh!(YlAj~9<(sD&yAElA%=-DVm^cyuvufYBN8{Y>I@kJzu zBElmiuBpffK(S9mcgK(wlZ`&0AQR*DLOrNHm+J-rLcup;aczq}h!r=&C<;0045d3& z!~r;x#-&I!s@h^Z0H?etitq#GQc0QPW+|D#6bF#6!VvMc!vXkV%ol>H0`v9Hm%aMD zBZ7ng9g&3wNnyK-^X+Bf~aBnpLqht(sBQ!;kfJc}C z5=S%LB`}-`XN-t4ImIXzVxN<8fB(jwoDqU)Mv=`T-jWc#(o?Vg78fgWV~xoZxFMm* zQvl?fgTmlZ3`q(C81w%9{hGvAafm*k@bBP-!hqX+G5uZt-05hrs>@7+XSGE2MhOSl zn{_!+`iw6tg!eW99)xd87zeMJ9}V1oEH5zaB~rS*v{sC9jw+Tx->#>8A!x3uqJ|g? zSEiP1;RVgU{_#hzl0iC+RPid~X7pgsHR3d*$@zqj@bc`JN`7m@jk<4{sR92dBwX12 zXA}NEJvuJ=|2)~>=>OJ|1lZ?tX=(UBA)yER*MR={Fu%yEf;WmtpAs8n424p?7KaKz z-H@=8xD*{|F9oY5=^uaelmnKtARt*R-oXgARy~Y-!<7rob(rFem7_0S$(>c@J$XcN z3qtCO&r1@`Vh*U!Bgk0G@o|%~FVd*tW`O<7LPDbu|hlp2kb9K?Ov74)lMH;%gId9p})y?_54Y4t#=!O!0 zO24)or8jIsU%7dSkcSDii{9Y)k+q24!N9Wz#+op{n z&ACeDQsCW66P-~7G+LmT?J#R;Y-~}O-Vu`@-VwgD1zZR ziCIb^j??)Tvq5)d#VhCp=Rs!?hOGV>P8+g~s#Zj3yvSnJ70mnAixUynzv-&g{&rYc zO6P}3{4Iq6x|4GbPB0W?f)hz_{i@Y$I)xS> z+og@KweK0CZG>T-cQJ8QbBCqvEYDx^q-Ddij_3%$KBXYS90%6sBmDMGIMgH@*Mc zJ1W_K9qeu1|E(nnWzU_O<)vDHJ4@$Fv;Z@PU>zo4r4j#lY{fT*V9PWFlPZDyC~1}# z4mCawgZkYS+l(cUrdR|e`K*n`if$Gm_|z{A#N_!lR`r`yk?QeZ5%?!}1@XRnNT??J z|NUe4{omoq!N&e?Ey?o#P|WQzy+FJ-qDLtVxB|fET3PVIj%kG|F3WlC`%E*6Qtpz8 zo@qwmggz`%|>%tI!fqv z8jLOe>HEYT<8lEvtbi`~!ipC)fk|I~D*3r?GhkN3MR+K_qcDjfot1`7JKHWbS~E%; ziT%Z-4)Q;LVB8e|G|T@JSNIC z>awHox4xCM{iTw1`g$v~4uz>-shUq#8)REqd2iP2f&o?O4k#KZM>MmmXb%5}{!!{s z(UsCoy{pnU*G!Sw)a+Mxk?H<1l&W}#ZvTrn@w)RryF}GQ)UAC#-9)ERVySdC;j#_l zSbu6S|CM#w92WqM=l|ow()s^*BmdWuO7@>i#sP*+;uoUre zQMe@-N*A9TVbmQ99L)7BWW8(E(7Z#S|I|9mN)+K2XMUHP{JkSU@- z6Jyp*Vf=u=RtzU-2W;gzxKLLyaq`~`>A)!-74>1Jyp82m7t$#o0iDA+@QKj%rZ6vb z#(hh8^o=X!zBu#sbKA4#sO32sB2vC=v@yPL-g7g+@GL1E?j0%594W6FvuS7%CfS@= zBj!<_Q6yc?Q3S&ofO);{60(~x)~Q*! zc~m#X^j#dy#1Q6{D)(`!v3_ZKoG~iz4&NxXKfbGBxJCcSFhu~Sf;zYBI}#bq+$C>f zCS&3RZZc@x_E=C_gM#vk^Kr@jO4t-z?ZsNSCFdrKOgbsaDayWe{xWY|9-N!dH=JXB=-Ls0z(d0BEY1x2i9`S%Ux+B z@n2Dpf*@llnTVjwBOD>N10YjXg#gD2r4MFs5;Z?SP(%&Thm^wmB4~pfE6NvOW8GI1_<+Do7DcL=ZlhLmKG>o&;z2l2 z{u#S9XM3A$(c10nv-3_Z&>;+3)O-0MMKp#HxQbImM=z2F!R@0_|Q=rc*?hE^$88fggkcRH?mBdeM-p$ zrDK#a@D`;M2i>MFnm_``b5NCX<(K(ed{vLX?2_7CU)E0-=*`&rL)v4pWI#E$yjz4THxlxs$wnULuB~ z5+xA2({QKWCwFaDzialkv^n3eEmfZXag5U?DF7SJ|A)sXr>_3*WMluco@8C0!Q%eR zG_h%?43H{4>pYC;gRVkV%b9a34Q?kSR^LJ$rK;`0xTHON`8BwKlpzpdmdaLOl5iH1 z63>lbt*TK};nuFy3imWa=bUDyNY@rgI35u?QBkuPC_F&5S1pJN1MOthZk~g#2NWX; zQxP63|EIjy`$6pv=SYASCXL!gUD6<O|#7NeAn2}wH-oi5mQ;B>iK;?AVZ2w@6`kRk8{ zacU}!QzBh-wpvXgO4xwc&<9)KqeZoq_)mzzwcP*g?;jnM?tcysHu!HHsR`97G}L%c ztC5+lyMBXNyK7!mJVBIkJ|73DYtazNFe%+iF&$l{TQQ}i>soB+JFs`HWa`yDELh7z zrG+}xs^X($b(`c#CH}8Y2QPo&$Afk7|NXtwgYy0V;l}^RT9TpClM#>kw5vxitiWW$ zS!;EGeY`X{%GM~0BH^F<)n96GlYG^~^Ra<0VcoR5R=0xUSAPLp8Y+q(>~}AyFz{`1 z|E;pBH%f*TW|6An8uF(7MN~IL|N8-qA`apE=hrvi_WcDO(X0>pVieU|jlz2PT)6B2 z5CkNd*+#?8+oDOv(hG!=bDnW49~me2wVD-ey89K|)i@aK7WDA?#)PJ_HY^t;iB*hoZ9YQcVlB35k?|_8jp4T&R2>MSOq^F+ zcSIFXp}}g_Gv}jr=K9BP?qq)l<1j*iqJT^hodK3o96vZT>aSu8aC-YChxszYe<5K7 z-`9Wd%IYd|=hh|e3Q@~Lt`PIxnI3Gr#gg%RVIh-HG{q!i=B>^MrNLN5g}3@Cqr^mn zJZ1^#Pxtv2(j@l5*5DRJ2r@LtBlcBv#Wf#y#!qmG5Pbjx5n9yjO6{|9*|!m)0Sb!= z!;+CAmZESl7?h3tjqwv@Z*|EAA}Nf+vnUzE>uds!8wk^mew6-IjkRsCUeN3rdrqlM zfkU2upIAlu4OLJS$a!jz5n@m2J`8k~dMWEjBkJcn^|RA--oOMz7kqB+#;|pVAEVOE3KErPl*VQmTN!VA}C9yl2lj!CEH5e~IQm{q0f){fYC4F$r~pzlep> zcVBaPmzIG+o_lc_9c^A-=Y{0c(0H~)eGaykTE_o zZaAXS19#oFgR=ViMyk){@9^X(L_q_lxx^g102Cu3OXMw+gfmZ&HVxtJr{mypU|M5KCQ zfzXqKs_ke{DlEBlO`5X&hY?0m=ytvWTjndq8Ws;Xzj)2JTZrNm!-%OJu>+oP6ag49 zqTT|4fTB>`^T^FE{_4iy!=WgqT2h?OFXg3%L>|hUqT+fktd`=Xp+^6g!|O$rfQ|M) zd#?S@>E7{1|F@PT#bbVgxl7;^pZ<9t{(Ih+7;pVsC=H8p#tZ#bDGu{)8}IdtAD>Bs zsN3(PM$B~}wYtQ7aBUq^tCMF*>!>Zn^6_$6wylVK;bRFaO;QP0MQ1jeDx z(>Nh{?y5OygX7ADI!{LJMA%bNbkLX$OF|pt^cM?;d9=1I+$F47v2cUvh|mcr4n9({ z0-FOdFosjU#wPHC)Wt?9en`iBxg8uIb`Zt}H}D*`%4+DoY^cwhDfz>wZYGzKT~Bmv zYUhK_v2lmWy$i8C9hTm{aVvLK<#*S|TYQE~9C79nNUQ+HbDY@`9+%wJ z_^;wos<;!>u3z7{GCmyI> zx$F+lbc2XQEry&8Qdd6)nR!1WA?xoB|vJJAC8_yZ4h7cc>z3 z-vx(xBimk*bJ(Xb5B?yoBB!o~N)6by-LEPn(qd_J1r_d9u21SJp_UTh=* zrA?Aly{|k=Qy7dVC{8cq;j4GcZ)N5ti- z_y0J5_kTme;?@5g?4Z&9zvTaY|MXQ51Mnl{2F|# z-=J~e5*Dp70Gam*kgc*EC(z_L6>HQ6`Xf=yGB`1G6ypRc=Sr{sBI|e65ln$LedEPR zc{fFr;t+9A#lP`#HfFQgU*5{VDqYg)6(Fymt8W%@Z5S)nc}7*B|4vM$tS?7vVrq(Z z+G(XE7?ef5S5r&7ncAdvq-y@}Jmpyc1~%RQo$MdG`k#ZnjsNepBx$Ema#$wxKTA;m zlzf?WQvQ@mul`ODPacW}E$xa;%QM{$TI6-PAuLUC?Mpvh(zu>e#NV+5?^M6|nb3uVQj5hw__szvcy zKP6?J-m(p4Ug>4MO&5rw5J-5NejBz=_aad{|NPu;5o_?DeB-=?C!h`QKlcw$OYc9A zPd56$wIt>LNlf+9F8y*Jmfg^vF137=XWH$Hw}d2)W?(-LPJuoMzfrCHdgy&o8P>*+ zE7cI2h*JHu8YEeRA!WO6{tDcvCdJLIaH9I^!H4-1g&ZV`$U6OP@Iq5C(E6VG2xxkB z8v0>9bU%HSM^aVI48T2Ktn#5UW*|fiKg81D`-#v;IrGBCU00$@_FYq{c^_$2-<`?^ zy8&NWs0<;lVw`G0=2Ja=@^*9;ORskEb+VxomJf+`NoN8X3eIqPd?%7(Ae~m2yIT#$n$xeB1i{ z`(GJ}x4o1L0zF;?n#CE?5%P#>r^b0?L-vN%(?V6sy8~&Pi-Un^{WaqjI)3101 z%FW3yF&4Lg(z)mfu|8MyVNofgiSrNr5`>F6#wFYg6u$wcQozCyGpAh z;JZ*J>uq9TmwGb0>2vDn%gsbgCS)u=53_69KP%ojb8G+r`ePz|0Onm3f0whBdfu-Y zl`ml*l{(#hKLzz$X|82k-d08{%h+31T!)1>SR8gh9_7C`)(Ew!TK}t}fvjBryLYg6 zbW+m)Zr=Z{CzbsFY3@~P{ngS1U>;DW+5k*tK`rgSRCZI1s(*5AzV!O7u=`S<4cjlX zBG>-Q4N(9by^T0oSXEkvUfbYBto`RTDcLmLd9>oK?Q*1T;%{ zf4Czdt|a>j36)Qi@>|wAX=0Y!a=W6?S5=!zk2hDlZdq^JCH0$h?Q#}|G8}jSSxGVL zKP5Z#7onVPv#5Obt{t$vC=~&AN`$*A?TxVfa#OYZR}X$}L_oELP(YLY_u+vn|4&a( zHvZq&l1ld9*0e9j2HXkFR}BWNjO_q{O|Ah8><=zDuorg)M6fa$K%rc9S95W@qjiSk z9vWJkko)Lg6+W=q>U-PnVqoqpnT@IWs!}!o_XN0{QwlWOfA72RfA;q_?|;^k1j|ZD z80J$w6jQx4TOeIX9H{ZDGye9C z_Yw`jeT%J=MNAS7KR>5YEvKpF6m>F#*%*2>yKrbz^J2Cg{sqv^0;A2ATB9{a-5~i; zMVIj^wp@8=mS_Uvl{ufA?e~8);6IweC3t^m#D7O8N5`)I|L9=z{%eR+^i zMpN&I@?;@HJMb=!W`Jg~B!I-yl*Wk<+0vfJgYRUg&A>tGrxI>hDzdA^c7lMaVpYgN z3|v(q4H!hGYK%|`eH7)x*LH%`T>6Ft?ZB>{>0dCvwgNp94y(i+45_8nn%4TL&5_y~f2 z0@JbcJ50xB$&5P9eovzxa60DY&*IR^?i~UWvy^5*>VM|x#p*fSOanPG5_GyyvzTn< zo^Ng+mUC!^QbZxfBjSaPSR+c(gHYw=xY7lZy*OhWVvPF#agr``sWT$>#H zx0?o*BR-pWzMnVMH=6w{*px9KLY=RkMC2f#_-GGYjkp?U<$7MWZ#LqH+>gpusRsX3 zOejugBD(7;@Ba=@PTcs7^!8~neHBt@Q@Y9Qu%S-wB?0up?;>uJC)y9RBq*`THO zHMfC%tY4qX*Cei!^4FT!dabY7&!y^ntf={1XfhC1Jd*=d}aFH_AczglbKQ}dp( zn5x)jjxANhwYzY=PxbPr_^qeKqJE*rj3&2QqPo}?SD%ogxCZ}CgXM&OZ}R_fw149G z|J*-5-P`#8SWA+e_Wk+tl)uxUE7s#Bs(~4z46_u)wzGTl=VtxRXOf@LID=Su2@^@w+tAR~BSe(2UQ3NMtMy*a=4v*g)aw#j&j(R^3UMjw_U zvsQTdY%aFaV2FDdv0DYFz$4*5La#m;^Z%bo$75s!`eHx3Ym0vs=c*SGW~t2Nc|0H< zQ}BiN9b}-iaAYkWcNoHd4~`$sBZwzHZJiGi@xGLGcXd#x?j?3gD11PinGIqy%71y5 zEj?S+#J9d4sY6@Vuv$_2Q<&nw^OKAsEFP;=eCvmpNv`R>WvnAoj?TG)M|R!CCzCTc z4`4eqHYHIuL6-Kvct`7bVW_xiRe#xJ=zG0y;@G>lufh4*_LNh?cvo*0BC)#mX&b z(;u5#_rG8kQ)$*4k_p6dDQ{^_6;rH&K+A%CFz~kHz6J)Z9&)vN>R*sj`_jLTSHvUM z#4E19xm$!+#3S}Rydoa4W$_AMRdWos42$k%HSPN3+Xuz>1$yYISbp+$wd@4OeV>2x z-d!$@3W@0g>%yD>vnz#Q_4Q-LqQB{$bJ_RA0>v&cgvAWL7sGZJ!-S1V>bWmg2i_@( zcqZ5H(bOqkvsUb*o-D{zLEj3}O;#NF)YmffQYwRQvM7?P0ci37|J&D+Cd1?NL@1wK zoTeMEKy8icVY~C4j5U^{BeptRZLqPlbDcSr#=-9WIoMSzFrOsX$fD+q)M5=4+ukC< zHw?89-YRXLYDz1iWfdf&L2(Yt596sE4RKWT9}>Lczj})7G3qi={(0!c#+n(KO`6|Hpjj zU*Ook!1-z3)6-JVPAfV&X$NtS*$~kfrHJFtmtsBb2IH#e`Bn|;v)Oe;w|-_FpG^`y2bOwIu2P>Gj$9vaG)N zvgvpMD2puL#!FhZ3BT6`C<7xx^ScY)G8?q>`!DuGH>dx+hLM-8!*!iz9D2>Ql94oZxGkzAb-b+Hz&CER9_nP zWuEYj5$trvHwtb7KR^4^rOpvv)^E*hE#UH`P?SJg5qDWfgw}U3D+#_-b>&xce(w_b zxo)G?#(WN3cH5+9>E6<+)GeDx&vT|4{3j!xuipRH;n9Kn{_EuMbmRYZEy<8X%Y%Mu z2XzB{Mx6Q8!aQYtZX!JS%d_A**>)#LCr7Fl$H^>9L~j-G{A+=mEc5xj+pn5{>cO{% z|I2!)|B1p}Dg8b^aH|$yyNj@jUAw_%p9D5rN2COsWdl$7(=#DY(RerLDd(sjd&)e|Zycm3 zDT~Uh7^hnL#Gc?g&w@~!rmF_0&Oc|hv(^cG@{U>cg zrnf?uV}RuJOL%Wv1JdQ{`ixMzlH?nh{?VsK{C^e%B#Rf)12^e^4-QKA|9hu<8~neH zWZ{1`*GoPJs9NVc4&;TO@l*hyB%skc(#?*Z+3WHJAe!?OAZk^iH($ zjFO+B=|KI=G|kGFY)3Fp80Z#WJrHz8!GMC5E*RH}25tJf;6c~_ zUmYTJ`npU|SnW)(85Y`QKR;mDI7Ka{=SxP1bNl=JC?H}-7n19@I<#Ku_bEptK6@2!9u|cEQG-Vs;Xf2md8$VX+&OQnd=`PuMu;j;} z+FTi+T&r%e8vi|^;h2!eb-e#MD8K(X+W7xnOA<@@ZI;3m#}7ZqDVH}b8I=Zc%L0OG zJ#_?sd8yR{zDeCE7|2hN^h{{4j>;~uPnE9)dV27e2<~bJxf9B(tLgKDdzI5wGgV(E zsQaXC4)rv*14Xrb`x((u-S}u&v6L4zDzGdkF-@X!$eFE0Z-V9Ck>P7J#qonDhD{y1 z%gd>G3e0(0Bpk3AB~Q|*nPN8z>saYR^qEZIBT;y6l9g)kKcSBif#Ko@fCl`3ymx%$ z;{Vgb4gOzC5?t{IHPy>{_@kFjSFE2GdydCG`Fd~n$S2RZ_jh0(9L%` zJ?N>bJwE76OFTd1W7X-bpi7luRql`6#a0ast?aE&J?!3~?v z;b>Ymfu$FI67v-aQ^hbtK;pvx{tn2P{E49m1u3Czb)k()P2Jsugm(!F03!gWB6Lao z=M;<}j(D>%jzB_ioN7@~TKC?_C8|Tn2cpsb z$36cY?4KT;Zq9$}NZ$AlOE>~16cdWm**pe6B|qe=z4zhGna8of3H7l46B(zV%V~_y zA9ySGYU@}JK{?C=Xgr@82($LU#Vh~(E@9e_bM+WM|ILi_YX(j4{nDxIz1rUV5Tec< zI{=2iX3Xy<505NFQ(a%H1Funh7c-V2Dtq_k9ebbUonhtLZcji^9~ESY4%0p_uf~?V zTiEQ!{;LVUSK_}ZiV!6)e;LByF-z35$A|=CPP<{iCjI}xiR1s_;NbLh z952rTT&$#lw~?-<;I&n)9xBR))syTu#0u{1ev^avJOI+ArIS6l7-R5SQ~|WZ0^Oln zNa-DdWorNZ3$@c#fJ$!Vw(8{5J*sBQ)gtJ}A4M4sQ2n9H0C>rem zfmv}30?3eX&?_|NBT6RV38!Nm>%yhAlOPIHLM7t}(Fd@lH+cT3FUyurLk~?*I7D=Z^C59jrGC)9xhF6U#{ArhdD$oe>=7pto_o4h^P)l` z4PE^lkw-v3p=g9ZaNf!ycS2gU?ML2SpLMM0%u&*{$JLTWVm}Z$ICwQ>3Zio51Ue|t9Xf2#dC4sUmQ=;}^u zdH*_`(8_Y!@%yL8v7667RqFG*F=(8R+PU~LA8-JRCw*#g-eF!J;WONPF}BpUS8eI_ z9t$?7|8A%MVwRV8++WENq7d_&Q^WdGBmTENN4%Nm0;u`^$Ho7L`v)8QpS2{92aHu+ z0Qp;)?`%+2*XmCSQxfsb;9UOrcgZsy910TWI6AmaI$B-)_`AP4r$F;v{S@Q!*&a07 z&tChP+uZwnTF9?*4SYTqKYniTsT~!U>rJWS)lW-?y1DyV@a|_i*WHhQc0RJppDGZx zImdlEsdWCE3ZeJ%7aZe-oc~roRKsi6s-cqaS)G+_Z_lJ=7WbV z`J2qZMVEDOs4d6`rlQ;nGQp`X4f<-3?57r66F&B#U4xj9cT+^4C{B?>ozm36M!hq-3};0fca@VgHbdC0gS;ICJBlG9Hoc?&UbM9prwmAki$6V z`O?(^4n;c@#T?WJgi;hlrsOy)s1x{ph(H1vKjEhY^i%R9oJ9QvC5>M9eK5$SO_Q)G z${6}b7)1qFe<6tjgKZPw;*lOy2Kr(|`QKASQ$AKdp1pm;JNDPRch`NhzJlpXuQqWm zwNnDvm^|q}#Q};7VOh88cj4hizXl7Dn6)Pao=6sj;0ea5^tF&u7^FrOB#ve~V3?&~ zhys`iB}*~ud0$@jcXFN3RSF(Z%0L1spDD4cG5Bm7Ve-(@73DQul zuw2FoM-jPB>0F?aU7*HAFHjgOYQ?gez!_gC5KzRjDCM|Bt;T^I3!b~MtES(i%*_@^a8bt|3{dmOuzndtis=5*6C=_i2qOB_z#B%`I8=$cEHw<84OVuseL`e+bL<`^_@=61%@oz<;zv*mtUmh zE~R`Y^H$4hY{3!>QU=cJQnL-+mm2MK+24)bt;%N=pLJ^B{~?;<0Ci>fPHN)+hX=={_>U(W{=b&g#Q%#0(4FDSvei7lsN3g#!Yr-4 zCCQ(>_ivU&koh{u1FNl7i-ZJGhFOZ@0Cf`tX2FHozfqZH`qq4zGa_7A*=^ZC{6drj zaw@^QIGTZz^5uErfu!K4uh`Fh&&=B@v-uvnZ<04P@P9mk z59lU~BI(g%K0(mL|M&M@|4#>ddxsnTzmC+XM=vjc?t;Lnq*@|)T5HDtNft%&ini-9 zz)RQ4`M=X@HyPj-URVw|6>3@FpRx_x{oGO$|BoLiVr;PkK%@R=f6vALhbJ5Uzn0W| zkD4!lIrzRTT*L2++8aT=%G;U8n>4JRx69T#@^n>bab7Mf%6Ygo{2SiAN#)eQ|BX}P z{4$_f|5J+pd~m$C;s5JMP5j?k0NrJPQ9-pFa9VNIK{4{w(@`g+%6AnXk4~aYH{ze0|n$*Pq37u2vW26TDe{gW<;Q#&8(~bX+ z^`u7ruNFWhW^)`uSY<4}X_XY@RarsWZS+M}i!qj2 ziIQAA>y?yV#I)`#=#mYWWR=K&T@pQn`sI#l$ML>h(F4`jq6w2YkL8J`NJbsHF$imT zy2B9VyjQlTqZWCr`t{8B^HJ&B6mNS#!Sf8Qd$**%f<5=Gj#^{xpw&oWqZ|EvtWug) z`Kt$+w&FgxMVj1eEq3G{wrRvQvKh- zQOW=F-r>o~M*goOHOYTt0kk^%Y1Vls%XJkwO~PioEUeiyxK>WQOhDltXjBunOj+5B z{9HEL9=$YyweRv(hfH5C#w64|!&iNr!=G2xd%qG2Y=;7v4FT%UZKdgy_@K>fmQjKp zJQF0aY2d{OvZ;!}k{_E8g1O9VK!Pby7sm*NeDy&DJp!E(f~!x+S5q}ms4CI|FRXIC z`9MhpJIIG?%X?1w?4e16{I}ghoJVk;yTC^Kk3IMP@8I-cBmdWun&f}Q0_d&>R?b(d zS$aiF&GsMD&UbshQVf~*a+h2&~FP+_QSp6o+)Q$ho_W-mR|GWJE@aS+8|7|U)BmZCM0qC^u z0cdqYD-i{2djMMHU~ztFu)HUr6<$lVY}mX3{rr>S|AR4#Cio#H6fM7v2L8WyeCWLY z+&?(o+u;ATq(6Zhn5Kxv!g+{X0pMwjVld2b6mmYAz~B)+AU5dzNqTuo!w#S*f+?ONkic|o{0`%=_a_je2gzh!NDql9lpOj0*dEAtgCrIuIY}Tv z6ht^igWllc?w7liP}KVqIG1j?-k;xr5L4D0JmB=D_+LqWZ!r8PeJTD||1f@d$^S?H z$)@qkq9XYa9*l5=SnulrdrEp=4~Fou_w^v1@P8AEA9`Q^zr8rNp$$Eo? zl3!7f_69ga@TJU7$*;Y^lm#S2FFys&sP_MxtMkk2yUW$IQNRE9_m2+_oc+Ile6q3s zT}yhMF&rbtz#Yk`u+R)p%n;Zg?Du*%kirQ{5oNue{6Od{>*Dc#jKDq3knqIAz>VAy zI{>GDW`GFi@zT-HpQV=_iicTBC{xv;5d1*so zGX%b+Fiu~AA4w)0{bUR&uY;=kCqf?qjzL06m<7Dx4uA|qB!2MTqyqjGry>MCrYK0G z8DL^)lpASi5~y6nh80zj(Fg|^Mu4J(Fq{%P+W`SgVMHDPp{n9RPCbkm0TcL$Ktk~p zrvA`R08B_IIYhM%SrjOSTX2B65#;z4keU~@erpdd{t4|E_j{A zVI;(iyjSGZ5eh=gk_gVUV<&4>RE-Eu$1iZa4PZ>tF`{|}r6>;h8jy~N4SFkwRy*H< zNdhT~Q&kBdBQSyij&KTvpD!4PFA1%vC81)q`7rMG$?;GJ{ zY((fpwg-nKO970yFqfD>W);1r;%qoUaVp(A^P##Uqx6Zdr(O~v$dL5R6{N2~gdSk@ zf2TAMs_G~+lm#7qh#B+#kkyfKM) zovo%k*;>;+;H)qgih_HK;xGn23AH2L#_e!OJHe^g&=H<+rq;7t8}xdYqY(S{X1S~-Tmn48!k#h)l zh0FEJmu4?twNGOljQN%T0hu5s8#T9wcb=$RlcK^N&zth;)vemBW+(SStV)S`^fuv# z1PUK0OvXLwk&jn}W0>+0yc+T5XyxpgPAw-%G%J`jMgPb!m29aOWRx@RXvW(_VpfFz zLc{`!hvgl+BRV?YlB*aU|rKp~QL9h3t9?pQoEWtrWG8WA=im*Dvx29+(A3)9p^!RZW^ zkV_L#6d*p9W!i9T*4fMJ6yY!w1T7^0Ozt_kkNC(0B$n)l36J_b??iuK6afLmdTK_Q zpC5A>VN{iGaKSaiki&SUgoN-BIy0pm1rd25fQ$;3E~Cm6dy;_{8t%)Xni*#f*iac{ z9MMw5_f-VOyu0q5U2~Lkb_cHRxP*Uwc6W6*P(|L| zg6}SGFJJ!%F0Ss*-<(~&y#r@&-hdy@Zg0=7@2@WJz}fW$IDdD2adm(7?)q-0clo!Q z+snH<@a`5|y}fyJb$PJ^uCCADe1CCu{VjO$!`1zF@4mkWZ?4{6-JkI?+h%R=zUjTa zygmQ!?E3!f_0^lJ`yY3}H&^%9yvA?d-GVc4b9Q@wb^iUEvs-ZU{q4=WyUQJL{qB1A z>iV18tLtws-(Ftd?{KPm_gD9CE(g7yMkr-LBg8CY>U<0f6PaK*1zV>=o zv0zR(MAX=S2KuS)tLB>q)x9zf6uN(rRd;izATG#>N{PmY`Dno?>d7M$MFCDQQpA_f z<0%oYoAquonDDD!Z+`&pi9#kbK6YhjAb$Gx<_&nSnEb(DPsqu51|paus=2>7oAD31 z)z2Zz@G3fP<2H={AttF2Xw#ZVVM5zkkZ15>4eT}5_ zzqglX7jG{IlW-MnG~WN8oVxcvdxsnQ-?gOt7UYeL)6(nx=}+JqPPnkU3&v=Idc9qs zo;jQa0m>p3 zU4^Q6ev))WHzZ_p)N(^YUBkKbBCoRKe;J=g_~9)~>(DxBLvP7 zO{EqXIW;2cWWD?#G;k5Pic>^KFyJNdhuy7Pc@C20MA*Z>_j>;ccwG_*?EWYCyPZpD zzGe0QDFQNxe1gBD4*^0U11E/ or mesh// or tag: strings. When set, the link will only show up for the specified devices, device groups or device tag. + filter: [] + myServer: + # - Allows administrators to backup the server from the My Server tab. This option can only enabled when the NeDB database is in use. For other databases, this option disabled and the setting is ignored. + Backup: true + # - Allows administrators to restore the server from the My Server tab. This option can only enabled when the NeDB database is in use. For other databases, this option disabled and the setting is ignored. + Restore: true + # - Allows administrators to see the server crash log the server from the My Server tab. + ErrorLog: true + # - Allows administrators to access the server console from the My Server tab. + Console: true + # - Allows administrators to access the server trace tab from from the My Server tab. + Trace: true + _passwordRequirements: + # - Minimum number of characters allowed for the account password. + min: null + # - Maximum number of characters allowed for the account password. + max: null + # - Minimum number of upper case characters required in the password. + upper: null + # - Minimum number of lower case characters required in the password. + lower: null + # - Minimum number of numeric characters required in the password. + numeric: null + # - Minimum number of non-alpha-numeric characters required in the password. + nonalpha: null + # - Number of days after which the user is required to change the account password. + reset: null + # - Set to false to disable email 2FA. + email2factor: true + # - Set to false to disable SMS 2FA. + sms2factor: true + # - Set to false to disable push notification 2FA. + push2factor: true + # - Set to false to disable one-time-password 2FA. + otp2factor: true + # - Set to false to disable user messaging 2FA. + msg2factor: true + # - Set to false to disable 2FA backup codes. + backupcode2factor: true + # - Set to false to disable single 2FA warning. + single2factorWarning: true + # - When set to true, prevents any changes to 2FA. + lock2factor: false + # - Requires that all accounts setup 2FA. + force2factor: false + # - IP addresses where 2FA login is skipped, for example: 127.0.0.1,192.168.2.0/24 + skip2factor: null + # - Number of old passwords the server should remember and not allow the user to switch back to. + oldPasswordBan: null + # - Uses WildLeek to block use of the 10000 most commonly used passwords. + banCommonPasswords: true + # - Allows users to create alternative username/passwords for their account. Set to false to disallow all users, or set to a userid array to only all some users. + loginTokens: true + # - Maximum about of time the to wait for a 2FA token on the login page in seconds. + twoFactorTimeout: + # - If true and user account has FIDO key setup, 2FA login screen will automatically request FIDO 2FA. + autofido2fa: false + # - Maximum number of FIDO/YubikeyOTP hardware 2FA keys that can be setup in a user account. + maxfidokeys: null + # - If set to false, the account reset option on the login screen will not be available to users. + allowaccountreset: true + # - Number of days that a user is allowed to remember this device for when completing 2FA. Set this to 0 to remove this option. + _twoFactorCookieDurationDays: 30 + # - Type of user authentication to use, this can be SSPI on Windows or LDAP. If not set, username/password is used. Options: null | sspi | ldap + _auth: null + # - The LDAP value to use as a user's unique account identifier. Use "ldapUserKey" or "ldapUserBinaryKey". + _ldapUserKey: null + # - The LDAP value to use as a user's unique account identifier, when specified in this field, the values will be HEX converted. + _ldapUserBinaryKey: objectSid + # - The LDAP value to use for the user name, you can also compose the name by setting this value to, for example: "{{{givenName}}} {{{sn}}}" + _ldapUserName: displayName + # - The LDAP value to use for the user's email address. + _ldapUserEmail: mail + # - The LDAP value to use for the user's real name, you can also compose the name by setting this value to, for example: "{{{givenName}}} {{{sn}}}" + _ldapUserRealName: name + # - The LDAP value to use for the user's phone number. + _ldapUserPhoneNumber: telephoneNumber + # - The LDAP value to use for the user's image. + _ldapUserImage: thumbnailPhoto + # - When set to a filename, for example /opt/meshcentral/meshcentral-data/ldapusers.txt, MeshCentral will save the LDAP user object to this file each time a user logs in. This is used for debugging LDAP issues. + _ldapSaveUserToFile: null + # - The LDAP value to use for the user's group memberships. + _ldapUserGroups: memberOf + # - When set to true or set to an object, MeshCentral will synchronize LDAP user memberships to MeshCentral user groups. + _ldapSyncWithUserGroups: + # - When set to a string or array of strings, only LDAP membership groups that includes one of the strings will be synchronized with MeshCentral user groups. + filter: [] + # - A list of LDAP groups. Users must be part of at least one of these groups to allow login. If null, all users are allowed to login. + _ldapUserRequiredGroupMembership: [] + # - LDAP options passed to ldapauth-fork + _ldapOptions: + URL: "ldap://1.2.3.4:389" + BindDN: "CN=svc_meshcentral,CN=Users,DC=meshcentral,DC=local" + BindCredentials: "Password.1" + SearchBase: "DC=meshcentral,DC=local" + SearchFilter: "(sAMAccountName={{username}})" + # - Enabled a feature where you can set one or more invitation codes in a device group. You can then give a invitation link to users who can use it to download the agent. + _agentInviteCodes: false + # - When enabled, all newly installed MeshAgents will be instructed to no use a HTTP/HTTPS proxy even if one is configured on the remote system + _agentNoProxy: false + # - This section is used to indicate if parts of the meshagent.tag file should be used to set server-side device properties. + _agentTag: + # - Action taken if one of the lines in meshagent.tag contains ~ServerName:name. 0=Ignore, 1=Set. + ServerName: 0 + # - Action taken if one of the lines in meshagent.tag contains ~ServerDesc:desc. 0=Ignore, 1=Set, 2=SetIfEmpty. + ServerDesc: 0 + # - Action taken if one of the lines in meshagent.tag contains ~ServerTags:tag1,tag2,tag3. 0=Ignore, 1=Set, 2=SetIfEmpty, 3=Append. + ServerTags: 0 + # - Enables the geo-location feature and device location map in the user interface, this feature is not being worked on. + geoLocation: true + # - When enabled, activates the built-in web-based VNC client. + novnc: true + # - When enabled, activates the built-in web-based RDP client. + mstsc: true + # - When enabled, activates the built-in web-based SSH client. + ssh: true + # - Path where to find custom email templates for this domain. + _webEmailsPath: null + _customUI: null + # - This section is used to customize user consent prompts, these show up when asking if a remote session is allowed or not. + _consentMessages: + Title: null + Desktop: null + Terminal: null + Files: null + # - How long in seconds to show the user consent dialog box. + consentTimeout: 30 + # - If true, user consent is accepted after the timeout. + autoAcceptOnTimeout: false + # - This section is user to customize user notifications when a remote desktop, terminal or file session is connected to a remote system. + _notificationMessages: + Title: null + Desktop: null + Terminal: null + Files: null + # - Use this section to customize the agent branding. + _agentCustomization: + # - The name of the agent as displayed to the user. + displayName: MeshCentral Agent + # - The description of the agent as displayed to the user. + description: Mesh Agent Background Service + # - This will be used as the path to install the agent, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's. + companyName: Mesh Agent + # - The name of the background service, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's but should be set to an all lower case, no space string. + serviceName: Mesh Agent + # - Text string to show in the agent installation dialog box. + installText: null + # - The filename of a image file in .png format located in meshcentral-data to display in the MeshCentral Agent installation dialog, image should be square and from 64x64 to 200x200. + image: null + # - The agent filename. + fileName: meshagent + # - Foreground text color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF. + foregroundColor: null + # - Background color, valid values are RBG in format 0,0,0 to 255,255,255 or format #000000 to #FFFFFF. + backgroundColor: null + # - Use this section to set resource metadata of the Windows agents prior to signing. In Windows, you can right-click and select properties to view these values. + _agentFileInfo: + # - Sets the agent icon, this is the name of a .ico file with the file placed in the meshcentral-data folder. + icon: null + # - Executable file description. + fileDescription: null + # - Executable file version, in the form of 'n.n.n.n', for example: '1.2.3.4'. + fileVersion: null + # - Executable internal name. + internalName: null + # - Executable legal copyright. + legalCopyright: null + # - Executable original file name. + originalFilename: null + # - Executable product name. + productName: null + # - Executable product version. Any string format will work, but a alphabetic character is required for this value to show correctly in the Windows property box. For example: 'v1.2.3.4' will work, but '1.2.3.4' will not. + productVersion: null + # - Use this section to customize the MeshCentral Assistant. + _assistantCustomization: + # - Name to show as MeshCentral Assistant dialog title. + title: MeshCentral Assistant + # - The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Assistant, image should be square and from 64x64 to 128x128. + image: null + # - The MeshCentral Assistant filename. + fileName: meshagent + # - Use this section to customize the MeshCentral Agent for Android. + _androidCustomization: + # - Displayed on top of the MeshCentral Agent for Android. + title: MeshCentral Agent + # - Subtitle displayed until the title on the toolbar. + subtitle: null + # - The filename of a image file in .png format located in meshcentral-data to display in MeshCentral Agent for Android, image should be square and from 64x64 to 128x128. + image: null + # - If set, a user from a banned IP address will be redirected to this URL." + _ipBlockedUserRedirect: null + # - When set, requires that a browser request have set HTTP header to allow user login. Example: '{ "Sec-Fetch-Dest": "iframe" }' + _userRequiredHttpHeader: null + # - When set, only users from allowed IP address ranges can connect to the server. Example: "192.168.2.100,192.168.1.0/24" + _userAllowedIP: null + # - When set, users from these denied IP address ranges will not be able to connect to the server. Example: "192.168.2.100,192.168.1.0/24" + _userBlockedIP: null + # - When set, only agents from allowed IP address ranges can connect to the server. Example: "192.168.2.100,192.168.1.0/24" + _agentAllowedIP: null + # - When set, agents from these denied IP address ranges will not be able to connect to the server. Example: "192.168.2.100,192.168.1.0/24" + _agentBlockedIP: null + # - When set, idle users will be disconnected after a set amounts of minutes. + _userSessionIdleTimeout: null + # - Use this section to require user consent for this domain. + _userConsentFlags: + # - Enable desktop notification for this domain. + desktopnotify: false + # - Enable terminal notification for this domain. + terminalnotify: false + # - Enable files notification for this domain. + filenotify: false + # - Enable desktop prompt for this domain. + desktopprompt: false + # - Enable terminal user prompt for this domain. + terminalprompt: false + # - Enable files prompt for this domain. + fileprompt: false + # - Enable remote desktop privacy bar for this domain. + desktopprivacybar: false + # - When users navigate thru the web interface, the URL on top will change to point to the current screen. This allows a user to refresh or bookmark the URL and come back to the correct screen. Setting false here will disable this feature. + _urlSwitching: true + # - This is the text that will be shown in the remote desktop privacy bar. You can use {0} to display the account realname or {1} to display the account identifier in the string. + _desktopPrivacyBarText: null + _limits: + # - Maximum number of devices in this domain. + MaxDevices: null + # - Maximum number of devices in this domain. + MaxUserAccounts: null + # - Maximum number of user sessions that can connect to this server for this domain. + MaxUserSessions: null + # - Maximum number of agents that can connect to this server for this domain. + MaxAgentSessions: null + # - Maximum number of sessions a single user can have. Each time a user opens a new browser tab or opens a new browser on a different computer, a new user session is created. + MaxSingleUserSessions: null + # - Values that affect the files feature + _files: + # - When false, removes the 'SFTP Connect' button from the files tab unless this is the only possible option. + sftpConnect: true + # - Values that affect the terminal feature + _terminal: + # - When false, removes the 'SSH Connect' button from the terminal tab unless this is the only possible option. + sshConnect: true + # - Indicate what terminal options are available when the user clicks the right mouse button on the terminal connect button. Options: any | root | user | login + linuxShell: any + # - Indicate what string the agent must write to the shell after starting a terminal session + launchCommand: + # - String to write after opening a Linux terminal. + linux: alias ls=\\'ls --color=auto\\';clear\\n + # - String to write after opening a macOS terminal. + darwin: null + # - String to write after opening a FreeBSD terminal. + freebsd: null + # - Values that affect the desktop feature" + _desktop: + # - When set to true, the remote desktop feature is view only. + viewonly: false + # - List of local network Intel AMT scanning options offered in the user interface. For example ["LabNetwork 192.168.15.0/23", "SalesNetwork 192.168.8.0/24"]. + _amtScanOptions: + - Network 192.168.1.0/24 + # - Information passed to the AMT manager module that impacts all Intel AMT device managed within this domain. + _amtManager: + # - When set to false, MeshCentral will use TLS to connect to Intel AMT, this is not recommended. + TlsConnections: true + # - When set to false, MeshCentral will not attempt a TLS ACM activation on Intel AMT v14+ + TlsAcmActivation: false + # - List of username and passwords to try when connecting to Intel AMT. + AdminAccounts: + # - Intel AMT administrator username. + - user: admin + # - Intel AMT administrator password. + pass: null + # - List of up to 4 domain suffixes to configure in Intel AMT when activating CIRA. + EnvironmentDetection: [] + # - Specifies a certificate and private key to use to issue Intel AMT TLS certificates. By default the MeshCentral self-signed root certificate is used. + TlsRootCert: + # - Name of the certificate file that is in .p12 or .pfx format in meshcentral-data, use this with certpfxpass. + certpfx: null + # - Password for the file specified in certpfx. + certpfxpass: null + # - Name of the certificate file in PEM format located in meshcentral-data. Using this with keyfile. + certfile: null + # - Name of the private key file in PEM format located in meshcentral-data. Using this with certfile. + keyfile: null + # - List of WIFI profiles to setup in any managed Intel AMT device with a WIFI network interface. + WifiProfiles: + # - WIFI profile name, if not specified the SSID is used. + name: null + # - SSID of the WIFI station. + ssid: null + # - WIFI authentication. Options: wpa-psk | wpa2-psk | wpa-8021x | wpa2-802.1x | wpa3-sae-802.1x | wpa3-owe-802.1x + authentication: wpa2-psk + # - WIFI encryption. Options: ccmp-aes | tkip-rc4 + encryption: ccmp-aes + # - Password on the WIFI station + password: null + # - 802.1x settings for this WIFI profile. Only required if the WIFI authentication type has 802.1x + _802.1x: + # - Identifies the authentication protocol used to authenticate the access requestor to the AAA server. Options: EAP-TLS | EAP-TTLS/MSCHAPv2 | PEAPv0/EAP-MSCHAPv2 | PEAPv1/EAP-GTC | EAP-FAST/MSCHAPv2 | EAP-FAST/GTC | EAP-MD5 | EAP-PSK | EAP-SIM | EAP-AKA | EAP-FAST/TLS | 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 + authenticationProtocol: null + # - Determines the comparison algorithm used between the ServerCertificateName value and the subject name field of the certificate presented by the AAA server. Options: Fullname | DomainSuffix | 2 | 3 + serverCertificateNameComparison: FullName + # - The name compared against the subject name field in the certificate provided by the AAA server. + serverCertificateName: null + # - Indicates the activity setting of the 802.1X module in H0 state + availableInS0: true + # - A credential used by the supplicant and AAA server to establish a mutually authenticated encrypted tunnel for confidential user authentication. + protectedAccessCredentialHex: null + # - Optional password to extract the PAC (Protected Access Credential) information from the PAC data. + pacPassword: null + # - The domain within which Username is unique. + domain: null + # - Within the domain specified by Domain, Identifies the user that is requesting access to the network. + username: null + # - The password associated with the user identified by Username and Domain. + password: null + # - A string presented to the authentication server in 802.1x protocol exchange + roamingIdentity: null + # - Timeout in seconds, in which the Intel(R) AMT will hold an authenticated 802.1X session. + pxeTimeoutInSeconds: 120 + # - 802.1x settings for the Intel AMT Wired interface. If set to false, any existing 802.1x wired profile will be removed from Intel AMT. + _802.1x: + # - Identifies the authentication protocol used to authenticate the access requestor to the AAA server. Options: EAP-TLS | EAP-TTLS/MSCHAPv2 | PEAPv0/EAP-MSCHAPv2 | PEAPv1/EAP-GTC | EAP-FAST/MSCHAPv2 | EAP-FAST/GTC | EAP-MD5 | EAP-PSK | EAP-SIM | EAP-AKA | EAP-FAST/TLS | 0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 + authenticationProtocol: null + # - Determines the comparison algorithm used between the ServerCertificateName value and the subject name field of the certificate presented by the AAA server. Options: Fullname | DomainSuffix | 2 | 3 + serverCertificateNameComparison: FullName + # - The name compared against the subject name field in the certificate provided by the AAA server. + serverCertificateName: null + # - Indicates the activity setting of the 802.1X module in H0 state + availableInS0: true + # - A credential used by the supplicant and AAA server to establish a mutually authenticated encrypted tunnel for confidential user authentication. + protectedAccessCredentialHex: null + # - Optional password to extract the PAC (Protected Access Credential) information from the PAC data. + pacPassword: null + # - The domain within which Username is unique. + domain: null + # - Within the domain specified by Domain, Identifies the user that is requesting access to the network. + username: null + # - The password associated with the user identified by Username and Domain. + password: null + # - A string presented to the authentication server in 802.1x protocol exchange + roamingIdentity: null + # - Timeout in seconds, in which the Intel(R) AMT will hold an authenticated 802.1X session. + pxeTimeoutInSeconds: 120 + _amtAcmActivation: + log: null + # - When set to true, the certificate common name needs to match exactly the Intel AMT trusted FQDN or DHCP Option 15. If false, some flexibility may be given to the matching. + strictCommonName: false + certs: + certfiles: null + keyfile: null + # - This is used to create HTTP redirections. For example setting "redirects": { "example": "https://example.com" } will make it so that anyone accessing /example on the server will get redirected to the specified URL. + _redirects: + example: https://example.com + example1: https://example1.com + _yubikey: + id: null + secret: null + proxy: null + _httpHeaders: null + # - Key and values to add to the MeshAgent .msh file + agentConfig: + # - Needed if you use traefik https://github.com/traefik/traefik/issues/4487 + - webSocketMaskOverride=1 + # - Key and values to add to the MeshCentral Assistant .msh file + _assistantConfig: [] + # - When false, users can't set the clipboard of a remove device. + clipboardGet: true + # - When false, users can't get the clipboard of a remove device. + clipboardSet: true + # - When false, removes the local recording feature on remote desktop. + localSessionRecording: true + _sessionRecording: + # - When enabled, only device users with the session recording feature turned on will be recorded. When false, all users are recorded. + onlySelectedUsers: false + # - When enabled, only device user groups with the session recording feature turned on will be recorded. When false, all users are recorded. + onlySelectedUserGroups: false + # - When enabled, only device groups with the session recording feature turned on will be recorded. When false, all devices are recorded. + onlySelectedDeviceGroups: false + # - The file path where recording files are kept. + filepath: null + # - If true, automatically index remote desktop recordings so that the plays can skip to any place in the file. + index: false + # - Maximum number of recording files to keep. + maxRecordings: null + # - Maximum number of days to keep a recording. + maxRecordingDays: null + # - Maximum number of recordings in megabytes. Once exceed, remove the oldest recordings. + maxRecordingSizeMegabytes: null + # - This is an array: 1 = Terminal, 2 = Desktop, 5 = Files, 100 = Intel AMT WSMAN, 101 = Intel AMT Redirection, 200 = Messenger + _protocols: + - 1 + - 5 + # - When set to false, hides the username and password prompt on login screen. + _showPasswordLogin: true + # - Connects MeshCentral to the SendGrid email server, allows MeshCentral to send email messages for 2FA or user notification. + _sendgrid: + # - Email address used in the messages from field. + from: null + # - The SendGrid API key. + apiKey: null + # - When set to false, the email format and DNS MX record are not checked. + verifyemail: true + # - Connects MeshCentral to a SMTP email server, allows MeshCentral to send email messages for 2FA or user notification. + _smtp: + # - Optional hostname of the client, this defaults to the hostname of the machine. This is useful for SMTP relays. + name: null + # - Hostname of the SMTP server. + host: null + # - SMTP server port number. + port: null + # - Email address used in the messages from field. + from: null + tls: true + _auth: + clientId: null + clientSecret: null + refreshToken: null + tlscertcheck: true + tlsstrict: true + # - When set to false, the email format and DNS MX record are not checked + verifyemail: true + # - Makes MeshCentral send emails using the Unix sendmail command. Allows MeshCentral to send email messages for 2FA or user notification. + _sendmail: + # - Possible values are unix or windows + newline: unix + # - Path to the sendmail command + path: sendmail + # - Array or arguments to pass to sendmail + _args: [] + _authStrategies: + _twitter: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + clientid: null + clientsecret: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _google: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + clientid: null + clientsecret: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _github: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + clientid: null + clientsecret: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _reddit: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + clientid: null + clientsecret: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _azure: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + clientid: null + clientsecret: null + tenantid: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _jumpcloud: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + newAccounts: false + newAccountsUserGroups: [] + entityid: null + idpurl: null + cert: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _saml: + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + disableRequestedAuthnContext: false + newAccounts: false + newAccountsUserGroups: [] + newAccountsRights: [] + entityid: null + idpurl: null + cert: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + _oidc: + # - If set, this will be used as the authorization URL. (If set tokenURL and userInfoURL need set also) + authorizationURL: null + # - Required, this is the URL that your SSO provider sends auth approval to. + callbackurl: null + clientid: null + clientsecret: null + # - Full URL of SSO portal + issuer: null + # - If set, this will be used as the token URL. (If set authorizationURL and userInfoURL need set also) + tokenURL: null + # - If set, this will be used as the user info URL. (If set authorizationURL and tokenURL need set also) + userInfoURL: null + # - Then set, the user will be redirected to this URL when hitting the logout link + logouturl: null + newAccounts: true + groups: + # - When set, the user must be part of one of the OIDC user groups to login to MeshCentral. + required: [] + # - When set, users part of these groups will be promoted with site administrator in MeshCentral, users that are not part of these groups will be demoted. + siteadmin: [] + sync: + enabled: false + # - When set, limits what OIDC groups are mirrored into MeshCentral user groups. + filter: [] +service: + main: + ports: + main: + # Only use HTTPS if meshcental handles the certs + protocol: http + port: 10205 + # mps: + # enabled: true + # ports: + # mps: + # enabled: true + # port: 4433 + # targetPort: 4433 + # amtprovisioner: + # enabled: true + # ports: + # amtprovisioner: + # enabled: true + # port: 9971 + # targetPort: 9971 +cnpg: + main: + enabled: true + username: meshcentral + database: meshcentral +persistence: + data: + enabled: true + mountPath: /opt/meshcentral/meshcentral-data + size: 256Gi + files: + enabled: true + mountPath: /opt/meshcentral/meshcentral-files + size: 256Gi + web: + enabled: true + mountPath: /opt/meshcentral/meshcentral-web + size: 256Gi + backups: + enabled: true + mountPath: /opt/meshcentral/meshcentral-backup + size: 256Gi + configfile: + enabled: true + type: secret + readOnly: true + defaultMode: "0600" + objectName: mesh-secret + mountPath: /opt/meshcentral/meshcentral-data/config.json + subPath: config.json +portal: + open: + enabled: true diff --git a/stable/meshcentral/14.1.7/questions.yaml b/stable/meshcentral/14.1.7/questions.yaml new file mode 100644 index 0000000000..dfbe911baa --- /dev/null +++ b/stable/meshcentral/14.1.7/questions.yaml @@ -0,0 +1,4721 @@ +groups: + - name: Container Image + description: Image to be used for container + - name: General Settings + description: General Deployment Settings + - name: Workload Settings + description: Workload Settings + - name: App Configuration + description: App Specific Config Options + - name: Networking and Services + description: Configure Network and Services for Container + - name: Storage and Persistence + description: Persist and Share Data that is Separate from the Container + - name: Ingress + description: Ingress Configuration + - name: Security and Permissions + description: Configure Security Context and Permissions + - name: Resources and Devices + description: "Specify Resources/Devices to be Allocated to Workload" + - name: Middlewares + description: Traefik Middlewares + - name: Metrics + description: Metrics + - name: Addons + description: Addon Configuration + - name: Advanced + description: Advanced Configuration + - name: Postgresql + description: Postgresql + - name: Documentation + description: Documentation +portals: + open: + protocols: + - "$kubernetes-resource_configmap_tcportal-open_protocol" + host: + - "$kubernetes-resource_configmap_tcportal-open_host" + ports: + - "$kubernetes-resource_configmap_tcportal-open_port" +questions: + - variable: global + group: General Settings + label: "Global Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: stopAll + label: Stop All + description: "Stops All Running pods and hibernates cnpg" + schema: + type: boolean + default: false + - variable: workload + group: "Workload Settings" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type (Advanced) + schema: + type: string + default: Deployment + enum: + - value: Deployment + description: Deployment + - value: DaemonSet + description: DaemonSet + - variable: replicas + label: Replicas (Advanced) + description: Set the number of Replicas + schema: + type: int + show_if: [["type", "!=", "DaemonSet"]] + default: 1 + - variable: podSpec + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: containers + label: Containers + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: Main Container + schema: + additional_attrs: true + type: dict + attrs: + - variable: envList + label: Extra Environment Variables + description: "Please be aware that some variables are set in the background, adding duplicates here might cause issues or prevent the app from starting..." + schema: + type: list + default: [] + items: + - variable: envItem + label: Environment Variable + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + schema: + type: string + - variable: value + label: Value + schema: + type: string + - variable: extraArgs + label: Extra Args + schema: + type: list + default: [] + items: + - variable: arg + label: Arg + schema: + type: string + - variable: advanced + label: Show Advanced Settings + description: Advanced settings are not covered by TrueCharts Support + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: command + label: Command + schema: + type: list + default: [] + items: + - variable: param + label: Param + schema: + type: string + - variable: meshcentral + group: App Configuration + label: MeshCentral Configuration + schema: + additional_attrs: true + type: dict + attrs: + - variable: settings + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: aliasPort + label: aliasPort + description: The actual main port as seen externally on the Internet, this setting is often used when a reverse-proxy is used. + schema: + type: int + required: true + default: 443 + - variable: cert + label: cert + description: Set this to the primary DNS name of this MeshCentral server. + schema: + type: string + required: true + default: "" + - variable: tlsOffload + label: tlsOffload + description: When true, indicates that a TLS offloader is in front of the MeshCentral server. More typically, set this to the IP address of the reverse proxy or TLS offloader so that IP forwarding headers will be trusted. For example 172.16.0.0/16 + schema: + type: string + default: "172.16.0.0/16" + - variable: trustedProxy + label: trustedProxy + description: Trust forwarded headers from these IPs or domains. Providing the magic string "CloudFlare" will cause the server to download the IP address list of trusted CloudFlare proxies directly from CloudFlare on each server start. For example 172.16.0.0/16. This should be left empty if traefik is used. + schema: + type: string + default: "" + - variable: WANonly + label: WANonly + description: When enabled, only MeshCentral WAN features are enabled and agents will connect to the server using a well known DNS name. + schema: + type: boolean + default: false + - variable: LANonly + label: LANonly + description: When enabled, only MeshCentral LAN features are enabled and agents will find the server using multicast LAN packets. + schema: + type: boolean + default: false + - variable: webRTC + label: webRTC + description: When enabled, allows use of WebRTC to allow direct network traffic between the agent and browser. + schema: + type: boolean + default: false + - variable: compression + label: compression + description: Enables GZIP compression for web requests. + schema: + type: boolean + default: true + - variable: wsCompression + label: wsCompression + description: Enables server-side, websocket per-message deflate compression. + schema: + type: boolean + default: true + - variable: agentWsCompression + label: agentWsCompression + description: Enables agent-side, websocket per-message deflate compression. wscompression must also be true for this to work. + schema: + type: boolean + default: true + - variable: allowFraming + label: allowFraming + description: When enabled, the MeshCentral web site can be embedded within another website's iframe. + schema: + type: boolean + default: false + - variable: newAccounts + label: newAccounts + description: When set to true, allow new user accounts to be created from the login page. + schema: + type: boolean + default: false + - variable: allowHighQualityDesktop + label: allowHighQualityDesktop + description: When false, users will only be able to set remote desktop image quality to 60%, this can reduce server bandwidth usage. + schema: + type: boolean + default: true + - variable: agentLogDump + label: agentLogDump + description: Automatically downloads all agent error logs into meshcentral-data/agenterrorlogs.txt. + schema: + type: boolean + default: false + - variable: agentCoreDump + label: agentCoreDump + description: Automatically activates and transfers any agent crash dump files to the server in meshcentral-data/coredumps. + schema: + type: boolean + default: false + - variable: browserPing + label: browserPing + description: When specified, sends data to the browser at x seconds interval and expects a response from the browser. + schema: + type: int + required: true + default: -99 + - variable: browserPong + label: browserPong + description: When specified, sends data to the browser at x seconds interval. + schema: + type: int + required: true + default: -99 + - variable: agentPing + label: agentPing + description: When specified, sends data to the agent at x seconds interval and expects a response from the agent. + schema: + type: int + required: true + default: -99 + - variable: agentPong + label: agentPong + description: When specified, sends data to the agent at x seconds interval. + schema: + type: int + required: true + default: -99 + - variable: agentIdleTimeout + label: agentIdleTimeout + description: How much time in seconds with no traffic from an agent before dropping the agent connection. + schema: + type: int + required: true + default: -99 + - variable: maxInvalidLogin + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: time + label: time + description: Time in minutes over which the a maximum number of invalid login attempts is allowed from an IP address. + schema: + type: int + required: true + default: 10 + - variable: count + label: count + description: Maximum number of invalid login attempts from an IP address in the time period. + schema: + type: int + required: true + default: 10 + - variable: coolofftime + label: coolofftime + description: Additional time in minute that login attempts will be denied once the invalid login limit is reached. + schema: + type: int + required: true + default: 30 + - variable: exclude + label: exclude + description: Ranges of IP addresses that are not subject to invalid login limitations. For example 192.168.1.0/24,172.16.0.1 + schema: + type: string + default: "" + - variable: maxInvalid2fa + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: time + label: time + description: Time in minutes over which the a maximum number of invalid 2FA attempts is allowed from an IP address. + schema: + type: int + required: true + default: 10 + - variable: count + label: count + description: Maximum number of invalid 2FA attempts from an IP address in the time period. + schema: + type: int + required: true + default: 10 + - variable: coolofftime + label: coolofftime + description: Additional time in minute that 2FA attempts will be denied once the invalid login limit is reached. + schema: + type: int + required: true + default: 30 + - variable: exclude + label: exclude + description: Ranges of IP addresses that are not subject to invalid 2FA limitations. For example 192.168.1.0/24,172.16.0.1 + schema: + type: string + default: "" + - variable: autobackup + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: backupIntervalHours + label: backupIntervalHours + schema: + type: int + required: true + default: 24 + - variable: keepLastDaysBackup + label: keepLastDaysBackup + schema: + type: int + required: true + default: 10 + - variable: zipPassword + label: zipPassword + description: Leave empty for no password + schema: + type: string + private: true + default: "" + - variable: _setupWebDav + label: Backup to Web DAV + description: Enabled automated upload of the server backups to a WebDAV account. + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: webdav + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: url + label: url + description: WebDAV account URL. + schema: + type: string + default: "" + - variable: username + label: username + description: WebDAV account username. + schema: + type: string + default: "" + - variable: password + label: password + description: WebDAV account password. + schema: + type: string + private: true + default: "" + - variable: folderName + label: folderName + description: The name of the folder to create in the WebDAV account. + schema: + type: string + default: MeshCentral-Backups + - variable: maxFiles + label: maxFiles + description: The maximum number of files to keep in the WebDAV folder, older files will be removed if needed. + schema: + type: int + default: 10 + - variable: relayDNS + label: relayDNS + description: When set, relayPort value is ignored. Set this to a DNS name the points to this server. When the server is accessed using the DNS name, the main web server port is used as a web relay port. + schema: + type: list + default: [] + items: + - variable: relayDNSEntry + label: relayDNS Entry + schema: + type: string + required: true + default: "" + - variable: plugins + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + - variable: _setupMessaging + label: Setup Messaging + description: This section allow MeshCentral to send messages over user messaging networks like Discord + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: messaging + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: _setupTelegram + label: Setup Telegram + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: telegram + label: telegram + description: Configure Telegram messaging system + schema: + additional_attrs: true + type: dict + attrs: + - variable: apiid + label: apiid + schema: + type: string + default: "" + - variable: apihash + label: apihash + schema: + type: string + default: "" + - variable: session + label: session + schema: + type: string + default: "" + - variable: _setupDiscord + label: Setup Discord + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: discord + label: discord + description: Configure Discord messaging system + schema: + additional_attrs: true + type: dict + attrs: + - variable: serverurl + label: serverurl + schema: + type: string + default: "" + - variable: token + label: token + schema: + type: string + default: "" + - variable: _setupXMPP + label: Setup XMPP + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: xmpp + label: xmpp + description: Configure XMPP messaging system + schema: + additional_attrs: true + type: dict + attrs: + - variable: service + label: service + schema: + type: string + default: "" + - variable: credentials + label: credentials + schema: + additional_attrs: true + type: dict + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + private: true + default: "" + - variable: domains + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: tcdefaultdomain + label: 'Section <"">' + schema: + additional_attrs: true + type: dict + attrs: + - variable: certUrl + label: certUrl + description: HTTPS URL when to get the TLS certificate that MeshAgent's will see when connecting to this server. This setting is used when a reverse proxy like Traefik is used in front of MeshCentral. + schema: + type: string + required: true + default: "" + - variable: title + label: title + description: The title of this web site. All web pages will have this title. + schema: + type: string + required: true + default: MeshCentral + - variable: title2 + label: title2 + description: Secondary title text that is placed on the upper right on the title on many web pages. + schema: + type: string + required: true + default: TrueCharts + - variable: welcomeText + label: welcomeText + description: Text that will be shown on the login screen. + schema: + type: string + required: true + default: Welcome to TrueCharts MeshCentral + - variable: minify + label: minify + description: When enabled, the server will send reduced sized web pages. + schema: + type: boolean + default: true + - variable: localSessionRecording + label: localSessionRecording + description: When false, removes the local recording feature on remote desktop. + schema: + type: boolean + default: true + - variable: mstsc + label: mstsc + description: When enabled, activates the built-in web-based RDP client. + schema: + type: boolean + default: true + - variable: ssh + label: ssh + description: When enabled, activates the built-in web-based SSH client. + schema: + type: boolean + default: true + - variable: novnc + label: novnc + description: When enabled, activates the built-in web-based VNC client. + schema: + type: boolean + default: true + - variable: geoLocation + label: geoLocation + description: Enables the geo-location feature and device location map in the user interface, this feature is not being worked on. + schema: + type: boolean + default: true + - variable: nightMode + label: nightMode + description: 0 = User selects day/night mode, 1 = Always night mode, 2 = Always day mode + schema: + type: int + min: 0 + max: 2 + requited: true + default: 0 + - variable: siteStyle + label: siteStyle + description: Valid numbers are 1 and 2, changes the style of the login page and some secondary pages. + schema: + type: int + min: 1 + max: 2 + requited: true + default: 2 + - variable: deviceMeshRouterLinks + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: rdp + label: rdp + description: Display a RDP link in the device tab when supported + schema: + type: boolean + default: true + - variable: ssh + label: ssh + description: Display a SSH link in the device tab when supported + schema: + type: boolean + default: true + - variable: scp + label: scp + description: Display a SCP link in the device tab when supported + schema: + type: boolean + default: true + - variable: _setupAgentCustomization + label: Setup Agent Customization + description: Use this section to customize the agent branding. + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: agentCustomization + label: Section + schema: + additional_attrs: true + type: dict + attrs: + - variable: displayName + label: displayName + description: The name of the agent as displayed to the user. + schema: + type: string + default: MeshCentral Agent + - variable: description + label: description + description: The description of the agent as displayed to the user. + schema: + type: string + default: Mesh Agent Background Service + - variable: companyName + label: companyName + description: This will be used as the path to install the agent, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's. + schema: + type: string + default: Mesh Agent + - variable: serviceName + label: serviceName + description: The name of the background service, by default this is 'Mesh Agent' in Windows and 'meshagent' in other OS's but should be set to an all lower case, no space string. + schema: + type: string + default: Mesh Agent + - variable: installText + label: installText + description: Text string to show in the agent installation dialog box. + schema: + type: string + default: "" + - variable: image + label: image + description: The filename of a image file in .png format located in meshcentral-data to display in the MeshCentral Agent installation dialog, image should be square and from 64x64 to 200x200. + schema: + type: string + default: "" + - variable: fileName + label: fileName + description: The agent filename. + schema: + type: string + default: meshagent + - variable: foregroundColor + label: foregroundColor + description: 'Foreground text color, valid values are RBG in format 0,0,0 to 255,255,255 or format "#000000" to "#FFFFFF".' + schema: + type: string + default: "" + - variable: backgroundColor + label: backgroundColor + description: 'Background color, valid values are RBG in format 0,0,0 to 255,255,255 or format "#000000" to "#FFFFFF".' + schema: + type: string + default: "" + - variable: additional_meshcentral + group: App Configuration + label: Additional MeshCentral Configuration + schema: + type: list + default: [] + items: + - variable: entry + label: Key - Value Pair + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + required: true + default: "" + - variable: value + label: Value + schema: + type: string + required: true + default: "" + - variable: TZ + label: Timezone + group: "General Settings" + schema: + type: string + default: "Etc/UTC" + $ref: + - "definitions/timezone" + - variable: podOptions + group: "General Settings" + label: "Global Pod Options (Advanced)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: expertPodOpts + label: "Expert - Pod Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + label: "Host Networking" + schema: + type: boolean + default: false + - variable: dnsConfig + label: "DNS Configuration" + schema: + type: dict + additional_attrs: true + attrs: + - variable: options + label: "Options" + schema: + type: list + default: [{"name": "ndots", "value": "1"}] + items: + - variable: optionsEntry + label: "Option Entry" + schema: + type: dict + additional_attrs: true + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + - variable: nameservers + label: "Nameservers" + schema: + type: list + default: [] + items: + - variable: nsEntry + label: "Nameserver Entry" + schema: + type: string + required: true + - variable: searches + label: "Searches" + schema: + type: list + default: [] + items: + - variable: searchEntry + label: "Search Entry" + schema: + type: string + required: true + + - variable: imagePullSecretList + group: "General Settings" + label: "Image Pull Secrets" + schema: + type: list + default: [] + items: + - variable: pullsecretentry + label: "Pull Secret" + schema: + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: Enabled + schema: + type: boolean + default: true + - variable: data + label: Data + schema: + type: dict + additional_attrs: true + attrs: + - variable: registry + label: "Registry" + schema: + type: string + required: true + default: "https://index.docker.io/v1/" + - variable: username + label: "Username" + schema: + type: string + required: true + default: "" + - variable: password + label: "Password" + schema: + type: string + required: true + private: true + default: "" + - variable: email + label: "Email" + schema: + type: string + required: true + default: "" + - variable: service + group: Networking and Services + label: Configure Service(s) + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable the Service + schema: + type: boolean + default: true + hidden: true + - variable: type + label: Service Type + description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: LoadBalancer + enum: + - value: LoadBalancer + description: LoadBalancer (Expose Ports) + - value: ClusterIP + description: ClusterIP (Do Not Expose Ports) + - variable: loadBalancerIP + label: LoadBalancer IP + description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: ports + label: "Service's Port(s) Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: Main Service Port Configuration + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: Port + description: This port exposes the container port on the service + schema: + type: int + default: 10205 + required: true + - variable: serviceexpert + group: Networking and Services + label: Show Expert Config + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: scaleExternalInterface + description: Add External Interfaces + label: Add external Interfaces + group: Networking + schema: + type: list + items: + - variable: interfaceConfiguration + description: Interface Configuration + label: Interface Configuration + schema: + additional_attrs: true + type: dict + $ref: + - "normalize/interfaceConfiguration" + attrs: + - variable: hostInterface + description: Please Specify Host Interface + label: Host Interface + schema: + type: string + required: true + $ref: + - "definitions/interface" + - variable: ipam + description: Define how IP Address will be managed + label: IP Address Management + schema: + additional_attrs: true + type: dict + required: true + attrs: + - variable: type + description: Specify type for IPAM + label: IPAM Type + schema: + type: string + required: true + enum: + - value: dhcp + description: Use DHCP + - value: static + description: Use Static IP + - variable: staticIPConfigurations + label: Static IP Addresses + schema: + type: list + show_if: [["type", "=", "static"]] + items: + - variable: staticIP + label: Static IP + schema: + type: ipaddr + cidr: true + - variable: staticRoutes + label: Static Routes + schema: + type: list + show_if: [["type", "=", "static"]] + items: + - variable: staticRouteConfiguration + label: Static Route Configuration + schema: + additional_attrs: true + type: dict + attrs: + - variable: destination + label: Destination + schema: + type: ipaddr + cidr: true + required: true + - variable: gateway + label: Gateway + schema: + type: ipaddr + cidr: false + required: true + - variable: serviceList + label: Add Manual Custom Services + group: Networking and Services + schema: + type: list + default: [] + items: + - variable: serviceListEntry + label: Custom Service + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable the service + schema: + type: boolean + default: true + hidden: true + - variable: name + label: Name + schema: + type: string + default: "" + - variable: type + label: Service Type + description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: LoadBalancer + enum: + - value: LoadBalancer + description: LoadBalancer (Expose Ports) + - value: ClusterIP + description: ClusterIP (Do Not Expose Ports) + - value: Simple + description: Deprecated CHANGE THIS + - variable: loadBalancerIP + label: LoadBalancer IP + description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: advancedsvcset + label: Show Advanced Service Settings + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + type: list + default: [] + items: + - variable: externalIP + label: External IP + schema: + type: string + - variable: ipFamilyPolicy + label: IP Family Policy + description: Specify the IP Policy + schema: + type: string + default: SingleStack + enum: + - value: SingleStack + description: SingleStack + - value: PreferDualStack + description: PreferDualStack + - value: RequireDualStack + description: RequireDualStack + - variable: ipFamilies + label: IP Families + description: (Advanced) The IP Families that should be used + schema: + type: list + default: [] + items: + - variable: ipFamily + label: IP Family + schema: + type: string + - variable: portsList + label: Additional Service Ports + schema: + type: list + default: [] + items: + - variable: portsListEntry + label: Custom ports + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable the Port + schema: + type: boolean + default: true + hidden: true + - variable: name + label: Port Name + schema: + type: string + default: "" + - variable: protocol + label: Port Type + schema: + type: string + default: tcp + enum: + - value: http + description: HTTP + - value: https + description: HTTPS + - value: tcp + description: TCP + - value: udp + description: UDP + - variable: targetPort + label: Target Port + description: This port exposes the container port on the service + schema: + type: int + required: true + - variable: port + label: Container Port + schema: + type: int + required: true + - variable: persistence + label: Integrated Persistent Storage + description: Integrated Persistent Storage + group: Storage and Persistence + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: App Data Storage + description: Stores the Application Data. + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type of Storage + description: Sets the persistence type, Anything other than PVC could break rollback! + schema: + type: string + default: pvc + enum: + - value: pvc + description: PVC + - value: hostPath + description: Host Path + - value: emptyDir + description: emptyDir + - value: nfs + description: NFS Share + - value: iscsi + description: iSCSI Share + - variable: server + label: NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: path + label: Path on NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: iscsi + label: iSCSI Options + schema: + show_if: [["type", "=", "iscsi"]] + type: dict + additional_attrs: true + attrs: + - variable: targetPortal + label: targetPortal + schema: + type: string + required: true + default: "" + - variable: iqn + label: iqn + schema: + type: string + required: true + default: "" + - variable: lun + label: lun + schema: + type: int + default: 0 + - variable: authSession + label: authSession + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: authDiscovery + label: authDiscovery + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + + - variable: autoPermissions + label: Automatic Permissions Configuration + description: Automatically set permissions + schema: + show_if: [["type", "!=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: chown + label: Run CHOWN + description: | + It will run CHOWN on the path with the given fsGroup + schema: + type: boolean + default: false + - variable: chmod + label: Run CHMOD + description: | + It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770 + schema: + type: string + valid_chars: '[0-9]{3}' + default: "" + - variable: recursive + label: Recursive + description: | + It will run CHOWN and CHMOD recursively + schema: + type: boolean + default: false + - variable: readOnly + label: Read Only + schema: + type: boolean + default: false + - variable: hostPath + label: Host Path + description: Path inside the container the storage is mounted + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: EmptyDir Medium + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: Default + - value: Memory + description: Memory + - variable: size + label: Size quotum of Storage (Do NOT REDUCE after installation) + description: This value can ONLY be INCREASED after the installation + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: 256Gi + - variable: storageClass + label: 'storageClass (Advanced)' + description: 'sets the storageClass to something other than iX default. Only for advanced usecases!' + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "" + - variable: static + label: 'Static Fixed PVC Bindings (Experimental)' + description: Link a PVC to a specific storage location + schema: + show_if: [["type", "=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: mode + label: mode + description: | + disabled: use normal dynamic PVCs + smb: connect to an SMB share + nfs: connect to an NFS share + schema: + type: string + default: "disabled" + enum: + - value: disabled + description: disabled + - value: smb + description: smb + - value: nfs + description: nfs + - variable: server + label: Server + description: server to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "myserver" + - variable: share + label: Share + description: share to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "/myshare" + - variable: user + label: User + description: connecting user + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "myuser" + - variable: domain + label: Domain + description: user domain + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: password + label: Password + description: connecting password + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: volumeSnapshots + label: 'Volume Snapshots (Experimental)' + description: Add an entry to the list to force creation of a volumeSnapshot of this PVC + schema: + show_if: [["type", "=", "pvc"]] + type: list + default: [] + items: + - variable: volumeSnapshotEntry + label: Custom volumeSnapshot + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + description: 'WARNING: renaming this, means deletion of the snapshot with the old name!' + schema: + type: string + default: "mysnapshot" + required: true + - variable: volumeSnapshotClassName + label: 'volumeSnapshot Class Name (Advanced)' + description: For use with PVCs using a non-default storageClass + schema: + type: string + default: "" + - variable: files + label: Files Storage + description: Stores the Files + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type of Storage + description: Sets the persistence type, Anything other than PVC could break rollback! + schema: + type: string + default: pvc + enum: + - value: pvc + description: PVC + - value: hostPath + description: Host Path + - value: emptyDir + description: emptyDir + - value: nfs + description: NFS Share + - value: iscsi + description: iSCSI Share + - variable: server + label: NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: path + label: Path on NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: iscsi + label: iSCSI Options + schema: + show_if: [["type", "=", "iscsi"]] + type: dict + additional_attrs: true + attrs: + - variable: targetPortal + label: targetPortal + schema: + type: string + required: true + default: "" + - variable: iqn + label: iqn + schema: + type: string + required: true + default: "" + - variable: lun + label: lun + schema: + type: int + default: 0 + - variable: authSession + label: authSession + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: authDiscovery + label: authDiscovery + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + + - variable: autoPermissions + label: Automatic Permissions Configuration + description: Automatically set permissions + schema: + show_if: [["type", "!=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: chown + label: Run CHOWN + description: | + It will run CHOWN on the path with the given fsGroup + schema: + type: boolean + default: false + - variable: chmod + label: Run CHMOD + description: | + It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770 + schema: + type: string + valid_chars: '[0-9]{3}' + default: "" + - variable: recursive + label: Recursive + description: | + It will run CHOWN and CHMOD recursively + schema: + type: boolean + default: false + - variable: readOnly + label: Read Only + schema: + type: boolean + default: false + - variable: hostPath + label: Host Path + description: Path inside the container the storage is mounted + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: EmptyDir Medium + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: Default + - value: Memory + description: Memory + - variable: size + label: Size quotum of Storage (Do NOT REDUCE after installation) + description: This value can ONLY be INCREASED after the installation + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: 256Gi + - variable: storageClass + label: 'storageClass (Advanced)' + description: 'sets the storageClass to something other than iX default. Only for advanced usecases!' + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "" + - variable: static + label: 'Static Fixed PVC Bindings (Experimental)' + description: Link a PVC to a specific storage location + schema: + show_if: [["type", "=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: mode + label: mode + description: | + disabled: use normal dynamic PVCs + smb: connect to an SMB share + nfs: connect to an NFS share + schema: + type: string + default: "disabled" + enum: + - value: disabled + description: disabled + - value: smb + description: smb + - value: nfs + description: nfs + - variable: server + label: Server + description: server to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "myserver" + - variable: share + label: Share + description: share to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "/myshare" + - variable: user + label: User + description: connecting user + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "myuser" + - variable: domain + label: Domain + description: user domain + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: password + label: Password + description: connecting password + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: volumeSnapshots + label: 'Volume Snapshots (Experimental)' + description: Add an entry to the list to force creation of a volumeSnapshot of this PVC + schema: + show_if: [["type", "=", "pvc"]] + type: list + default: [] + items: + - variable: volumeSnapshotEntry + label: Custom volumeSnapshot + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + description: 'WARNING: renaming this, means deletion of the snapshot with the old name!' + schema: + type: string + default: "mysnapshot" + required: true + - variable: volumeSnapshotClassName + label: 'volumeSnapshot Class Name (Advanced)' + description: For use with PVCs using a non-default storageClass + schema: + type: string + default: "" + - variable: web + label: Web Storage + description: Stores the Web Files. Used for web customization + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type of Storage + description: Sets the persistence type, Anything other than PVC could break rollback! + schema: + type: string + default: pvc + enum: + - value: pvc + description: PVC + - value: hostPath + description: Host Path + - value: emptyDir + description: emptyDir + - value: nfs + description: NFS Share + - value: iscsi + description: iSCSI Share + - variable: server + label: NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: path + label: Path on NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: iscsi + label: iSCSI Options + schema: + show_if: [["type", "=", "iscsi"]] + type: dict + additional_attrs: true + attrs: + - variable: targetPortal + label: targetPortal + schema: + type: string + required: true + default: "" + - variable: iqn + label: iqn + schema: + type: string + required: true + default: "" + - variable: lun + label: lun + schema: + type: int + default: 0 + - variable: authSession + label: authSession + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: authDiscovery + label: authDiscovery + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + + - variable: autoPermissions + label: Automatic Permissions Configuration + description: Automatically set permissions + schema: + show_if: [["type", "!=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: chown + label: Run CHOWN + description: | + It will run CHOWN on the path with the given fsGroup + schema: + type: boolean + default: false + - variable: chmod + label: Run CHMOD + description: | + It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770 + schema: + type: string + valid_chars: '[0-9]{3}' + default: "" + - variable: recursive + label: Recursive + description: | + It will run CHOWN and CHMOD recursively + schema: + type: boolean + default: false + - variable: readOnly + label: Read Only + schema: + type: boolean + default: false + - variable: hostPath + label: Host Path + description: Path inside the container the storage is mounted + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: EmptyDir Medium + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: Default + - value: Memory + description: Memory + - variable: size + label: Size quotum of Storage (Do NOT REDUCE after installation) + description: This value can ONLY be INCREASED after the installation + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: 256Gi + - variable: storageClass + label: 'storageClass (Advanced)' + description: 'sets the storageClass to something other than iX default. Only for advanced usecases!' + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "" + - variable: static + label: 'Static Fixed PVC Bindings (Experimental)' + description: Link a PVC to a specific storage location + schema: + show_if: [["type", "=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: mode + label: mode + description: | + disabled: use normal dynamic PVCs + smb: connect to an SMB share + nfs: connect to an NFS share + schema: + type: string + default: "disabled" + enum: + - value: disabled + description: disabled + - value: smb + description: smb + - value: nfs + description: nfs + - variable: server + label: Server + description: server to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "myserver" + - variable: share + label: Share + description: share to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "/myshare" + - variable: user + label: User + description: connecting user + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "myuser" + - variable: domain + label: Domain + description: user domain + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: password + label: Password + description: connecting password + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: volumeSnapshots + label: 'Volume Snapshots (Experimental)' + description: Add an entry to the list to force creation of a volumeSnapshot of this PVC + schema: + show_if: [["type", "=", "pvc"]] + type: list + default: [] + items: + - variable: volumeSnapshotEntry + label: Custom volumeSnapshot + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + description: 'WARNING: renaming this, means deletion of the snapshot with the old name!' + schema: + type: string + default: "mysnapshot" + required: true + - variable: volumeSnapshotClassName + label: 'volumeSnapshot Class Name (Advanced)' + description: For use with PVCs using a non-default storageClass + schema: + type: string + default: "" + - variable: backups + label: Backups Storage + description: Stores the Backups + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type of Storage + description: Sets the persistence type, Anything other than PVC could break rollback! + schema: + type: string + default: pvc + enum: + - value: pvc + description: PVC + - value: hostPath + description: Host Path + - value: emptyDir + description: emptyDir + - value: nfs + description: NFS Share + - value: iscsi + description: iSCSI Share + - variable: server + label: NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: path + label: Path on NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: iscsi + label: iSCSI Options + schema: + show_if: [["type", "=", "iscsi"]] + type: dict + additional_attrs: true + attrs: + - variable: targetPortal + label: targetPortal + schema: + type: string + required: true + default: "" + - variable: iqn + label: iqn + schema: + type: string + required: true + default: "" + - variable: lun + label: lun + schema: + type: int + default: 0 + - variable: authSession + label: authSession + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: authDiscovery + label: authDiscovery + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + + - variable: autoPermissions + label: Automatic Permissions Configuration + description: Automatically set permissions + schema: + show_if: [["type", "!=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: chown + label: Run CHOWN + description: | + It will run CHOWN on the path with the given fsGroup + schema: + type: boolean + default: false + - variable: chmod + label: Run CHMOD + description: | + It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770 + schema: + type: string + valid_chars: '[0-9]{3}' + default: "" + - variable: recursive + label: Recursive + description: | + It will run CHOWN and CHMOD recursively + schema: + type: boolean + default: false + - variable: readOnly + label: Read Only + schema: + type: boolean + default: false + - variable: hostPath + label: Host Path + description: Path inside the container the storage is mounted + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: EmptyDir Medium + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: Default + - value: Memory + description: Memory + - variable: size + label: Size quotum of Storage (Do NOT REDUCE after installation) + description: This value can ONLY be INCREASED after the installation + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: 256Gi + - variable: storageClass + label: 'storageClass (Advanced)' + description: 'sets the storageClass to something other than iX default. Only for advanced usecases!' + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "" + - variable: static + label: 'Static Fixed PVC Bindings (Experimental)' + description: Link a PVC to a specific storage location + schema: + show_if: [["type", "=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: mode + label: mode + description: | + disabled: use normal dynamic PVCs + smb: connect to an SMB share + nfs: connect to an NFS share + schema: + type: string + default: "disabled" + enum: + - value: disabled + description: disabled + - value: smb + description: smb + - value: nfs + description: nfs + - variable: server + label: Server + description: server to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "myserver" + - variable: share + label: Share + description: share to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "/myshare" + - variable: user + label: User + description: connecting user + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "myuser" + - variable: domain + label: Domain + description: user domain + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: password + label: Password + description: connecting password + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: volumeSnapshots + label: 'Volume Snapshots (Experimental)' + description: Add an entry to the list to force creation of a volumeSnapshot of this PVC + schema: + show_if: [["type", "=", "pvc"]] + type: list + default: [] + items: + - variable: volumeSnapshotEntry + label: Custom volumeSnapshot + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + description: 'WARNING: renaming this, means deletion of the snapshot with the old name!' + schema: + type: string + default: "mysnapshot" + required: true + - variable: volumeSnapshotClassName + label: 'volumeSnapshot Class Name (Advanced)' + description: For use with PVCs using a non-default storageClass + schema: + type: string + default: "" + - variable: persistenceList + label: Additional App Storage + group: Storage and Persistence + schema: + type: list + default: [] + items: + - variable: persistenceListEntry + label: Custom Storage + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable the storage + schema: + type: boolean + default: true + hidden: true + - variable: type + label: Type of Storage + description: Sets the persistence type, Anything other than PVC could break rollback! + schema: + type: string + default: hostPath + enum: + - value: pvc + description: PVC + - value: hostPath + description: Host Path + - value: emptyDir + description: emptyDir + - value: nfs + description: NFS Share + - variable: server + label: NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: path + label: Path on NFS Server + schema: + show_if: [["type", "=", "nfs"]] + type: string + default: "" + - variable: iscsi + label: iSCSI Options + schema: + show_if: [["type", "=", "iscsi"]] + type: dict + additional_attrs: true + attrs: + - variable: targetPortal + label: targetPortal + schema: + type: string + required: true + default: "" + - variable: iqn + label: iqn + schema: + type: string + required: true + default: "" + - variable: lun + label: lun + schema: + type: int + default: 0 + - variable: authSession + label: authSession + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: authDiscovery + label: authDiscovery + schema: + type: dict + additional_attrs: true + attrs: + - variable: username + label: username + schema: + type: string + default: "" + - variable: password + label: password + schema: + type: string + default: "" + - variable: usernameInitiator + label: usernameInitiator + schema: + type: string + default: "" + - variable: passwordInitiator + label: passwordInitiator + schema: + type: string + default: "" + - variable: autoPermissions + label: Automatic Permissions Configuration + description: Automatically set permissions + schema: + show_if: [["type", "!=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: chown + label: Run CHOWN + description: | + It will run CHOWN on the path with the given fsGroup + schema: + type: boolean + default: false + - variable: chmod + label: Run CHMOD + description: | + It will run CHMOD on the path with the given value
+ Format should be 3 digits, e.g. 770 + schema: + type: string + valid_chars: '[0-9]{3}' + default: "" + - variable: recursive + label: Recursive + description: | + It will run CHOWN and CHMOD recursively + schema: + type: boolean + default: false + - variable: readOnly + label: Read Only + schema: + type: boolean + default: false + - variable: hostPath + label: Host Path + description: Path inside the container the storage is mounted + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: mountPath + label: Mount Path + description: Path inside the container the storage is mounted + schema: + type: string + default: "" + required: true + valid_chars: '^\/([a-zA-Z0-9._-]+(\s?[a-zA-Z0-9._-]+|\/?))+$' + - variable: medium + label: EmptyDir Medium + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: Default + - value: Memory + description: Memory + - variable: size + label: Size Quotum of Storage + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: 256Gi + - variable: storageClass + label: 'storageClass (Advanced)' + description: 'sets the storageClass to something other than iX default. Only for advanced usecases!' + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "" + - variable: static + label: 'Static Fixed PVC Bindings (Experimental)' + description: Link a PVC to a specific storage location + schema: + show_if: [["type", "=", "pvc"]] + type: dict + additional_attrs: true + attrs: + - variable: mode + label: mode + description: | + disabled: use normal dynamic PVCs + smb: connect to an SMB share + nfs: connect to an NFS share + schema: + type: string + default: "disabled" + enum: + - value: "disabled" + description: disabled + - value: smb + description: smb + - value: nfs + description: nfs + - variable: server + label: Server + description: server to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "myserver" + - variable: share + label: Share + description: share to connect to + schema: + type: string + show_if: [["mode", "!=", "disabled"]] + default: "/myshare" + - variable: user + label: User + description: connecting user + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "myuser" + - variable: domain + label: Domain + description: user domain + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: password + label: Password + description: connecting password + schema: + type: string + show_if: [["mode", "=", "smb"]] + default: "" + - variable: volumeSnapshots + label: 'Volume Snapshots (Experimental)' + description: Add an entry to the list to force creation of a volumeSnapshot of this PVC + schema: + show_if: [["type", "=", "pvc"]] + type: list + default: [] + items: + - variable: volumeSnapshotEntry + label: Custom volumeSnapshot + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + description: 'WARNING: renaming this, means deletion of the snapshot with the old name!' + schema: + type: string + default: "mysnapshot" + required: true + - variable: volumeSnapshotClassName + label: 'volumeSnapshot Class Name (Advanced)' + description: For use with PVCs using a non-default storageClass + schema: + type: string + default: "" + - variable: ingress + label: "" + group: Ingress + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: Main Ingress + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable Ingress + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hosts + label: Hosts + schema: + type: list + default: [] + items: + - variable: hostEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: HostName + schema: + type: string + default: "" + required: true + - variable: paths + label: Paths + schema: + type: list + default: [{path: "/", pathType: "Prefix"}] + items: + - variable: pathEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: Path + schema: + type: string + required: true + default: "/" + - variable: pathType + label: Path Type + schema: + type: string + required: true + default: Prefix + - variable: integrations + label: Integrations + description: Connect ingress with other charts + schema: + additional_attrs: true + type: dict + attrs: + - variable: traefik + label: Traefik + description: Connect ingress with Traefik + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: true + - variable: allowCors + label: 'Allow Cross Origin Requests (advanced)' + schema: + type: boolean + default: false + show_if: [["enabled", "=", true]] + - variable: entrypoints + label: Entrypoints + schema: + type: list + default: ["websecure"] + show_if: [["enabled", "=", true]] + items: + - variable: entrypoint + label: Entrypoint + schema: + type: string + - variable: middlewares + label: Middlewares + schema: + type: list + default: [] + show_if: [["enabled", "=", true]] + items: + - variable: middleware + label: Middleware + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: name + schema: + type: string + default: "" + required: true + - variable: namespace + label: 'namespace (optional)' + schema: + type: string + default: "" + - variable: certManager + label: certManager + description: Connect ingress with certManager + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + - variable: certificateIssuer + label: certificateIssuer + description: defaults to chartname + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: homepage + label: Homepage + description: Connect ingress with Homepage + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + - variable: name + label: Name (Optional) + description: Defaults to chart name + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: description + label: Description (Optional) + description: Defaults to chart description + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: icon + label: Icon (Optional) + description: Defaults to chart icon + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: group + label: Group + schema: + type: string + required: true + default: "default" + show_if: [["enabled", "=", true]] + - variable: widget + label: Widget Settings + schema: + type: dict + additional_attrs: true + show_if: [["enabled", "=", true]] + attrs: + - variable: enabled + label: Enable Widget + description: When disabled all widget annotations are skipped. + schema: + type: boolean + default: true + - variable: custom + label: Options + schema: + type: dict + additional_attrs: true + attrs: + - variable: key + label: API-key (key) + schema: + type: string + default: "" + - variable: customkv + label: Custom Options + schema: + type: list + default: [] + items: + - variable: option + label: Option + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + default: "" + required: true + - variable: value + label: Value + schema: + type: string + default: "" + required: true + - variable: advanced + label: Show Advanced Settings + description: Advanced settings are not covered by TrueCharts Support + schema: + type: boolean + default: false + - variable: ingressClassName + label: (Advanced/Optional) IngressClass Name + schema: + type: string + show_if: [["advanced", "=", true]] + default: "" + - variable: tls + label: TLS-Settings + schema: + type: list + show_if: [["advanced", "=", true]] + default: [] + items: + - variable: tlsEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: Certificate Hosts + schema: + type: list + default: [] + items: + - variable: host + label: Host + schema: + type: string + default: "" + required: true + + - variable: certificateIssuer + label: Use Cert-Manager clusterIssuer + description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates.' + schema: + type: string + default: "" + - variable: clusterCertificate + label: 'Cluster Certificate (Advanced)' + description: 'Add the name of your cluster-wide certificate, that you set up in the ClusterIssuer chart.' + schema: + type: string + show_if: [["certificateIssuer", "=", ""]] + default: "" + - variable: secretName + label: 'Use Custom Certificate Secret (Advanced)' + schema: + show_if: [["certificateIssuer", "=", ""]] + type: string + default: "" + - variable: scaleCert + label: 'Use TrueNAS SCALE Certificate (Deprecated)' + schema: + show_if: [["certificateIssuer", "=", ""]] + type: int + $ref: + - "definitions/certificate" + - variable: ingressList + label: Add Manual Custom Ingresses + group: Ingress + schema: + type: list + default: [] + items: + - variable: ingressListEntry + label: Custom Ingress + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable Ingress + schema: + type: boolean + default: true + hidden: true + - variable: name + label: Name + schema: + type: string + default: "" + - variable: ingressClassName + label: IngressClass Name + schema: + type: string + default: "" + - variable: hosts + label: Hosts + schema: + type: list + default: [] + items: + - variable: hostEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: HostName + schema: + type: string + default: "" + required: true + - variable: paths + label: Paths + schema: + type: list + default: [] + items: + - variable: pathEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: Path + schema: + type: string + required: true + default: "/" + - variable: pathType + label: Path Type + schema: + type: string + required: true + default: Prefix + - variable: overrideService + label: Linked Service + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Service Name + schema: + type: string + default: "" + - variable: port + label: Service Port + schema: + type: int + - variable: tls + label: TLS-Settings + schema: + type: list + default: [] + show_if: [["certificateIssuer", "=", ""]] + items: + - variable: tlsEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: Certificate Hosts + schema: + type: list + default: [] + items: + - variable: host + label: Host + schema: + type: string + default: "" + required: true + - variable: certificateIssuer + label: Use Cert-Manager clusterIssuer + description: 'add the name of your Cert-Manager clusterIssuer here for automatic tls certificates.' + schema: + type: string + default: "" + - variable: scaleCert + label: Use TrueNAS SCALE Certificate (Deprecated) + schema: + show_if: [["certificateIssuer", "=", ""]] + type: int + $ref: + - "definitions/certificate" + - variable: clusterCertificate + label: 'Cluster Certificate (Advanced)' + description: 'Add the name of your cluster-wide certificate, that you set up in the ClusterIssuer chart.' + schema: + type: string + show_if: [["certificateIssuer", "=", ""]] + default: "" + - variable: secretName + label: Use Custom Secret (Advanced) + schema: + type: string + show_if: [["certificateIssuer", "=", ""]] + default: "" + - variable: integrations + label: Integrations + description: Connect ingress with other charts + schema: + additional_attrs: true + type: dict + attrs: + - variable: traefik + label: Traefik + description: Connect ingress with Traefik + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: true + - variable: allowCors + label: "Allow Cross Origin Requests" + schema: + type: boolean + default: false + show_if: [["enabled", "=", true]] + - variable: entrypoints + label: Entrypoints + schema: + type: list + default: ["websecure"] + show_if: [["enabled", "=", true]] + items: + - variable: entrypoint + label: Entrypoint + schema: + type: string + - variable: middlewares + label: Middlewares + schema: + type: list + default: [] + show_if: [["enabled", "=", true]] + items: + - variable: middleware + label: Middleware + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: name + schema: + type: string + default: "" + required: true + - variable: namespace + label: namespace + schema: + type: string + default: "" + - variable: certManager + label: certManager + description: Connect ingress with certManager + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: true + - variable: certificateIssuer + label: certificateIssuer + description: defaults to chartname + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: homepage + label: Homepage + description: Connect ingress with Homepage + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + - variable: name + label: Name + description: defaults to chartname + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: description + label: Description + description: defaults to chart description + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: group + label: Group + schema: + type: string + required: true + default: "default" + show_if: [["enabled", "=", true]] + - variable: securityContext + group: Security and Permissions + label: Security Context + schema: + additional_attrs: true + type: dict + attrs: + - variable: container + label: Container + schema: + additional_attrs: true + type: dict + attrs: + # Settings from questions.yaml get appended here on a per-app basis + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: "The groupID this App of the user running the application" + schema: + type: int + default: 0 + # Settings from questions.yaml get appended here on a per-app basis + - variable: PUID + label: Process User ID - PUID + description: When supported by the container, this sets the User ID running the Application Process. Not supported by all Apps + schema: + type: int + show_if: [["runAsUser", "=", 0]] + default: 568 + - variable: UMASK + label: UMASK + description: When supported by the container, this sets the UMASK for the App. Not supported by all Apps + schema: + type: string + default: "0022" + - variable: advanced + label: Show Advanced Settings + description: Advanced settings are not covered by TrueCharts Support + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: true + - variable: pod + label: Pod + schema: + additional_attrs: true + type: dict + attrs: + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: OnRootMismatch + enum: + - value: OnRootMismatch + description: OnRootMismatch + - value: Always + description: Always + - variable: supplementalGroups + label: Supplemental Groups + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: Supplemental Group + schema: + type: int + # Settings from questions.yaml get appended here on a per-app basis + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: resources + group: Resources and Devices + label: "Resource Limits" + schema: + additional_attrs: true + type: dict + attrs: + - variable: limits + label: Advanced Limit Resource Consumption + schema: + additional_attrs: true + type: dict + attrs: + - variable: cpu + label: CPU + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/SCALE/validation" + schema: + type: string + default: 4000m + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: RAM + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/SCALE/validation" + schema: + type: string + default: 8Gi + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + - variable: requests + label: "Minimum Resources Required (request)" + schema: + additional_attrs: true + type: dict + hidden: true + attrs: + - variable: cpu + label: CPU + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/SCALE/validation" + schema: + type: string + default: 10m + hidden: true + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: "RAM" + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/SCALE/validation" + schema: + type: string + default: 50Mi + hidden: true + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + - variable: deviceList + label: Mount USB Devices + group: Resources and Devices + schema: + type: list + default: [] + items: + - variable: deviceListEntry + label: Device + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable the Storage + schema: + type: boolean + default: true + - variable: type + label: (Advanced) Type of Storage + description: Sets the persistence type + schema: + type: string + default: device + hidden: true + - variable: readOnly + label: readOnly + schema: + type: boolean + default: false + - variable: hostPath + label: Host Device Path + description: Path to the device on the host system + schema: + type: path + - variable: mountPath + label: Container Device Path + description: Path inside the container the device is mounted + schema: + type: string + default: "/dev/ttyACM0" + - variable: scaleGPU + label: GPU Configuration + group: Resources and Devices + schema: + type: list + default: [] + items: + - variable: scaleGPUEntry + label: GPU + schema: + additional_attrs: true + type: dict + attrs: + # Specify GPU configuration + - variable: gpu + label: Select GPU + schema: + additional_attrs: true + type: dict + $ref: + - "definitions/gpuConfiguration" + attrs: [] + - variable: workaround + label: "Workaround" + schema: + type: string + default: workaround + hidden: true + - variable: cnpg + group: Postgresql + label: "CloudNative-PG (CNPG)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Postgresql Database" + schema: + additional_attrs: true + type: dict + attrs: + - variable: hibernate + label: Hibernate + description: "enable to safely hibernate and shutdown the postgresql cluster" + schema: + type: boolean + default: false + - variable: mode + label: Mode + description: 'Cluster mode of operation. Available modes: standalone - default mode. Creates new or updates an existing CNPG cluster. recovery - Same as standalone but creates a cluster from a backup, object store or via pg_basebackup replica - Creates a replica cluster from an existing CNPG cluster. # TODO.' + schema: + type: string + default: "standalone" + enum: + - value: standalone + description: standalone + - value: replica + description: replica + - value: recovery + description: recovery + - variable: cluster + label: "Cluster Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: instances + label: Instances + schema: + type: int + default: 1 + - variable: singleNode + label: singleNode + schema: + type: boolean + default: true + hidden: true + - variable: storage + label: "Storage" + schema: + additional_attrs: true + type: dict + attrs: + - variable: size + label: Size + schema: + type: string + default: "256Gi" + - variable: walStorage + label: "WAL Storage" + schema: + additional_attrs: true + type: dict + attrs: + - variable: size + label: Size + schema: + type: string + default: "256Gi" + - variable: monitoring + label: "Monitoring Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enablePodMonitor + label: "enablePodMonitor" + schema: + type: boolean + default: true + - variable: disableDefaultQueries + label: "disableDefaultQueries" + schema: + type: boolean + default: false + - variable: pooler + label: "Pooler Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: instances + label: Instances + schema: + type: int + default: 1 + - variable: createRO + label: "Create ReadOnly Instance" + schema: + type: boolean + default: false + - variable: recovery + label: "Recovery Settings (Experimental)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + - variable: endpointURL + label: "endpointURL" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "" + - variable: method + label: "method" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "object_store" + - variable: backupName + label: "backupName" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "" + - variable: provider + label: "provider" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "s3" + enum: + - value: s3 + description: S3 + - value: azure + description: Azure + - value: google + description: Google + - variable: s3 + label: "s3" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "s3"]] + attrs: + - variable: region + label: "region" + schema: + type: string + default: "" + - variable: bucket + label: "bucket" + schema: + type: string + default: "" + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: accessKey + label: "accessKey" + schema: + type: string + default: "" + - variable: secretKey + label: "secretKey" + schema: + type: string + default: "" + - variable: azure + label: "azure (EXTREMELY EXPERIMENTAL)" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "azure"]] + attrs: + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: connectionString + label: "connectionString" + schema: + type: string + default: "" + - variable: storageAccount + label: "storageAccount" + schema: + type: string + default: "" + - variable: storageKey + label: "storageKey" + schema: + type: string + default: "" + - variable: storageSasToken + label: "storageSasToken" + schema: + type: string + default: "" + - variable: containerName + label: "containerName" + schema: + type: string + default: "" + - variable: serviceName + label: "serviceName" + schema: + type: string + default: "blob" + - variable: inheritFromAzureAD + label: "inheritFromAzureAD" + schema: + type: boolean + default: false + - variable: google + label: "google (EXTREMELY EXPERIMENTAL)" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "google"]] + attrs: + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: bucket + label: "bucket" + schema: + type: string + default: "" + - variable: gkeEnvironment + label: "gkeEnvironment" + schema: + type: string + default: "" + - variable: applicationCredentials + label: "applicationCredentials" + schema: + type: string + default: "" + - variable: backups + label: "Backup Settings (Experimental)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + - variable: endpointURL + label: "endpointURL" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "" + - variable: destinationPath + label: "destinationPath" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "" + - variable: retentionPolicy + label: "retentionPolicy" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "30d" + - variable: provider + label: "provider" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "s3" + enum: + - value: s3 + description: S3 + - value: azure + description: Azure + - value: google + description: Google + - variable: s3 + label: "s3" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "s3"]] + attrs: + - variable: region + label: "region" + schema: + type: string + default: "" + - variable: bucket + label: "bucket" + schema: + type: string + default: "" + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: accessKey + label: "accessKey" + schema: + type: string + default: "" + - variable: secretKey + label: "secretKey" + schema: + type: string + default: "" + - variable: azure + label: "azure (EXTREMELY EXPERIMENTAL)" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "azure"]] + attrs: + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: connectionString + label: "connectionString" + schema: + type: string + default: "" + - variable: storageAccount + label: "storageAccount" + schema: + type: string + default: "" + - variable: storageKey + label: "storageKey" + schema: + type: string + show_if: [["enabled", "=", true]] + default: "" + - variable: storageSasToken + label: "storageSasToken" + schema: + type: string + default: "" + - variable: containerName + label: "containerName" + schema: + type: string + default: "" + - variable: serviceName + label: "serviceName" + schema: + type: string + default: "blob" + - variable: inheritFromAzureAD + label: "inheritFromAzureAD" + schema: + type: boolean + default: false + - variable: google + label: "google (EXTREMELY EXPERIMENTAL)" + schema: + additional_attrs: true + type: dict + show_if: [["provider", "=", "google"]] + attrs: + - variable: path + label: "path" + schema: + type: string + default: "/" + - variable: bucket + label: "bucket" + schema: + type: string + default: "" + - variable: gkeEnvironment + label: "gkeEnvironment" + schema: + type: string + default: "" + - variable: applicationCredentials + label: "applicationCredentials" + schema: + type: string + default: "" + - variable: scheduledBackups + label: ScheduledBackups + schema: + type: list + default: [] + show_if: [["enabled", "=", true]] + items: + - variable: backupschedule + label: BackupSchedule + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: name + schema: + type: string + default: "daily-backup" + required: true + - variable: schedule + label: schedule + schema: + type: string + required: true + default: "0 0 0 * * *" + - variable: backupOwnerReference + label: backupOwnerReference + schema: + type: string + required: true + default: "self" + - variable: immediate + label: immediate + schema: + type: boolean + default: false + - variable: suspend + label: suspend + schema: + type: boolean + default: false + - variable: manualBackups + label: manualBackups + schema: + type: list + default: [] + show_if: [["enabled", "=", true]] + items: + - variable: backup + label: Backup + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: name + schema: + type: string + default: "" + required: true +# - variable: horizontalPodAutoscaler +# group: Advanced +# label: (Advanced) Horizontal Pod Autoscaler +# schema: +# type: list +# default: [] +# items: +# - variable: hpaEntry +# label: HPA Entry +# schema: +# additional_attrs: true +# type: dict +# attrs: +# - variable: name +# label: Name +# schema: +# type: string +# required: true +# default: "" +# - variable: enabled +# label: Enabled +# schema: +# type: boolean +# default: false +# show_subquestions_if: true +# subquestions: +# - variable: target +# label: Target +# description: Deployment name, Defaults to Main Deployment +# schema: +# type: string +# default: "" +# - variable: minReplicas +# label: Minimum Replicas +# schema: +# type: int +# default: 1 +# - variable: maxReplicas +# label: Maximum Replicas +# schema: +# type: int +# default: 5 +# - variable: targetCPUUtilizationPercentage +# label: Target CPU Utilization Percentage +# schema: +# type: int +# default: 80 +# - variable: targetMemoryUtilizationPercentage +# label: Target Memory Utilization Percentage +# schema: +# type: int +# default: 80 + - variable: networkPolicy + group: Advanced + label: (Advanced) Network Policy + schema: + type: list + default: [] + items: + - variable: netPolicyEntry + label: Network Policy Entry + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + schema: + type: string + required: true + default: "" + - variable: enabled + label: Enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: policyType + label: Policy Type + schema: + type: string + default: "" + enum: + - value: "" + description: Default + - value: ingress + description: Ingress + - value: egress + description: Egress + - value: ingress-egress + description: Ingress and Egress + - variable: egress + label: Egress + schema: + type: list + default: [] + items: + - variable: egressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: to + label: To + schema: + type: list + default: [] + items: + - variable: toEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: IP Block + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: CIDR + schema: + type: string + default: "" + - variable: except + label: Except + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: string + - variable: namespaceSelector + label: Namespace Selector + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: Match Expressions + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + - variable: operator + label: Operator + schema: + type: string + default: TCP + enum: + - value: In + description: In + - value: NotIn + description: NotIn + - value: Exists + description: Exists + - value: DoesNotExist + description: DoesNotExist + - variable: values + label: Values + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: Match Expressions + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + - variable: operator + label: Operator + schema: + type: string + default: TCP + enum: + - value: In + description: In + - value: NotIn + description: NotIn + - value: Exists + description: Exists + - value: DoesNotExist + description: DoesNotExist + - variable: values + label: Values + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: Ports + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: Port + schema: + type: int + - variable: endPort + label: End Port + schema: + type: int + - variable: protocol + label: Protocol + schema: + type: string + default: TCP + enum: + - value: TCP + description: TCP + - value: UDP + description: UDP + - value: SCTP + description: SCTP + - variable: ingress + label: Ingress + schema: + type: list + default: [] + items: + - variable: ingressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: from + label: From + schema: + type: list + default: [] + items: + - variable: fromEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: IP Block + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: CIDR + schema: + type: string + default: "" + - variable: except + label: Except + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: string + - variable: namespaceSelector + label: Namespace Selector + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: Match Expressions + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + - variable: operator + label: Operator + schema: + type: string + default: TCP + enum: + - value: In + description: In + - value: NotIn + description: NotIn + - value: Exists + description: Exists + - value: DoesNotExist + description: DoesNotExist + - variable: values + label: Values + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: Match Expressions + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: Key + schema: + type: string + - variable: operator + label: Operator + schema: + type: string + default: TCP + enum: + - value: In + description: In + - value: NotIn + description: NotIn + - value: Exists + description: Exists + - value: DoesNotExist + description: DoesNotExist + - variable: values + label: Values + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: Ports + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: Port + schema: + type: int + - variable: endPort + label: End Port + schema: + type: int + - variable: protocol + label: Protocol + schema: + type: string + default: TCP + enum: + - value: TCP + description: TCP + - value: UDP + description: UDP + - value: SCTP + description: SCTP + - variable: addons + group: Addons + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: codeserver + label: Codeserver + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: service + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Service Type + description: "ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: LoadBalancer + enum: + - value: NodePort + description: Deprecated CHANGE THIS + - value: ClusterIP + description: ClusterIP + - value: LoadBalancer + description: LoadBalancer + - variable: loadBalancerIP + label: LoadBalancer IP + description: "MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: ports + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: codeserver + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: Port + schema: + type: int + default: 36107 + - variable: ingress + label: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enable Ingress + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hosts + label: Hosts + schema: + type: list + default: [] + items: + - variable: hostEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: HostName + schema: + type: string + default: "" + required: true + - variable: paths + label: Paths + schema: + type: list + default: [{path: "/", pathType: "Prefix"}] + items: + - variable: pathEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: Path + schema: + type: string + required: true + default: "/" + - variable: pathType + label: Path Type + schema: + type: string + required: true + default: Prefix + - variable: integrations + label: Integrations + description: Connect ingress with other charts + schema: + additional_attrs: true + type: dict + attrs: + - variable: traefik + label: Traefik + description: Connect ingress with Traefik + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: true + - variable: allowCors + label: 'Allow Cross Origin Requests (advanced)' + schema: + type: boolean + default: false + show_if: [["enabled", "=", true]] + - variable: entrypoints + label: Entrypoints + schema: + type: list + default: ["websecure"] + show_if: [["enabled", "=", true]] + items: + - variable: entrypoint + label: Entrypoint + schema: + type: string + - variable: middlewares + label: Middlewares + schema: + type: list + default: [] + show_if: [["enabled", "=", true]] + items: + - variable: middleware + label: Middleware + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: name + schema: + type: string + default: "" + required: true + - variable: namespace + label: 'namespace (optional)' + schema: + type: string + default: "" + - variable: certManager + label: certManager + description: Connect ingress with certManager + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: enabled + schema: + type: boolean + default: false + - variable: certificateIssuer + label: certificateIssuer + description: defaults to chartname + schema: + type: string + default: "" + show_if: [["enabled", "=", true]] + - variable: advanced + label: Show Advanced Settings + description: Advanced settings are not covered by TrueCharts Support + schema: + type: boolean + default: false + - variable: ingressClassName + label: (Advanced/Optional) IngressClass Name + schema: + type: string + show_if: [["advanced", "=", true]] + default: "" + - variable: tls + label: TLS-Settings + schema: + type: list + show_if: [["advanced", "=", true]] + default: [] + items: + - variable: tlsEntry + label: Host + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: Certificate Hosts + schema: + type: list + default: [] + items: + - variable: host + label: Host + schema: + type: string + default: "" + required: true + + - variable: certificateIssuer + label: Use Cert-Manager clusterIssuer + description: 'add the name of your cert-manager clusterIssuer here for automatic tls certificates.' + schema: + type: string + default: "" + - variable: clusterCertificate + label: 'Cluster Certificate (Advanced)' + description: 'Add the name of your cluster-wide certificate, that you set up in the ClusterIssuer chart.' + schema: + type: string + show_if: [["certificateIssuer", "=", ""]] + default: "" + - variable: secretName + label: 'Use Custom Certificate Secret (Advanced)' + schema: + show_if: [["certificateIssuer", "=", ""]] + type: string + default: "" + - variable: scaleCert + label: 'Use TrueNAS SCALE Certificate (Deprecated)' + schema: + show_if: [["certificateIssuer", "=", ""]] + type: int + $ref: + - "definitions/certificate" + - variable: envList + label: Codeserver Environment Variables + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: Environment Variable + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + schema: + type: string + required: true + - variable: value + label: Value + schema: + type: string + required: true + - variable: netshoot + label: Netshoot + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: Enabled + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: envList + label: Netshoot Environment Variables + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: Environment Variable + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + schema: + type: string + required: true + - variable: value + label: Value + schema: + type: string + required: true + - variable: vpn + label: VPN + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: Type + schema: + type: string + default: disabled + enum: + - value: disabled + description: disabled + - value: gluetun + description: Gluetun + - value: tailscale + description: Tailscale + - value: openvpn + description: OpenVPN (Deprecated) + - value: wireguard + description: Wireguard (Deprecated) + - variable: openvpn + label: OpenVPN Settings + schema: + additional_attrs: true + type: dict + show_if: [["type", "=", "openvpn"]] + attrs: + - variable: username + label: Authentication Username (Optional) + description: Authentication Username, Optional + schema: + type: string + default: "" + - variable: password + label: Authentication Password + description: Authentication Credentials + schema: + type: string + show_if: [["username", "!=", ""]] + default: "" + required: true + - variable: tailscale + label: Tailscale Settings + schema: + additional_attrs: true + type: dict + show_if: [["type", "=", "tailscale"]] + attrs: + - variable: authkey + label: Authentication Key + description: Provide an auth key to automatically authenticate the node as your user account. + schema: + type: string + private: true + default: "" + - variable: auth_once + label: Auth Once + description: Only attempt to log in if not already logged in. + schema: + type: boolean + default: true + - variable: accept_dns + label: Accept DNS + description: Accept DNS configuration from the admin console. + schema: + type: boolean + default: false + - variable: userspace + label: Userspace + description: Userspace Networking mode allows running Tailscale where you do not have access to create a VPN tunnel device. + schema: + type: boolean + default: false + - variable: routes + label: Routes + description: Expose physical subnet routes to your entire Tailscale network. + schema: + type: string + default: "" + - variable: dest_ip + label: Destination IP + description: Tells the DNAT mechanism which Destination IP to set in the IP header, and where to send packets that are matched. + schema: + type: string + default: "" + - variable: sock5_server + label: Sock5 Server + description: The address on which to listen for SOCKS5 proxying into the tailscale net. + schema: + type: string + default: "" + - variable: outbound_http_proxy_listen + label: Outbound HTTP Proxy Listen + description: The address on which to listen for HTTP proxying into the tailscale net. + schema: + type: string + default: "" + - variable: extra_args + label: Extra Args + description: Extra Args + schema: + type: string + default: "" + - variable: daemon_extra_args + label: Tailscale Daemon Extra Args + description: Tailscale Daemon Extra Args + schema: + type: string + default: "" + - variable: killSwitch + label: Enable Killswitch + schema: + type: boolean + show_if: [["type", "!=", "disabled"]] + default: true + - variable: excludedNetworks_IPv4 + label: Killswitch Excluded IPv4 networks + description: List of Killswitch Excluded IPv4 Addresses + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv4 + label: IPv4 Network + schema: + type: string + required: true + - variable: excludedNetworks_IPv6 + label: Killswitch Excluded IPv6 networks + description: "List of Killswitch Excluded IPv6 Addresses" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv6 + label: IPv6 Network + schema: + type: string + required: true + - variable: configFile + label: VPN Config File Location + schema: + type: string + show_if: [["type", "!=", "disabled"]] + default: "" + + - variable: envList + label: VPN Environment Variables + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: Environment Variable + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: Name + schema: + type: string + required: true + - variable: value + label: Value + schema: + type: string + required: true + max_length: 10240 + - variable: docs + group: Documentation + label: Please read the documentation at https://truecharts.org + description: Please read the documentation at +
https://truecharts.org + schema: + additional_attrs: true + type: dict + attrs: + - variable: confirmDocs + label: I have checked the documentation + schema: + type: boolean + default: true + - variable: donateNag + group: Documentation + label: Please consider supporting TrueCharts, see https://truecharts.org/sponsor + description: Please consider supporting TrueCharts, see +
https://truecharts.org/sponsor + schema: + additional_attrs: true + type: dict + attrs: + - variable: confirmDonate + label: I have considered donating + schema: + type: boolean + default: true + hidden: true diff --git a/stable/meshcentral/14.1.7/templates/_secret.tpl b/stable/meshcentral/14.1.7/templates/_secret.tpl new file mode 100644 index 0000000000..dd6451341b --- /dev/null +++ b/stable/meshcentral/14.1.7/templates/_secret.tpl @@ -0,0 +1,171 @@ +{{/* Define the secret */}} +{{- define "meshcentral.secret" -}} + +{{- $fullname := include "tc.v1.common.lib.chart.names.fullname" $ -}} +{{- $secretName := printf "%s-mesh-secret" $fullname -}} +{{- $secretStoreName := printf "%s-sec-store" $fullname -}} + +{{- $config := .Values.meshcentral -}} +{{- $mc_custom := .Values.additional_meshcentral -}} + +{{- $isScale := false -}} +{{- if hasKey .Values.global "ixChartContext" -}} + {{- $isScale = true -}} +{{- else -}} + {{- $isScale = false -}} +{{- end -}} + +{{- if $isScale -}} + {{- if .Values.additional_meshcentral -}} + {{- $mc_custom = (include "render.custom.scale.values" $mc_custom) -}} + {{- $mc_custom_merged := dict -}} + {{/* We created a new unique section# for each key we parsed */}} + {{/* And we merge them here, as without it we would have multiple */}} + {{/* same top level keys */}} + {{- range $section := (fromYaml $mc_custom) -}} + {{- $mc_custom_merged = mergeOverwrite $mc_custom_merged $section -}} + {{- end -}} + {{- $config = mergeOverwrite $config $mc_custom_merged -}} + {{- end -}} +{{- end -}} + +{{- $sessionKey := "" -}} +{{- with (lookup "v1" "Secret" .Release.Namespace $secretStoreName) -}} + {{- $sessionKey = (index .data "session_key") | b64dec -}} +{{- else -}} + {{- $sessionKey = randAlphaNum 32 -}} +{{- end -}} + +{{/* Inject some values */}} +{{- $_ := set $config "$schema" "http://info.meshcentral.com/downloads/meshcentral-config-schema.json" -}} + +{{- if not (hasKey $config "settings") -}} + {{- $_ := set $config "settings" dict -}} +{{- end -}} + +{{- $_ := set $config.settings "postgres" dict -}} +{{- $_ := set $config.settings.postgres "database" .Values.cnpg.main.database -}} +{{- $_ := set $config.settings.postgres "user" .Values.cnpg.main.user -}} +{{- $_ := set $config.settings.postgres "host" (.Values.cnpg.main.creds.host | trimAll "\"") -}} +{{- $_ := set $config.settings.postgres "port" 5432 -}} +{{- $_ := set $config.settings.postgres "password" (.Values.cnpg.main.creds.password | trimAll "\"") -}} +{{- $_ := set $config.settings "sessionKey" $sessionKey -}} +{{- $_ := set $config.settings "port" .Values.service.main.ports.main.port -}} + +{{/* Force disable some functions that are not appliable in docker */}} +{{- $_ := set $config.settings "selfUpdate" false -}} +{{- $_ := set $config.settings "cleanNpmCacheOnUpdate" false -}} + +{{/* Disallows administrators to update the server from the My Server tab. For ANY domains defined */}} +{{- range $domain := $config.domains -}} + {{- if not (hasKey $domain "myServer") -}} + {{- $_ := set $domain "myServer" dict -}} + {{- end -}} + {{- $_ := set $domain.myServer "Upgrade" false -}} +{{- end -}} + +{{- if $isScale -}} + {{- $config = (include "mergeAndrenameDefaultDomain" $config) -}} + {{- $config = (include "prune.keys.scale" (fromYaml $config)) -}} +{{- else -}} + {{- $config = (include "prune.keys" $config) -}} +{{- end }} + +secret: + sec-store: + enabled: true + data: + {{/* Store session_key to reuse */}} + session_key: {{ $sessionKey }} + mesh-secret: + enabled: true + data: + {{/* The actual config */}} + config.json: | + {{- toPrettyJson (fromYaml $config) | nindent 8 }} +{{- end -}} + +{{/* Prunes keys that start with _ */}} +{{- define "prune.keys" -}} + {{- $values := . -}} + {{- range $k, $v := $values -}} + {{- if (hasPrefix "_" $k) -}} + {{- $_ := unset $values $k -}} + {{- else -}} + {{- if eq (kindOf $v) "map" -}} + {{- $v := (include "prune.keys" $v) -}} + {{- end -}} + {{- end -}} + {{- end -}} + {{- toYaml $values -}} +{{- end -}} + +{{/* Only on TrueNAS Scale */}} +{{/* Prunes empty lists */}} +{{/* Prunes int and float equal to -99 */}} +{{/* Prunes empty strings (Does not prune empty strings in lists) */}} +{{/* Prunes keys that start with _ */}} +{{/* There are cases you want to pass strings or bools on the same field */}} +{{/* So if eq string, and eq true/false/null convert to the real values */}} +{{- define "prune.keys.scale" -}} + {{- $values := . -}} + {{- range $k, $v := $values -}} + {{- if eq (kindOf $v) "string" -}} + {{- if not $v -}} + {{- $_ := unset $values $k -}} + {{- else if or (eq $v "true") -}} + {{- $_ := set $values $k true -}} + {{- else if or (eq $v "false") -}} + {{- $_ := set $values $k false -}} + {{- else if or (eq $v "null") -}} + {{- $_ := set $values $k nil -}} {{/* nil == null on helm */}} + {{- end -}} + {{- end -}} + {{- if or (eq (kindOf $v) "float64") (eq (kindOf $v) "int64") -}} + {{- if eq (int $v) -99 -}} + {{- $_ := unset $values $k -}} + {{- end -}} + {{- end -}} + {{- if eq (kindOf $v) "slice" -}} + {{- if not $v -}} + {{- $_ := unset $values $k -}} + {{- end -}} + {{- end -}} + {{- if (hasPrefix "_" $k) -}} + {{- $_ := unset $values $k -}} + {{- else -}} + {{- if eq (kindOf $v) "map" -}} + {{- $v := (include "prune.keys.scale" $v) -}} + {{- end -}} + {{- end -}} + {{- end -}} + {{- toYaml $values -}} +{{- end -}} + +{{/* Renames tcdefaultdomain variable to "" as this is the key used by MeshCentral */}} +{{/* but SCALE GUI does not handle it well */}} +{{- define "mergeAndrenameDefaultDomain" -}} + {{- $values := . -}} + {{- $defaultDomain := index $values.domains "" -}} + {{- $computedDomain := mergeOverwrite $defaultDomain $values.domains.tcdefaultdomain -}} + {{- $_ := set $values.domains "" $computedDomain -}} + {{- $_ := unset $values.domains "tcdefaultdomain" -}} + {{- toYaml $values -}} +{{- end -}} + +{{/* Takes a list of dicts with a value and a */}} +{{/* key formatted in dot notaion and converts it to yaml */}} +{{- define "render.custom.scale.values" -}} + {{- $values := . }} + {{- $section := 1 }} + {{- range $item := $values }} + {{- $indent := 2 }} + {{- printf "section%v" $section | nindent 0 }}: + {{- $section = (add 1 (int $section)) }} + {{- range (split "." $item.key) }} + {{- . | nindent (int $indent) }}: + {{- $indent = (add 2 (int $indent)) }} + {{- end }} + {{- printf " %v" $item.value }} + {{- end }} +{{- end -}} diff --git a/stable/meshcentral/14.1.7/templates/common.yaml b/stable/meshcentral/14.1.7/templates/common.yaml new file mode 100644 index 0000000000..c097596c46 --- /dev/null +++ b/stable/meshcentral/14.1.7/templates/common.yaml @@ -0,0 +1,22 @@ +{{/* Make sure all variables are set properly */}} +{{ include "tc.v1.common.loader.init" . }} + +{{- $_ := mustMergeOverwrite .Values (include "meshcentral.secret" $ | fromYaml) -}} + +{{- define "meshcentral.probes" -}} +probes: + liveness: + type: {{ .Values.service.main.ports.main.protocol }} + path: /health.ashx + readiness: + type: {{ .Values.service.main.ports.main.protocol }} + path: /health.ashx + startup: + type: {{ .Values.service.main.ports.main.protocol }} + path: /health.ashx +{{- end -}} + +{{- $_ := mergeOverwrite .Values.workload.main.podSpec.containers.main (include "meshcentral.probes" . | fromYaml) -}} + +{{/* Render the templates */}} +{{ include "tc.v1.common.loader.apply" . }} diff --git a/stable/meshcentral/14.1.7/values.yaml b/stable/meshcentral/14.1.7/values.yaml new file mode 100644 index 0000000000..e69de29bb2