From efa60e99aca3e38e5877fce6c065f2e44cd68070 Mon Sep 17 00:00:00 2001
From: sagit <36596628+Sagit-chu@users.noreply.github.com>
Date: Fri, 1 Apr 2022 01:39:37 +0800
Subject: [PATCH] feat(mosdns): Add mosdns (#2360)

* Add mosdns

* update question

* Add mosdns

* update question

* Update charts/incubator/mosdns/values.yaml

* test

* update question

* update tag

* Update charts/incubator/mosdns/questions.yaml

* Update charts/incubator/mosdns/questions.yaml

* Update charts/incubator/mosdns/Chart.yaml

Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
---
 charts/incubator/mosdns/.helmignore           |  26 ++
 charts/incubator/mosdns/Chart.yaml            |  29 ++
 charts/incubator/mosdns/questions.yaml        | 300 ++++++++++++++++++
 charts/incubator/mosdns/templates/common.yaml |   1 +
 charts/incubator/mosdns/values.yaml           |  25 ++
 docs/_static/img/appicons/mosdns.png          | Bin 0 -> 18813 bytes
 docs/manual/default-ports.md                  |   1 +
 7 files changed, 382 insertions(+)
 create mode 100644 charts/incubator/mosdns/.helmignore
 create mode 100644 charts/incubator/mosdns/Chart.yaml
 create mode 100644 charts/incubator/mosdns/questions.yaml
 create mode 100644 charts/incubator/mosdns/templates/common.yaml
 create mode 100644 charts/incubator/mosdns/values.yaml
 create mode 100644 docs/_static/img/appicons/mosdns.png

diff --git a/charts/incubator/mosdns/.helmignore b/charts/incubator/mosdns/.helmignore
new file mode 100644
index 00000000000..4379e2b3014
--- /dev/null
+++ b/charts/incubator/mosdns/.helmignore
@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
diff --git a/charts/incubator/mosdns/Chart.yaml b/charts/incubator/mosdns/Chart.yaml
new file mode 100644
index 00000000000..5fea4c13016
--- /dev/null
+++ b/charts/incubator/mosdns/Chart.yaml
@@ -0,0 +1,29 @@
+apiVersion: v2
+kubeVersion: ">=1.16.0-0"
+name: mosdns
+version: 0.0.1
+appVersion: "v3.5.2"
+description: A location-based pluggable DNS forwarder/splitter.
+type: application
+deprecated: false
+home: https://github.com/truecharts/apps/tree/master/charts/stable/mosdns
+icon: https://truecharts.org/_static/img/appicons/mosdns.png
+keywords:
+  - mosdns
+  - dns
+sources:
+  - https://hub.docker.com/r/601096721/mosdns
+dependencies:
+- name: common
+  repository: https://library-charts.truecharts.org
+  version: 9.2.6
+    # condition:
+maintainers:
+- email: info@truecharts.org
+  name: TrueCharts
+  url: https://truecharts.org
+annotations:
+  truecharts.org/catagories: |
+    - networking
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
diff --git a/charts/incubator/mosdns/questions.yaml b/charts/incubator/mosdns/questions.yaml
new file mode 100644
index 00000000000..a06e0f44ace
--- /dev/null
+++ b/charts/incubator/mosdns/questions.yaml
@@ -0,0 +1,300 @@
+# Include{groups}
+portals: {}
+questions:
+  - variable: portal
+    group: "Container Image"
+    label: "Configure Portal Button"
+    schema:
+      type: dict
+      hidden: true
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          description: "enable the portal button"
+          schema:
+            hidden: true
+            editable: false
+            type: boolean
+            default: false
+# Include{global}
+  - variable: controller
+    group: "Controller"
+    label: ""
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: advanced
+          label: "Show Advanced Controller Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: type
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Controller Type"
+                schema:
+                  type: string
+                  default: "deployment"
+                  required: true
+                  enum:
+                    - value: "deployment"
+                      description: "Deployment"
+                    - value: "statefulset"
+                      description: "Statefulset"
+                    - value: "daemonset"
+                      description: "Daemonset"
+              - variable: replicas
+                description: "Number of desired pod replicas"
+                label: "Desired Replicas"
+                schema:
+                  type: int
+                  default: 1
+                  required: true
+              - variable: strategy
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Update Strategy"
+                schema:
+                  type: string
+                  default: "Recreate"
+                  required: true
+                  enum:
+                    - value: "Recreate"
+                      description: "Recreate: Kill existing pods before creating new ones"
+                    - value: "RollingUpdate"
+                      description: "RollingUpdate: Create new pods and then kill old ones"
+                    - value: "OnDelete"
+                      description: "(Legacy) OnDelete: ignore .spec.template changes"
+# Include{controllerExpert}
+
+# Include{containerConfig}
+
+  - variable: service
+    group: "Networking and Services"
+    label: "Configure Service(s)"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: main
+          label: "DNS Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: main
+                      label: "DNS Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 53
+                              required: true
+                          - variable: advanced
+                            label: "Show Advanced settings"
+                            schema:
+                              type: boolean
+                              default: false
+                              show_subquestions_if: true
+                              subquestions:
+                                - variable: protocol
+                                  label: "Port Type"
+                                  schema:
+                                    type: string
+                                    default: "UDP"
+                                    enum:
+                                      - value: HTTP
+                                        description: "HTTP"
+                                      - value: "HTTPS"
+                                        description: "HTTPS"
+                                      - value: TCP
+                                        description: "TCP"
+                                      - value: "UDP"
+                                        description: "UDP"
+                                - variable: nodePort
+                                  label: "Node Port (Optional)"
+                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
+                                  schema:
+                                    type: int
+                                    min: 9000
+                                    max: 65535
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 53
+
+  - variable: serviceexpert
+    group: "Networking and Services"
+    label: "Show Expert Config"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: hostNetwork
+          group: "Networking and Services"
+          label: "Host-Networking (Complicated)"
+          schema:
+            type: boolean
+            default: false
+
+# Include{serviceExpert}
+
+# Include{serviceList}
+
+  - variable: persistence
+    label: "Integrated Persistent Storage"
+    description: "Integrated Persistent Storage"
+    group: "Storage and Persistence"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: data
+          label: "App Data Storage"
+          description: "Stores the Application Data."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: type
+                label: "Type of Storage"
+                description: "Sets the persistence type, Anything other than PVC could break rollback!"
+                schema:
+                  type: string
+                  default: "simplePVC"
+                  enum:
+                    - value: "simplePVC"
+                      description: "PVC (simple)"
+                    - value: "simpleHP"
+                      description: "HostPath (simple)"
+                    - value: "emptyDir"
+                      description: "emptyDir"
+                    - value: "pvc"
+                      description: "pvc"
+                    - value: "hostPath"
+                      description: "hostPath"
+# Include{persistenceBasic}
+              - variable: hostPath
+                label: "hostPath"
+                description: "Path inside the container the storage is mounted"
+                schema:
+                  show_if: [["type", "=", "hostPath"]]
+                  type: hostpath
+              - variable: medium
+                label: "EmptyDir Medium"
+                schema:
+                  show_if: [["type", "=", "emptyDir"]]
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "Memory"
+                      description: "Memory"
+# Include{persistenceAdvanced}
+# Include{persistenceList}
+
+  - variable: ingress
+    label: ""
+    group: "Ingress"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+
+# Include{ingressTLS}
+
+# Include{ingressTraefik}
+
+# Include{ingressExpert}
+
+# Include{ingressList}
+
+# Include{security}
+
+  - variable: advancedSecurity
+    label: "Show Advanced Security Settings"
+    group: "Security and Permissions"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: securityContext
+          label: "Security Context"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: privileged
+                label: "Privileged mode"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: "ReadOnly Root Filesystem"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: "Allow Privilege Escalation"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: "runAsNonRoot"
+                schema:
+                  type: boolean
+                  default: false
+# Include{securityContextAdvanced}
+
+  - variable: podSecurityContext
+    group: "Security and Permissions"
+    label: "Pod Security Context"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+
+# Include{resources}
+
+# Include{advanced}
+
+# Include{addons}
diff --git a/charts/incubator/mosdns/templates/common.yaml b/charts/incubator/mosdns/templates/common.yaml
new file mode 100644
index 00000000000..a6613c2ce21
--- /dev/null
+++ b/charts/incubator/mosdns/templates/common.yaml
@@ -0,0 +1 @@
+{{ include "common.all" . }}
diff --git a/charts/incubator/mosdns/values.yaml b/charts/incubator/mosdns/values.yaml
new file mode 100644
index 00000000000..1fef98f0ac4
--- /dev/null
+++ b/charts/incubator/mosdns/values.yaml
@@ -0,0 +1,25 @@
+image:
+  repository: 601096721/mosdns
+  pullPolicy: IfNotPresent
+  tag: v3.5.2@sha256:f256b3e1326add0fb128a7aa2fef2116a977abb2158b90a7a8d9c250fb003973
+
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+service:
+  main:
+    ports:
+      main:
+        protocol: UDP
+        targetPort: 53
+        port: 53
+
+persistence:
+  data:
+    enabled: true
+    mountPath: "/etc/mosdns"
diff --git a/docs/_static/img/appicons/mosdns.png b/docs/_static/img/appicons/mosdns.png
new file mode 100644
index 0000000000000000000000000000000000000000..540544074b0a95bf71e798edd6dd888623421151
GIT binary patch
literal 18813
zcmeIa<zH0a8#R0e1f)|!Qc_exK)O^?5Kxrv6zK+OMHoOpK)OUq>5`72QA$9%yK`s;
zxcB(|J%7M+zrJ7a8RpE)Is5Fm_PW+u*9lQmktf8vjR!#xp`wD!O9;XM|6)KlvBArs
z$KP}Cg6p85?F>Qq<mf*bl$1gZL5e(zGLK(*q-;;Sr|4<=T<!O#jyL9S>zfZ3zSS<%
zE8(g!!puohQFube^iYN6hQbr*=}j(H1P^Wq?u{q>9fa<*nk8ns?Hdg{Z+|wNNG_jr
zZqfG_v08WcOdZ!77Pr4~b6ct7FJBcunR4!b*fP({%*?#NC7F*;LP{F7qz-|XeI_i3
zl$4bC<^Oy0|E~|eQsm>qbA`k&x$>11g7A!ROKxfryuxT-G?bNIIlXj(HQmArh3DT0
znAyLUy5RzCFB*nRKT^X?!A>f;%bQr)aJE~(eaBAk7Nqxvy9BoyubM(jJ}ZWbR553P
zbEX(`jF|35C8lmbkjyQ%@=VBx#}m<u(Dm2#zh~V|N}3qQJeRXytQs+^fiI4a!uB9q
zE6ou|RE8nmEh8=hPN30@6B(JQY`oLcQ%%SN_w<p2)E^sT{j^*~{}BbO860ukznIss
zDSuHvQpYL^X4`2$603_e)<Mb~9jzG4AFYZ-&*qB#BQdfmN12&T*rXgbPc`rFna)Xt
zC_nhZ`sb#!QvuBPiCNB;)Ym>k8CDI>sLIkH1>KsC!MEa1U`(YN&<RQ6tqXbSq@T-h
z_?XV^s7fcPz5C3z-&x@p(k8DUDGVYQ<CEfYc$dqmKQWorQ$Lxk=dr@-ofL*vh}8gc
znLecT9R|{<L?pSDk}8Rn?oc6Dr#=O=U`g%(o!<Lw>d3{+Y#04B%XV5dt1wnr4N7Pb
zLFgmG5NzlsFIdErSXnozn$<WbVqy7@*W4b%_r~CTP$VnUhEFi(W<(q%sAZu5GqUhT
zP{9kF8`>6hWMt~!;6@3a;(zB!CT(~#6i+OUhvL^!P?TwV#wjzg&<U^T<s-y{hRU(W
zu<Cm^p2*0sZWPK)to+oVT42S4)ZOu;o<9&+;$b$CTHy@PE#PkBq=0f(G7;o5m7BLn
zNxgov3~KoO-FT8B4Vzn##6s~*6h4z_!+jZ2F`iylOH!u}dH5LKX#BvvPfqGc_CaCt
zQZ^sIlpo6<|AKk%R(==>X%x)`9v+M;3v%#Hf0Eh+htqmvr4kAAVEH>=O77YI`%3kh
z;9jr>m9Y>WL_U23MV*SIB6TGH(A9=W22E0-fDFnhPaj2b`GCIAAB0!z>pXaqf*~y<
zxkpk92D7dA0A6u)MmcJXj|W9%WYi7d`7tvalmsdy@1ChQ;6Zzy%$o{faJW!?tit53
zl>srN2{SCKy-7-{Sjz*`)YT7+t*3)lpe7mJ^H8|Q3%n?Gm@~NYJp&?W7K0Le4u@-5
zJlwMfZM;>C?f)FHtwD8%nK|x4-Kcz6R;xJ-#)Nr#Ckb|snK`O)E?DLqTXo+AI;EW>
zL*F0iq*esZ3I3iAbXPv!7Y^^Lxr$O?oTo9shYWF?3b?_r*l+~@JAwz@_m9*<UvF$g
z9)5T$Z7v(yGe_9Fl7dOC>&xu(k;8)x(!;Bt-C&lHX*-^Yly@UId<LBg%$(`V%9yQq
zBP<KJnQ7|(aB4t||8CLo6EW$!m|ibF46F}<f9>g1z?8IdB@J0QhCa)gCCY=~x_(N{
zE#=|j1$hvw*`TksAlxo<PBQA`1)ZAyi@%-c;8lTD2*;mnF8tr^M;ys9`-I%D5rOKd
z6iU(E=~zJVza!p=4Ghr0eZ9%}>POHLW^y6=HtFp7)r`P}=SCn0e4P_R85xUy;wf;w
ze@F6%vEXpHb^Y)L23d0<Y>xfkbw{fQ(C@=xMht4^|5|qYwahuCrlToTJ@W4&u0`dw
z{vOWY{lx#?m;LYk-~Zn0jaF4ZgbIGvf}O*W9t%po-`Tz?2quJiXuz}lFgQmQmVdSe
z6%#Xa(a*LGjD=seFr%pd8dH-O`2xMuBqn{-pdwMV!-tA=zdr^8*818<IdmASO&k5i
zG5x&${?I9>krhoRt1I#Mfx>@=5g9w!5hs--H-ihfU$hnJ4R=;^K@>Xr{_yFgT=OzP
zKf6Qg*9Ib1jUj&LLb3W72nAlme3~4Qi;%<jx~LD+gohD?x-Tl>^q>ijx{$+bQS!u)
zvQK(~6n&OH&E6xFJ=yo_ZkmQlCGV&jKb^-Aq~L~_D2SXbzJ9>eKib;Nvvgn8o{&E$
z*Q|#({CAG7(po6WEWfLVc6X1eB*Q`SR-&h)mrc5HiEwU0yGZ+#;58q#fm1g&q}|zA
zB<kj#mhD>2W7p4N;ynJpyY~fSqF7OrcvirZ(jU}<Rlt*=>S<y3GTqNW1BNWa^H{C#
zYI#HWbb4#Mz*Kcr``Be<fNv`K?>m|3uGc;}`Mxwv(_l~*3hzoJcjM<*fBPO9{_(Zq
z?jDbYorR?H>I(9>ChB!HZBVV}&&)V|`kz}n;z}oLU)yhmwmnY*{T(xjAsqy|yhlUj
zndm0|YI$i%Xt?a_2YsBCwOLk)$%*|_o@Y~n_VmVcuMDjP2)5P>Oz#T6bq!(WkF|1z
z?JreAObfzRjTB(4%1Xb7-VdcL<Ex@ee>iOAb!-83uY4)9QQ>T=+QWN4PZI2vG&cOA
zJD=WCcxtFk>+T!ZMCP<Ch{+@X^p>7>#pnBBRAr4uk~CMZ@|B+9HO(&$qH6S#q~asF
zYl1T7?s|!Cj?Eaf=F|WDOXQ-Z{|#<=7lN}s_SK=(q<HQ4dVsm;0f^Q?+*+`%!(2z(
zUt~pGAzP(`;(xpQBKWt~z8h=G7mhHIC<4qAbwlCkOgmmG@_r~w>Q$LYb`i~pYSuxI
z-i*lZOZ4B9dEQR1<nbBbpj6P@v1w_we2UPva14Kilvidej;{O6Mcf8$w`5<No$Eg`
z7GC!bYW`i1r?K*Sk3(rj+RrFZQ|#^dj6v`5@$Et>CO#!Rh?(DvVcAf>48Hj+PAzsj
zPqxK|gM%%VwmZ(*bleG2Ir+K&%<EBc#cOL9X)|mJNG9j8{Mm7-nF_Ab%9p+1u%f{=
z|1JV>$Mq3wFMRizXVl8Z97mVD+Ls0bVtfj1tn)2&y~5>iWVoea(q_?RpG5T3%Vgxw
zh%AaE_M+M~RjKL6Mhu=$mI(5b!9Wk-%AaXc@tFKdA<I{a77nGSzlq7=r3*SZa{#t4
zjs@*!EgaGnacQ?aVheNqvU>-+M7-+La*a8;9FBpNSZ}v&?)qRO*1{b;XaN`7LDA0B
zY#?!vt)PobUUOM#Yfbtt-O3w#ex9Fc3(J*5DO=V*YsI4i0nQx#y_f4G`{K1rcFlrI
zVIv3C3O|9y>gy8G;`fvBw%^RFBjYDk_FryVfdykOKv7aF6IBg<rumR#PhYd_OSmk)
z0&<;&n_oTdVem<hVZYZ(v8AwZ2N>e|DYqoei99RD0huR`l0PFB-bl6@$=Zn|KZ|z)
zvmvgR^JguqV+MiWy=0~M(i#^U<2fzR!Ya8HLb_dBb{p3KX8x}bQ$)<V>SEr)#{os}
zk5=Ov@vICc(0%7_?L^(a&Ugc*3k4~jpQ$U$BSTvo1?IxS7GN=`e*-^Li%RVL$);3Y
z<ibgdw-U2~)YXr^NmBD|snT<^+IB`%?mf)Sb>!gS^fi`Fl-iauOxorb1ZGUh4;Rkl
zXK@=7-j0DTe!l~^!y`{B_g+qNR#v7hc-V)v4~Hm&RZ<zXfpqqq$0*{_?{LjldSq=#
zw;Mgh$Nh_I(Nw7@+q^oyurPOQ@LhC6s_TskC`t=l;6ZG15-H6DkM{53_OPyJ1MkHb
zRLp5=>g}7cXR3@aF9S#`f4(mNxlJ)Sk+)9#NlQP?<1>aotG>B~f!UiT7n=B6J+1bq
z1>B0PKb&3;)?}NoRlO=Odq81kuSu_~qj~^FNhipwkXsdiK54Q(NMk9kyvBxRH1>h{
zkG|C~ne21af9sm^AThSep}vakU7mD4=`&_dNa0D=Im+g)9%5xM+vc9OoMI68f$~QY
z`?*D>;%v|F@rAazV|kvK(GVU)CN$1z1!i;Lrc(TV&_cUtIuD=Ha$-%rAGi-GN&C6j
z%AxwPchR=Cj|i~jL38L-VA2-ZASga(Q>tmS5s9bb{&RH3j2j&j-Ish%V?QVK^`{_=
z`iU3aVTByy6YoOpwoUG$$9_nVC*OawJI>K(oexaP1^$ZSGzGrwGXq_Friyz#S4Hm(
zY$Sfgjl>8L9)aEx4#e<R{sp!w!FcY)^D^^)ag&aeW|f~{gbHjd^WIk$?ax!zY(s(q
z)O~C<;yDC!Ag0x2^v6AsZs%Yu!2DuX|KHL=tq*R#q25?&k5iyV$DF$bwqZ+;!2QRr
zD9wj{yJvS-w=ZWfdnwyOM?V_g(=yfLEm^;ZhyJUT!|^OVVr{Y(X-?}a|Mc-axE7^4
zv{$X{chCN=c2Br@yhFIfPFS_ZV;v2bp>J1+o9Lxk#l<l;@S;_L*T~h=1VjZY{@j)4
z42Q`vNzFOY*;8tjDfh!DqjyF-rQ4Li4DeK1emnEBCMjc%dUDeGRKFY7z)q}PS~{NU
z-A5f?s<7?Tu)*^2SGAv#yEWgO>63>1KFoCj(ar9GZlBiOF3^3I6=_T3E152lMB4gk
ztYES!#hNdnzamJ%g<h-e>mq9=5~Q9IKP07S!}7+oUbW|H%qY)}kq~~6KvkdLGI%Rt
z?&?Wqi3f52ta0H?*K>>+HiyHX(n#CAWv}r}e2}i51I<0TjpN3tzs175KggdGi#@FX
zLu9)&6vNxXlE~fvU$Xmum+(IWfQOW{4!0BKXG$r>NEG~#z_cThC0YRwisqdUn{9V;
zv;GounbdoDqUw^WQO}d%Ks`$#wrM0xad|D->fU$R>zADBx8+P7WL(#u>JbA%&8OQn
z>(0NeSH6hmwo(mgj}p4Q5c(s#>A+*la#<01I3y<6qh|DFUd_k^LNE=la!jW`$&m_2
zRVd>Pmfd~Uox^HM1YlQBZx8r{Z(f9nENkjiCzSs#q|iceLyiU?YmfFg`K<{xwr?vU
zIPz8cbxP2<8N)hzW)uS<7B#^q_U$9Qpw^`v3%xz}rq8^*B-D3E@aEH3`VBrAQ{Q-U
z=cTtKnD>k4V^m~#!B%t|E7I<mICZy$2Pc&`9T+hKNIRZ1YfHF=&a>QS1I>Csxk^!f
zulT(Za<vTX+#;Oo1O2c0q%4`)u^>fwsoLjahIi3Vr^C&%v$Xa5M0zqSQ~tUfyyWLp
z>Ca&1kNh|;+td9!m+yZ1mxPRI8Noj*e~>ZZ!DsvH@xKmo$yN54>H?Y--h2{^vt4<9
zD?i7D_3ccqpG`vlwpYS=v)$n3zU>olY7hgpzo_?Ujy8mC3H!RSHw8a`DzUZkeR=tK
zXv?P9{I0NQcIQLkYq|hrgK2;Re5Ta+U1yMp*q>j!Ix0{JQ{Ct1*-GPjwVxh&#tx9=
zkir!IwO&nFdD@6-o8^+%#P!ioOnlNWwi@$--}!SOG6A@p@TZF-FJOnB{+n$z<C^Lp
z{*=w(2%VW%rEhhl$O(eKukU_!c42z_`f;sPth9%l{A^6(uCA+}Sd*1_5C3!dH#9q9
ztCCb<1~E-i!`~?{#w>9}Yw9dG+();T@)l&LbZU}>Gz*^nUR7=bn<4HzKf$1PRAl@#
zEnh3|&0v=2&eUr(v?i9FG;VGw^E>=v+Nqkqbnj{IuY|rfJ5|p-2|L-1T|i<+jdD{E
zaiCoBF+06<*_C~hZ-4l-&*Ep;V@*Zeak`tfqclJD!?k=!L=@4V=f0;rL<%A+OMj>J
zu3ti%ie3Gm@68d%x7{j6_ugE>B+E|U7TwdKCd7BUo+PzYhd#H3tiRf}al)aT6psA(
z9;6MXhMM#zBRdPKl!mRnx9*b<N+-8o&9gSz0Z^Ypzh!3ZHc;W4KGr?8pksOH9=U6O
z?Tvi6BU<_~C}U^McEyXjAL4%<(<)6pHsl!x(ircr8%|d?>#kX6FDWosGq!}pl-f+F
zM9B))cjx*rBlp`cBL{{5et5j}DmaD^TTWzP(!`a<(Xx>zGXt6xM+q2?U9Sc9F>aA7
zn{HC$W1)LEeFn({Ms)+lmVri{T{fT6?Ik<Xck6>~w};8u?L~$M(ku`X@=3<bx$L6y
zIHyZR7am!@QgfeX`<Y%|6h-J<9SnQ@VBEq;xjZAg0MRw^+n8K603`i8XOALB7@?Gb
z8fA+S?;cqeXyvo#=o(Y{G}8Lmby&U+x%f#%fMDQ^@h2udYI?>H^!r@GdAl}fhy{X)
zkM@c-*ss-e@eaa@utMAZ(uj(ywSnBu`QC>v-gCgu^hKrRbg{~&oOmTZ&dF)|P|SEv
zIM?%;^BC;1e3+#%<&CaOG?hO!#g6Y5nr5YMT)81?Qk88uuESfKjKN$%j5`bT{5G@`
z>%Fu*QLcW@%7DIb7Xb{c3b7L@xozoS7BMxXlXNb>KL;)G{;S3LwWicQ6#c&uYPRbP
zQZD5HSXvui6hTEjFD9Q}RhwevWy>I4p6%Kb2df}FaUKof8t|*j$Q0lZAi|PAv+8w2
z&^OC%Jq92>u7{+gd{OyuZO971e-P_zTxrS=q^B7`qM5mRIo+a{JC~Tll0vfvpRzE2
zyZ|U>=7)l@+{^v(hEj{^*Sq9AgA$FuQ(|tf2Q_owrt|ofsBOKdMoc`s9X7QxhrC)f
zy%J<;h9ZUNDk>-)sX$8|L6V1zRhoS~OAry*`@;V?%9la7PH5*RTd1}>weZ5+5tQ~u
zSYdX|;brhuZ#RC7mGvfP(EH3Hk@h<yU}#|gMK9}a&OQy2iq)LRw>;7!9@!2rT388`
zo1ixA=?XzY1kCas{X&d5WY_OH-A-e8c$DR+ztgTQIk>Bnr76~f>_priq_@|l`<P2v
zSwoV8s;-8UpBOr~2x{eVGFt~!jEE8$cWsRyP|VVwlKt{-IB`kMwkzSE@3+JjZJIX)
zD1jC~UrUoW@}Or5_lWf+_1NTVszP})!3vts9y(SXbXPu$I9;mU7)H9fu6nl*ER!P+
zyzq;eIM}9-X=@Xj?6;*kTtDce!J1F+o{o>$gf-c_20xb}rn!!?<$CvK?2)C{(UOfU
zCar2hlap^x6^|;rjz@9b3aZ9QcO%Er<)F555VX(wf=*r}CQ>!nddWZ6W2mz$3ESR|
z>U4VcRN^+C%n6pmZ<$&n;kM?TjzG!avuEBVZ&?hRwgkC(^hmZ*uoa6H<P6s4+0OEA
zWCS+rf`kxbxo=5w+I~n5b9n~Dl=fv_b$K$rDU!|k*|(~XEyiw@=^>NO^@DDrc9F3U
zIL?{zF%pyM#$(4hg$Ue+c*jypRv#LE?8c|s`*ll5HeF1RA@SO8J%#LQC0dBxdq;jq
zjo4O^+KS`^F#r9EM`vdv=O-ZRGHKbysiR#Z{?v26->ZUV8EWaA6u)XCqZlledHFXb
z#Ksi+$JAQVTIt?i|7i&ySWOYXkg9BLYP6x*#9Lv@VnB*?JbA1Wd_i_Vx4;F`K~Blm
zxxSzFi=p50oEt5P#{1*O)v5?i9Nz_z;}yP?8hZ{}Vs!lnBgzv$L{O^kvl7y<Nj;Jf
zHu~j(qQ~=<mFNH6|G|2!khAkyDALz{@&V6v*rPM}#0=&Jd9ji3_~=_JuAvuFlBo2q
z(W-lOpQrwQ3Y+Oq5h`_2!S!V+eQrHjq5|vM;)LLqQ>EVgyNOL#^|PCy&YhM3$?ue{
zvaW0zo&3T0Bf|H&q*L(e3xl^SUv}&pSFx<Lv(Ctz17gq82-@af#lkWCJz9eE1P`KQ
zH4XPJCKtUq6FmjA#Qv;*x84j`i-p{T=;)Nj&aSnFF7-f6-U~nZ8-n)&GhpC`M43kj
zhJW=;VQl`{=04376<IOzI%jm``)-8FjS8{ya?zpL$MP7F1&ija6bS=mz3S$T3`42Z
z8~g;HZn$2q+-+5J5Xi7*gbRV3Ki~GA{%@+0`XkrmMK$4`2w@y(NZLq1)O2#E*Y$9)
zHpA|AP%X!lg}iA7)6?eCKq*y#PFR`|Uv?Ssf@$#O<$M+{&l6Lx6z)oojqFAU2Y{B1
zEPup5{hhsAz4mBZ-Yc10@CzM5aCDidUVZ9Xcma;lswWhn_C|*ushmo)_SMascIL;k
zL#y;=e>uqPxPqdjdhlS1ud(K88tkt;?`F3hQ!f1^2et!R=hsMz^cyPqzxs?~@)q|J
zld{X)o$u$TqgxzbF@4a_<u!egylbN^$8BinPTQLC@a2N{BY$H6TRQIc_pr6EMsAvh
zoq(I(?CHKYH_PKE1z?nV?R9144IKad0jxUrt5QG(@>0;T4W(PSa#B$c1>**iQ9*M*
z@1VS_-5sr$H#oOrKBq=^9GQ2M>BK9DuTl6{KLdfG(Y+lfGx<VKd3TIgp1huL=j#Ux
zn@&4|zXE2+c8gC-543GaXa=v32Uc%>Y*p9U5K5WjiSkebqy-2k3u3f0^4fAcU;He*
zyj)xQvx%@-U<i@U>!=$1&W;aJ)1q`p*F)nurM>rJB<0%<tJ;m#*8^{EdNlNhNB!?S
znq7Oj2llixV#dztKgLKqd;PfE=wKzf^6&1fy!cte;IA)6*EG+<6|&k)IQKDb(c5kJ
z1AxKuh8(%|#mq5aJ}-it8nqeZEOb(nz`Ngcbq%&v-K~iz6$@??m%kn4Fxa5CZ<%_u
zkbJZF$@MecN9kkxN(OHviRzCV@7;tCfqu<ABly5m>?1~t-#<OIYNB#j`9~z_6w5xP
z)@F0Oxd?X?HpYd>x=`;*TafAZ2+_YkkGx=<@5W(}T8&mr&85oy^BP*v!rnut^y+79
z{O4z8beEW)L~S^Y%8?t4v@2Sw{LcKy!UwDG`A}9AIp(?tQ!6rv+~kNo8{~_bhbJ%X
zinN+LTJmroBkVF1S>r%FEtNzs(=@;FPkxeVb=M7PM#81>d2G)Tx|aQU9qV-Kc;R|S
zuwTW!-jdFIb1X*}XMc+>&U(^tJR8rb0~{1mo5s?>X`+1n=3|TNYWmv`apZ*mPE&V=
zaz7A+v^-yFMMpio9_y-z>z9a|Q)0EWc2p_N?q|I4#csI+lGxtL<F}L+RA^>kO0V&K
zjrJK8iiY&Q)eUL7)xuco(=a8wgkjSy8>yHI7Nn7|S=bAIz_dO{RTnKx2hgYT=w(Nk
zQ)o;XC1NwtyHARONPT*???lyZp4jjV*HG+`f~P9g;_iymA2s2EZ0~lb+b|M&kSKrY
zFRpPNkyjHFCG)$Qr4u9$d;*dVl&>|??ZrDH5RK@z>=F+8D~L`U0lZl_Ou3;U=(F<T
z@IWN{LD#*d9)ZyfRRJVYgo18)Kj?$_jKk+)&s#R!`W>_!;dpOkqzk^0LXMw6OTAsE
z#TK2~;tP=1Bs8}L-Gj?t=Jj`;x10@a*Z^v_^J1&&;b)qnvX_I^^=|@(ms48lZo&1d
zR~=Nz-BYJpINYwH{UlG#T$-@-<?d<#5?@{`O1DpFWL7T8{`iAN?#09#T9ug+H(|O6
z5Mi?ij6MU_GG--x#`+D2cKLu07`vC!7AhfOG%_YR*bkDL(=biH_Ea1OfRKF-FKPqT
zq7?xnhDHXn4JaS=889=WJrC{6o@Ppt;i*MOwSL>`YO4tg&q|n;m>!h_2<3f#vSfK{
zeSwiAEgqGOeR=+`^nm#}>V84`<%oUKfXs&80a8pcZ-cf=3aD-58UM<jp{Dnn-^mxs
zvSmfrLLW;z19_Yy&mWz|s@FDY?~ezlBn7?uRyFCU-U=9JY=@aMm+}!b?29kH3S~@t
z7jlJwtKciV1WU+vIoEuDx_g$fVML4pz$3bZ4%TXqo1LiQ*q-~OJ!~<#WX}kgovBq0
zf3lZV(C~}>Cj5vG*nB0fLUVSLRa^pWIgr$8o}L~XmgJXHI%p)2u7Xb01$@aq2oJO;
zoArj<-@_SjIg}Dg2y3rL3wrLSAIm(e>&Jwuea6`Vco4IrFgozOo(Le4{JH77Q#39z
zFUh<QfNv$B9+8EFyJ^QOlIjmhsM(~r_;(_`9=gGy4v$>J#Kiux{UeBb<VBK{b3v8J
zdb5>ii?p$hAiyU2X6NekR2U|SncTBt`(ll5Yn)(f@5TQd2x6e_J`J{E%^^Mi#FXVd
zyF$HQav>DkY|}w2>gwBl?a%rNpH~A$Z*MsWADB}C_U67*cR-l?y%nqXfcX+2K9Te7
zkZTJ2wZ#;_8n-{}y2}g_W?riFwKwvmxmXPL!d>XOz)J04^OY2xLrn7e_ZPh*7y81b
zx`sR@_~43#Jndc<a@cicT%FmJ>@$4Olm@bF_JY=u)|=7=>k&l+IGw^Hrn}|=cLqHT
z)XNh58V^$ez$C{D=Fkh<r6^60oBf$Gmn@%FSwQK?g9Vj_t3H_Ru|<xsU3yZPQ61of
z6)pG`o%^I!&-0w3l5_!aNJDe=H)}NdLAR6AuauQtOYWOynx*uYfDu1C31>8V>^2`L
z>zTq@xiTxju+pSbPu-x8P9fST`7W()JT+F)5uX&7;tH$k*Y6hM@e)#<J=8=^2Aw!f
z*1MML;EnPkO0-YPfm-CLjWu+hn7POT1sOMyhW`TUL;k_N)AajNJ>iQi&s2zEP2b0x
zk-eP)jM58oV3`=-75+`EV!O;zj0&7Is1LKJ_Y4Br8Xz^}hQ9!^a3Y$`+if^`>{YGH
zgcRfC_}KO<mn5E#%QZuj)N9IqIMbO=v(8YsdG~z1gB~X+e7!g~ui8I*RQ2*pnonPz
zw+hMRxZlYbQh@mA-VFskFyXf=2u}9ZrX{c3PB81wK3*^Fo=CQ39^tG}(<r>-0;t1K
z@>Ce)9m&IsW41RSBiEU~lsEWXBMF`Iiep_2^SC%LR46Y(n|yY3c4`k=>r1_51?ZF;
zBgtJp5$p|Z*!m;iQe6z#`I}g`Ha`R;p_$UAB7u>t0T$qr=WC<c0Ble?b@sEHZ7nwt
z`GY7~wmE$5c?%#98ls5j>sJ{LOBB5w-|kI@zfo>S6<{>h?xfmSN&K3ABqs7_n%5XU
zy_47>zTua*&byn`#QlyfxJwyqrlx@bnG(<GwyhR|a}B-;m=aZeDPH2?skyV$KP)8J
zlY1gATv+JL(`J7PXe3%2UD4b?urs9WSl6w6E<5vamPNd3y~>5L^NU^dW_MTTnBhkL
z-CmuU(Em&5rma8mCE+OY2Bx@PRl1*6A;eT}+N7aq77CE^x6zzV_0BHH?`lKBaUFHX
zNpixn6{ZW4o9$C8XpuSi&_ek8x_z#-%jcdi6*n}g{7U7|IfEikxV8FEiqClg>q!o1
zFO4`sTaamGvcb}Q_9?L-#|l7@w;%1_4t`hdvpSu!VI4MUdQSL(BE8}2Zx4~rvcNGG
z^oDv1q{^v>!ZzJDv18xW6XJT&0Jll=8s=AjO4t)w!`BkAiIcGV5~x@}QedBA=hHua
z8!MA@XLxlrDVojEs~#lMcC(H`gde6IJ;lq7RUV?U#$39*pZl`?7)ltPWu%^eV_(jt
zYSkkL;z||IWLsp>)l<ou1$K}<rk2PxrM~yq4x@p#UL^~M)m??QtD}`Wx0Il7#I8b4
zoqdLbl7o!#onf&nNO=y}M0Tm*W&)5R2UDVPtMt(%JczjdUJ;VLeZDGhu^ICwy8I0G
zA72?CC2MQ)@|^qB@mh<_Op-|u8s(n1iKK`{aHLTcvwd&}%n;+TWZNGK%T`s*q}fJ4
zi}foCjip%U3ipj}l$~{c<5~(VH_@9-+TbnwZc<f*(CY#ddrSJ0^y%KTzS^}~3b$&f
zukJQ*Qwgpw=1V$SAB7XqpaY11u53ewDVAkaNs-7z31apFBu>}fxR>JmqqC?GfA#Gi
zjQP)n?${~ezg92#FMj|nBVpIz%D1s$zM=ky$t}<f-3L5$*l)2XnioXdYPP)IFdv9=
z-%pU*wDn>9G234iA<n;y>%jkr;}K>_V{1ZBf#rBgS0nVa`C%ciJHyIm1rT3>aJ#je
zw;FYRDL(As(Lx8iZ%|c^nMx_1U;Po?Obap8H8P1F)jgj}K68e-6oCVYxnAw*NFdAc
zv=Y<_z9Xg5f3;qMq|R}5qH5pI{`6*YXYmt7w`%_M`=s&Bq3$3MEK>KN4w`uP8pxX#
zn^fx)D*F0TzP}mmd(@i#`#@x9k_r*V?!E_t|5*nJDXQ^}sVx;-Swa45%l@V;xDq~W
zJ79~7DCaAFKln*x=&A-}GeX4IL3P${>|gWnlVhTz{;nnym9sotg?0V?7}6u_sos9?
zYBi6zoV|%}odpKM12zVWqPLtQIhgP%o838nhf<Vy2OlpZ0VNl3<JIB$!B81=bJ7DR
zRmrKl>rl+zRqB3w+U<n+*9dozOoTay#@xn`d-_;TU-XVTnJNq*yr9AL)N4k(h<z}2
z2a|E+xOr<WATT=05jpHHyA>K~RIug-dTO6(#4Tv8+(4v!ak+Ze{+!&6R=L7RSOzc}
z77Cg$cqU*JEWn=dWp@_P)*yHQ(?Z7$4Oe5%p!DcNI;AwPyq=7$Tb|1)bhBHXJ3tR)
zuogyuG|pIz3;W5PJSV)GA6wC!*FCRg@zHAId>Xs{i#wIMpuhN1$FBiL=j}A=^XjCE
zqvYFYd~(v``BP5lg8o`Qu+^BL)yUR>EmGSd)Qmmoy(#J>go<1eX6G}H;>7YFJ2^i1
zc8};pfGry-L|{`hTp|2H1+-V$_1Le~NT_PJda|r<)+YKsAF@mF=Ps+X$M)a04b-zi
z+xoZ057Lc43pEnSFpDA9mFEO_I17_HZVuawd#2--N`WEx^t(qqZZ%H-&^Pyd0v&b)
zh>ln@@{s&u!{C#bHjR!E<31YZRAqPTJX&nsZs{8GjW{Jlq<lHdqL0lzM-5H%fE1uX
zmpzJlRMq(O+Q=Of9Tvg9z?$(5pWhPIA2x0<vV#hWe7!h{IqBG9@}QM>FH*?REnlED
zJ*i@vY{=V}4|QztR%c5I4CZ1-*bV>f?MJAiqKh?JT9ucwR2B>|+==QYR`f&WML0%P
znH#@QL64K9_T?K_R-}fadNjF*(&ch6{Cj{NCH&;YJHdP;cfD3``E&WRx`rl;G3@+r
ziSk*%mJlaw7NTF?2r%}5C*&qp77=T5`s-OsE!HK!mYF3JZ*+wc@?ePX5w4mAP+#ec
z)z{1L1zo_lxY&)uST#-LieHA$Nn=?0XXkl^wjs!X!#Y=CV~MkSQ8CeJC7nWsk$q7C
zYw*GLCn=s2S->q~6;M335}y#-05&TYy*H=Vxx<q&Wtp?eKxcQJ+Ow&Z`UvKeM!e&T
zsC=k{r&t+5T5@K!K~4YF;;ZR1DN_wc5AWU(v%p3$6o@MpWfN6A$i&O}CI6UOwNZ<$
z@tjn|b=+?Hl*#iK#jQ4<c<v|IqkCzjLC|j}&~NhfuT#9R5Iqx5R%#=qZpFDHF_-f9
zfHHJ*O?$2-Q3~Ro9?o;VTNePjPSzEf{R&iC2hhb(>X70j#dEkN&%h7_QV>sI$GZv~
zx{|p98LgZ9CJdMC6Ci^Ff&;G1O!wHy5UPrX$oEBg%+5gb+6ftFcRFRNDKj5Ax~Zd`
z1()dMUE@QH^k{vIf4{am)^mA)==aX*^>d3<WI2AqroRs?uPn^J&8-3(1lwz;B^n@S
zJWM$C?YO!CIrNln-Til7-(oFS<aqd9e_JYV$pQq$HI$AP#UY>p9aPmZ8Uef!mR~FE
z{L3Vl{t^>VIa-O<v!2k3wJ6VhsoEivZ=%x3nq!x=<zlz#ZhKvoKVs{AL;QfX1}m+`
z`Py_qhm8IilT#jhA}w*qg|O+g>V83f7**7cYKEl^Ty@*mA0Q2lc$XLEG|ttI-j^P^
z^ofbB<JJeO2M(9M`Q0Ks$VXf%{l;f0FM)!g_#2tFW;@S#BGI#uV)C2cSrM822OyHf
zfQYpg^<QI9mp2M{ZRD;b8sk57xq#VGXv?iH2S}gvDOX0z9AVnYdlrk=9S667w8iRb
zc<P}WtN9oxXBl(fhqLuQ&+e77H$?+$OLX}@QPfFQZPR7FmojT6QYbxBSR%N)lcOUK
z8J{@F36&PUN>9(*dSW;0S!F7EEntWTHpadUCyNJehW?&J2{;b211(uxfzFM6)74!k
z<jX(?Uy88j%ib}xcn118pO-7Sf9vc~@6!g2cs}!8{gO1S#kyvZpT<PwHElihbblh6
z<hOo*T)D#17>OdV=u&>@U7u~@N|vrY_3!sUN9cQDEp(KKS8mMxt82a$zqq6}rMjj9
z(YOgqDE0(ivE=(2+WIOl6Lwo4u_=A?5`^~zVfc4FNF+pd#_4T_W^4DdT*cNbXPs?H
zJzwLB&F6IPita8qhx|&`o*~kjl~cfkFr(}tTHRQX9dN$3vq}JwP)o2eIfGs(<)J(b
zD1c{~?e^fZSso{-qk`V_%{AN{6UKk09)k}JKrs^=Z6rjzCUgd^+1Srmk>Rcqqg}DS
z?DLE-%Ww$DH}H$0X+%@!5zEP3MRHRz;DXo$%t~Zb*_O!gZo5n-uI|{>NcCf&S4v*l
z4Rb{_p`7@T&T+u75YOWy1{koS^UF3JaK#}Cu|pJK@SDNJ7!~}j<n-*D*zJkSll<S@
z3%i;PG!C5#pUy;(G}!J%KD1$-qnGaIyKKjRQ09}hXtgG~xL&=*_-W_m+K5~YA3x8;
z{#c^O6GuSfpr-SLWbMlrr#}9`!_?-q^0vP80{O$=4X3t`TT<<sZ6+&G3FE&2a>w#3
zUtkX%at0h(#Euy^`*eB>@IHa<W&B(~+D6#x1l8U3OmQ(eINbu+W6ZUODC?5uqD9!e
zje840+;VS+2aQF70rG4UY+LbD;&VD}E9(UUpGC`F!K8N0pFZV=8k1YGiJsouf9${0
z8_MztvW_X*=&x9AaNWv3TMAA7=6qX*3@9k#y*A#xM}MC#mQS0~PNO|{uY7R<i$nvA
zI|I8Md7DB6t(4_Ey|eqkDFa3kcwAUfBE7TI3G?~17wXo?)q~6Xev#?JTXO^Fmq0M)
znCjfnJoR=h=*gcWrqXW@H}CGRNmr;x`&9yQ$<gk^#c$u_&tgQU(5^kMgzi{b{F)3K
zn#8M$wM&j&Tt*&?)0=GHk;J`wm*0PLX8|dfyn)NHXiaZrm*FOk<@Dp=03Z`zok!Ew
z)Ocf|w}!-=Opv#c@5J{=J2XbI`3q6-tn|j_vlqPmZtSNhfCa^uy)&CYFikU_c>wZn
zgwmP8w>5Z{7ns~$e2$ZStV0Q`Fb}%8&44fhklbB*LwzCx>jLt#vh(n+lqs2d1Jewn
z!~NXfDE-Tz$RjMI@W5pB-pQaP^`{${S=3kB=>{R&Hk#qPG<yMg-N3Zg3c{O%jkiH-
zyXe*W)`5HJMTf7wrybhXGY_QLf?xTct{OuK68X(ty_iEXpt+YJqM<2y6zS<;6@)h<
z)+)r(Wbnu%f?_CI<@5Sg<D|lY@cuqk_giFJ&k(Uapbh}_Om^@NtMv}RY8EIYqrMYY
zl}3@`sh1T5q&EUTJnh9y?s6Y-k8KG(!Q3zA&d)q&-yea*%M$1lV5T|N7KiVYKE}q(
zTy>cnI#Uvz^-=c$wCCX6XZ^-jD!BI#erqR7#mkP%nq{Y4h)t9h|7@n=RD?ih-p0q`
z^6|w?NPlf)MYtcmhCMF+wnw!)=`}~HLd_4Ffo;pwH%=s=b3ugUtNqbuWb_4aEPxrZ
zqFvAR{2n|qF9`rB!3}wkd6E(Y-wbLEY?<#8$7+Q~umWNg1W179SF+61z}NsN!A9eJ
zx4$c!k3SM5`4OoCqGuH$)gOTGg-~ScfFqyP^o`#=c6T+mF9j21XK8Jc771Nb!~k-|
zMt7hMg=wpy!2lu~Ied}6tH4XgPEAD0{)w2;H=PE<JL}?Qj!P)300YC;xnz33k;C5&
zGFBJ`q?hOHf;bxe-uYqLfWB^+{J!>2Hl*jLgr-P*EcB^kq9rp|6U3eD=IWK?pU(59
zvV72pzk_R(9#c-H3F7o^ERw_^8RdF@b{~-eHHS|t^9=djpKqu^4nN}N4Q>b57IHt8
zp(}Fyo(%fp|N8_q@>in<;v7p=rp>d*ZBfQPe_8XEqRCyTdaQXz4pH+olG%j5d>W9l
zMppFE!oa^%SydkK6;or8oYV_1=;_vaUU@BnA_*`d<<o90y-_Xy=j);0w#xA>>E7UD
zeGKmG0R<7Tt9|+RiLI?fHu9PqxP4x(oYk!+Met?Gip!WKf#gtp)SKduICIrY$bpl;
zT!`ps@8#w?ZdC|e4?eC^|My)|M@AZWTXz@oK(roRz_L9^YlO>Fc_#_c#1JuBYi~$R
z`gNaKy}UR-LL$`?+%Xxbu3+&sC~w^$lWDu-t5JB|f=>a7o9KEys*7EdU1A2{z+Bhs
z=dif~891-Mr^@aHN0pXNFnnwl5W!dimR;!YBT|~ZfFoIclUPe93_doxNQfgM+;~`Q
zaaEU&;opgx`>O%a3%ZAGa@=jSG6NYhp}B|jESRXhze-@3m<5ro>O2Dv`MzfO5x;=;
zzT))l%mbrEem4neGTL5?X?X(OK0hJDf+El3SycHc@pSZq;952hD3%N(#7$jk&^|9>
zKL4O*yGEZwk$fdm(lDRZG2~xjH><VT51@%%bPHZU-|rWoPjpCzSErwyT<IYnG89b;
z%?s`mf%9H;%;#F&-e{I4^oLUghJ3;hBtAMgdfHT4OIHdYbTAFV!QoReo%ee{cHfaE
zCFb=9vqOsB`#nG(S344*BU^h|u6*>5ycbI%ZphRx08-AvP}A%KZ#c>`9>X7sx`pU*
z4q#p|ARgUaeOP$&-d*TsapBozv3$Du=;=8mdXL1B7`f{SJlR*SsAws|%P<Uo8Cvv8
zSv{6ecJ-^fjYCTH&>!G4Z$KFZwnQ~~eDr<+eZGqcgwDM)pU6KFqBp)rkvQ@pcdGzC
z>)-VXY%DeY=oRu3e5t%tnEy{RI)Qt0_iM+Kwq^n*5+ZbN_;Pxd=<eTcYYJ$oKH^Yd
zKk|a1w3dK0F&q7RVCw<nBM96nREJKJR*g=3xL{DCXwD}x(7w#U4ZgM<@IzOLVGk`Y
zY`E~BYq4Vtv@~B!Q2G!Hs`-u{NiPmxs>`arJE3E$TeHj8DO0~2e%3w6mrVh?UCz=@
zQtFhe3I5m3VA-uMR2{1MM<FWfU2^tMIB-05eYq^K5R(!=dU-f|8<(WiU~6{%I_+KJ
zwOC=FVGdvobCx@E4F?qb;o%8>!Lw2|9~o19#|L%VfZM`s!dIg_^;-ODa;@nR8B?@(
zsh_)h>R5|vewD69n6NtV=EM0f4|?(ma4-R}$b~+?|C#&Ac4q%RVq79_gt-sgH~;Zw
zZ37TqP8TMsqD@Y3W)5L6hge*t0`VG6C8yblo4G13sEJ}Rl^+0Sjbz>G<Dd_w8z|Xm
z1O#~IE92Rx8z^%P(43LVs?oh4(<i_WV&uxnTr?^n+Qs2M+c`3#t`W~n1X5zh(&GHI
zNc(Fnjtd>wa{`JG4&?5S+NRXV-BT<tvCRjC@>8J87Fr+>xla$%aD)ekvW8&Hj%HBj
zyX3P;aBAMM!X};&d@LvgA9*v|wmMzRZKf6Ed|ZX{ZO_xJB|GTFb~DVYiT~V8ZVN8L
z_*_j(h*gb5m<kY{>;X9#a}5s`MN@mxqtfV(at9;Noka?Th?QqHZMIQft<RAMwipw*
z{AK35RqDq96rfiXNKOAZkD;6XZK<9WjM%<I9tmj!cXsqH1VPHkRixZ@MF6;^1R%4p
z0)uhrOb*1gpF;|4V`Cj}L6Bjbyy7Qv71Gg&gsY<&OVdd|hHcd2)FxH{c3D$kAno2;
zEuLuw0VT64{{?yCsr%lmMdKZhBL+}}0LqeZbJd|}2T+-WwxQ9#3(d)3xN=!{9WZ|W
z$YtSmY5Fx|x-VPpbY&2VjfMhZ<usu!2S+{vZ#n8RPe}bsS|JHjnwjrToqX`=C`<p|
zlkR=oS#m{zR16X&8(WEXdNIFW12ZdcR*U6S>k+6FT13bU<<8hyH*RW^LK&cr%r~&>
zPRqBO;CAMDFQ9!4r1KS;QFiH^1`d~!3Wj}d^r^5~?x5omP<Z!%0U%~x6_~c80>Q3*
z24q>_J8BxvhIfL5hYPKCwMvAe7B_UYV+^faMVN6N>#IJ3Tf0|l6$g)X!IQRWhTfiw
zop$RtEnMxZV=${wi4`wr)cT;#@=qMfieKl}wNVOSFjX4$!5MI|Px}T|fwkZ_T3V=o
zRmgC+&&)Rm2Q$-qw{6$syB*_KB~+UvVD|-0XxlqCh#j(WL;UnEDK(Z~%QO|UaFmK6
zo!|ByT!Y{!GBPPXf5GhbRUI<X1=`qYIlVhFEQ#JfBBkxh<mrab&$_eI2t(yHl<bxa
z3uI#5>;S(O-Dmcy+c>RzZJ+bNG-8-7MDH^UXurr}`80Eoo#uCwdg`NPLyzpjB&qRZ
z^)xF{vWDlGFcX~8^w!nn$bF7U-<&=}y2mWg0=0hT2k&*n;@0llIr477hk!QxGX<5#
z!O*L-`B!1>ds#Y=^w6!2x_XTdYj@8U)hFhMQodEcqgXrEKUvhL)97{RnRhW+_(0KY
z0`w%^`j#|@U-_nFqt})vShNEqUxzTF6;>>JAi1Y7^a?-?=bwQ1SOndR$ONKe#l>6q
z@}~SW)j|&zGy`y(@N*mdQjdPaZmF&_ZB;>aC~!ASI0W#L`{<z#No`sxiqQp@wBa+Q
zsl-%2Ub+RG+{yz>G2e$7NGeC>a6mmKwq8r+&-8%;5Y!Qykkk0-8-E3HYMF@h>%~)h
zk+Er#hUfB^3ueHA;!zsDH;~2-W}lMetDjMkTn%x6wCmm=b4Ta<LmS(u0*i~l$>FoG
zAuyHhU*@?{p$*L-wWzN3h#FpoKi%FaSiYwB3K&A$wwcM?!AW(1|LFAZ&V{G-^6ee1
z#zasbk*`D+yv9Jk)C82?(sNAk&1hcqH&;X^fN)q^R~{G1(+~mlA8S`_6KB;&3@h@v
z206yxY5&ytqM?Rk;h0<<D0x7yM=*qron^g1=?I&V*Ch1N+`8}sFt<*{ZXQ%ntWL?d
zg@egQ-ji7k*ex{C%Mw<+a*|hsP7KJ^NcQ5!xV$=_Jl-jsZohtQZ_3MyxAxtz9-SpM
z+w>3`-4*UYZzpjh>Qjw}qDA)%vihXtsBZ?ho)WbFZ0<s(qK%V423b&ZH$8MKyvu2T
zHX-qyMK?E%`$*ZR*TtdBa6)_P*L<eN)}K>e=*WmQI#9Rr@)EGTtJ7_3ECvK6YWGLH
zXNB)|;OJxeCba*>V+O<{w8LJ?-~d}v>*v7h)S33c)<yj^W0{~f!jr4x75ig{X-Qv~
z^IO36hK{{&L6R%oKSpxxyM>izCEn5*XV4AmDj@er?COTr;E>(fhzNev+TZShSd>gX
zaQd@$49r+amajgZk#y(st2lkTVtz|YKf32V47l`xxU?<)vT1h1NyY}uc-A0KZWNHp
z(c;hrrOg~mSkcHZ1`+AS74XcXzFBabq)tBv6;iS0A!E^?+UL_)J{G`ZXtCA<`0M>j
z_MQO)yiRIUZ{lu0es3q*&j$<?GWMf4q@qHAd$5nCvRrt2v;z%ya&HqO<->|CKs{Oa
zM)aur*Sdgo4g1B|$_?DAd?b|!fI3~W3G$I*Vtqgbjzi0YyFB&LSmPfx;@KB(W7pN>
z9=~SDo0NZp`i)J06jm<@9DHGL2`&=6V9$yx2q@i)KKLWZ`Hz~P)8lS6q^pp!8f<M&
z0ivk*t-GV)w%s`<%j%S>3^!mS%|h9W*oA-hTe|^Q>x(Ogf!Fo6JGc2zKQ!W2X;uyz
z01{cEdL;ISZX;x-NX5`>18oMiT3~<LfSMez^sJbN&_WAvGjZj2-%qm@{q1AvE+4=9
z=m(N2kpb<2<PH9&dRVy^`$2V2ruDI8g#!yn7{h1ebFnQf4mK+b8<GrD$J;@j4hd4i
z6~)ZISPAhGENSZpdUP)Jq08&g1wYQ~e3ELe=z<NkRjH>do9G+?jf((}N8XqlVfcX8
z?7y-zUZ?#!IBUfCLt8MCO18PxrCVf@TCO4>r<dE!Bn?1@rJBOfA=+?wXW?wcbRh9E
zX7_%yS?2#r?;eBFJNsnsb_7sWJ%EP<WTmZMlm(Wq1|LPQ@p%p77aO?5wW{JlpjSRk
z6ZI(#@c*w~&cE`6OgCXlTVmV;ZkZhE<a~yQ4l(G;sGZGrHQuumNw9~22=7^Wb{AN%
zL{4s%2EahIIJz#92wYW!5jpr1JvCg0NYOHS-Kv+D3<A{<c_fGg`yr6Rzsq{J?fh5b
z=mJU{yUyC&EHWGtIBpXG2dXi;0BD!1-UJ9d#ppsh01!`Yk&YPie*$;GU?e-eW&~Y3
zm*>L1Lx~rBW($fmK+OtacDHB$`y;)b03U2%y+s1lhN@gX6^Xf!u~C5`IyMTqrOiZp
ze!b_Zpj!pKjjl+nTh;I2x^=&hn`_5+(&@cn`gAwg89>I6_(Sx6H*_1^P-4VbK6Z;t
zk>~8BcBjP8I*)!-cXg2&=b2R^`Huan2xiRYCM~Un^&}^l%R<J>lBtVS!J?*M906uD
z!Hf}W1=Of_VQvVZRM7O&ZbDTYNS4Vpn#$ElcsCzfzopxl4*~X;QSVRXn8o2qN%T#k
zevWrFj~;>w(p=DRR)(I43ghp|>BBbvb~NB!ckgfdG<+6IF6x)xBE5x7x|RT4)#`eI
zUd2A9tpgW%i&XIr|GMhWjS3i>1{E_OZH(A&P#B{s$guFM<0-lao`bR(Fu;JNctDE_
zpN>AMSuw5u<CLOLzbe&K9AT*U74uE~S_561Eex7ta)=q0g||&Ed16Qvk2fD>cYBzg
z;Q@H?c>^iGOS}6b;8!FSL9p=1WD9!IWt<5EH}mRW&IP`ULT;v+DQbualpt{n)TrCi
z?<`)GdsSa=F^t^mF;)Ndvgp44lh<x9rsT1DI>mrfAJ~;Zd6<d&>Nw{x=K>iHw=b0?
zsNo$mc7-wjss#J)rT!7B!a@ubuGQq2JsgdDkio~#nEvn~QN00<gotopKu3mMWz{gc
z&Me|sV2FPuk8nUH=eMg*7%e7336$@e#Datf><MU}bfcfs{mp|_C+&G}V2v#U1r7yY
zD#9X&fQ<z}ogUy12bFDQRrxz9KhI>vyZ)U-T0#x~m9{<{9t+^Y)|zlDh}uw3|GlsG
z>fqVV&wv~!4d@Y?D~g~GFi|<|?~GduuMBB{4;-zX>w+rVzY8rNS3svg2GCU-D9|pT
z6uVOlJhrvX+y-yO9%ZIe?U&5z=u0z$0yU<`X=R`|MJ&N~6(l=1{5e2}l1|-*(y-qD
zS6oeXBdxp^F5_SgtzlRGD+w2#(Llt;n1C-qJLUgsnZ-ws+3biQVvJfhMNmt9Pa%uP
zkquO63(k4|SLpqY=*>@X5=ZbLkJAv45y9c6m!QI#?AJDIZdAGs3_cvbSV6x2RIhs*
zW<+sn_}|aYNTVd%eoiq!&=qEUQwTFNnPw)UNmpOyo97)!0M_)s!g9m^6_!JDlhR%P
z6{J6rIVTuJK7)jzssD=By-vv2`StqmgW1;o#t&5E)RZvoscKL~Jutw7I{nlC71xiA
z^ap@2_wN{Vee>|YgDO%{k}dr8lu(j?@qb79g!T|U*IJ-(9-75c`L9mC19wgg{M5#P
z0BS{~V;JY-gU5q(e+)UqZPlQPMjwWB{TX%s)$s3t()=6!`)@&S5UAPyE2>X?J6Db_
z>*vAomz*Q^_aFWUhbs(Xg&e{fG^k9#VaVUs<IMmLDQU<#Uz8-Gyq*DKa?+kt|2ImC
zNQzokJ(z!22XPZ|N@Xpm6j!W%%WT`YDg;-D;A<E&goj#SM!{K?i5+O81ZR=pVFu15
z9>lzFUBLqc$lNn!CQd(q3sHebA2dKy5tO)Oq>eGX4meSQ1|6JG$|eT_gbPqQzp%oO
zh%Dr8v7><ccIy!F{~jA)v909ckb3<?4XQ3F{z}5cykKU?JQ&yQc^9g0EG7}5|0)7w
zX6_?p=i4goyLP<`=}o!&M`D_S(80`1^++zO_o{OE<5(&N;xCHYLrjN5TBfb<T}Z`n
z(w-0&cs|4lK?&|Q(_Lm0`C){s%*5M73@rb3k()L*(kjrm8uBh$VX{EhH|H_T=)Bh7
z9Ws>B#SMdNaY9pyS<gof8i%qVUj93C`3MV_XW-O$!-yk<RA#u3g$&HdtrE5waQ!$Q
zFBH!Dl=>7FRe5qN%-T@^Jo{o3OA<B((N$GakdkVOsbm#4q$*6_FaHXWNa^}_`}07T
zBXQsf1@|sxCPup96+g*v@Sy!i1m1*NDodiTQsc=;6KhDKDqTdPDqY7WoTg-9Ob?U%
zBVqXg7iuIVq=^yWL+3|Pl@-6hhl=3g9}zId8zV3&EV)81d6~8mxsZz3cv35|NNt_)
zZcd1`^UhpkfGk2NKtm~?l(aNngV}bGnb|g*@=y_U$kN*zk~lq>GsNPAH@FHFWZG^&
zX11Nffmej2vkb~Ti_X&0_m>Zc5r6WF#n@##kT1dA)76THD==dP6w37NO2Orxa%DqC
z4H|Pr`^8V@DCf8k&k-2-n`ERR!Q}{iguTCIfC_kq3Mf8naKSi<@PqZRl}+uvMr6yd
zlT+%bC&9a9T`?{KFcCz|@)t*O8m!=H8%Fko2#H0*oM%RyC7-(j6KkX&stH`pe%imd
z#aj4`)KSbiGu8Mj{TlVPJtla@3rr=$`82{LuvMqU06ezA+U1r%n6x+`(}2U#1-Ae1
g&HqIo{JF+Kc$BJDjUCZ}=P5yovMMq~PmJFGAJZYHM*si-

literal 0
HcmV?d00001

diff --git a/docs/manual/default-ports.md b/docs/manual/default-ports.md
index 5b2487fe52c..4efc85af04d 100644
--- a/docs/manual/default-ports.md
+++ b/docs/manual/default-ports.md
@@ -40,6 +40,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | pihole                     |       dns       |       dns       |  53   |   UDP    | Potential conflict with k8s-gateway, technitium |
 | technitium                 |     dns-tcp     |     dns-tcp     |  53   |   TCP    |   Potential conflict with k8s-gateway, pihole   |
 | technitium                 |     dns-udp     |     dns-udp     |  53   |   UDP    |   Potential conflict with k8s-gateway, pihole   |
+| mosdns                     |     dns-udp     |     dns-udp     |  53   |   UDP    |Potential conflict with k8s-gateway, pihole, technitium|
 | openldap                   |      main       |      main       |  389  |   TCP    |                                                 |
 | minisatip                  |      rtsp       |      rtsp       |  554  |   TCP    |                                                 |
 | openldap                   |      ldaps      |      ldaps      |  636  |   TCP    |                                                 |