From b61a6458240fe36756ae97808889945d9ccbc88f Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Sat, 20 May 2023 21:28:15 +0100 Subject: [PATCH] secrets ldap: set up teh secrets for teh ldap --- secrets/dns_certs.secret.age | Bin 1081 -> 1195 bytes secrets/dns_dnskeys.conf.age | 30 +++++++++++++++--------------- secrets/gitlab/db.age | Bin 631 -> 587 bytes secrets/gitlab/db_pw.age | 23 ++++++++++------------- secrets/gitlab/pw.age | Bin 710 -> 661 bytes secrets/ldap/pw.age | 18 ++++++++++++++++++ secrets/ldap/self_service.age | Bin 0 -> 1786 bytes secrets/secrets.nix | 19 ++++++++++++++++--- secrets/stream_ulfm.age | Bin 2835 -> 2817 bytes 9 files changed, 59 insertions(+), 31 deletions(-) create mode 100644 secrets/ldap/pw.age create mode 100644 secrets/ldap/self_service.age diff --git a/secrets/dns_certs.secret.age b/secrets/dns_certs.secret.age index 0e665214ab247d51f839147de8d93003c18af46a..8d0c3c03a21a7c24f554f30ff0309822284c23f6 100644 GIT binary patch literal 1195 zcmZ|M-HY1<003|iIVFfFLj^gd;6z8SOVc(<%kU&0ZIUKwnx;*fD%+AK{YdlCq;0z7kDvUWq&Iy8#2mS@Who3eybEex5 zlIeWxxx2k!2!;@lTg}X7qnv3JU>K@oWM~>SuuRRL)qF9lYAM(-iwx08>tLO7XmmcY z;8KmstGvPUrb^)$fXSBPX<#x&Q;~oLeA1x|-5@cx5>I?I+phH`*YZubkQKLU0TbC_ zl&Kl**#hedXthdJq*~|%kmz}1l%#aIz^S4#A$+e|5u|!Ut%%K2 zXvo@q3Tar%ETw4;GeOYe3~amRm(BWcm{BTiopBO=PSZ%y_jtJIxUJqy8BWwDn)K%o zE!UZz!WelG&?SnfMJ!iVN_y6brya11$b^F++H_Ei;c;EDS+?u(sH1Mzx>A54Q3j6Y zZoAsILv-Oygc27jXozKT0V{j1?=f{F1#zo25X*%UfR1V-lx=`$V1>chOs6%us$v|e za#=$lB(A$CVKSSiM-sDLBjr>Y4>MISPo_z>JYf8=*62evQSN|QRgu`D%+y`cFTkYZ zpn)nz0A=;%If8}*lcO5QVvI|6Qo<{RYV5U>Imf1>X5I}t3Xw$rquF8-RY<3T_FW5V zKsl&TDh5|NsyO{QN)PN!5qMC zST@OK*6MrMe9`Xp(($CMM%kj)^%K(!)v%-4dx z+Ur9t-4j}FOmIzZNSBHtALCdXX$D{oECXL3x%&C3i|P00mi|8BKSr|m9L_T6&F`!& z^v&ZyW$B*_*T!GH|84GvwO2%sePE7zZ2TROS9d{9u2Tv@;Hlt=~239Q^sim3YS%jlX{Pmyf>i?%IaeKeY1elm7zO(xjjO literal 1081 zcmZY4+pF7j003YdKDeMvLC-;STP8Z0rKd@H7j&deo2F^f+?ux0qb6yRCT(uNv`JGH z#h2l6%J4zmgG10K6~`H4C=BFy!MCA|O$IyOzzuP@f$TvBLwr5{1s|Vk8Ck>AK^n|# z-&^y6m5Wg*`!pOyv%V?0WINZ*ttT33XNxq}>^gxQ5g`g{Oa$MK3%2-P6 zspgl10=Xb~h;d6TL@g*|nhs;G>cukIZWUBEVXaA-9f+Y8@F=G;J-@J115`4N6BsN( z-EGpXX_?cac2i{?s*lDF5_p`A;;E0tdelupUln=e3N@P3lGlQ6mm0 zEY0YeSCcKSELXHihnh#argY1Vj^{(7Y#Ie)Mkl1GcGSkGZ!B3)>}Fix__Ho%mn4@c zS_C&~QvYdBy)@2Rz)&LtMh`R(@e^3}7y*8?@uadofMP=~X5^(Vw%mc66U@%knKKIn zHF!XaCZ=>sbwv~wR$pi8TG?qKTGP||RWg(iB51`nl+rPp$125=e|+YpQ4XjlyE{WMj41Q7*3UzbTg&qPQ!q!t5y0^u)w z3jTtwk;2Vr&v#o_KJ0Jb>+G*R_z(KVvFDCFa>vmNZ;30ft-XKn-Pxbu*DJ9h|tMH|_&mP$r?fK<_-nBLB`HQPR-MVRQzH@uu(XE%u#_NxLyjgm6*O|-D zT-YdV6Z`Hwc|-d9_>1oKl^^aB4rUI|9+FpoteiQ0{Lq^lT5%JbKXLWOv!~LBzy0d# T-{^~HSGLYw-F^T1iB0=o9)f}k diff --git a/secrets/dns_dnskeys.conf.age b/secrets/dns_dnskeys.conf.age index 1734b39..72af8a5 100644 --- a/secrets/dns_dnskeys.conf.age +++ b/secrets/dns_dnskeys.conf.age @@ -1,16 +1,16 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA DfzcqndqsUzYetw/gJnMuobUz5YZVyzR+DsAS4CUtys -hbOXs5Zbw1QeK1QTAryWL6EoTi0tmD2iYd5ACC+nr1g --> ssh-ed25519 rIwlvw YOBEFhjODvCw5xqtHqaAWTelyYpfpSr0krCllsJKT1M -Mi9iUBxJ+OZ3p6YonykQ99RbleHllIwT0nlpoFm3yDw --> ssh-ed25519 q8eJgg E1wagIqjBP/Galo1em3UOYk3ziAVKCmEaucpF9ZQ51Y -/RhPMgC10KHBpafEBsFanjIlwSZD+qYJWVDXJXh/Lm4 --> ssh-ed25519 pBdJmw TCeREFpI+UVJ8YaewGknyZrxCmmsUKZxaZFIYemFv1A -C5qOJGusg88QTKeOCsKBudO2z7X7sfb665K/YpRS8MI --> ssh-ed25519 v2Y09A 3SP4nhLYwjyKwLp/KREWDZwhhmXRSnTr9i4v0XLkn0o -xZ6aQO+/IrF9UVA3trxCDUep74l+bLjFND4tO3v8cP0 --> t4=-grease E> v& -sSFNyGaZbRSZ7AG3Y2cV13tzaOmvI2mdeBgzgjStetXpGKZdw3gVIVILIzr4YW0U -jrxRB4NFYUrqM79G6YVE+VZG ---- I9HCyyMZFaBl1KBelEpaNI3ANfF6GiY7CtkZDMqILJU -uלP\Ɉ9)l!ڛ7;^u~R7cSPȲ$,&)[O<d=^' =&jŃ.. ch@͕_f8T;<A^ \ No newline at end of file +-> ssh-ed25519 V1pwNA +XdmsmDKDUcu4JbZa+GIB7bXNeijvcjPCX3cl8qtIko +ojl/wN8Z94wcnpjFqzWucxjb4Cj1aw/T72Sn6HImQRc +-> ssh-ed25519 rIwlvw EhWuRFm8qmsI//N40Ak3qEBibsG6FtalDu7a2ByBRDs ++alf69rCF58siskxLsyH1j/TY5Abuzety737QxVea7Q +-> ssh-ed25519 q8eJgg vpheYQurSMI6K0cFUzlRgTCgSh6XVXnfihC5TCpOTAk +EdABzrQzke1aMRo8p8EwufS6hc1rEyyyQ/Z4qP4Vq/E +-> ssh-ed25519 pBdJmw tiQopXd0eWJmGG8w58DGjRgrAp8rKVzg1rWsS+MLkFA +CaZ+uAQy3s5P714hIlNlnJ4xLgD0qJtMf9575tyjDL0 +-> ssh-ed25519 v2Y09A 7AJTfw+VR9xfpDBNV1uSoBNVThyIjlF9UBHFcJksnm8 +p0Q0xlexTBsnib54A2bWgn+0j9IZ9spHcrAXz6jsHRo +-> h-grease \ F&PIoI^Q +JKo0JA +--- lNEh0Ik3wmehWp/RGexGRY83HcDQ2/p7b0IS/oqozOs + ׼PZG :>`U/o'H8;<Mfs O eY dD: գǦ)A/ +gCD/NVJY9L$QlFLO~?=3l>9kw \ No newline at end of file diff --git a/secrets/gitlab/db.age b/secrets/gitlab/db.age index ad9ca7cfe4e092251d3d62434830557830fcdccb..0c20becdfa8f760118b7006e52dbc697ad996562 100644 GIT binary patch delta 534 zcmV+x0_pwt1j_`FEPr@4Rc%)_NI6+oGeTN%FheqIc|k!nZe(j!M_6GqXE$&wYeR8% zSW04UQ3_IILrhRHZA5cpS~)RcVo@|scr+_*G;&BVI7c^ZL_pMaOjt>GSV3@CZEiDBV@5VlH9<~JYfLe9F-mYo zS1VOCad>S*LUcrH3U_*KFJ)J8aW^+ZGEz@hPeW^PM@}niLv=Ala!zDOV@)$xZf7-f zFiUGNk?|LQY*9lqb$4%QM@(2nQ9@ZZOHz1GN@G!OWLI`oSxrqjNMToNZgg>aVNr7m zYjR3tVRK1LV=r=MT4q>mNLE&5Ie9`&IdM`!SulD?Re4QQNh@(?H&rkSEj}PxSxYTv za%Ew2WgtLgT1`B6R|-u^Zwf6fEg&{HM?pb!NJ)2pZ8T0}HDpL=P+3NLM>u&yb5dku zFjH4dc64qxYdAG|D@6*k(PhUe?{P1tFej3?BSUt`z5!xv+fQXmt?XC*LsM)t@Y~mO zfomAS(*JbMWLu|n@NTuT`ca?$eZjD4{_&)Ai@e YP8T5mGC$qv$teZbuX`8ObRPJ$nU;{vEC2ui delta 578 zcmV-I0=@mq1os4xEPrDwbyIC?QddDSb5m_^OfgPJWoKwgM=^SEaA!GJFi=5LHgkAk zS43(;Sqf`$Mm0uRGE!_ZMtDhcVR}(fdUq=|LqjVxZ8k-8Rx&SBS2j37VOmgBYYHts zAaiqQEoEdfH8n9gAaY4}Y<71bc1?6eWHv8wS3+52Xi`Bhc}8t;Fi=rdI9WDpICoY> zbZt*mH&$3OZ!1S@3Q}}tPFZDSV?{W1Lv%DwIc8Z&H8@#gIW$mVGk8=vWkESmRX1x{ za8gV~k?|LQcWyFPMmbVda!6rHH&k;pR5f^RM{{^IZBBPEOJz_+Ib>IBZ$VQ|SyNdG zXgM=&F>F&cT23!eQejk6dP8YPc{esPc34JkPcTMeQF%C0P&744Y-?`{Ej}Q5cx*B( zB_l0oa%Ew2WguuPC@@SrK1d*STS0kGH$h||MtygGDRM1Pav*GSTy+XCS8G~sHc>fH zL{)D@YJPtY#K7sb|)wZ0Tnn+ia2To z$v$gwc?%&SS^8xNKgoat?+-@~ diff --git a/secrets/gitlab/db_pw.age b/secrets/gitlab/db_pw.age index 783382c..f687f74 100644 --- a/secrets/gitlab/db_pw.age +++ b/secrets/gitlab/db_pw.age @@ -1,14 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 V1pwNA oDDXva3pRMe3CSRikmVGGdpubZjpP956O4JV4TqPJzc -Q/eRz6DvACToZeKn6Bs+lYgyQgqS+0hQjrLJLZ2XtWI --> ssh-ed25519 rIwlvw xXFVnFqt+dHIMhgfGDBWth5/a0Qab5+M8frRhRaOJVA -+173cEuzFlJwvpZvzeKgieuxfdvUZ6EWwyekk1B2V1o --> ssh-ed25519 q8eJgg pZ/mB69ljGXCZjHMzKAOYZhX7L3xfsYoStZIkFIPQlc -zwq0IkahfA9ZwlzaiLPWsxvINE4v9PMERewxVePN3Wg --> {&QI5p-grease ry3`{sn& u! ;= - ---- w3F7Hf1hhITmzVfUpt7+qHBQ6chuYJceiyTetjZOiWk -NL4WUHG͘^d+Ǻ -b -ses͕|,S6Lj\K*% 󮺜^9T -q=pK#IL(Q.Z&UzOk/6 ssh-ed25519 V1pwNA SLyqJZr5f8MMO/bt6/EJBqo5ttdRfDwKah3WyebdN1o +YfDtmgQXMXqr5xLyZq6hW24ximzoOmAWzRXfyLd6uc4 +-> ssh-ed25519 rIwlvw BQGsjpzKjQP1Dw+7aQ+o7sStn37GkOY1g/vtnjMtMAk +bVZVqd/KuyBvNB038q5iplLBbdDsKACPmcypDKkCjm4 +-> ssh-ed25519 q8eJgg FmX4ccfGCb6pO+D2I2JNWTwY6YhnWElxHWpMvzDSCkU +nGdjyJNPRkSA0G0VTOhgxPpW7raqvPyJzsZH5Gh77cI +-> gm61-grease .qRHg X{R[|1r O#:So9>$ HvCVm +EomX1EI +--- tsDlkO7xbQAqgLcmz6v2hUUsMN8EVZ7VWtHNmSTXgfg +#T! hPy/.Νuؐ";$݄ [/p,}Xc:aR8[7CCoGn<:*J{?"hE. -Oei$ $HTf8iP([E Bt=I2 \ No newline at end of file diff --git a/secrets/gitlab/pw.age b/secrets/gitlab/pw.age index 9780adc734bd214290cbed0b414c5d51562bd15f..4127f184789aeba415d90b90b7eb821ef4b50f0a 100644 GIT binary patch delta 609 zcmWm9OKZ~r007_}tYAd&Fz~QTWHQv+^_54n=``t@CT-F-Y1*`LW47r#P17`K+7w5< z&4W0_Nj-@&9A5O`3qcegpgX8X@vy@{r{d$FOoUz(zkl$(bX;~^IMR<1ZH){TL#!xD zcC=v=)s8q@(cQ8VPC8+Zw~Id6O0jiZGyo4?C2P4tvlNMomep=+Zl6WLkUO9#C0ws4Wr^J7JM-5#lRNbsaqY;3ILCYZ-D5))-@MP6+ERbaqY|rF$GE!8_S+w4>n_QRiLQtb3l+0M_;?I43 zDap_Z?4%H%OmYdGG3Y2ya&5K6stprU^Lo(K6y1mfs4RezkQO&=Q^vz>rqHNSyo9GQ zhOda80Gq~ojD*$bl1-;G^#2J$xyr3#&M1PX(w#|X;XoJU?E2IMNS_X-riJlE&BHHly_i}bt*#aRu1vKekSZAK6HIS!GXo|+8I&u12>5qa+WxnpbY6BS~I z*8e6gnZNH2^sSFu&lYyh3@2i*hMT#SEytTHBR5w+-^hoFhw1Wzuk7xz?Jt*(hE}wR zTcgYP(%4gCQTTOrt-ZPQ?$D#hqik6LQResV9BCW zM3_{|6j70|)VfwyMar~U*Rol>Sy3H+f&gk(A}xk1O^B?+2~@#YkWfvi%980sIA+E; zO_ph`QC1U52?$*9H5zh2s6q$=MtwHr=}pg9vRP8+1u*EZa&?8TKnaFdU4yg|sa$M4 z1(B+zNv&MSvpfn&fuuYVPRDIbY@$v_Zsj|6gHd&+)1Z^}PAytyU@%AGc$>bnbG$2p zaSk^KLM$XAs7Vc@fzd%=X#cToZ+KH)1G?aw*T`P)`N>1OQMq#BK73${ zOb>0o%H4FA*Pi-%zk7@Qoqm5Xs;oXr_qc_z%!c>*$Lv1s@zJF%%y;q9^7hQ#nJXWk zy*&N?@ZT2?-~HOduJzgP?%Zftn?JR3_TD1#X?%S)#CO5k3jA~a*7c>`@MQ1&aO&$H dWUe1OaO3UeCr3Vfn|| ssh-ed25519 V1pwNA AX0kN3epMM74LV5rSkk9YSmkjEBVcpOHgMsiD4lybB8 +3wPFbon7wHTBI67xENlyXrvNobeFH391lIu6Mtz57QE +-> ssh-ed25519 rIwlvw +SiD/4Z54cHwpfrwZY2TDTZdbnriUYG0tsnVeL1OnBs +ycXT27Ghr9XVq8lVPfbFwrahF6cPjRL0zYQLNMsBjmk +-> ssh-ed25519 q8eJgg lu1vgV7TlY0F9d7YeWrBDCX18tBWWSxvpa4k91NNXSE +BEPBLvzttBLxsj7RoKUCrs2ET6zJiN0XXdaLdJ/0EHQ +-> ssh-ed25519 DVzSig LmuwjlScGcud/rcBTzHIF2NzqpudSq4FknGz+EKM830 +BxWb3k53smGaCC7ZgIC9nj2qTpHXRPfqVHkHr5jb9fw +-> ssh-ed25519 IzAMqA HtoBkw5Kw+3Q0No18g6fKeYkyYp2CNvCiKLOYchZuy4 +JROp4CYz4Iu0QZ4lnzJdYwwqlGeTuKRSQGzIhEEo+bo +-> F-grease 2~ G1v +amft7S+//HEUloHGXN6JZkMwTH+93wF/MqmJkqz+03nK1DCxuV5LwePQfMS1pSJi +srcTmQG8A7WcpOvUj21ljato1kPgjfAVVeD2RC+k4gurgmY21Pf+mTs10qT0AmY2 +oO9l +--- eUA2j4lvZQfuMA9ugmeGBosgJDDlJVbVE09OUSxV9HA +^)' QN5!ri]in(8U~!8(|&_qm +! I>35 Qc'#AW h^l|Sv9Qg;n4zU։]=Ѱ_Zm{!4;bP^IW%|xFLk=U_M?Bn`}O(0zB-EuYeEd3BA3tR zMAkVymh1o?h5ZQa^;)qeBY{lD)6r_YD+n;qGCfIaaj+pnwpZhq@x3OJ!OmCvgW-I( zf^EPlwN56Yq0ljGl>|kwW#{{3GC)p2jI4ZzStTGkog9J60kha{8j%~oh&>7l2jZ#> zZ)zSv5Do;{2R?&pZrJEA|!Lj0RWgv)YR zaC~JEhe0i})3sWSj^XgYE`Y9p|KFCK>c(0;CY{%Ww*N_n3Hn87!#Y%$!81Z6F9&AB zFqz;&2tJk*#}0^?E`~$qqv-q`t;VcjSzt&WE;1U8CXvaNEtA{zYJ)+jaoSK!Aw!f8 z=+s`~Z->($Zi50*t3qZ&z%1rcEKD;9XX|M?9G^kA;v^tQSk|##^|3^rQ0`&=ZD+fR+*Om_Um6FH4$rZdTSji=7KyeoO;(r1i` z(OJ(g$*UK;h5wFy=jolMwA4e6nY7Z&)Qrp;a#>aX2bachM{abNjI6z{tRd@9&8@&5 z5S`sNXo`9L^|O)5VdeE=`DYnF!VS-jOTX7AJXz6RQg(Zzr2iT#Yp(9FLyy`~>`Zl%q=H7cr(LB(1MB0|OTLLfUjdeSqflBc11NN(R zM`cS6{am^9;(^c88aK3^8%m1Mi9>qmN?)(?)9z8}kwoFToKf|&^|9+KF1ZICL-8r) z(Sgq6Cq!4?e*VuVqd;X$r?Kzue;<<{F37{Ia_{b%Py6%V&sD^g3nqV>)qg?XmYnv{ z)lDnoa%l;`m#NFkcdjT-+1kRl?igyDTqUl)&7BaVjr;N&)oak_7G;@FJz?QmkLG5U5`J>G(EtAL7Jv$bKjC)mocuLvf+!j3^ zJH_gr`6lDL?K{gf;{*K-v|d6hy?6$*pj_G}xp2*n)f;xtZ-04r-byj@ZD(m&!@=pR zJL(fs8z)}9t2<_Grkrj|jGxC#r%E2*sGqKyhKgkp(RgG3%&ACo!s!HaUdQ&Fsgl;* zj8*Mu%>MS*X)&FNfmCQUEh(Q;vE*dlnyUM-XskxQ^=7n%vg_Mi&8H2&`$W-K3p$AB z2NHBKv$lGQKD~LT_g8t8b)@QGT(NV(p|$^-s!Du7J?gWcs1$xRQ)jm>I#z#$Gg^mV zc)R~x`rMNdyH*Yy_CGw!bie<{iVFmKR;fJ6Hg{&t25ecv#dy&mp^HTBQtUp7?}=Qk zA83g0xpm$8`X6xphv~nt-YO{E#G617+%dCF5riG7=C*!Zeiy&;!M-0ZY|igKxN_N8 f=F^SN7f0VKm5t;?dL}L{`#41@7L_*-ZW#C<3ZeNg literal 0 HcmV?d00001 diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 115947d..3115cbb 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -39,13 +39,22 @@ let vigil ]; - # these need dns stuff - webservers = [ - galatea + ldap = [ + # only here as a tmp basis optimus kitt ]; + # these need dns stuff + webservers = [ + # ULFM + galatea + # Games + optimus + ] + # ldap servers are web facing + ++ ldap; + in { # nix run github:ryantm/agenix -- -e secret1.age @@ -60,4 +69,8 @@ in "gitlab/db.age".publicKeys = users ++ [glados]; "gitlab/db_pw.age".publicKeys = users ++ [glados]; + # for ldap + "ldap/pw.age".publicKeys = users ++ ldap; + "ldap/self_service.age".publicKeys = users ++ ldap; + } \ No newline at end of file diff --git a/secrets/stream_ulfm.age b/secrets/stream_ulfm.age index e12f340b212c42fd58d26beb5715176e83ea0125..34e2ab597c11db953f9ad204f33752518457163a 100644 GIT binary patch delta 2763 zcmV;+3N-bT7J(L!EPq&LD{53XXERQ9NLfa7MQT$sX=i10c~Em%OjOF}YEPIpH(V>C%} zLTNTsR#;9(WN%k^S!hRYPdQL^Z&_+{R6}_S;QdvuJL1{H-P;W((UjY|?QBX^1 zW-ww@PDM&sPfuoIZ&^@xT4PmMVRUGAL_|n;FIY2jT2^ImVMKEZa$-w!Hc(|wc`-Om zS7&o}Z%=PHbv1N$Vn{M@Nk?x{L~>?0SYu^LMK@;(Ej}P*O?+m1K`m!;Wnpt=AUkJ7 zY9MG;ZXioZT?%hw=*EiE8MR8UYfQBZ73 zaZF)DZ!t!0aZP1sF>g>#On63ROH@a3LTXn|L|0~NNjM58V%SW~vIMfTr$OF$w3U$_ zU_Msa62KXoJ{c*yot=)(D8ibCGN&2r>&fLt&x^0wzsXnb&VU8I1h<2K?kW4UBQ9hh zq}w(895{5e+SdQN$~l}e)x)sOXJkJp}1LuA%i{zR}FUU57dv%;$Sz|ZXjaz(zWwkDd&!Bl&HCD_w7ET9EvsEg|x zzM{OZa2^q1CtTm=h1-iBB0D+@julb2HDwrl5zC}DRy?UB*a%(15F1tS9Nv=KC>8c% z)BoR;Io3(|X2wQLpc^nxa)|m1nRZA! zsJ-aYyZ{XUa}L6P+N!w|$rnAMlXa&1X8==j$-0J$^Ul?aciO6$Ie=3yoBF4 z8TsWopdHtkcoTG)gHgd*TvBaJ(?V8y6G=8>Ep!G@q{m-xUg)n9e+%Y1b;cUX${b2WlF}eV%WLcNx zA>Jb@8cEg%A^3;8KiQKhz5>5tBhW|txcqy-m^t2Pl6POgf^prBXajdhAY0Np318W(Wj2x%t z`x%t5+!p_ecVt^)uLz4PQ%A(oc<3MZ3$iqmu>fQ$UElPlF?u7Kfi;u8>Xe*<_B5;{ zABpHaWc%@Cwcx8X2AT|r-MR}p10tx7q0%|-*8Qb_a`TWKSrQUABzVs}0&e7KVD!Z0 zd}}l3F|F;hD|Dq*7(a`oqTzNmqHnZve8vq^j4si(Z+tODcZ?ZNtM=w!%ut7__LFfrfkT-a*%8q5EqCcD+W=< zg^YrK$X%NgazmM>V%#!kw>2ciKtt!*8lhmr?1Oe8+obrhn+zDi}lEJGr>hb=g$)C zVet`zPPbPI<_?(qoj!Cgs);(UmLlw&>1E8rZ1Qy3tWjjCg4?bH2`zSgzp&>J7V9#9 zv#427BBB(MsY+2aqERn481cJ=3@hn*`&4Jo61#c#ix8UY9}+);_}U1rX< z)&Kq;7JSJR9a<-%Mq94M%14M*>8~DNv{8y6NiSo-5%uu)=!Vi1XkZ4Nq`Z3aTjy=# zxI>%&x4_W<>tAc%mci^KPP79IRhA z^Xfe?ZX*yyzT)nLsr$xawOD9m8|1UuK@J481L1++*xxB_Z%@@=WDr=W3)|s;zzojd z=Bit1X~8d+8`QFGYl=qbG9P}8vb6!pYTAaxRJyMXPj#luq80CgnDBeP&y5vewwZ#k z60Tc`9!oEsA!gay9Pu0++mx}j5wv76@9!e9$*df*j|KTFR1R1E1kXm+;HYMO7M+Xt zjZ&i^QI^7nts-jXGovsXIm5kw9)z6UWQV)2c1;Bn$&zv7Id%l2aZ$OcDdW|0CyBl7 zH65)u@Uz1)a07FN6enw$v_y@eW(8|N?vF>!7kGq%Z;;M+wD3FGd|c zA%cx34v<@Y%ETNRPcZ}B2Gmd)exWA`pYYu+d+WbEW8(EUstT6!kuqn0db;6+;y{7i z3{_%nAwF@1J$Os4=w^NOYy7|Qm*AZ8%Ll_TM3p76(FD^sh64&8nN0k{(ynI6(boy> z@|Kx0Y|Tab0Q|!;IP9!$sd+$yAhE^FH+u=T~_)5iSM zYR%_&X?md6z-6wAoo4nyIn`p%7=WX}Gq=my71^-K8+NH&1`R~Vh8ok_et%5#tV4<~ z1%y>&%($m3vsl`q!Af905)#CD(0tRRpHF%5K~)KW+SHRHtJ(dC6q72tHa*L(&7>i+qB z%M#0m&s2#RHlxwkt*$y|x2S=>_h4ztI`TFKkO{P)Tld zc~w|yZwhjAGgdG+M0isxWJhLAX+?8yc{NTePB~CVL`*A8dN)NlLwHePL1}6+I0`L3 zAaiqQEoEdfH8n9gAaY4}Y<71bL^4w|O=m`KNNIU&ac)jZIYvo(Xl-LyVsdskHc(k; zZ&6NfQg3!~X-P463NJTCL1|A=NpLYmNMkoLNojU5RYh}UNNH|!WMgl6S3^~DNn~V6 zLNYQqk?|K-XjE2rY-e$7STuEMNLWW!F;seNOHe{radc30G-_BfL^)zKYf5BVYeHuV zVMJMJMo(;NQ*1$ROEoz*W;jAjYQCCW8YfeRCH$iKYUjY|?YENQv zLUlKGZ&`P1MnX_gFJ(nHWlv;zRBlvlM?_X@RWo#HIag_MbwqaxZg+4&FjYBiQ*Bdt zc4BaLVpdXdV=z}sXJR;NM|ea|K|w?|D{*!-Y-4WS!7IfL{mmddPz=cD{XIQVpT=I~{IQP|^#b%nAZ0QJhbd8=Uul2?rG!tdheu zpQ7!LyiIAKfC)%<{nwFWxq{?@>dDTS{cwsTO>sV3z*mVzj2KvZ|4>i2woazV7$_Ez z>z$S0kD%yuf79O$j^USTIuh6O6_-RAQsyplRy{t&Jqvb)j$!LN#GUSs)sPNh$9zz{ zD6PkNktx_?lWZ#yOj%%m)tVB?Ofu!p>GT~Hol*~$Bz;!PaZ2ldBaG(0+%S?oO~BY> zh!pd?UXE-oCOA42e;>^(&zoGP@;yhL_^@jRA%4by;rPfN(W5Q;&q_+E<~{m`lxelR zH+vZyGjr(Iu5~1Uc49VE%8S?vvr$#@_`2&1#j+o^K=p4q?Y<;`(yvCwy>ac&dmVAnX-OJjLC z<}PaT67!LLz){C}eHB9eYXZ`nUBh-d^`Lr56V~Mtw#=W_3te~QjDXyZ>ubm|+<7iq zc(~&=YC^7maKcu9?~#B4h=Buk09r$D+u9N|UC`lZhcRl(xhnn^Bw@=tuwRak$;T|m z-7LyTRMG1AO$Y^;mT7BsazXw~ZeA0X>p{bqv zU;nNb*BGazjxj2pBc!~e)*RKK@=rJF)LBcP-y_*OBCAAy<68V1#+pl zP3q{);wu&Bx^h37BH4_So_Sf~#)6kbnSqIx!de$A1^fHfd^ti7BH=0js}BId+3ij8 zF%j;g<*yQ*TMXf6r9mb_ta|%;4poLf!7x`iL-xBS)Buf*Of(49o|C^ZH%^jiBO=gZ z$JZqIe|%Vf%!{@6nlwY=0u=S9ib0kya(7}CqLIg>n@>cG0tI^rH-e%53xWM6&F>p% zl};_qTKc-QV9ZJZaiXgET^jx<%^;Z1&lN)rakUS??s(ZPB2IR|{a_{BhB2F3c}#Yc zR0)1|@EHsHUgZ5iA7mGGQi~ygb8vBSb74z_B+M0mls%<5!GWL*3+&up>`CF~|v$UtJ zqUDxuL41l9hGnv5Q=z=@-XfXB(2aTr6|?-kzJLy->>7_I2j5Fe4uBD-k!$Xp2+>CI zc(Y`GpY-4xwE`1=Z0z*8nC}DwCtR%7%|Dt#k58etH&7C;sY!c{X5yk4+q=#Z$`#c9 zF8(gb(Ms$eFifC6_U`5ZGhGuMkw3LD0OD1Qc}oya%zR3~d_hC1&hsE2cP-P=WI6pa z!HXJZ31%E@7nwLsO4x`S{~^%vjDSOfm;c;<)6gN}oI?#LalW^_>QSA;*p)~Vbw>jt zE{BiK^GB?@l- zJ+g57u_uV%A1&84U-;GlqR(x;g1=Jaq?er<+FI~5eJ+Gcxy zsU{p1l)q-Upt0sRHkBG?jDl1PTpp?t@TX`%TRlQpeM)wM`Z^on0?)B)3A_8d4QXs) zJNNzZdYiK%RT;a}7PH#;ni`lzpIuTQLa;w8)gQPWNV%Tp!Uv=lPXA}1@_|PyC_uE( z#Bf3zr@{~$QRI0bSQrXUPVb#6C@ckk8srGwHAU!&Oo+%bu7Y5+-7b9&2P)L2H2fYt zCDEpK&kOV5MBdQ%ViCkL4$+k~{Y4jzCAF;7QM61O%QJr*d1SSwSWCI7CYOW^kwa$I zvcxjURg;8_Ay~fRJVYWW*mF zjl5l^8OJgUsWJW_lxZ<}HS7p*_7OMLmdgTGqHB&*IBL+uBB^}3LF!NVZ-v+I_2+7jR(_;wIRzG$f zZ)PWOWos1*2wrBZZivl)$+tXV@*PU^lJzV@C`Gs-CW_1Y`-MB@%42(?Lr-qX@HJrw zQFf%|jzRjSqqVpD7zH~27*%^Iu4~uSQXy#_Nm->*q4|TiVc7V zc~2k$zCJPMtZnp9tq`w+?Yy9Sb@Kv2-V1ePVn;w`yFDzf@{rblY~gCqwL6to;b!eP z^+)BEup%J?NSV0>S9I>LK1sA)LAo7MD|4Jc!M8(>wuQFzOSSXsCdpE+d~zf0YbH4f ziryvAc=5WVK%PuOw%|;#1Kx0<%ywJ7Li6K^t!wSWChkps&k|}3cACTXs5Utb5qwfd zxEwz`ao=qTeb=IYV3$Cr2x)^8Phka^Mi&;!eRamYW`gZuhTeZ+p4EY0tkrHsk@p~| zFEWZSa@xyX{`>)TzSZz1%|L0ZlJlc;J){rOy_S2?&0q&MWCQ16@zs!BR5gRnl0s0)5W3SD4