From 44ac49591093db23af7e98987aa30365d5397042 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E8=90=8C=E6=A3=AE?= Date: Tue, 30 Jan 2024 19:06:05 +0800 Subject: [PATCH] Add elastic kibana --- apps/elastic/8.12-cluster/data.yml | 60 ++++++ apps/elastic/8.12-cluster/docker-compose.yml | 215 +++++++++++++++++++ apps/elastic/8.12-cluster/scripts/init.sh | 23 ++ apps/elastic/8.12-node/data.yml | 60 ++++++ apps/elastic/8.12-node/docker-compose.yml | 45 ++++ apps/elastic/8.12-node/scripts/init.sh | 23 ++ apps/elastic/README.md | 116 ++++++++++ apps/elastic/data.yml | 19 ++ apps/elastic/logo.png | Bin 0 -> 13770 bytes 9 files changed, 561 insertions(+) create mode 100644 apps/elastic/8.12-cluster/data.yml create mode 100644 apps/elastic/8.12-cluster/docker-compose.yml create mode 100644 apps/elastic/8.12-cluster/scripts/init.sh create mode 100644 apps/elastic/8.12-node/data.yml create mode 100644 apps/elastic/8.12-node/docker-compose.yml create mode 100644 apps/elastic/8.12-node/scripts/init.sh create mode 100644 apps/elastic/README.md create mode 100644 apps/elastic/data.yml create mode 100644 apps/elastic/logo.png diff --git a/apps/elastic/8.12-cluster/data.yml b/apps/elastic/8.12-cluster/data.yml new file mode 100644 index 000000000..81c8b9490 --- /dev/null +++ b/apps/elastic/8.12-cluster/data.yml @@ -0,0 +1,60 @@ +additionalProperties: + formFields: + - default: "docker-cluster" + edit: true + envKey: CLUSTER_NAME + labelEn: cluster name + labelZh: 集群名称 + required: true + type: text + - default: "" + edit: true + envKey: ELASTIC_PASSWORD + labelEn: Password for the 'elastic' user, Numbers and letters + labelZh: “elastic”用户的密码 数字与字母组合 + required: true + type: password + - default: "" + edit: true + envKey: KIBANA_PASSWORD + labelEn: Password for the 'kibana_system' user, Numbers and letters + labelZh: “kibana_system”用户的密码 数字与字母组合 + required: true + type: password + - default: "/home/elastic" + edit: true + envKey: ES_ROOT_PATH + labelEn: data persistence root path + labelZh: 数据持久化根路径 + required: true + type: text + - default: 1073741824 + edit: true + envKey: MEM_LIMIT + labelEn: Increase or decrease based on the available host memory (in bytes) + labelZh: 根据可用主机内存增加或减少（以字节为单位） + required: true + type: number + - default: "" + edit: true + envKey: ES_HOST + labelEn: Access host restriction 127.0.0.1 + labelZh: 访问主机限定 127.0.0.1 + required: false + type: text + - default: 9200 + edit: true + envKey: PANEL_APP_PORT_HTTPS + labelEn: Port to expose Elasticsearch HTTP API to the host + labelZh: 开放API的端口 + required: true + rule: paramPort + type: number + - default: 5601 + edit: true + envKey: PANEL_APP_PORT_HTTP + labelEn: Port to expose Kibana to the host + labelZh: Kibana面板端口 + required: true + rule: paramPort + type: number diff --git a/apps/elastic/8.12-cluster/docker-compose.yml b/apps/elastic/8.12-cluster/docker-compose.yml new file mode 100644 index 000000000..b899aa0fe --- /dev/null +++ b/apps/elastic/8.12-cluster/docker-compose.yml @@ -0,0 +1,215 @@ +version: "2.2" + +services: + elastic-init: + image: docker.elastic.co/elasticsearch/elasticsearch:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/elasticsearch/config/certs + user: "0" + command: > + bash -c ' + if [ x${ELASTIC_PASSWORD} == x ]; then + echo "Set the ELASTIC_PASSWORD environment variable in the .env file"; + exit 1; + elif [ x${KIBANA_PASSWORD} == x ]; then + echo "Set the KIBANA_PASSWORD environment variable in the .env file"; + exit 1; + fi; + if [ ! -f config/certs/ca.zip ]; then + echo "Creating CA"; + bin/elasticsearch-certutil ca --silent --pem -out config/certs/ca.zip; + unzip config/certs/ca.zip -d config/certs; + fi; + if [ ! -f config/certs/certs.zip ]; then + echo "Creating certs"; + echo -ne \ + "instances:\n"\ + " - name: es01\n"\ + " dns:\n"\ + " - es01\n"\ + " - localhost\n"\ + " ip:\n"\ + " - 127.0.0.1\n"\ + " - name: es02\n"\ + " dns:\n"\ + " - es02\n"\ + " - localhost\n"\ + " ip:\n"\ + " - 127.0.0.1\n"\ + " - name: es03\n"\ + " dns:\n"\ + " - es03\n"\ + " - localhost\n"\ + " ip:\n"\ + " - 127.0.0.1\n"\ + > config/certs/instances.yml; + bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca.key; + unzip config/certs/certs.zip -d config/certs; + fi; + echo "Setting file permissions" + chown -R root:root config/certs; + find . -type d -exec chmod 750 \{\} \;; + find . -type f -exec chmod 640 \{\} \;; + echo "Waiting for Elasticsearch availability"; + until curl -s --cacert config/certs/ca/ca.crt https://es01:9200 | grep -q "missing authentication credentials"; do sleep 30; done; + echo "Setting kibana_system password"; + until curl -s -X POST --cacert config/certs/ca/ca.crt -u "elastic:${ELASTIC_PASSWORD}" -H "Content-Type: application/json" https://es01:9200/_security/user/kibana_system/_password -d "{\"password\":\"${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 10; done; + echo "All done!"; + ' + healthcheck: + test: [ "CMD-SHELL", "[ -f config/certs/es01/es01.crt ]" ] + interval: 1s + timeout: 5s + retries: 120 + + es01: + depends_on: + elastic-init: + condition: service_healthy + image: docker.elastic.co/elasticsearch/elasticsearch:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/elasticsearch/config/certs + - ${ES_ROOT_PATH}/es01/data:/usr/share/elasticsearch/data + ports: + - ${PANEL_APP_PORT_HTTPS}:9200 + environment: + - node.name=es01 + - cluster.name=${CLUSTER_NAME} + - cluster.initial_master_nodes=es01,es02,es03 + - discovery.seed_hosts=es02,es03 + - ELASTIC_PASSWORD=${ELASTIC_PASSWORD} + - bootstrap.memory_lock=true + - xpack.security.enabled=true + - xpack.security.http.ssl.enabled=true + - xpack.security.http.ssl.key=certs/es01/es01.key + - xpack.security.http.ssl.certificate=certs/es01/es01.crt + - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.enabled=true + - xpack.security.transport.ssl.key=certs/es01/es01.key + - xpack.security.transport.ssl.certificate=certs/es01/es01.crt + - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.verification_mode=certificate + - xpack.license.self_generated.type=basic + mem_limit: ${MEM_LIMIT} + ulimits: + memlock: + soft: -1 + hard: -1 + healthcheck: + test: + [ + "CMD-SHELL", + "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'", + ] + interval: 10s + timeout: 10s + retries: 120 + + es02: + depends_on: + - es01 + image: docker.elastic.co/elasticsearch/elasticsearch:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/elasticsearch/config/certs + - ${ES_ROOT_PATH}/es02/data:/usr/share/elasticsearch/data + environment: + - node.name=es02 + - cluster.name=${CLUSTER_NAME} + - cluster.initial_master_nodes=es01,es02,es03 + - discovery.seed_hosts=es01,es03 + - bootstrap.memory_lock=true + - xpack.security.enabled=true + - xpack.security.http.ssl.enabled=true + - xpack.security.http.ssl.key=certs/es02/es02.key + - xpack.security.http.ssl.certificate=certs/es02/es02.crt + - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.enabled=true + - xpack.security.transport.ssl.key=certs/es02/es02.key + - xpack.security.transport.ssl.certificate=certs/es02/es02.crt + - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.verification_mode=certificate + - xpack.license.self_generated.type=basic + mem_limit: ${MEM_LIMIT} + ulimits: + memlock: + soft: -1 + hard: -1 + healthcheck: + test: + [ + "CMD-SHELL", + "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'", + ] + interval: 10s + timeout: 10s + retries: 120 + + es03: + depends_on: + - es02 + image: docker.elastic.co/elasticsearch/elasticsearch:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/elasticsearch/config/certs + - ${ES_ROOT_PATH}/es03/data:/usr/share/elasticsearch/data + environment: + - node.name=es03 + - cluster.name=${CLUSTER_NAME} + - cluster.initial_master_nodes=es01,es02,es03 + - discovery.seed_hosts=es01,es02 + - bootstrap.memory_lock=true + - xpack.security.enabled=true + - xpack.security.http.ssl.enabled=true + - xpack.security.http.ssl.key=certs/es03/es03.key + - xpack.security.http.ssl.certificate=certs/es03/es03.crt + - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.enabled=true + - xpack.security.transport.ssl.key=certs/es03/es03.key + - xpack.security.transport.ssl.certificate=certs/es03/es03.crt + - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.verification_mode=certificate + - xpack.license.self_generated.type=basic + mem_limit: ${MEM_LIMIT} + ulimits: + memlock: + soft: -1 + hard: -1 + healthcheck: + test: + [ + "CMD-SHELL", + "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'", + ] + interval: 10s + timeout: 10s + retries: 120 + + kibana: + depends_on: + es01: + condition: service_healthy + es02: + condition: service_healthy + es03: + condition: service_healthy + image: docker.elastic.co/kibana/kibana:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/kibana/config/certs + - ${ES_ROOT_PATH}/kibana/data:/usr/share/kibana/data + ports: + - ${PANEL_APP_PORT_HTTP}:5601 + environment: + - SERVERNAME=kibana + - ELASTICSEARCH_HOSTS=https://es01:${PANEL_APP_PORT_HTTPS} + - ELASTICSEARCH_USERNAME=kibana_system + - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD} + - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt + mem_limit: ${MEM_LIMIT} + healthcheck: + test: + [ + "CMD-SHELL", + "curl -s -I http://localhost:5601 | grep -q 'HTTP/1.1 302 Found'", + ] + interval: 10s + timeout: 10s + retries: 120 diff --git a/apps/elastic/8.12-cluster/scripts/init.sh b/apps/elastic/8.12-cluster/scripts/init.sh new file mode 100644 index 000000000..145cd9e58 --- /dev/null +++ b/apps/elastic/8.12-cluster/scripts/init.sh @@ -0,0 +1,23 @@ +#!/bin/bash + +# 检查 .env 文件是否存在 +if [ -f .env ]; then + # 导入 .env 文件中的变量 + source .env + + # 创建并设置权限 + mkdir -p "$ES_ROOT_PATH" + mkdir -p "$ES_ROOT_PATH/certs" + mkdir -p "$ES_ROOT_PATH/es01/data" + mkdir -p "$ES_ROOT_PATH/es02/data" + mkdir -p "$ES_ROOT_PATH/es03/data" + mkdir -p "$ES_ROOT_PATH/kibana/data" + + chmod -R 777 "$ES_ROOT_PATH" + + echo "Directories and permissions set successfully." + +else + echo "Error: .env file not found." + exit 1 +fi diff --git a/apps/elastic/8.12-node/data.yml b/apps/elastic/8.12-node/data.yml new file mode 100644 index 000000000..81c8b9490 --- /dev/null +++ b/apps/elastic/8.12-node/data.yml @@ -0,0 +1,60 @@ +additionalProperties: + formFields: + - default: "docker-cluster" + edit: true + envKey: CLUSTER_NAME + labelEn: cluster name + labelZh: 集群名称 + required: true + type: text + - default: "" + edit: true + envKey: ELASTIC_PASSWORD + labelEn: Password for the 'elastic' user, Numbers and letters + labelZh: “elastic”用户的密码 数字与字母组合 + required: true + type: password + - default: "" + edit: true + envKey: KIBANA_PASSWORD + labelEn: Password for the 'kibana_system' user, Numbers and letters + labelZh: “kibana_system”用户的密码 数字与字母组合 + required: true + type: password + - default: "/home/elastic" + edit: true + envKey: ES_ROOT_PATH + labelEn: data persistence root path + labelZh: 数据持久化根路径 + required: true + type: text + - default: 1073741824 + edit: true + envKey: MEM_LIMIT + labelEn: Increase or decrease based on the available host memory (in bytes) + labelZh: 根据可用主机内存增加或减少（以字节为单位） + required: true + type: number + - default: "" + edit: true + envKey: ES_HOST + labelEn: Access host restriction 127.0.0.1 + labelZh: 访问主机限定 127.0.0.1 + required: false + type: text + - default: 9200 + edit: true + envKey: PANEL_APP_PORT_HTTPS + labelEn: Port to expose Elasticsearch HTTP API to the host + labelZh: 开放API的端口 + required: true + rule: paramPort + type: number + - default: 5601 + edit: true + envKey: PANEL_APP_PORT_HTTP + labelEn: Port to expose Kibana to the host + labelZh: Kibana面板端口 + required: true + rule: paramPort + type: number diff --git a/apps/elastic/8.12-node/docker-compose.yml b/apps/elastic/8.12-node/docker-compose.yml new file mode 100644 index 000000000..4b3373b5b --- /dev/null +++ b/apps/elastic/8.12-node/docker-compose.yml @@ -0,0 +1,45 @@ +version: "2.2" + +services: + es01: + depends_on: + elastic-init: + condition: service_healthy + image: docker.elastic.co/elasticsearch/elasticsearch:8.12.0 + volumes: + - ${ES_ROOT_PATH}/certs:/usr/share/elasticsearch/config/certs + - ${ES_ROOT_PATH}/es01/data:/usr/share/elasticsearch/data + ports: + - ${PANEL_APP_PORT_HTTPS}:9200 + environment: + - node.name=es01 + - cluster.name=${CLUSTER_NAME} + - cluster.initial_master_nodes=es01,es02,es03 + - discovery.seed_hosts=es02,es03 + - ELASTIC_PASSWORD=${ELASTIC_PASSWORD} + - bootstrap.memory_lock=true + - xpack.security.enabled=true + - xpack.security.http.ssl.enabled=true + - xpack.security.http.ssl.key=certs/es01/es01.key + - xpack.security.http.ssl.certificate=certs/es01/es01.crt + - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.enabled=true + - xpack.security.transport.ssl.key=certs/es01/es01.key + - xpack.security.transport.ssl.certificate=certs/es01/es01.crt + - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt + - xpack.security.transport.ssl.verification_mode=certificate + - xpack.license.self_generated.type=basic + mem_limit: ${MEM_LIMIT} + ulimits: + memlock: + soft: -1 + hard: -1 + healthcheck: + test: + [ + "CMD-SHELL", + "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'", + ] + interval: 10s + timeout: 10s + retries: 120 diff --git a/apps/elastic/8.12-node/scripts/init.sh b/apps/elastic/8.12-node/scripts/init.sh new file mode 100644 index 000000000..145cd9e58 --- /dev/null +++ b/apps/elastic/8.12-node/scripts/init.sh @@ -0,0 +1,23 @@ +#!/bin/bash + +# 检查 .env 文件是否存在 +if [ -f .env ]; then + # 导入 .env 文件中的变量 + source .env + + # 创建并设置权限 + mkdir -p "$ES_ROOT_PATH" + mkdir -p "$ES_ROOT_PATH/certs" + mkdir -p "$ES_ROOT_PATH/es01/data" + mkdir -p "$ES_ROOT_PATH/es02/data" + mkdir -p "$ES_ROOT_PATH/es03/data" + mkdir -p "$ES_ROOT_PATH/kibana/data" + + chmod -R 777 "$ES_ROOT_PATH" + + echo "Directories and permissions set successfully." + +else + echo "Error: .env file not found." + exit 1 +fi diff --git a/apps/elastic/README.md b/apps/elastic/README.md new file mode 100644 index 000000000..de7113419 --- /dev/null +++ b/apps/elastic/README.md @@ -0,0 +1,116 @@ +# Elastic + +Elastic NV是一家美籍荷兰公司，成立于2012年，位于荷兰阿姆斯特丹，以前称为Elasticsearch。这是一家搜索公司，它构建用于搜索，日志记录，安全性，可观察性和分析用例的自我管理和软件即服务产品。 + +Elastic NV is an American-Dutch company that was founded in 2012 in Amsterdam, the Netherlands, and was previously known +as Elasticsearch. + +## 参考资料 + +Docker@Elastic: [https://www.docker.elastic.co/](https://www.docker.elastic.co/) + +DockerFiles: [https://github.com/elastic/dockerfiles](https://github.com/elastic/dockerfiles) + +GitHub Elastic: [https://github.com/elastic](https://github.com/elastic) + +官方网站: [https://www.elastic.co/](https://www.elastic.co/) + +官方文档: [https://www.elastic.co/guide/index.html](https://www.elastic.co/guide/index.html) + +## Elastic Stack + +了解可帮助您构建搜索体验、解决问题并取得成功的搜索平台 + +核心产品包括 Elasticsearch、Kibana、Beats 和 Logstash（也称为 ELK Stack）等等。能够安全可靠地从任何来源获取任何格式的数据，然后对数据进行搜索、分析和可视化。 + +### ELASTICSEARCH + KIBANA + INTEGRATIONS + +集搜索驱动型产品和功能于一身 + +Elasticsearch 和 Kibana 都是在免费开放的基础上构建而成，适用于各种各样的用例，从日志开始，到您能想到的任何项目，无一不能胜任。Elastic +具备极有价值的功能组合，如 Machine Learning、安全和 Reporting，这些功能专为 Elastic 而生，让我们独树一帜。查看 Elastic Stack +功能的完整列表。 + +#### Elasticsearch + +GitHub: [https://github.com/elastic/elasticsearch](https://github.com/elastic/elasticsearch) + +Elasticsearch 是一个基于 JSON 的分布式搜索和分析引擎。 +无论您正在查找来自特定 IP 地址的活动，还是正在分析交易请求数量为何突然飙升，或者正在方圆一公里内搜寻美食店，我们尝试解决的这些问题归根结底都是搜索问题。通过 +Elasticsearch，您可以快速存储、搜索和分析大量数据。 + +#### Kibana + +GitHub: [https://github.com/elastic/kibana](https://github.com/elastic/kibana) + +Kibana 是一个可扩展的用户界面，您可以借助它对数据进行可视化分析。 +在 Kibana 中通过炫酷的可视化来探索您的数据，从华夫饼图到热点图，再到时序数据分析，应有尽有。针对多样化数据源使用预配置仪表板，创建实时演示文稿以突出显示 +KPI，并使用单一 UI 来管理您的部署。 + +#### Integrations + +通过 Integrations，您可以使用 Elastic Stack 收集并关联数据。 +在收集、存储、搜索和分析数据时，发掘有价值的见解。使用 Elastic 代理、Beats +或网络爬虫等功能，从应用程序、基础架构和公共内容源中采集数据，在大量开箱即用型集成功能的加持下，分分钟即可开始工作。 + +## 版本介绍 + +### 8.12-cluster + +默认集群模式，包含三个节点，一个主节点，两个数据节点，一个协调节点，一个Kibana节点 + ++ Elasticsearch 8.12.0 ++ Kibana 8.12.0 ++ 集群模式 + +### 8.12-node + +单独节点模式，包含一个节点，需要填写集群信息 + ++ Elasticsearch 8.12.0 ++ 集群节点 + +### 8.12-single + ++ Elasticsearch 8.12.0 ++ Kibana 8.12.0 ++ 单机模式 + +## 安装事项 + +### 将 vm.max_map_count 设置为至少 262144 + +vm.max_map_count 内核设置必须至少设置为 262144 才能用于生产。 + +> Linux +> +> To view the current value for the vm.max_map_count setting, run: +> ```shell +> grep vm.max_map_count /etc/sysctl.conf +> ``` + +显示值大于或等于 262144。即可，如果显示的值小于 262144，请执行以下步骤： + +临时设置 vm.max_map_count + +```shell +sudo sysctl -w vm.max_map_count=262144 +``` + +永久设置 vm.max_map_count + +```shell +sudo vi /etc/sysctl.conf +``` + +文件末尾添加 + +```shell +vm.max_map_count=262144 +``` + +生效 + +```shell +sudo sysctl -p +``` diff --git a/apps/elastic/data.yml b/apps/elastic/data.yml new file mode 100644 index 000000000..db05d9148 --- /dev/null +++ b/apps/elastic/data.yml @@ -0,0 +1,19 @@ +name: Elastic +tags: + - 中间件 +title: Elastic +type: 中间件 +description: 分布式、RESTful 风格的搜索和数据分析引擎 +additionalProperties: + key: elastic + name: Elastic + tags: + - Middleware + shortDescZh: 分布式、RESTful 风格的搜索和数据分析引擎 + shortDescEn: Distributed, RESTful search and data analytics engine + type: runtime + crossVersionUpdate: false + limit: 0 + website: https://www.elastic.co/ + github: https://github.com/elastic + document: https://www.elastic.co/guide/index.html diff --git a/apps/elastic/logo.png b/apps/elastic/logo.png new file mode 100644 index 0000000000000000000000000000000000000000..ca3de1eba331ddbb9e34d37a5f494035a9498294 GIT binary patch literal 13770 zcmV;*H8skKP)E5(SH%bd7VQbk+BLxAWWt_}9rYW>5y5d> zz=eV=>ZlY7D2R|!wn7UDd&|;csv|;8{ow@Nl8gj)2C0Lnv#+-Nh}tNMIzBC0O3x!b#p~Uh3wFw zLxnP#tVk-A9?Z|rFLT0udkkKIcpwsqL^x^Eq`PL!m@zFmIeA=2NXTHe-n+TE`QqWj zhYO@q>AvFP;yt@|?K;`g(!$o;d-2jS5{YEMs#U9AZES2jX7(VOnwn0nTD9usq@<)6 zcYj7+dLbDZ8DoozioQ3S%|>^N!3Ku1va-z?85wu;cs%dS!;9;%JYY+fESXhSR<_sO zPkm>&eEIUBjEsz#?*1IT^e|##V*HmZS@Kv-O^w{$54kgFYHB+3{`>F$IWjVm=kCwe zOE-qc<6+5?CG#2^80L&vNRG zTQ38xCt+%<01QgN&(j9Km`N7;eby+aQuYe_zeO42LhCzQ%zDR z6u)Fr_uqg2gM@^Hshzun z5oYZnm^DAc+`J#q%WfDIT!`-=aCkI0A$NikECGD@oxW8`Ny*j)3l_YbpPzr)sW!5V zS0GMi#flXRo_Xe(j{$HUzF2=ArpB*fR;>dJl`gT*e*6I53~(d=1cXfK>`mHoa&lhD z%F6n8cMWOr3dBk9`Fw6pPR`%c)6*9_d~tITjMeV|%{u{j;Byo(4xGq8ffA$x9LK}= zWHQ;W7 zGlAp4?e`H7ILe{RR4Ubenx@m`a(S)GY;!V{yA9~hj2Sa#z>Xa|cG)csqXwqx_hBp@ z3$uDd_Y{W(-C-Ed-2tQWch*tRUIYTc9R&pihf-5hZ+EGEPQ*KcbdrpWj8Qo`IlBNv z+0);o+6HsQp8=!07vIi?15VWIp!&Yz$m7(OmXGlHQ^Z6XHSUf~5 z77rH)1pO=zEKSpV%jl?5sSGliOa-8>va<4gNlD3x{QUf?uD+*4B1w=+r3Lnh!wgg9 z-(jx%S6AQGvkATn+_=vG-#&JA*Jw1=DJdxvKqL~$@TE(aevq7;e7B3=%3NGr{LP|8i(bjk&%bnY zBcIRbN~O|mVzKxxTQ@RQ{R8IOcU)#@cYwox3{?M*?27kNsZ{4_njSBg%j;P&&H+4D zAW2C{QOlPve}|^&Ct2QY)8*#oF3rly`iD}fynfbn_wL=xXqwKlb+M`HJ(z3%?s6l$ z1(tP*XdOTW+U%-OD0U|%CeF}mwMJHKvlGX|Ay{C^k|p!L`R1FgB9Uma8$|3oY}l|V znVFgME?&I2_r!@4l}nZ^c_cG4bE&NhO?6+vT>UCLR(1#4&%@kY42nMspnQp41p>i9 ze}Dh_9XoauvSyzhc+?0IA0Hq3`RAX1GG)q?$J}kpRdjiId7q}Gr7f_0ACfwnD&K~= z?w{S)x8X_x#(^vP4)C?P>8DLgOH0|ZWs8g*!))U*0+C20@wvIVTLl8akgnXv)TD!1 z-2!t{8(=mAzFcs4e&9xi0RFB?17^DX8q5tJy5!zHhM>vd4&G{W(xOtSlwz@Xv{I>T zV$C)J9wCs7jEviJa&oqI=G=tgLM_@4DPcHX0i&WGXm0PgBL|>jL%|&!1)otd@EsEe z$|9OBVs88|OqZVM@_l*(oUms=_5Z+TKdDrjGj-}zkN8mCz6ME6O&$5&ci%}JNrYz7 z=%LS*q2)jMX!}79b=WV==A z6^FAhT!!)TB3r!#AAR)E8|)Z#E367cB9RF1zWeT{Nqr2;dNjZNvr~7e93s>o+-SnK zul^L9*7SVT>wu4sBocXOi zCab3B(0UwZRW7khW@hG7F)=aZh({N|nm}H8<(20F_%pQ|FRP&Y(yd$GR=DxxfI74O zBx|~q)qjcYG)>Ro^ZBfusp8dI%TnV>7IroD}ca$|-dL`N&fRXqG6qTNy zeg}I7u_O?hrl&ErnOfS=e$X>AzfiF@lB4M5Y?;zKG3#JbeNXI?o}T^yYxb}qkTGM% zL^j_`Hgd{(*B|VmD+Jo>7@KLDPT}#`sXWcbE*9g~kg3jd zd5hg7$@q2V~a`HenEOBprkQRmvByNC93Q{y10R0Iz&GFK5h}bL^ ziyf=p(@DGqbgsf3#OUY;^cMhgGn?l0ddzxq?l^%!kido=YzTyTGU+Ms1BhopOg6sF zytn|}F=7ZjP1D2KFvH~nQ79D5_2@zwgL_%UC*H;a-Mju^A9EAXTEo~Z5C{gdVFnul zVT>c81h%t&vjKM?VR~g--zxrG4A0o)R}Nb!RZ`srMlRLwA)tb##)8STd|!(7EqCgk5`jo0lDO>b?8R3r)OISD5fvH;N*o8@8=~c{qs*x) z7>-rIaO^Tn6+#fb>Aj$llfyjc|83x`}nTBTC8y4nP%3M3{bCS?8k^>5NN{U-pn z3uHTpb(Fbdu=Ry&g0W1?j$OVYm`cZ{WmG>Kn;_mKaqfj8Mq0GV<#KWwekb5Gfn;Q4 zO#JAhkJf~QgmkG0rz6}lExRU|Q&&V|DkpCfa{G~eFy=OIno+mHWgguDuyPc&%L3u^ z`2o4Px&KGg^q<`w9ej&m8ZCmUgyHlx!Tfg0YI6k9m%7qiFE-#%%keM4J$QZLf1%#G_$MyVtvgs=fw&Wn zFY^wgOeSL`S5&73vTWJ1d0AOmUplfEt!*=5RcRAeoztME)nqM@I3~;wlcNJLF3KOt zkpT$ybD>~5SokxdKjRHCaW_5#7@Jfo)j3v7=*&f{R;_v?Gcz;W-U?MJy%8(VG~ugr z8fcB?>%TVwINaD~ec=qQ3nry+0LDcIU`(XHO9ey1;&>Y01mW`()w5h5uA4l`c8jZI?h+ty;ApGc)ruTm7nA40v2xgVS9YHM)vLFr)as zm>eBwUCVTOTGn0%$V7cjYds zrAwE-@X|{!kuzXB08t>Rsi`CL^75nrh=u!()wSZO{k5pj*$hv1JJ;4RBL#kVP!tSF zEWul=*$1OyCY$EeQ*@ zwz5YYuF+%Oo*L-v*roC`L_u5>r1d9$OBl~i2lRz3TGhMY2%Z4d{{wp>cO6D5m3}dA z-n{24D=Rzg&|;ixWM^kDv?Y#9nsz)<&^^UrLD6Ew?n~r&H!A8y*6itBaKP!a1XSEd zc8NpX(u(qW$AVF5ntp2c?%msjLLu{+YMWMefKVtDC=`mbq^Xrf5_5m8!rnTUM;yD9 z@!@{>VFoFKj0wh)@jx4M%?dA$!|C&PP|@~%`B;SU$m(4vYt-PuQ9?YIG7`gM$;FOt zM5R)lNl#Bt&Ckz2@2H*Jj((Y&oBOUvBqHv!tvIR1T1EFy$9Y+2#FVH2#PXP2LL7h- z3~0zTE4@c<~C-^h~F`(ksgNm4ISNF~GGR$3<4^``}ZiABgCagMi7PU<+7#kOfKtG#4 z@8IGT8$RZ->|ZqOFE;~*(eHSmd8)9C%+y6{_+Zfn;Q4OwY{BTui#)wZru&ZuFe81SQXqvuDCX?ls zl$6-~WBz85URGB2lSm}Go2m1$x>nrxYn9!GcQ9>1uoIT5uU!&{g&$5{ z#Dib`g4!ms>q8(A4BWPD+qU@lc;XiDb%8wo_~XQt(}7AIj`qN*)s6gku^Eke!s3eK z3r_fxY?{yP)YMeQ(Zj+3p&Bz+ zY==Va+~=!I)r<#L?SxuK_S1>Q;#n`g_~I<4cB?>=l9Iw>V`IlMbut)%pDSFRVZ|f( z>bwRm?Su_%%R-a?Ae$z2A2>mv27C*Sfbn_z4O`@8n4Pl|4SLrk=PRw(;I+-Rb1N@e zwCF89pWor4#rn(i^z_-J!&5((YoTiI$*Yh5QQv05muJXp5pJJX0eD7rERP}JHgJdR z1&426aOd(}$B_BmUg(Xk^`@;qR)#P3l6Q1tV`CFP`Q($ocGPxFAgQDqeAfd!=8o`j zNfXqqgtbV(U?A*wY?|cR1W&j6I1mtTv#Zf)!lLi@@`+gyuqW8Ma*?|YX2Va+a&BxoAA!u0@U zJCSCyz8!N{@4~914u?c_35yV)`(eNJ{R#MHXJ@~4^Dil}SZq-Z<38M>+E(a$$L#7i zd~r^LHd2%_HyBjZAHhwKffM}>;M1Q?^E?6$|1od}esBFOY*DY(A#LT)*m=H^729s6 zT%*IgzZ@m@p=tUNiA3_7>bVq6(@CU@itBpU=y8px050?fJ0<}Zq4fDPxCzI=>9-Q_ zWi9inTj4}51~uR_yGD*CU7K~}kX4gY!Md6ig{3%KMYMs+&dz@MH@}F9i5X40;z)h( zOaK3HTo5+h*%zVy9R@ph4CMzZd>***he5@C1BA?SMgDFNz!#j@k3q#OwkxGUk)j57 ze!LY$6%DLdN5Wt>1XTXX2tM$BfkHC6vd=sdM47<8-ICK`NU+%y;8xA`**`ut%!3)H+ zzJ7D(&VBUS50pqGV$8#-Yd4{q>Hpc(Hp6#b*Gx zgLVQTQ*3s%tlZw)eiYByh{kmn|2=wv*q)l2de620w+Mvs)L?CkXJsgH6_%0XFC+MP zcBG3QVBbhkv46iZqD226z_n30)YI@6gFEC`AaJ-{-QWHB2;SXu!eit1HlHrHZZ|WL zkdTlf6bh|750-fZ<5N-B*7HY?a9;{v-4TU_iMA^Wn_$NG6-rd)Np8gp$-H;K2tUw8qL% zB$sfjr+x)EiP%6cw$A8_8F9oyEmrhK1D=r`!tzYBjGceVD2($V-%U4s^?$u>DR^N_gw6lk^)hf*T@)uM!cOREPAVuNq>yIGFpE2;X zio@Z=c=-748sY-E_;FfayTnnYZ$WzT-VViK;pc{0+*wqBdByusP}_x~M}fmY4fqt? zgp=SzykyN$>mGbT^E0IVBS_IPZUmidh*Yk$` zu5wr30Bo5NgMob8A?q?#1MWGr2d7(XZ&OND^_X+)5N00SjdkT^Xln1|_PAePP_fxp zgcAKO;7|19Iu|MoT;ccNgw3|A`;SL2VEU)qaH*+#MtVzac=eN$lgCpkm5TAmVPt>< zj2ZwNy92MDl0nhzShBP0_=JP% z^BlPG`@kKv+Zqt)Qv8O3J7fg=mOsLd zxw@xf`JP=ol8-mWM%d+T*l?)~i%O5f74Fe?n6a_85;Kbm@U*NDB^vU#7m>gOP@>h~ z4n6=5e_rR000&LEl5vCzwAoeH){cy|yRou}__%aCY6!_41Oh<}RZ>zyi~$}SX?GD@ zkAm;R!Kz77_~R)19Dx5me+I9V9B0M0t@YKIb|@dS4(-9(@(a+kcXA#dln83TN^pmj zfYbM1fS>IHOIP566ZsOj12+L&p3UCJFV*ADkGEl4sY6*iy9E`^#Ox>G9HCGcs8A@H zn2y|DP`6>q&+dug?<~Pw4mL>oU`&*4aqEo+JbUagb~Lyzt!S8!FP@DXg!%nN5cqZF zD6bJF)mE5mKV&Z1zzG5s_qE+eWA~I+V9wgzXm#BSqL8tjQYw`?l}g1} zv2qaK&+0emE=2iJ`0vzcyTqYsZ^L6p4!Bhu78(uh_(xd@Zr}F{-Z(8sxgFce9m54B zxF6i1zk)mPS0L!7gQ8RfxPx}sEslcH3Ou%6+GE9G57sAt*sx(k#bWU!rcReM?Ksj6 z!rp~JTzogxJ_lf%(TFGIhp<=e{&Nb~XfvB}M5D&4OJ%6hw_pU1j}YHZt}p!hTfJNmz#X&^+~Mb~ z+r_qMZ8zZMjR*1U#seN1s_tz3eTlOp{q+s?rlzLykdP3@gVp!`T!CY1&vXjS6$azI z36XYr2M#vW;)!F2p*D7}Q2sdo06Z@of`?)Uz@O`yt@pNeBQn-WvE4=nke)>Tv-cn| zj`74t)%D#^sZ_d?bfbIih6Yr~^CzxFC|ScnNBZgJP#C=g-^r3Zw;9(Qu#*&!kL_oOKJ*kRbVs!MqK zL@`>;-Fw&fFC&pW`U|&sSmEC);q!M%YD9WK;|}x}u_@;>`6GN=r+NK_n7!#bWWDOc#uc z3c$A)v}kc-Ra-v}uxfG??h)F~#bhv<@Yj<^v8?<&dQd^E-_UM0<8-qIKU81F_UZ~m z`TAi{Fb@>R_E(2xK~Dc?Yqt(K>+I4?leRo5@LbcJ>MYjERGIeiU9C zZQC>LDuTHjteM;gQ%J@CuX1G@w-9TqFR@~qCvdVwiziPOL$d!@e0}i(T5arn`TP1{ zWp_1 z!t*DJ@Qa%rfbQagUWdP&JpuZ_E)?6?%6@Wu0&8}868;p0I|lV7by3S?vNN|VZ?m(r zmy*^ZmVtZe_(*H46I;XtaItB6UnEA@7N+G}^AE?0u(_^xEjT+u*{Z|e&XD8F#t(|d zgnqUod3zd@MSTzy!0a=V$z%m;wc2!xK$J?QcG03m&ya53kLQCg?ufFk2V6};h>taN zWPlwGz_MnI)d9Grt_w$Bdl<6jCafh18gW6jc&cr1A^u{}38cQcrB&V2B} z2b+tFi#L&OFfk?&uiB9+rz=eB6JWP@e1Cln?mb)pnU-AJqc`%l4Zlg!fJi((hWxmWw^meC9FoiB)*wB`Uita?CvtOh zZ>g7XBNPREd`BNhqMW;E|HF_FYkpjEn9LQ58td@;FJp=nQRBCpC6Zl?BsCk!`)dd3;q=oBJs=!+xc+~CKDE&D8}M*r_k!8v*W#i z73F1UF)&X<`9c18vImbMJ{%7InM#gmRwxvk3knLZ&qr-eI@M~mF*7ss5sgM;^DwgI z;r?h`gw>(v2q8WktV!vEd+qR!TX_A992=@HJM%?_7ocimPHh^^55n)q4rSFQHi+c~;I)}!hQOTpOsVq#*vQmMS(8Z~AW?e&Vo1?+6BMNtD|T4t*wZSkFAR&8=N zaiKwYFMWc|ek)h5e7hrYz>zh`&9t_*V#9_FKM4eanh6soOtm+?pAW@>Jq}xI@@UyX z)Eau{Sp_z@*rLTF{g`t?B}5DGqx=FIbe^Bl=4PS-{jlZfyAT^jKIErTsgBH=HS3RU zZ5@|W>vF=Y?c28(<>lplosf_aEE0)EJL8^TDbHcyX&IWkkUZLpZOU8q7#AXdFu3D~ zh{NGvTwD|)1N{-==L21<0h)Ht59b-vHw@op-id+aMY&~ab#dCXX?H1=O2!45Q#ZU* zQ&Y!&{q@&h2n2#oukhY2J&AvplRds(oJR^j9N&(eYje_%4IH;__1+{0b zQKpEZ@lD1w1o+v^{Gv%uPoKDH($*l?sFEwRH9H>i*qXX)kMF0Xe>T|bP9qA=RB@r%*x7| z_2GvfZnf3XWiHdJLU}wZE9+H(KroEd*XjT~CCArQUI(B%pal_FpUjw8(;+N^*>k=U z`RA)psI0-+M%N3*pQ7;Ew9)v})I_@;=)AnVx9-3H{x|Hox65M+csw3xn!YVBFK-8c z4l{K9;n-nps_kA0vU?JN91hOV_rjNQehy}pR*&PAjW~L_4o5E4<5*<_E~=X0tO&Z9 zLt^pvePc1Wk9{@n^YZdOdi2ppvszkO>@vaS)p4|1Ey~Nw&jMgP*D0;9akUv<2#g30 zb%{7E2zUWV85(1KUBe=peHW^*+cGUv)Z%oV+F`*AiwMP%yKckGQ3LF~#GI3pv+#*0 zp7_|2_hF@clt3UD$~0Ql>vd3jcdOjWs1WI;GW26mIZP% z{9u3FIXuq#ve4Ahio?oU>sn^d`6`^LQ)7~_4;I`p95Y75IdpH0MpL(N;li}lt5+ZF zjBTt4gvaAC3ZzEw^^&_AF+Ys4twvi4sp11f1`R<}&=5ohTmCx~K3vxwtO^bC$MoU- ztuG5klL=hP@t}{Al9F9dKmGL61qB5cI%^9n0vS7YEaOD+a+`MqaVM4qdVEMIV|!i8 zIaD{Fw!W^x<@h2xcm!fY5)l(J8nK~?@Z-8Jxp^nVp<2Ft`JxwIc;TzAzBgMXY#C## zn>$;d&x=zS7{~*c!~6g?>Tlh8H=5f~p_N--s01jEFZu=#M@&c}Vy%K1?NY&zC@Cq~ zK4;FHC**RuQ?^A}5r{}6V)R0_cr%f>mBB&eQ=E-D#wy|0FTnCEdgXrMl z*GHHb-be)aGLKTuK&4V$T)uqylBG+RuGVU`PRroImOvOI#@bEZGv)4NC_^09HB=pp zAhs}>4XD%}x4uxh-nxNlS+~UTldYoZ%NvD2U*~KLXf&EjOP4Nvd-?L^tJG?>)1xZc znqo128Y-_q+)6?)^EZ3DQ4f{g8E5~^sBI~=zK&FGu>M965Qo0J5r_;Le02k0s3W6{ zUMiLTn3tEgY0a87o9pW8T(*#9OCVl6lms4gx~AIZvoO1;aD-)Kx_NX84;+ZN(B!LA zvqS{@G5VG{Sy@>NuO)YLC2mip=ike6!g>;xZ%0uO^AxML#bzQKr_!J+gS`5C{B&*! zzB>8FMeBuwesR zPbXu#pg)FYYJr!SYFqB6KF=_UUlbxDY=3+=9 zk;vsKAXyPeNl6LgSUn)XJs}Cbol(3H_!HKDm0IFaZPw7VGuN3EiA2mPS)2qb0;#O5 zWX!@46Bq=4*B@;3auc@^)*rA&@t$VQ77|7ia~@#;_K(2-aFjn**LpZSG z#rgQ#SfI1*K_}tw?d8i!u&<2D;3wxN8kPv8J5l=6jheuHuN*F=vTRNQp#Od@8O(wP% z6ciM?+6Go*&2w{ezbCcN?z>ra5=sZg)tYuQK?jCjvP7S z^0^?}0@+CleSe^DfB1P1P`Q**JhIQJQRf*`tRdl3iJ4KPQYo=^zq4RfAWEfDS5i_^ zz|=1A_Xiyo#imKU4qI6iJ!K7YTi-{B?YX(RHcJ;c1J;l8ZP~JA8>#*N=velQ>4hW` z1Y$6?p{dpVS@s7BCL@YD8K;HX+}zyVY}mrOKsIdH@Pp-V!PI_lbS&ch0@yXGmk`XM zFo@(qZ!U$|X@vbET{xh{&%}T~W)&){rTzpw3ljSnC2XKAxmq7{a z8r4e}63inm(5p1=4{@J1@MVPf6TRmxix)5ckS%-Mk}+ZV^5w+x(f7y1VQ8TDoQSg- zOvqpY4~W4UD42vH5fWk_sZ_dBsZ`dpWs_S3vU>IEe3eR7%+zlAmV0fm%a0rPI)>U3 zh#RALEmJFr=+Cyg>9e!5-($z3E4VG^&RcK2wV2d?S9C09M|!>M&V-aCuFcSlMmHsC z2=waiV%OBv3NBJ2?_C~rKM_iEW3hRv$kbtXTMHr5B2rK zKjIVFGpGj>$l+L{rkQZZ^eQ$)j0Z>j#~yK5o|Oe`iv#W!$m-Rri;Ihkx0CwZ)3+a{ zg>_gQ*NX!@+_yh*2WtR78G-=23u1Pe;gR=X_OPXPWqFrMrJug}=9`Q=pRUB^ndxj% zTU&c}&YU^FCr$Up@x$?B)g|b>nczFc_|P!?Co!2QkRZQsjOvqSErwIme8yVBz!mff z8U|YQ0+Rd91BXz!=Nd&tMc>byIrFKuwl=r?@jW8&Y4`5kpU^b@2U4Gd^|g3Jc7WN# z=%qvA`~vXvcnQKB$UmlQS6j;zoT%B1He<6>?1%^)j7b9)Kqwe*_cbLYCHdpWkDsnq ztKC)x*&_rZ6bc10ne2o>Am~Tx_qpOMmYnyDbTr)oe-4Gb!VweBe}<0qDumNMotU<0>Lv2f+Ah&~`7;4Dqk zb4mS@1rey#wLq?AO!e#K23{MKfP4G)@AUOt$`>&qBQd(~0~i*07b1cNA;>q}IyEwx z+F>yNZ+Fp$<8R%j?Gv1U`0%M1*Du35l}d=3fv~^<;5hJItWv2;XquLsI(5pe;((`& zAlKNvd-s<#P5++M$6zwy;o^NLY+_9J>jl6);eGJAcs!_Xc6>mgQ0z`mPk&f0m$T+A zC*e`WIp)oq_ncCxl#%*a7Mfp-9*0rhBoB-{8r=_{jvhx8heo40zi82-yKQ~mEMi!@ zcI{hYjV5$RGNN@WH5LVp<;n z&GYBazyE^|KG;5S;>3wksdO1B!rIlSR4Q3|disR<^XI>z)oR_gAnyo|ScBY1X=!P- zNF=Hki^aqeTb2hPy>CApQ#C-L*Rf}y2lIH}{&;(Y*j6`lc6Rps6)RRqEk9_rTEptq ztGCN!vdt4FOo$f<1Or(y_6l{&moI-MJw1JaTrPJ;wNR(yu@h8#wtitPBW=W!@O#TQ?E=x=}f+dBe*Al?;rUPYIem-peq zg$v(NDwSFnzE79&Sb^|(JZk;=^`EAtr9ES-Z>!OWch8-~7nc++s>$lP@VP#CW5@{1 z?Qc8b#hyKT*4%gBeHmIU`I+SLcpRFhC(fNa_x>3(X3UO?igJcn8l_U{cBxdlWy6LI zTT4qzRZh64%kfx&T;u4`qaTaK;y>EccW-?S7M?tU>RuAucpEPiD-y?{KOx5I8Zwz| zS4v9CJzA~S;SXoltXc6iP0tXE#gk~7P6ja8j_G-=>_9XkptD=S$!1?WsX zULbrvpHo;^xHTam!LF*N)p{Kkoji(Nsyf#j=SCi~OsPiPW@|BSMWs>|ipAm?N~Kcc zjQ5U@j}MHAi5Vym2%^Pe@%1yj3WY+iP$=rPT5VZzak0njM0Ev^7YMHWK?H?`g}Vg; zfz1`@HI|(_jrWyj-CSkQ`2TeMTP17^wayjdfuss2f+r{dL`uckP z#*G`-B_<{cMIw=1g&QY^N8z4`XwXYbIn|`XE2rf+qV1kvqEiGBcqbtdg9#Z) zZbl}P<)oyfJgwDgz44u0pj(U}H?nEdrUS9Dv31GG$@khT@F@QP%!wU<{(k-_(KbPC z>>kg|_z(e>4Nt<0Lxv;V{%BltPEO8ik3Rb7%NmWwdp@9xbUT6IO7gkG08Y>}eUG(Z zk{wVS4ifoc$m~B5@qxjp(6^wfjaVSkZQRBS#rp}P@oM}i46u=C;U+X$Sy>Og`s%A+ zwYGZZzpcB`?WR~aB9TZEa&vRP6$k`Lowv2fkfb+WME_>*MI24BSLNGc+fGOdTRzdK5 zJEiCAC=`l)nVFeS=I7_TypT+9rN;;aSDcDec6Ro&Sy@?c0SI^2ef0(d6fIhm>6&p- z*Mdv>7HHbrp*9%MWcsai!nj=UeS8t-AAlG?fAk9oL_%-~1_blKwc`x7owTo9x$TM>VK$qa-2Gs8 zk+%H&{8g!`siWNenR@Ag2!%r4x^?Ta&1SRO-A}rMG;G|s@m~^&r1J;My?C(~p->pI zY}vAB8yg#o-2LQ}Xl!gOTd`uri$bB$Th-KydzdwA)`)fM)_rI;n`_-Ih^tg@+_>@6 zjEoEkpU?NGqtLyX9<__r8F)M%MbmUra&qz=)22;JnKEU{L;x<&!Ku+`6vf5GM~jP# z3-|5YxBHi0emShwYP)+(WsjrR3#22Gl9Kw+G(C32h!NxCZBvm2tXl~ zN{=fPijy*#OtyFL-u=bJ#T70v-HVg)3dBw<(;l%{91S2&EEY!z1cERCmNmkS1r-ed znp7%PgG?r?15l+RV|Dv07+%vu!)c^nh07*qoM6N<$g1Q^d A&j0`b literal 0 KcmV+b0RR6000031