From 72cc739d80c9764179507b7289e444bb673b3f3c Mon Sep 17 00:00:00 2001 From: Meng Sen Date: Wed, 19 Mar 2025 10:38:27 +0800 Subject: [PATCH] =?UTF-8?q?=E6=94=BE=E5=BC=83=E5=AF=B9=E5=BA=94=E7=94=A8?= =?UTF-8?q?=20=E9=95=BF=E6=AF=9B=E8=B1=A1=20Mastodon=20/=20Dify=20?= =?UTF-8?q?=E7=9A=84=E6=94=AF=E6=8C=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 初始化步骤不便实现 Signed-off-by: Meng Sen --- .github/README.md | 2 - README.md | 2 - apps/dify/1.0.0/conf/certbot/README.md | 76 -- .../1.0.0/conf/certbot/docker-entrypoint.sh | 30 - .../conf/certbot/update-cert.template.txt | 19 - .../1.0.0/conf/couchbase-server/Dockerfile | 4 - .../conf/couchbase-server/init-cbserver.sh | 44 - .../conf/elasticsearch/docker-entrypoint.sh | 25 - .../conf/nginx/conf.d/default.conf.template | 48 - .../1.0.0/conf/nginx/docker-entrypoint.sh | 39 - .../dify/1.0.0/conf/nginx/https.conf.template | 9 - .../dify/1.0.0/conf/nginx/nginx.conf.template | 34 - .../dify/1.0.0/conf/nginx/proxy.conf.template | 11 - apps/dify/1.0.0/conf/nginx/ssl/.gitkeep | 0 .../conf/ssrf_proxy/docker-entrypoint.sh | 42 - .../1.0.0/conf/ssrf_proxy/squid.conf.template | 51 - apps/dify/1.0.0/conf/startupscripts/init.sh | 13 - .../conf/startupscripts/init_user.script | 10 - apps/dify/1.0.0/conf/tidb/config/pd.toml | 4 - .../conf/tidb/config/tiflash-learner.toml | 13 - apps/dify/1.0.0/conf/tidb/config/tiflash.toml | 19 - apps/dify/1.0.0/conf/tidb/docker-compose.yaml | 62 -- .../config/users.d/custom_users_config.xml | 17 - .../volumes/oceanbase/init.d/vec_memory.sql | 1 - .../opensearch/opensearch_dashboards.yml | 222 ---- .../conf/volumes/sandbox/conf/config.yaml | 14 - .../volumes/sandbox/conf/config.yaml.example | 35 - .../dependencies/python-requirements.txt | 0 apps/dify/1.0.0/data.yml | 82 -- apps/dify/1.0.0/docker-compose.yml | 970 ------------------ apps/dify/1.0.0/envs/default.env | 2 - apps/dify/1.0.0/envs/dify.env | 965 ----------------- apps/dify/1.0.0/envs/global.env | 2 - apps/dify/1.0.0/scripts/init.sh | 36 - apps/dify/1.0.0/scripts/uninstall.sh | 10 - apps/dify/1.0.0/scripts/upgrade.sh | 47 - apps/dify/README.md | 121 --- apps/dify/data.yml | 14 - apps/dify/logo.png | Bin 42235 -> 0 bytes apps/mastodon/4.3.6/data.yml | 194 ---- apps/mastodon/4.3.6/docker-compose.yml | 56 - apps/mastodon/4.3.6/envs/default.env | 2 - apps/mastodon/4.3.6/envs/global.env | 2 - apps/mastodon/4.3.6/envs/mastodon.env | 109 -- apps/mastodon/4.3.6/scripts/init.sh | 21 - apps/mastodon/4.3.6/scripts/uninstall.sh | 10 - apps/mastodon/4.3.6/scripts/upgrade.sh | 21 - apps/mastodon/README.md | 66 -- apps/mastodon/data.yml | 14 - apps/mastodon/logo.png | Bin 41324 -> 0 bytes 50 files changed, 3590 deletions(-) delete mode 100644 apps/dify/1.0.0/conf/certbot/README.md delete mode 100644 apps/dify/1.0.0/conf/certbot/docker-entrypoint.sh delete mode 100644 apps/dify/1.0.0/conf/certbot/update-cert.template.txt delete mode 100644 apps/dify/1.0.0/conf/couchbase-server/Dockerfile delete mode 100644 apps/dify/1.0.0/conf/couchbase-server/init-cbserver.sh delete mode 100644 apps/dify/1.0.0/conf/elasticsearch/docker-entrypoint.sh delete mode 100644 apps/dify/1.0.0/conf/nginx/conf.d/default.conf.template delete mode 100644 apps/dify/1.0.0/conf/nginx/docker-entrypoint.sh delete mode 100644 apps/dify/1.0.0/conf/nginx/https.conf.template delete mode 100644 apps/dify/1.0.0/conf/nginx/nginx.conf.template delete mode 100644 apps/dify/1.0.0/conf/nginx/proxy.conf.template delete mode 100644 apps/dify/1.0.0/conf/nginx/ssl/.gitkeep delete mode 100644 apps/dify/1.0.0/conf/ssrf_proxy/docker-entrypoint.sh delete mode 100644 apps/dify/1.0.0/conf/ssrf_proxy/squid.conf.template delete mode 100644 apps/dify/1.0.0/conf/startupscripts/init.sh delete mode 100644 apps/dify/1.0.0/conf/startupscripts/init_user.script delete mode 100644 apps/dify/1.0.0/conf/tidb/config/pd.toml delete mode 100644 apps/dify/1.0.0/conf/tidb/config/tiflash-learner.toml delete mode 100644 apps/dify/1.0.0/conf/tidb/config/tiflash.toml delete mode 100644 apps/dify/1.0.0/conf/tidb/docker-compose.yaml delete mode 100644 apps/dify/1.0.0/conf/volumes/myscale/config/users.d/custom_users_config.xml delete mode 100644 apps/dify/1.0.0/conf/volumes/oceanbase/init.d/vec_memory.sql delete mode 100644 apps/dify/1.0.0/conf/volumes/opensearch/opensearch_dashboards.yml delete mode 100644 apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml delete mode 100644 apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml.example delete mode 100644 apps/dify/1.0.0/conf/volumes/sandbox/dependencies/python-requirements.txt delete mode 100644 apps/dify/1.0.0/data.yml delete mode 100644 apps/dify/1.0.0/docker-compose.yml delete mode 100644 apps/dify/1.0.0/envs/default.env delete mode 100644 apps/dify/1.0.0/envs/dify.env delete mode 100644 apps/dify/1.0.0/envs/global.env delete mode 100644 apps/dify/1.0.0/scripts/init.sh delete mode 100644 apps/dify/1.0.0/scripts/uninstall.sh delete mode 100644 apps/dify/1.0.0/scripts/upgrade.sh delete mode 100644 apps/dify/README.md delete mode 100644 apps/dify/data.yml delete mode 100644 apps/dify/logo.png delete mode 100644 apps/mastodon/4.3.6/data.yml delete mode 100644 apps/mastodon/4.3.6/docker-compose.yml delete mode 100644 apps/mastodon/4.3.6/envs/default.env delete mode 100644 apps/mastodon/4.3.6/envs/global.env delete mode 100644 apps/mastodon/4.3.6/envs/mastodon.env delete mode 100644 apps/mastodon/4.3.6/scripts/init.sh delete mode 100644 apps/mastodon/4.3.6/scripts/uninstall.sh delete mode 100644 apps/mastodon/4.3.6/scripts/upgrade.sh delete mode 100644 apps/mastodon/README.md delete mode 100644 apps/mastodon/data.yml delete mode 100644 apps/mastodon/logo.png diff --git a/.github/README.md b/.github/README.md index b48682e49..2bdd001ad 100644 --- a/.github/README.md +++ b/.github/README.md @@ -61,7 +61,6 @@ | 🟢 | | Dash. | https://getdashdot.com/ | 现代服务器仪表板 | | | 🟢 | | Dash.(GPU) | https://getdashdot.com/ | 【GPU支持】现代服务器仪表板 | | | 🟢 | | DeepLX | https://deeplx.owo.network/ | DeepL免费API（无需TOKEN） | | -| 🟢 | | Dify | https://dify.ai/ | Dify 是一个开源的 LLM 应用开发平台 | | | 🟢 | | Dockge | https://dockge.kuma.pet/ | 面向堆栈的管理器 | | | 🟢 | | Dozzle | https://dozzle.dev/ | 一个轻量级的小应用程序，有一个基于web的界面来监控Docker日志 | | | 🟢 | | DPanel | https://dpanel.cc/ | Docker可视化管理面板 | | @@ -101,7 +100,6 @@ | 🟢 | | 苹果CMS V10 | https://www.maccms.la/ | 基于ThinkPHP和Layui的多功能开源免费内容管理系统 | | | 🟢 | | Docker Mailserver | https://docker-mailserver.github.io/docker-mailserver/latest/ | 可用于生产的全栈但简单的邮件服务器 | | | 🟢 | | MDC-NG | https://github.com/mdc-ng/mdc-ng/ | 成人电影数据采集工具 | | -| 🟢 | | Mastodon (长毛象) | https://joinmastodon.org/ | 自由开源的去中心化的分布式微博客社交网络 | | | 🟢 | | MaxKB | https://maxkb.cn/ | 基于 LLM 大语言模型的知识库问答系统 | | | 🟢 | | Media CMS | https://mediacms.io/ | 现代、功能齐全的开源视频和媒体内容管理系统 | | | 🟢 | | MetaTube | https://github.com/metatube-community/ | 为 Jellyfin/Emby/Plex 开发的超级好用的成人元数据刮削插件 | | diff --git a/README.md b/README.md index 9442df3b4..5a93bcc7f 100644 --- a/README.md +++ b/README.md @@ -56,7 +56,6 @@ | 🟢 | | Dash. | https://getdashdot.com/ | 现代服务器仪表板 | | | 🟢 | | Dash.(GPU) | https://getdashdot.com/ | 【GPU支持】现代服务器仪表板 | | | 🟢 | | DeepLX | https://deeplx.owo.network/ | DeepL免费API（无需TOKEN） | | -| 🟢 | | Dify | https://dify.ai/ | Dify 是一个开源的 LLM 应用开发平台 | | | 🟢 | | Dockge | https://dockge.kuma.pet/ | 面向堆栈的管理器 | | | 🟢 | | Dozzle | https://dozzle.dev/ | 一个轻量级的小应用程序，有一个基于web的界面来监控Docker日志 | | | 🟢 | | DPanel | https://dpanel.cc/ | Docker可视化管理面板 | | @@ -96,7 +95,6 @@ | 🟢 | | 苹果CMS V10 | https://www.maccms.la/ | 基于ThinkPHP和Layui的多功能开源免费内容管理系统 | | | 🟢 | | Docker Mailserver | https://docker-mailserver.github.io/docker-mailserver/latest/ | 可用于生产的全栈但简单的邮件服务器 | | | 🟢 | | MDC-NG | https://github.com/mdc-ng/mdc-ng/ | 成人电影数据采集工具 | | -| 🟢 | | Mastodon (长毛象) | https://joinmastodon.org/ | 自由开源的去中心化的分布式微博客社交网络 | | | 🟢 | | MaxKB | https://maxkb.cn/ | 基于 LLM 大语言模型的知识库问答系统 | | | 🟢 | | Media CMS | https://mediacms.io/ | 现代、功能齐全的开源视频和媒体内容管理系统 | | | 🟢 | | MetaTube | https://github.com/metatube-community/ | 为 Jellyfin/Emby/Plex 开发的超级好用的成人元数据刮削插件 | | diff --git a/apps/dify/1.0.0/conf/certbot/README.md b/apps/dify/1.0.0/conf/certbot/README.md deleted file mode 100644 index 21be34b33..000000000 --- a/apps/dify/1.0.0/conf/certbot/README.md +++ /dev/null @@ -1,76 +0,0 @@ -# Launching new servers with SSL certificates - -## Short description - -docker compose certbot configurations with Backward compatibility (without certbot container). -Use `docker compose --profile certbot up` to use this features. - -## The simplest way for launching new servers with SSL certificates - -1. Get letsencrypt certs - set `.env` values - ```properties - NGINX_SSL_CERT_FILENAME=fullchain.pem - NGINX_SSL_CERT_KEY_FILENAME=privkey.pem - NGINX_ENABLE_CERTBOT_CHALLENGE=true - CERTBOT_DOMAIN=your_domain.com - CERTBOT_EMAIL=example@your_domain.com - ``` - execute command: - ```shell - docker network prune - docker compose --profile certbot up --force-recreate -d - ``` - then after the containers launched: - ```shell - docker compose exec -it certbot /bin/sh /update-cert.sh - ``` -2. Edit `.env` file and `docker compose --profile certbot up` again. - set `.env` value additionally - ```properties - NGINX_HTTPS_ENABLED=true - ``` - execute command: - ```shell - docker compose --profile certbot up -d --no-deps --force-recreate nginx - ``` - Then you can access your serve with HTTPS. - [https://your_domain.com](https://your_domain.com) - -## SSL certificates renewal - -For SSL certificates renewal, execute commands below: - -```shell -docker compose exec -it certbot /bin/sh /update-cert.sh -docker compose exec nginx nginx -s reload -``` - -## Options for certbot - -`CERTBOT_OPTIONS` key might be helpful for testing. i.e., - -```properties -CERTBOT_OPTIONS=--dry-run -``` - -To apply changes to `CERTBOT_OPTIONS`, regenerate the certbot container before updating the certificates. - -```shell -docker compose --profile certbot up -d --no-deps --force-recreate certbot -docker compose exec -it certbot /bin/sh /update-cert.sh -``` - -Then, reload the nginx container if necessary. - -```shell -docker compose exec nginx nginx -s reload -``` - -## For legacy servers - -To use cert files dir `nginx/ssl` as before, simply launch containers WITHOUT `--profile certbot` option. - -```shell -docker compose up -d -``` diff --git a/apps/dify/1.0.0/conf/certbot/docker-entrypoint.sh b/apps/dify/1.0.0/conf/certbot/docker-entrypoint.sh deleted file mode 100644 index a70ecd825..000000000 --- a/apps/dify/1.0.0/conf/certbot/docker-entrypoint.sh +++ /dev/null @@ -1,30 +0,0 @@ -#!/bin/sh -set -e - -printf '%s\n' "Docker entrypoint script is running" - -printf '%s\n' "\nChecking specific environment variables:" -printf '%s\n' "CERTBOT_EMAIL: ${CERTBOT_EMAIL:-Not set}" -printf '%s\n' "CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-Not set}" -printf '%s\n' "CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-Not set}" - -printf '%s\n' "\nChecking mounted directories:" -for dir in "/etc/letsencrypt" "/var/www/html" "/var/log/letsencrypt"; do - if [ -d "$dir" ]; then - printf '%s\n' "$dir exists. Contents:" - ls -la "$dir" - else - printf '%s\n' "$dir does not exist." - fi -done - -printf '%s\n' "\nGenerating update-cert.sh from template" -sed -e "s|\${CERTBOT_EMAIL}|$CERTBOT_EMAIL|g" \ - -e "s|\${CERTBOT_DOMAIN}|$CERTBOT_DOMAIN|g" \ - -e "s|\${CERTBOT_OPTIONS}|$CERTBOT_OPTIONS|g" \ - /update-cert.template.txt > /update-cert.sh - -chmod +x /update-cert.sh - -printf '%s\n' "\nExecuting command:" "$@" -exec "$@" diff --git a/apps/dify/1.0.0/conf/certbot/update-cert.template.txt b/apps/dify/1.0.0/conf/certbot/update-cert.template.txt deleted file mode 100644 index 16786a192..000000000 --- a/apps/dify/1.0.0/conf/certbot/update-cert.template.txt +++ /dev/null @@ -1,19 +0,0 @@ -#!/bin/bash -set -e - -DOMAIN="${CERTBOT_DOMAIN}" -EMAIL="${CERTBOT_EMAIL}" -OPTIONS="${CERTBOT_OPTIONS}" -CERT_NAME="${DOMAIN}" # 証明書名をドメイン名と同じにする - -# Check if the certificate already exists -if [ -f "/etc/letsencrypt/renewal/${CERT_NAME}.conf" ]; then - echo "Certificate exists. Attempting to renew..." - certbot renew --noninteractive --cert-name ${CERT_NAME} --webroot --webroot-path=/var/www/html --email ${EMAIL} --agree-tos --no-eff-email ${OPTIONS} -else - echo "Certificate does not exist. Obtaining a new certificate..." - certbot certonly --noninteractive --webroot --webroot-path=/var/www/html --email ${EMAIL} --agree-tos --no-eff-email -d ${DOMAIN} ${OPTIONS} -fi -echo "Certificate operation successful" -# Note: Nginx reload should be handled outside this container -echo "Please ensure to reload Nginx to apply any certificate changes." diff --git a/apps/dify/1.0.0/conf/couchbase-server/Dockerfile b/apps/dify/1.0.0/conf/couchbase-server/Dockerfile deleted file mode 100644 index bd8af6415..000000000 --- a/apps/dify/1.0.0/conf/couchbase-server/Dockerfile +++ /dev/null @@ -1,4 +0,0 @@ -FROM couchbase/server:latest AS stage_base -# FROM couchbase:latest AS stage_base -COPY init-cbserver.sh /opt/couchbase/init/ -RUN chmod +x /opt/couchbase/init/init-cbserver.sh \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/couchbase-server/init-cbserver.sh b/apps/dify/1.0.0/conf/couchbase-server/init-cbserver.sh deleted file mode 100644 index e66bc1853..000000000 --- a/apps/dify/1.0.0/conf/couchbase-server/init-cbserver.sh +++ /dev/null @@ -1,44 +0,0 @@ -#!/bin/bash -# used to start couchbase server - can't get around this as docker compose only allows you to start one command - so we have to start couchbase like the standard couchbase Dockerfile would -# https://github.com/couchbase/docker/blob/master/enterprise/couchbase-server/7.2.0/Dockerfile#L88 - -/entrypoint.sh couchbase-server & - -# track if setup is complete so we don't try to setup again -FILE=/opt/couchbase/init/setupComplete.txt - -if ! [ -f "$FILE" ]; then - # used to automatically create the cluster based on environment variables - # https://docs.couchbase.com/server/current/cli/cbcli/couchbase-cli-cluster-init.html - - echo $COUCHBASE_ADMINISTRATOR_USERNAME ":" $COUCHBASE_ADMINISTRATOR_PASSWORD - - sleep 20s - /opt/couchbase/bin/couchbase-cli cluster-init -c 127.0.0.1 \ - --cluster-username $COUCHBASE_ADMINISTRATOR_USERNAME \ - --cluster-password $COUCHBASE_ADMINISTRATOR_PASSWORD \ - --services data,index,query,fts \ - --cluster-ramsize $COUCHBASE_RAM_SIZE \ - --cluster-index-ramsize $COUCHBASE_INDEX_RAM_SIZE \ - --cluster-eventing-ramsize $COUCHBASE_EVENTING_RAM_SIZE \ - --cluster-fts-ramsize $COUCHBASE_FTS_RAM_SIZE \ - --index-storage-setting default - - sleep 2s - - # used to auto create the bucket based on environment variables - # https://docs.couchbase.com/server/current/cli/cbcli/couchbase-cli-bucket-create.html - - /opt/couchbase/bin/couchbase-cli bucket-create -c localhost:8091 \ - --username $COUCHBASE_ADMINISTRATOR_USERNAME \ - --password $COUCHBASE_ADMINISTRATOR_PASSWORD \ - --bucket $COUCHBASE_BUCKET \ - --bucket-ramsize $COUCHBASE_BUCKET_RAMSIZE \ - --bucket-type couchbase - - # create file so we know that the cluster is setup and don't run the setup again - touch $FILE -fi - # docker compose will stop the container from running unless we do this - # known issue and workaround - tail -f /dev/null diff --git a/apps/dify/1.0.0/conf/elasticsearch/docker-entrypoint.sh b/apps/dify/1.0.0/conf/elasticsearch/docker-entrypoint.sh deleted file mode 100644 index 6669aec5a..000000000 --- a/apps/dify/1.0.0/conf/elasticsearch/docker-entrypoint.sh +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash - -set -e - -if [ "${VECTOR_STORE}" = "elasticsearch-ja" ]; then - # Check if the ICU tokenizer plugin is installed - if ! /usr/share/elasticsearch/bin/elasticsearch-plugin list | grep -q analysis-icu; then - printf '%s\n' "Installing the ICU tokenizer plugin" - if ! /usr/share/elasticsearch/bin/elasticsearch-plugin install analysis-icu; then - printf '%s\n' "Failed to install the ICU tokenizer plugin" - exit 1 - fi - fi - # Check if the Japanese language analyzer plugin is installed - if ! /usr/share/elasticsearch/bin/elasticsearch-plugin list | grep -q analysis-kuromoji; then - printf '%s\n' "Installing the Japanese language analyzer plugin" - if ! /usr/share/elasticsearch/bin/elasticsearch-plugin install analysis-kuromoji; then - printf '%s\n' "Failed to install the Japanese language analyzer plugin" - exit 1 - fi - fi -fi - -# Run the original entrypoint script -exec /bin/tini -- /usr/local/bin/docker-entrypoint.sh diff --git a/apps/dify/1.0.0/conf/nginx/conf.d/default.conf.template b/apps/dify/1.0.0/conf/nginx/conf.d/default.conf.template deleted file mode 100644 index a458412d1..000000000 --- a/apps/dify/1.0.0/conf/nginx/conf.d/default.conf.template +++ /dev/null @@ -1,48 +0,0 @@ -# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration. - -server { - listen ${NGINX_PORT}; - server_name ${NGINX_SERVER_NAME}; - - location /console/api { - proxy_pass http://api:5001; - include proxy.conf; - } - - location /api { - proxy_pass http://api:5001; - include proxy.conf; - } - - location /v1 { - proxy_pass http://api:5001; - include proxy.conf; - } - - location /files { - proxy_pass http://api:5001; - include proxy.conf; - } - - location /explore { - proxy_pass http://web:3000; - include proxy.conf; - } - - location /e/ { - proxy_pass http://plugin_daemon:5002; - proxy_set_header Dify-Hook-Url $scheme://$host$request_uri; - include proxy.conf; - } - - location / { - proxy_pass http://web:3000; - include proxy.conf; - } - - # placeholder for acme challenge location - ${ACME_CHALLENGE_LOCATION} - - # placeholder for https config defined in https.conf.template - ${HTTPS_CONFIG} -} diff --git a/apps/dify/1.0.0/conf/nginx/docker-entrypoint.sh b/apps/dify/1.0.0/conf/nginx/docker-entrypoint.sh deleted file mode 100644 index d343cb3ef..000000000 --- a/apps/dify/1.0.0/conf/nginx/docker-entrypoint.sh +++ /dev/null @@ -1,39 +0,0 @@ -#!/bin/bash - -if [ "${NGINX_HTTPS_ENABLED}" = "true" ]; then - # Check if the certificate and key files for the specified domain exist - if [ -n "${CERTBOT_DOMAIN}" ] && \ - [ -f "/etc/letsencrypt/live/${CERTBOT_DOMAIN}/${NGINX_SSL_CERT_FILENAME}" ] && \ - [ -f "/etc/letsencrypt/live/${CERTBOT_DOMAIN}/${NGINX_SSL_CERT_KEY_FILENAME}" ]; then - SSL_CERTIFICATE_PATH="/etc/letsencrypt/live/${CERTBOT_DOMAIN}/${NGINX_SSL_CERT_FILENAME}" - SSL_CERTIFICATE_KEY_PATH="/etc/letsencrypt/live/${CERTBOT_DOMAIN}/${NGINX_SSL_CERT_KEY_FILENAME}" - else - SSL_CERTIFICATE_PATH="/etc/ssl/${NGINX_SSL_CERT_FILENAME}" - SSL_CERTIFICATE_KEY_PATH="/etc/ssl/${NGINX_SSL_CERT_KEY_FILENAME}" - fi - export SSL_CERTIFICATE_PATH - export SSL_CERTIFICATE_KEY_PATH - - # set the HTTPS_CONFIG environment variable to the content of the https.conf.template - HTTPS_CONFIG=$(envsubst < /etc/nginx/https.conf.template) - export HTTPS_CONFIG - # Substitute the HTTPS_CONFIG in the default.conf.template with content from https.conf.template - envsubst '${HTTPS_CONFIG}' < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf -fi - -if [ "${NGINX_ENABLE_CERTBOT_CHALLENGE}" = "true" ]; then - ACME_CHALLENGE_LOCATION='location /.well-known/acme-challenge/ { root /var/www/html; }' -else - ACME_CHALLENGE_LOCATION='' -fi -export ACME_CHALLENGE_LOCATION - -env_vars=$(printenv | cut -d= -f1 | sed 's/^/$/g' | paste -sd, -) - -envsubst "$env_vars" < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf -envsubst "$env_vars" < /etc/nginx/proxy.conf.template > /etc/nginx/proxy.conf - -envsubst < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf - -# Start Nginx using the default entrypoint -exec nginx -g 'daemon off;' \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/nginx/https.conf.template b/apps/dify/1.0.0/conf/nginx/https.conf.template deleted file mode 100644 index 95ea36f46..000000000 --- a/apps/dify/1.0.0/conf/nginx/https.conf.template +++ /dev/null @@ -1,9 +0,0 @@ -# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration. - -listen ${NGINX_SSL_PORT} ssl; -ssl_certificate ${SSL_CERTIFICATE_PATH}; -ssl_certificate_key ${SSL_CERTIFICATE_KEY_PATH}; -ssl_protocols ${NGINX_SSL_PROTOCOLS}; -ssl_prefer_server_ciphers on; -ssl_session_cache shared:SSL:10m; -ssl_session_timeout 10m; \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/nginx/nginx.conf.template b/apps/dify/1.0.0/conf/nginx/nginx.conf.template deleted file mode 100644 index 32a571653..000000000 --- a/apps/dify/1.0.0/conf/nginx/nginx.conf.template +++ /dev/null @@ -1,34 +0,0 @@ -# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration. - -user nginx; -worker_processes ${NGINX_WORKER_PROCESSES}; - -error_log /var/log/nginx/error.log notice; -pid /var/run/nginx.pid; - - -events { - worker_connections 1024; -} - - -http { - include /etc/nginx/mime.types; - default_type application/octet-stream; - - log_format main '$remote_addr - $remote_user [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; - - access_log /var/log/nginx/access.log main; - - sendfile on; - #tcp_nopush on; - - keepalive_timeout ${NGINX_KEEPALIVE_TIMEOUT}; - - #gzip on; - client_max_body_size ${NGINX_CLIENT_MAX_BODY_SIZE}; - - include /etc/nginx/conf.d/*.conf; -} \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/nginx/proxy.conf.template b/apps/dify/1.0.0/conf/nginx/proxy.conf.template deleted file mode 100644 index 117f80614..000000000 --- a/apps/dify/1.0.0/conf/nginx/proxy.conf.template +++ /dev/null @@ -1,11 +0,0 @@ -# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration. - -proxy_set_header Host $host; -proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; -proxy_set_header X-Forwarded-Proto $scheme; -proxy_set_header X-Forwarded-Port $server_port; -proxy_http_version 1.1; -proxy_set_header Connection ""; -proxy_buffering off; -proxy_read_timeout ${NGINX_PROXY_READ_TIMEOUT}; -proxy_send_timeout ${NGINX_PROXY_SEND_TIMEOUT}; diff --git a/apps/dify/1.0.0/conf/nginx/ssl/.gitkeep b/apps/dify/1.0.0/conf/nginx/ssl/.gitkeep deleted file mode 100644 index e69de29bb..000000000 diff --git a/apps/dify/1.0.0/conf/ssrf_proxy/docker-entrypoint.sh b/apps/dify/1.0.0/conf/ssrf_proxy/docker-entrypoint.sh deleted file mode 100644 index 613897bb7..000000000 --- a/apps/dify/1.0.0/conf/ssrf_proxy/docker-entrypoint.sh +++ /dev/null @@ -1,42 +0,0 @@ -#!/bin/bash - -# Modified based on Squid OCI image entrypoint - -# This entrypoint aims to forward the squid logs to stdout to assist users of -# common container related tooling (e.g., kubernetes, docker-compose, etc) to -# access the service logs. - -# Moreover, it invokes the squid binary, leaving all the desired parameters to -# be provided by the "command" passed to the spawned container. If no command -# is provided by the user, the default behavior (as per the CMD statement in -# the Dockerfile) will be to use Ubuntu's default configuration [1] and run -# squid with the "-NYC" options to mimic the behavior of the Ubuntu provided -# systemd unit. - -# [1] The default configuration is changed in the Dockerfile to allow local -# network connections. See the Dockerfile for further information. - -echo "[ENTRYPOINT] re-create snakeoil self-signed certificate removed in the build process" -if [ ! -f /etc/ssl/private/ssl-cert-snakeoil.key ]; then - /usr/sbin/make-ssl-cert generate-default-snakeoil --force-overwrite > /dev/null 2>&1 -fi - -tail -F /var/log/squid/access.log 2>/dev/null & -tail -F /var/log/squid/error.log 2>/dev/null & -tail -F /var/log/squid/store.log 2>/dev/null & -tail -F /var/log/squid/cache.log 2>/dev/null & - -# Replace environment variables in the template and output to the squid.conf -echo "[ENTRYPOINT] replacing environment variables in the template" -awk '{ - while(match($0, /\${[A-Za-z_][A-Za-z_0-9]*}/)) { - var = substr($0, RSTART+2, RLENGTH-3) - val = ENVIRON[var] - $0 = substr($0, 1, RSTART-1) val substr($0, RSTART+RLENGTH) - } - print -}' /etc/squid/squid.conf.template > /etc/squid/squid.conf - -/usr/sbin/squid -Nz -echo "[ENTRYPOINT] starting squid" -/usr/sbin/squid -f /etc/squid/squid.conf -NYC 1 diff --git a/apps/dify/1.0.0/conf/ssrf_proxy/squid.conf.template b/apps/dify/1.0.0/conf/ssrf_proxy/squid.conf.template deleted file mode 100644 index 676fe7379..000000000 --- a/apps/dify/1.0.0/conf/ssrf_proxy/squid.conf.template +++ /dev/null @@ -1,51 +0,0 @@ -acl localnet src 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN) -acl localnet src 10.0.0.0/8 # RFC 1918 local private network (LAN) -acl localnet src 100.64.0.0/10 # RFC 6598 shared address space (CGN) -acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines -acl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN) -acl localnet src 192.168.0.0/16 # RFC 1918 local private network (LAN) -acl localnet src fc00::/7 # RFC 4193 local private network range -acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines -acl SSL_ports port 443 -# acl SSL_ports port 1025-65535 # Enable the configuration to resolve this issue: https://github.com/langgenius/dify/issues/12792 -acl Safe_ports port 80 # http -acl Safe_ports port 21 # ftp -acl Safe_ports port 443 # https -acl Safe_ports port 70 # gopher -acl Safe_ports port 210 # wais -acl Safe_ports port 1025-65535 # unregistered ports -acl Safe_ports port 280 # http-mgmt -acl Safe_ports port 488 # gss-http -acl Safe_ports port 591 # filemaker -acl Safe_ports port 777 # multiling http -acl CONNECT method CONNECT -http_access deny !Safe_ports -http_access deny CONNECT !SSL_ports -http_access allow localhost manager -http_access deny manager -http_access allow localhost -include /etc/squid/conf.d/*.conf -http_access deny all - -################################## Proxy Server ################################ -http_port ${HTTP_PORT} -coredump_dir ${COREDUMP_DIR} -refresh_pattern ^ftp: 1440 20% 10080 -refresh_pattern ^gopher: 1440 0% 1440 -refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 -refresh_pattern \/(Packages|Sources)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims -refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims -refresh_pattern \/InRelease$ 0 0% 0 refresh-ims -refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims -refresh_pattern . 0 20% 4320 - - -# cache_dir ufs /var/spool/squid 100 16 256 -# upstream proxy, set to your own upstream proxy IP to avoid SSRF attacks -# cache_peer 172.1.1.1 parent 3128 0 no-query no-digest no-netdb-exchange default - -################################## Reverse Proxy To Sandbox ################################ -http_port ${REVERSE_PROXY_PORT} accel vhost -cache_peer ${SANDBOX_HOST} parent ${SANDBOX_PORT} 0 no-query originserver -acl src_all src all -http_access allow src_all diff --git a/apps/dify/1.0.0/conf/startupscripts/init.sh b/apps/dify/1.0.0/conf/startupscripts/init.sh deleted file mode 100644 index c6e6e1966..000000000 --- a/apps/dify/1.0.0/conf/startupscripts/init.sh +++ /dev/null @@ -1,13 +0,0 @@ -#!/usr/bin/env bash - -DB_INITIALIZED="/opt/oracle/oradata/dbinit" -#[ -f ${DB_INITIALIZED} ] && exit -#touch ${DB_INITIALIZED} -if [ -f ${DB_INITIALIZED} ]; then - echo 'File exists. Standards for have been Init' - exit -else - echo 'File does not exist. Standards for first time Start up this DB' - "$ORACLE_HOME"/bin/sqlplus -s "/ as sysdba" @"/opt/oracle/scripts/startup/init_user.script"; - touch ${DB_INITIALIZED} -fi diff --git a/apps/dify/1.0.0/conf/startupscripts/init_user.script b/apps/dify/1.0.0/conf/startupscripts/init_user.script deleted file mode 100644 index 7aa7c2804..000000000 --- a/apps/dify/1.0.0/conf/startupscripts/init_user.script +++ /dev/null @@ -1,10 +0,0 @@ -show pdbs; -ALTER SYSTEM SET PROCESSES=500 SCOPE=SPFILE; -alter session set container= freepdb1; -create user dify identified by dify DEFAULT TABLESPACE users quota unlimited on users; -grant DB_DEVELOPER_ROLE to dify; - -BEGIN -CTX_DDL.CREATE_PREFERENCE('my_chinese_vgram_lexer','CHINESE_VGRAM_LEXER'); -END; -/ diff --git a/apps/dify/1.0.0/conf/tidb/config/pd.toml b/apps/dify/1.0.0/conf/tidb/config/pd.toml deleted file mode 100644 index 042b251e4..000000000 --- a/apps/dify/1.0.0/conf/tidb/config/pd.toml +++ /dev/null @@ -1,4 +0,0 @@ -# PD Configuration File reference: -# https://docs.pingcap.com/tidb/stable/pd-configuration-file#pd-configuration-file -[replication] -max-replicas = 1 \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/tidb/config/tiflash-learner.toml b/apps/dify/1.0.0/conf/tidb/config/tiflash-learner.toml deleted file mode 100644 index 5098829aa..000000000 --- a/apps/dify/1.0.0/conf/tidb/config/tiflash-learner.toml +++ /dev/null @@ -1,13 +0,0 @@ -# TiFlash tiflash-learner.toml Configuration File reference: -# https://docs.pingcap.com/tidb/stable/tiflash-configuration#configure-the-tiflash-learnertoml-file - -log-file = "/logs/tiflash_tikv.log" - -[server] -engine-addr = "tiflash:4030" -addr = "0.0.0.0:20280" -advertise-addr = "tiflash:20280" -status-addr = "tiflash:20292" - -[storage] -data-dir = "/data/flash" diff --git a/apps/dify/1.0.0/conf/tidb/config/tiflash.toml b/apps/dify/1.0.0/conf/tidb/config/tiflash.toml deleted file mode 100644 index 30ac13efc..000000000 --- a/apps/dify/1.0.0/conf/tidb/config/tiflash.toml +++ /dev/null @@ -1,19 +0,0 @@ -# TiFlash tiflash.toml Configuration File reference: -# https://docs.pingcap.com/tidb/stable/tiflash-configuration#configure-the-tiflashtoml-file - -listen_host = "0.0.0.0" -path = "/data" - -[flash] -tidb_status_addr = "tidb:10080" -service_addr = "tiflash:4030" - -[flash.proxy] -config = "/tiflash-learner.toml" - -[logger] -errorlog = "/logs/tiflash_error.log" -log = "/logs/tiflash.log" - -[raft] -pd_addr = "pd0:2379" diff --git a/apps/dify/1.0.0/conf/tidb/docker-compose.yaml b/apps/dify/1.0.0/conf/tidb/docker-compose.yaml deleted file mode 100644 index fa1577017..000000000 --- a/apps/dify/1.0.0/conf/tidb/docker-compose.yaml +++ /dev/null @@ -1,62 +0,0 @@ -services: - pd0: - image: pingcap/pd:v8.5.1 - # ports: - # - "2379" - volumes: - - ./config/pd.toml:/pd.toml:ro - - ./volumes/data:/data - - ./volumes/logs:/logs - command: - - --name=pd0 - - --client-urls=http://0.0.0.0:2379 - - --peer-urls=http://0.0.0.0:2380 - - --advertise-client-urls=http://pd0:2379 - - --advertise-peer-urls=http://pd0:2380 - - --initial-cluster=pd0=http://pd0:2380 - - --data-dir=/data/pd - - --config=/pd.toml - - --log-file=/logs/pd.log - restart: on-failure - tikv: - image: pingcap/tikv:v8.5.1 - volumes: - - ./volumes/data:/data - - ./volumes/logs:/logs - command: - - --addr=0.0.0.0:20160 - - --advertise-addr=tikv:20160 - - --status-addr=tikv:20180 - - --data-dir=/data/tikv - - --pd=pd0:2379 - - --log-file=/logs/tikv.log - depends_on: - - "pd0" - restart: on-failure - tidb: - image: pingcap/tidb:v8.5.1 - # ports: - # - "4000:4000" - volumes: - - ./volumes/logs:/logs - command: - - --advertise-address=tidb - - --store=tikv - - --path=pd0:2379 - - --log-file=/logs/tidb.log - depends_on: - - "tikv" - restart: on-failure - tiflash: - image: pingcap/tiflash:v8.5.1 - volumes: - - ./config/tiflash.toml:/tiflash.toml:ro - - ./config/tiflash-learner.toml:/tiflash-learner.toml:ro - - ./volumes/data:/data - - ./volumes/logs:/logs - command: - - --config=/tiflash.toml - depends_on: - - "tikv" - - "tidb" - restart: on-failure diff --git a/apps/dify/1.0.0/conf/volumes/myscale/config/users.d/custom_users_config.xml b/apps/dify/1.0.0/conf/volumes/myscale/config/users.d/custom_users_config.xml deleted file mode 100644 index 67f24b69e..000000000 --- a/apps/dify/1.0.0/conf/volumes/myscale/config/users.d/custom_users_config.xml +++ /dev/null @@ -1,17 +0,0 @@ - - - - - - ::1 - 127.0.0.1 - 10.0.0.0/8 - 172.16.0.0/12 - 192.168.0.0/16 - - default - default - 1 - - - \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/volumes/oceanbase/init.d/vec_memory.sql b/apps/dify/1.0.0/conf/volumes/oceanbase/init.d/vec_memory.sql deleted file mode 100644 index f4c283fdf..000000000 --- a/apps/dify/1.0.0/conf/volumes/oceanbase/init.d/vec_memory.sql +++ /dev/null @@ -1 +0,0 @@ -ALTER SYSTEM SET ob_vector_memory_limit_percentage = 30; \ No newline at end of file diff --git a/apps/dify/1.0.0/conf/volumes/opensearch/opensearch_dashboards.yml b/apps/dify/1.0.0/conf/volumes/opensearch/opensearch_dashboards.yml deleted file mode 100644 index f50d63bbb..000000000 --- a/apps/dify/1.0.0/conf/volumes/opensearch/opensearch_dashboards.yml +++ /dev/null @@ -1,222 +0,0 @@ ---- -# Copyright OpenSearch Contributors -# SPDX-License-Identifier: Apache-2.0 - -# Description: -# Default configuration for OpenSearch Dashboards - -# OpenSearch Dashboards is served by a back end server. This setting specifies the port to use. -# server.port: 5601 - -# Specifies the address to which the OpenSearch Dashboards server will bind. IP addresses and host names are both valid values. -# The default is 'localhost', which usually means remote machines will not be able to connect. -# To allow connections from remote users, set this parameter to a non-loopback address. -# server.host: "localhost" - -# Enables you to specify a path to mount OpenSearch Dashboards at if you are running behind a proxy. -# Use the `server.rewriteBasePath` setting to tell OpenSearch Dashboards if it should remove the basePath -# from requests it receives, and to prevent a deprecation warning at startup. -# This setting cannot end in a slash. -# server.basePath: "" - -# Specifies whether OpenSearch Dashboards should rewrite requests that are prefixed with -# `server.basePath` or require that they are rewritten by your reverse proxy. -# server.rewriteBasePath: false - -# The maximum payload size in bytes for incoming server requests. -# server.maxPayloadBytes: 1048576 - -# The OpenSearch Dashboards server's name. This is used for display purposes. -# server.name: "your-hostname" - -# The URLs of the OpenSearch instances to use for all your queries. -# opensearch.hosts: ["http://localhost:9200"] - -# OpenSearch Dashboards uses an index in OpenSearch to store saved searches, visualizations and -# dashboards. OpenSearch Dashboards creates a new index if the index doesn't already exist. -# opensearchDashboards.index: ".opensearch_dashboards" - -# The default application to load. -# opensearchDashboards.defaultAppId: "home" - -# Setting for an optimized healthcheck that only uses the local OpenSearch node to do Dashboards healthcheck. -# This settings should be used for large clusters or for clusters with ingest heavy nodes. -# It allows Dashboards to only healthcheck using the local OpenSearch node rather than fan out requests across all nodes. -# -# It requires the user to create an OpenSearch node attribute with the same name as the value used in the setting -# This node attribute should assign all nodes of the same cluster an integer value that increments with each new cluster that is spun up -# e.g. in opensearch.yml file you would set the value to a setting using node.attr.cluster_id: -# Should only be enabled if there is a corresponding node attribute created in your OpenSearch config that matches the value here -# opensearch.optimizedHealthcheckId: "cluster_id" - -# If your OpenSearch is protected with basic authentication, these settings provide -# the username and password that the OpenSearch Dashboards server uses to perform maintenance on the OpenSearch Dashboards -# index at startup. Your OpenSearch Dashboards users still need to authenticate with OpenSearch, which -# is proxied through the OpenSearch Dashboards server. -# opensearch.username: "opensearch_dashboards_system" -# opensearch.password: "pass" - -# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively. -# These settings enable SSL for outgoing requests from the OpenSearch Dashboards server to the browser. -# server.ssl.enabled: false -# server.ssl.certificate: /path/to/your/server.crt -# server.ssl.key: /path/to/your/server.key - -# Optional settings that provide the paths to the PEM-format SSL certificate and key files. -# These files are used to verify the identity of OpenSearch Dashboards to OpenSearch and are required when -# xpack.security.http.ssl.client_authentication in OpenSearch is set to required. -# opensearch.ssl.certificate: /path/to/your/client.crt -# opensearch.ssl.key: /path/to/your/client.key - -# Optional setting that enables you to specify a path to the PEM file for the certificate -# authority for your OpenSearch instance. -# opensearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ] - -# To disregard the validity of SSL certificates, change this setting's value to 'none'. -# opensearch.ssl.verificationMode: full - -# Time in milliseconds to wait for OpenSearch to respond to pings. Defaults to the value of -# the opensearch.requestTimeout setting. -# opensearch.pingTimeout: 1500 - -# Time in milliseconds to wait for responses from the back end or OpenSearch. This value -# must be a positive integer. -# opensearch.requestTimeout: 30000 - -# List of OpenSearch Dashboards client-side headers to send to OpenSearch. To send *no* client-side -# headers, set this value to [] (an empty list). -# opensearch.requestHeadersWhitelist: [ authorization ] - -# Header names and values that are sent to OpenSearch. Any custom headers cannot be overwritten -# by client-side headers, regardless of the opensearch.requestHeadersWhitelist configuration. -# opensearch.customHeaders: {} - -# Time in milliseconds for OpenSearch to wait for responses from shards. Set to 0 to disable. -# opensearch.shardTimeout: 30000 - -# Logs queries sent to OpenSearch. Requires logging.verbose set to true. -# opensearch.logQueries: false - -# Specifies the path where OpenSearch Dashboards creates the process ID file. -# pid.file: /var/run/opensearchDashboards.pid - -# Enables you to specify a file where OpenSearch Dashboards stores log output. -# logging.dest: stdout - -# Set the value of this setting to true to suppress all logging output. -# logging.silent: false - -# Set the value of this setting to true to suppress all logging output other than error messages. -# logging.quiet: false - -# Set the value of this setting to true to log all events, including system usage information -# and all requests. -# logging.verbose: false - -# Set the interval in milliseconds to sample system and process performance -# metrics. Minimum is 100ms. Defaults to 5000. -# ops.interval: 5000 - -# Specifies locale to be used for all localizable strings, dates and number formats. -# Supported languages are the following: English - en , by default , Chinese - zh-CN . -# i18n.locale: "en" - -# Set the allowlist to check input graphite Url. Allowlist is the default check list. -# vis_type_timeline.graphiteAllowedUrls: ['https://www.hostedgraphite.com/UID/ACCESS_KEY/graphite'] - -# Set the blocklist to check input graphite Url. Blocklist is an IP list. -# Below is an example for reference -# vis_type_timeline.graphiteBlockedIPs: [ -# //Loopback -# '127.0.0.0/8', -# '::1/128', -# //Link-local Address for IPv6 -# 'fe80::/10', -# //Private IP address for IPv4 -# '10.0.0.0/8', -# '172.16.0.0/12', -# '192.168.0.0/16', -# //Unique local address (ULA) -# 'fc00::/7', -# //Reserved IP address -# '0.0.0.0/8', -# '100.64.0.0/10', -# '192.0.0.0/24', -# '192.0.2.0/24', -# '198.18.0.0/15', -# '192.88.99.0/24', -# '198.51.100.0/24', -# '203.0.113.0/24', -# '224.0.0.0/4', -# '240.0.0.0/4', -# '255.255.255.255/32', -# '::/128', -# '2001:db8::/32', -# 'ff00::/8', -# ] -# vis_type_timeline.graphiteBlockedIPs: [] - -# opensearchDashboards.branding: -# logo: -# defaultUrl: "" -# darkModeUrl: "" -# mark: -# defaultUrl: "" -# darkModeUrl: "" -# loadingLogo: -# defaultUrl: "" -# darkModeUrl: "" -# faviconUrl: "" -# applicationTitle: "" - -# Set the value of this setting to true to capture region blocked warnings and errors -# for your map rendering services. -# map.showRegionBlockedWarning: false% - -# Set the value of this setting to false to suppress search usage telemetry -# for reducing the load of OpenSearch cluster. -# data.search.usageTelemetry.enabled: false - -# 2.4 renames 'wizard.enabled: false' to 'vis_builder.enabled: false' -# Set the value of this setting to false to disable VisBuilder -# functionality in Visualization. -# vis_builder.enabled: false - -# 2.4 New Experimental Feature -# Set the value of this setting to true to enable the experimental multiple data source -# support feature. Use with caution. -# data_source.enabled: false -# Set the value of these settings to customize crypto materials to encryption saved credentials -# in data sources. -# data_source.encryption.wrappingKeyName: 'changeme' -# data_source.encryption.wrappingKeyNamespace: 'changeme' -# data_source.encryption.wrappingKey: [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0] - -# 2.6 New ML Commons Dashboards Feature -# Set the value of this setting to true to enable the ml commons dashboards -# ml_commons_dashboards.enabled: false - -# 2.12 New experimental Assistant Dashboards Feature -# Set the value of this setting to true to enable the assistant dashboards -# assistant.chat.enabled: false - -# 2.13 New Query Assistant Feature -# Set the value of this setting to false to disable the query assistant -# observability.query_assist.enabled: false - -# 2.14 Enable Ui Metric Collectors in Usage Collector -# Set the value of this setting to true to enable UI Metric collections -# usageCollection.uiMetric.enabled: false - -opensearch.hosts: [https://localhost:9200] -opensearch.ssl.verificationMode: none -opensearch.username: admin -opensearch.password: 'Qazwsxedc!@#123' -opensearch.requestHeadersWhitelist: [authorization, securitytenant] - -opensearch_security.multitenancy.enabled: true -opensearch_security.multitenancy.tenants.preferred: [Private, Global] -opensearch_security.readonly_mode.roles: [kibana_read_only] -# Use this setting if you are running opensearch-dashboards without https -opensearch_security.cookie.secure: false -server.host: '0.0.0.0' diff --git a/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml b/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml deleted file mode 100644 index 8c1a1deb5..000000000 --- a/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml +++ /dev/null @@ -1,14 +0,0 @@ -app: - port: 8194 - debug: True - key: dify-sandbox -max_workers: 4 -max_requests: 50 -worker_timeout: 5 -python_path: /usr/local/bin/python3 -enable_network: True # please make sure there is no network risk in your environment -allowed_syscalls: # please leave it empty if you have no idea how seccomp works -proxy: - socks5: '' - http: '' - https: '' diff --git a/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml.example b/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml.example deleted file mode 100644 index f92c19e51..000000000 --- a/apps/dify/1.0.0/conf/volumes/sandbox/conf/config.yaml.example +++ /dev/null @@ -1,35 +0,0 @@ -app: - port: 8194 - debug: True - key: dify-sandbox -max_workers: 4 -max_requests: 50 -worker_timeout: 5 -python_path: /usr/local/bin/python3 -python_lib_path: - - /usr/local/lib/python3.10 - - /usr/lib/python3.10 - - /usr/lib/python3 - - /usr/lib/x86_64-linux-gnu - - /etc/ssl/certs/ca-certificates.crt - - /etc/nsswitch.conf - - /etc/hosts - - /etc/resolv.conf - - /run/systemd/resolve/stub-resolv.conf - - /run/resolvconf/resolv.conf - - /etc/localtime - - /usr/share/zoneinfo - - /etc/timezone - # add more paths if needed -python_pip_mirror_url: https://pypi.tuna.tsinghua.edu.cn/simple -nodejs_path: /usr/local/bin/node -enable_network: True -allowed_syscalls: - - 1 - - 2 - - 3 - # add all the syscalls which you require -proxy: - socks5: '' - http: '' - https: '' diff --git a/apps/dify/1.0.0/conf/volumes/sandbox/dependencies/python-requirements.txt b/apps/dify/1.0.0/conf/volumes/sandbox/dependencies/python-requirements.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/apps/dify/1.0.0/data.yml b/apps/dify/1.0.0/data.yml deleted file mode 100644 index b6cfca441..000000000 --- a/apps/dify/1.0.0/data.yml +++ /dev/null @@ -1,82 +0,0 @@ -additionalProperties: - formFields: - - default: "/home/dify" - edit: true - envKey: DIFY_ROOT_PATH - labelZh: 数据持久化路径 - labelEn: Data persistence path - required: true - type: text - - default: 8080 - edit: true - envKey: PANEL_APP_PORT_HTTP - labelZh: WebUI 端口 - labelEn: WebUI port - required: true - rule: paramPort - type: number - - default: 8443 - edit: true - envKey: PANEL_APP_PORT_HTTPS - labelZh: WebUI SSL 端口 - labelEn: WebUI SSL port - required: true - rule: paramPort - type: number - - default: 5432 - edit: true - envKey: EXPOSE_DB_PORT - labelZh: 数据库端口 - labelEn: Database port - required: true - rule: paramPort - type: number - - default: 5003 - edit: true - envKey: EXPOSE_PLUGIN_DEBUGGING_PORT - labelZh: 插件调试端口 - labelEn: Plugin debugging port - required: true - rule: paramPort - type: number - - default: 19530 - disabled: true - edit: true - envKey: MILVUS_STANDALONE_API_PORT - labelZh: Milvus 接口端口 - labelEn: Milvus API port - required: true - rule: paramPort - type: number - - default: 9091 - disabled: true - envKey: MILVUS_STANDALONE_SERVER_PORT - labelZh: Milvus 服务端口 - labelEn: Milvus server port - required: true - rule: paramPort - type: number - - default: 8123 - edit: true - envKey: MYSCALE_PORT - labelZh: MyScale 端口 - labelEn: MyScale port - required: true - rule: paramPort - type: number - - default: 9200 - edit: true - envKey: ELASTICSEARCH_PORT - labelZh: Elasticsearch 端口 - labelEn: Elasticsearch port - required: true - rule: paramPort - type: number - - default: 5601 - edit: true - envKey: KIBANA_PORT - labelZh: Kibana 端口 - labelEn: Kibana port - required: true - rule: paramPort - type: number diff --git a/apps/dify/1.0.0/docker-compose.yml b/apps/dify/1.0.0/docker-compose.yml deleted file mode 100644 index 175a5181e..000000000 --- a/apps/dify/1.0.0/docker-compose.yml +++ /dev/null @@ -1,970 +0,0 @@ -# ================================================================== -# WARNING: This file is auto-generated by generate_docker_compose -# Do not modify this file directly. Instead, update the .env.example -# or docker-compose-template.yaml and regenerate this file. -# ================================================================== - -x-shared-env: &shared-api-worker-env - CONSOLE_API_URL: ${CONSOLE_API_URL:-} - CONSOLE_WEB_URL: ${CONSOLE_WEB_URL:-} - SERVICE_API_URL: ${SERVICE_API_URL:-} - APP_API_URL: ${APP_API_URL:-} - APP_WEB_URL: ${APP_WEB_URL:-} - FILES_URL: ${FILES_URL:-} - LOG_LEVEL: ${LOG_LEVEL:-INFO} - LOG_FILE: ${LOG_FILE:-/app/logs/server.log} - LOG_FILE_MAX_SIZE: ${LOG_FILE_MAX_SIZE:-20} - LOG_FILE_BACKUP_COUNT: ${LOG_FILE_BACKUP_COUNT:-5} - LOG_DATEFORMAT: ${LOG_DATEFORMAT:-%Y-%m-%d %H:%M:%S} - LOG_TZ: ${LOG_TZ:-UTC} - DEBUG: ${DEBUG:-false} - FLASK_DEBUG: ${FLASK_DEBUG:-false} - SECRET_KEY: ${SECRET_KEY:-sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U} - INIT_PASSWORD: ${INIT_PASSWORD:-} - DEPLOY_ENV: ${DEPLOY_ENV:-PRODUCTION} - CHECK_UPDATE_URL: ${CHECK_UPDATE_URL:-https://updates.dify.ai} - OPENAI_API_BASE: ${OPENAI_API_BASE:-https://api.openai.com/v1} - MIGRATION_ENABLED: ${MIGRATION_ENABLED:-true} - FILES_ACCESS_TIMEOUT: ${FILES_ACCESS_TIMEOUT:-300} - ACCESS_TOKEN_EXPIRE_MINUTES: ${ACCESS_TOKEN_EXPIRE_MINUTES:-60} - REFRESH_TOKEN_EXPIRE_DAYS: ${REFRESH_TOKEN_EXPIRE_DAYS:-30} - APP_MAX_ACTIVE_REQUESTS: ${APP_MAX_ACTIVE_REQUESTS:-0} - APP_MAX_EXECUTION_TIME: ${APP_MAX_EXECUTION_TIME:-1200} - DIFY_BIND_ADDRESS: ${DIFY_BIND_ADDRESS:-0.0.0.0} - DIFY_PORT: ${DIFY_PORT:-5001} - SERVER_WORKER_AMOUNT: ${SERVER_WORKER_AMOUNT:-1} - SERVER_WORKER_CLASS: ${SERVER_WORKER_CLASS:-gevent} - SERVER_WORKER_CONNECTIONS: ${SERVER_WORKER_CONNECTIONS:-10} - CELERY_WORKER_CLASS: ${CELERY_WORKER_CLASS:-} - GUNICORN_TIMEOUT: ${GUNICORN_TIMEOUT:-360} - CELERY_WORKER_AMOUNT: ${CELERY_WORKER_AMOUNT:-} - CELERY_AUTO_SCALE: ${CELERY_AUTO_SCALE:-false} - CELERY_MAX_WORKERS: ${CELERY_MAX_WORKERS:-} - CELERY_MIN_WORKERS: ${CELERY_MIN_WORKERS:-} - API_TOOL_DEFAULT_CONNECT_TIMEOUT: ${API_TOOL_DEFAULT_CONNECT_TIMEOUT:-10} - API_TOOL_DEFAULT_READ_TIMEOUT: ${API_TOOL_DEFAULT_READ_TIMEOUT:-60} - DB_USERNAME: ${DB_USERNAME:-postgres} - DB_PASSWORD: ${DB_PASSWORD:-difyai123456} - DB_HOST: ${DB_HOST:-db} - DB_PORT: ${DB_PORT:-5432} - DB_DATABASE: ${DB_DATABASE:-dify} - SQLALCHEMY_POOL_SIZE: ${SQLALCHEMY_POOL_SIZE:-30} - SQLALCHEMY_POOL_RECYCLE: ${SQLALCHEMY_POOL_RECYCLE:-3600} - SQLALCHEMY_ECHO: ${SQLALCHEMY_ECHO:-false} - POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100} - POSTGRES_SHARED_BUFFERS: ${POSTGRES_SHARED_BUFFERS:-128MB} - POSTGRES_WORK_MEM: ${POSTGRES_WORK_MEM:-4MB} - POSTGRES_MAINTENANCE_WORK_MEM: ${POSTGRES_MAINTENANCE_WORK_MEM:-64MB} - POSTGRES_EFFECTIVE_CACHE_SIZE: ${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB} - REDIS_HOST: ${REDIS_HOST:-redis} - REDIS_PORT: ${REDIS_PORT:-6379} - REDIS_USERNAME: ${REDIS_USERNAME:-} - REDIS_PASSWORD: ${REDIS_PASSWORD:-difyai123456} - REDIS_USE_SSL: ${REDIS_USE_SSL:-false} - REDIS_DB: ${REDIS_DB:-0} - REDIS_USE_SENTINEL: ${REDIS_USE_SENTINEL:-false} - REDIS_SENTINELS: ${REDIS_SENTINELS:-} - REDIS_SENTINEL_SERVICE_NAME: ${REDIS_SENTINEL_SERVICE_NAME:-} - REDIS_SENTINEL_USERNAME: ${REDIS_SENTINEL_USERNAME:-} - REDIS_SENTINEL_PASSWORD: ${REDIS_SENTINEL_PASSWORD:-} - REDIS_SENTINEL_SOCKET_TIMEOUT: ${REDIS_SENTINEL_SOCKET_TIMEOUT:-0.1} - REDIS_USE_CLUSTERS: ${REDIS_USE_CLUSTERS:-false} - REDIS_CLUSTERS: ${REDIS_CLUSTERS:-} - REDIS_CLUSTERS_PASSWORD: ${REDIS_CLUSTERS_PASSWORD:-} - CELERY_BROKER_URL: ${CELERY_BROKER_URL:-redis://:difyai123456@redis:6379/1} - BROKER_USE_SSL: ${BROKER_USE_SSL:-false} - CELERY_USE_SENTINEL: ${CELERY_USE_SENTINEL:-false} - CELERY_SENTINEL_MASTER_NAME: ${CELERY_SENTINEL_MASTER_NAME:-} - CELERY_SENTINEL_SOCKET_TIMEOUT: ${CELERY_SENTINEL_SOCKET_TIMEOUT:-0.1} - WEB_API_CORS_ALLOW_ORIGINS: ${WEB_API_CORS_ALLOW_ORIGINS:-*} - CONSOLE_CORS_ALLOW_ORIGINS: ${CONSOLE_CORS_ALLOW_ORIGINS:-*} - STORAGE_TYPE: ${STORAGE_TYPE:-opendal} - OPENDAL_SCHEME: ${OPENDAL_SCHEME:-fs} - OPENDAL_FS_ROOT: ${OPENDAL_FS_ROOT:-storage} - S3_ENDPOINT: ${S3_ENDPOINT:-} - S3_REGION: ${S3_REGION:-us-east-1} - S3_BUCKET_NAME: ${S3_BUCKET_NAME:-difyai} - S3_ACCESS_KEY: ${S3_ACCESS_KEY:-} - S3_SECRET_KEY: ${S3_SECRET_KEY:-} - S3_USE_AWS_MANAGED_IAM: ${S3_USE_AWS_MANAGED_IAM:-false} - AZURE_BLOB_ACCOUNT_NAME: ${AZURE_BLOB_ACCOUNT_NAME:-difyai} - AZURE_BLOB_ACCOUNT_KEY: ${AZURE_BLOB_ACCOUNT_KEY:-difyai} - AZURE_BLOB_CONTAINER_NAME: ${AZURE_BLOB_CONTAINER_NAME:-difyai-container} - AZURE_BLOB_ACCOUNT_URL: ${AZURE_BLOB_ACCOUNT_URL:-https://.blob.core.windows.net} - GOOGLE_STORAGE_BUCKET_NAME: ${GOOGLE_STORAGE_BUCKET_NAME:-your-bucket-name} - GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64: ${GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64:-} - ALIYUN_OSS_BUCKET_NAME: ${ALIYUN_OSS_BUCKET_NAME:-your-bucket-name} - ALIYUN_OSS_ACCESS_KEY: ${ALIYUN_OSS_ACCESS_KEY:-your-access-key} - ALIYUN_OSS_SECRET_KEY: ${ALIYUN_OSS_SECRET_KEY:-your-secret-key} - ALIYUN_OSS_ENDPOINT: ${ALIYUN_OSS_ENDPOINT:-https://oss-ap-southeast-1-internal.aliyuncs.com} - ALIYUN_OSS_REGION: ${ALIYUN_OSS_REGION:-ap-southeast-1} - ALIYUN_OSS_AUTH_VERSION: ${ALIYUN_OSS_AUTH_VERSION:-v4} - ALIYUN_OSS_PATH: ${ALIYUN_OSS_PATH:-your-path} - TENCENT_COS_BUCKET_NAME: ${TENCENT_COS_BUCKET_NAME:-your-bucket-name} - TENCENT_COS_SECRET_KEY: ${TENCENT_COS_SECRET_KEY:-your-secret-key} - TENCENT_COS_SECRET_ID: ${TENCENT_COS_SECRET_ID:-your-secret-id} - TENCENT_COS_REGION: ${TENCENT_COS_REGION:-your-region} - TENCENT_COS_SCHEME: ${TENCENT_COS_SCHEME:-your-scheme} - OCI_ENDPOINT: ${OCI_ENDPOINT:-https://objectstorage.us-ashburn-1.oraclecloud.com} - OCI_BUCKET_NAME: ${OCI_BUCKET_NAME:-your-bucket-name} - OCI_ACCESS_KEY: ${OCI_ACCESS_KEY:-your-access-key} - OCI_SECRET_KEY: ${OCI_SECRET_KEY:-your-secret-key} - OCI_REGION: ${OCI_REGION:-us-ashburn-1} - HUAWEI_OBS_BUCKET_NAME: ${HUAWEI_OBS_BUCKET_NAME:-your-bucket-name} - HUAWEI_OBS_SECRET_KEY: ${HUAWEI_OBS_SECRET_KEY:-your-secret-key} - HUAWEI_OBS_ACCESS_KEY: ${HUAWEI_OBS_ACCESS_KEY:-your-access-key} - HUAWEI_OBS_SERVER: ${HUAWEI_OBS_SERVER:-your-server-url} - VOLCENGINE_TOS_BUCKET_NAME: ${VOLCENGINE_TOS_BUCKET_NAME:-your-bucket-name} - VOLCENGINE_TOS_SECRET_KEY: ${VOLCENGINE_TOS_SECRET_KEY:-your-secret-key} - VOLCENGINE_TOS_ACCESS_KEY: ${VOLCENGINE_TOS_ACCESS_KEY:-your-access-key} - VOLCENGINE_TOS_ENDPOINT: ${VOLCENGINE_TOS_ENDPOINT:-your-server-url} - VOLCENGINE_TOS_REGION: ${VOLCENGINE_TOS_REGION:-your-region} - BAIDU_OBS_BUCKET_NAME: ${BAIDU_OBS_BUCKET_NAME:-your-bucket-name} - BAIDU_OBS_SECRET_KEY: ${BAIDU_OBS_SECRET_KEY:-your-secret-key} - BAIDU_OBS_ACCESS_KEY: ${BAIDU_OBS_ACCESS_KEY:-your-access-key} - BAIDU_OBS_ENDPOINT: ${BAIDU_OBS_ENDPOINT:-your-server-url} - SUPABASE_BUCKET_NAME: ${SUPABASE_BUCKET_NAME:-your-bucket-name} - SUPABASE_API_KEY: ${SUPABASE_API_KEY:-your-access-key} - SUPABASE_URL: ${SUPABASE_URL:-your-server-url} - VECTOR_STORE: ${VECTOR_STORE:-weaviate} - WEAVIATE_ENDPOINT: ${WEAVIATE_ENDPOINT:-http://weaviate:8080} - WEAVIATE_API_KEY: ${WEAVIATE_API_KEY:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih} - QDRANT_URL: ${QDRANT_URL:-http://qdrant:6333} - QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456} - QDRANT_CLIENT_TIMEOUT: ${QDRANT_CLIENT_TIMEOUT:-20} - QDRANT_GRPC_ENABLED: ${QDRANT_GRPC_ENABLED:-false} - QDRANT_GRPC_PORT: ${QDRANT_GRPC_PORT:-6334} - MILVUS_URI: ${MILVUS_URI:-http://127.0.0.1:19530} - MILVUS_TOKEN: ${MILVUS_TOKEN:-} - MILVUS_USER: ${MILVUS_USER:-root} - MILVUS_PASSWORD: ${MILVUS_PASSWORD:-Milvus} - MILVUS_ENABLE_HYBRID_SEARCH: ${MILVUS_ENABLE_HYBRID_SEARCH:-False} - MYSCALE_HOST: ${MYSCALE_HOST:-myscale} - MYSCALE_PORT: ${MYSCALE_PORT:-8123} - MYSCALE_USER: ${MYSCALE_USER:-default} - MYSCALE_PASSWORD: ${MYSCALE_PASSWORD:-} - MYSCALE_DATABASE: ${MYSCALE_DATABASE:-dify} - MYSCALE_FTS_PARAMS: ${MYSCALE_FTS_PARAMS:-} - COUCHBASE_CONNECTION_STRING: ${COUCHBASE_CONNECTION_STRING:-couchbase://couchbase-server} - COUCHBASE_USER: ${COUCHBASE_USER:-Administrator} - COUCHBASE_PASSWORD: ${COUCHBASE_PASSWORD:-password} - COUCHBASE_BUCKET_NAME: ${COUCHBASE_BUCKET_NAME:-Embeddings} - COUCHBASE_SCOPE_NAME: ${COUCHBASE_SCOPE_NAME:-_default} - PGVECTOR_HOST: ${PGVECTOR_HOST:-pgvector} - PGVECTOR_PORT: ${PGVECTOR_PORT:-5432} - PGVECTOR_USER: ${PGVECTOR_USER:-postgres} - PGVECTOR_PASSWORD: ${PGVECTOR_PASSWORD:-difyai123456} - PGVECTOR_DATABASE: ${PGVECTOR_DATABASE:-dify} - PGVECTOR_MIN_CONNECTION: ${PGVECTOR_MIN_CONNECTION:-1} - PGVECTOR_MAX_CONNECTION: ${PGVECTOR_MAX_CONNECTION:-5} - PGVECTO_RS_HOST: ${PGVECTO_RS_HOST:-pgvecto-rs} - PGVECTO_RS_PORT: ${PGVECTO_RS_PORT:-5432} - PGVECTO_RS_USER: ${PGVECTO_RS_USER:-postgres} - PGVECTO_RS_PASSWORD: ${PGVECTO_RS_PASSWORD:-difyai123456} - PGVECTO_RS_DATABASE: ${PGVECTO_RS_DATABASE:-dify} - ANALYTICDB_KEY_ID: ${ANALYTICDB_KEY_ID:-your-ak} - ANALYTICDB_KEY_SECRET: ${ANALYTICDB_KEY_SECRET:-your-sk} - ANALYTICDB_REGION_ID: ${ANALYTICDB_REGION_ID:-cn-hangzhou} - ANALYTICDB_INSTANCE_ID: ${ANALYTICDB_INSTANCE_ID:-gp-ab123456} - ANALYTICDB_ACCOUNT: ${ANALYTICDB_ACCOUNT:-testaccount} - ANALYTICDB_PASSWORD: ${ANALYTICDB_PASSWORD:-testpassword} - ANALYTICDB_NAMESPACE: ${ANALYTICDB_NAMESPACE:-dify} - ANALYTICDB_NAMESPACE_PASSWORD: ${ANALYTICDB_NAMESPACE_PASSWORD:-difypassword} - ANALYTICDB_HOST: ${ANALYTICDB_HOST:-gp-test.aliyuncs.com} - ANALYTICDB_PORT: ${ANALYTICDB_PORT:-5432} - ANALYTICDB_MIN_CONNECTION: ${ANALYTICDB_MIN_CONNECTION:-1} - ANALYTICDB_MAX_CONNECTION: ${ANALYTICDB_MAX_CONNECTION:-5} - TIDB_VECTOR_HOST: ${TIDB_VECTOR_HOST:-tidb} - TIDB_VECTOR_PORT: ${TIDB_VECTOR_PORT:-4000} - TIDB_VECTOR_USER: ${TIDB_VECTOR_USER:-} - TIDB_VECTOR_PASSWORD: ${TIDB_VECTOR_PASSWORD:-} - TIDB_VECTOR_DATABASE: ${TIDB_VECTOR_DATABASE:-dify} - TIDB_ON_QDRANT_URL: ${TIDB_ON_QDRANT_URL:-http://127.0.0.1} - TIDB_ON_QDRANT_API_KEY: ${TIDB_ON_QDRANT_API_KEY:-dify} - TIDB_ON_QDRANT_CLIENT_TIMEOUT: ${TIDB_ON_QDRANT_CLIENT_TIMEOUT:-20} - TIDB_ON_QDRANT_GRPC_ENABLED: ${TIDB_ON_QDRANT_GRPC_ENABLED:-false} - TIDB_ON_QDRANT_GRPC_PORT: ${TIDB_ON_QDRANT_GRPC_PORT:-6334} - TIDB_PUBLIC_KEY: ${TIDB_PUBLIC_KEY:-dify} - TIDB_PRIVATE_KEY: ${TIDB_PRIVATE_KEY:-dify} - TIDB_API_URL: ${TIDB_API_URL:-http://127.0.0.1} - TIDB_IAM_API_URL: ${TIDB_IAM_API_URL:-http://127.0.0.1} - TIDB_REGION: ${TIDB_REGION:-regions/aws-us-east-1} - TIDB_PROJECT_ID: ${TIDB_PROJECT_ID:-dify} - TIDB_SPEND_LIMIT: ${TIDB_SPEND_LIMIT:-100} - CHROMA_HOST: ${CHROMA_HOST:-127.0.0.1} - CHROMA_PORT: ${CHROMA_PORT:-8000} - CHROMA_TENANT: ${CHROMA_TENANT:-default_tenant} - CHROMA_DATABASE: ${CHROMA_DATABASE:-default_database} - CHROMA_AUTH_PROVIDER: ${CHROMA_AUTH_PROVIDER:-chromadb.auth.token_authn.TokenAuthClientProvider} - CHROMA_AUTH_CREDENTIALS: ${CHROMA_AUTH_CREDENTIALS:-} - ORACLE_HOST: ${ORACLE_HOST:-oracle} - ORACLE_PORT: ${ORACLE_PORT:-1521} - ORACLE_USER: ${ORACLE_USER:-dify} - ORACLE_PASSWORD: ${ORACLE_PASSWORD:-dify} - ORACLE_DATABASE: ${ORACLE_DATABASE:-FREEPDB1} - RELYT_HOST: ${RELYT_HOST:-db} - RELYT_PORT: ${RELYT_PORT:-5432} - RELYT_USER: ${RELYT_USER:-postgres} - RELYT_PASSWORD: ${RELYT_PASSWORD:-difyai123456} - RELYT_DATABASE: ${RELYT_DATABASE:-postgres} - OPENSEARCH_HOST: ${OPENSEARCH_HOST:-opensearch} - OPENSEARCH_PORT: ${OPENSEARCH_PORT:-9200} - OPENSEARCH_USER: ${OPENSEARCH_USER:-admin} - OPENSEARCH_PASSWORD: ${OPENSEARCH_PASSWORD:-admin} - OPENSEARCH_SECURE: ${OPENSEARCH_SECURE:-true} - TENCENT_VECTOR_DB_URL: ${TENCENT_VECTOR_DB_URL:-http://127.0.0.1} - TENCENT_VECTOR_DB_API_KEY: ${TENCENT_VECTOR_DB_API_KEY:-dify} - TENCENT_VECTOR_DB_TIMEOUT: ${TENCENT_VECTOR_DB_TIMEOUT:-30} - TENCENT_VECTOR_DB_USERNAME: ${TENCENT_VECTOR_DB_USERNAME:-dify} - TENCENT_VECTOR_DB_DATABASE: ${TENCENT_VECTOR_DB_DATABASE:-dify} - TENCENT_VECTOR_DB_SHARD: ${TENCENT_VECTOR_DB_SHARD:-1} - TENCENT_VECTOR_DB_REPLICAS: ${TENCENT_VECTOR_DB_REPLICAS:-2} - ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-0.0.0.0} - ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200} - ELASTICSEARCH_USERNAME: ${ELASTICSEARCH_USERNAME:-elastic} - ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic} - KIBANA_PORT: ${KIBANA_PORT:-5601} - BAIDU_VECTOR_DB_ENDPOINT: ${BAIDU_VECTOR_DB_ENDPOINT:-http://127.0.0.1:5287} - BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS: ${BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS:-30000} - BAIDU_VECTOR_DB_ACCOUNT: ${BAIDU_VECTOR_DB_ACCOUNT:-root} - BAIDU_VECTOR_DB_API_KEY: ${BAIDU_VECTOR_DB_API_KEY:-dify} - BAIDU_VECTOR_DB_DATABASE: ${BAIDU_VECTOR_DB_DATABASE:-dify} - BAIDU_VECTOR_DB_SHARD: ${BAIDU_VECTOR_DB_SHARD:-1} - BAIDU_VECTOR_DB_REPLICAS: ${BAIDU_VECTOR_DB_REPLICAS:-3} - VIKINGDB_ACCESS_KEY: ${VIKINGDB_ACCESS_KEY:-your-ak} - VIKINGDB_SECRET_KEY: ${VIKINGDB_SECRET_KEY:-your-sk} - VIKINGDB_REGION: ${VIKINGDB_REGION:-cn-shanghai} - VIKINGDB_HOST: ${VIKINGDB_HOST:-api-vikingdb.xxx.volces.com} - VIKINGDB_SCHEMA: ${VIKINGDB_SCHEMA:-http} - VIKINGDB_CONNECTION_TIMEOUT: ${VIKINGDB_CONNECTION_TIMEOUT:-30} - VIKINGDB_SOCKET_TIMEOUT: ${VIKINGDB_SOCKET_TIMEOUT:-30} - LINDORM_URL: ${LINDORM_URL:-http://lindorm:30070} - LINDORM_USERNAME: ${LINDORM_USERNAME:-lindorm} - LINDORM_PASSWORD: ${LINDORM_PASSWORD:-lindorm} - OCEANBASE_VECTOR_HOST: ${OCEANBASE_VECTOR_HOST:-oceanbase} - OCEANBASE_VECTOR_PORT: ${OCEANBASE_VECTOR_PORT:-2881} - OCEANBASE_VECTOR_USER: ${OCEANBASE_VECTOR_USER:-root@test} - OCEANBASE_VECTOR_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456} - OCEANBASE_VECTOR_DATABASE: ${OCEANBASE_VECTOR_DATABASE:-test} - OCEANBASE_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai} - OCEANBASE_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G} - UPSTASH_VECTOR_URL: ${UPSTASH_VECTOR_URL:-https://xxx-vector.upstash.io} - UPSTASH_VECTOR_TOKEN: ${UPSTASH_VECTOR_TOKEN:-dify} - UPLOAD_FILE_SIZE_LIMIT: ${UPLOAD_FILE_SIZE_LIMIT:-15} - UPLOAD_FILE_BATCH_LIMIT: ${UPLOAD_FILE_BATCH_LIMIT:-5} - ETL_TYPE: ${ETL_TYPE:-dify} - UNSTRUCTURED_API_URL: ${UNSTRUCTURED_API_URL:-} - UNSTRUCTURED_API_KEY: ${UNSTRUCTURED_API_KEY:-} - SCARF_NO_ANALYTICS: ${SCARF_NO_ANALYTICS:-true} - PROMPT_GENERATION_MAX_TOKENS: ${PROMPT_GENERATION_MAX_TOKENS:-512} - CODE_GENERATION_MAX_TOKENS: ${CODE_GENERATION_MAX_TOKENS:-1024} - MULTIMODAL_SEND_FORMAT: ${MULTIMODAL_SEND_FORMAT:-base64} - UPLOAD_IMAGE_FILE_SIZE_LIMIT: ${UPLOAD_IMAGE_FILE_SIZE_LIMIT:-10} - UPLOAD_VIDEO_FILE_SIZE_LIMIT: ${UPLOAD_VIDEO_FILE_SIZE_LIMIT:-100} - UPLOAD_AUDIO_FILE_SIZE_LIMIT: ${UPLOAD_AUDIO_FILE_SIZE_LIMIT:-50} - SENTRY_DSN: ${SENTRY_DSN:-} - API_SENTRY_DSN: ${API_SENTRY_DSN:-} - API_SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0} - API_SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0} - WEB_SENTRY_DSN: ${WEB_SENTRY_DSN:-} - NOTION_INTEGRATION_TYPE: ${NOTION_INTEGRATION_TYPE:-public} - NOTION_CLIENT_SECRET: ${NOTION_CLIENT_SECRET:-} - NOTION_CLIENT_ID: ${NOTION_CLIENT_ID:-} - NOTION_INTERNAL_SECRET: ${NOTION_INTERNAL_SECRET:-} - MAIL_TYPE: ${MAIL_TYPE:-resend} - MAIL_DEFAULT_SEND_FROM: ${MAIL_DEFAULT_SEND_FROM:-} - RESEND_API_URL: ${RESEND_API_URL:-https://api.resend.com} - RESEND_API_KEY: ${RESEND_API_KEY:-your-resend-api-key} - SMTP_SERVER: ${SMTP_SERVER:-} - SMTP_PORT: ${SMTP_PORT:-465} - SMTP_USERNAME: ${SMTP_USERNAME:-} - SMTP_PASSWORD: ${SMTP_PASSWORD:-} - SMTP_USE_TLS: ${SMTP_USE_TLS:-true} - SMTP_OPPORTUNISTIC_TLS: ${SMTP_OPPORTUNISTIC_TLS:-false} - INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-4000} - INVITE_EXPIRY_HOURS: ${INVITE_EXPIRY_HOURS:-72} - RESET_PASSWORD_TOKEN_EXPIRY_MINUTES: ${RESET_PASSWORD_TOKEN_EXPIRY_MINUTES:-5} - CODE_EXECUTION_ENDPOINT: ${CODE_EXECUTION_ENDPOINT:-http://sandbox:8194} - CODE_EXECUTION_API_KEY: ${CODE_EXECUTION_API_KEY:-dify-sandbox} - CODE_MAX_NUMBER: ${CODE_MAX_NUMBER:-9223372036854775807} - CODE_MIN_NUMBER: ${CODE_MIN_NUMBER:--9223372036854775808} - CODE_MAX_DEPTH: ${CODE_MAX_DEPTH:-5} - CODE_MAX_PRECISION: ${CODE_MAX_PRECISION:-20} - CODE_MAX_STRING_LENGTH: ${CODE_MAX_STRING_LENGTH:-80000} - CODE_MAX_STRING_ARRAY_LENGTH: ${CODE_MAX_STRING_ARRAY_LENGTH:-30} - CODE_MAX_OBJECT_ARRAY_LENGTH: ${CODE_MAX_OBJECT_ARRAY_LENGTH:-30} - CODE_MAX_NUMBER_ARRAY_LENGTH: ${CODE_MAX_NUMBER_ARRAY_LENGTH:-1000} - CODE_EXECUTION_CONNECT_TIMEOUT: ${CODE_EXECUTION_CONNECT_TIMEOUT:-10} - CODE_EXECUTION_READ_TIMEOUT: ${CODE_EXECUTION_READ_TIMEOUT:-60} - CODE_EXECUTION_WRITE_TIMEOUT: ${CODE_EXECUTION_WRITE_TIMEOUT:-10} - TEMPLATE_TRANSFORM_MAX_LENGTH: ${TEMPLATE_TRANSFORM_MAX_LENGTH:-80000} - WORKFLOW_MAX_EXECUTION_STEPS: ${WORKFLOW_MAX_EXECUTION_STEPS:-500} - WORKFLOW_MAX_EXECUTION_TIME: ${WORKFLOW_MAX_EXECUTION_TIME:-1200} - WORKFLOW_CALL_MAX_DEPTH: ${WORKFLOW_CALL_MAX_DEPTH:-5} - MAX_VARIABLE_SIZE: ${MAX_VARIABLE_SIZE:-204800} - WORKFLOW_PARALLEL_DEPTH_LIMIT: ${WORKFLOW_PARALLEL_DEPTH_LIMIT:-3} - WORKFLOW_FILE_UPLOAD_LIMIT: ${WORKFLOW_FILE_UPLOAD_LIMIT:-10} - HTTP_REQUEST_NODE_MAX_BINARY_SIZE: ${HTTP_REQUEST_NODE_MAX_BINARY_SIZE:-10485760} - HTTP_REQUEST_NODE_MAX_TEXT_SIZE: ${HTTP_REQUEST_NODE_MAX_TEXT_SIZE:-1048576} - SSRF_PROXY_HTTP_URL: ${SSRF_PROXY_HTTP_URL:-http://ssrf_proxy:3128} - SSRF_PROXY_HTTPS_URL: ${SSRF_PROXY_HTTPS_URL:-http://ssrf_proxy:3128} - TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000} - PGUSER: ${PGUSER:-${DB_USERNAME}} - POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-${DB_PASSWORD}} - POSTGRES_DB: ${POSTGRES_DB:-${DB_DATABASE}} - PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata} - SANDBOX_API_KEY: ${SANDBOX_API_KEY:-dify-sandbox} - SANDBOX_GIN_MODE: ${SANDBOX_GIN_MODE:-release} - SANDBOX_WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15} - SANDBOX_ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true} - SANDBOX_HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128} - SANDBOX_HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128} - SANDBOX_PORT: ${SANDBOX_PORT:-8194} - WEAVIATE_PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate} - WEAVIATE_QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25} - WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-true} - WEAVIATE_DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none} - WEAVIATE_CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1} - WEAVIATE_AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true} - WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih} - WEAVIATE_AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai} - WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true} - WEAVIATE_AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai} - CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456} - CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider} - CHROMA_IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE} - ORACLE_PWD: ${ORACLE_PWD:-Dify123456} - ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8} - ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision} - ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000} - ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296} - ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000} - MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin} - MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin} - ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379} - MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000} - MILVUS_AUTHORIZATION_ENABLED: ${MILVUS_AUTHORIZATION_ENABLED:-true} - PGVECTOR_PGUSER: ${PGVECTOR_PGUSER:-postgres} - PGVECTOR_POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456} - PGVECTOR_POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify} - PGVECTOR_PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata} - OPENSEARCH_DISCOVERY_TYPE: ${OPENSEARCH_DISCOVERY_TYPE:-single-node} - OPENSEARCH_BOOTSTRAP_MEMORY_LOCK: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true} - OPENSEARCH_JAVA_OPTS_MIN: ${OPENSEARCH_JAVA_OPTS_MIN:-512m} - OPENSEARCH_JAVA_OPTS_MAX: ${OPENSEARCH_JAVA_OPTS_MAX:-1024m} - OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123} - OPENSEARCH_MEMLOCK_SOFT: ${OPENSEARCH_MEMLOCK_SOFT:--1} - OPENSEARCH_MEMLOCK_HARD: ${OPENSEARCH_MEMLOCK_HARD:--1} - OPENSEARCH_NOFILE_SOFT: ${OPENSEARCH_NOFILE_SOFT:-65536} - OPENSEARCH_NOFILE_HARD: ${OPENSEARCH_NOFILE_HARD:-65536} - NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_} - NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false} - NGINX_PORT: ${NGINX_PORT:-80} - NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443} - NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt} - NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key} - NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3} - NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto} - NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M} - NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65} - NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s} - NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s} - NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false} - CERTBOT_EMAIL: ${CERTBOT_EMAIL:-your_email@example.com} - CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-your_domain.com} - CERTBOT_OPTIONS: ${CERTBOT_OPTIONS:-} - SSRF_HTTP_PORT: ${SSRF_HTTP_PORT:-3128} - SSRF_COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid} - SSRF_REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194} - SSRF_SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox} - SSRF_DEFAULT_TIME_OUT: ${SSRF_DEFAULT_TIME_OUT:-5} - SSRF_DEFAULT_CONNECT_TIME_OUT: ${SSRF_DEFAULT_CONNECT_TIME_OUT:-5} - SSRF_DEFAULT_READ_TIME_OUT: ${SSRF_DEFAULT_READ_TIME_OUT:-5} - SSRF_DEFAULT_WRITE_TIME_OUT: ${SSRF_DEFAULT_WRITE_TIME_OUT:-5} - EXPOSE_NGINX_PORT: ${PANEL_APP_PORT_HTTP:-8080} - EXPOSE_NGINX_SSL_PORT: ${PANEL_APP_PORT_HTTPS:-8443} - POSITION_TOOL_PINS: ${POSITION_TOOL_PINS:-} - POSITION_TOOL_INCLUDES: ${POSITION_TOOL_INCLUDES:-} - POSITION_TOOL_EXCLUDES: ${POSITION_TOOL_EXCLUDES:-} - POSITION_PROVIDER_PINS: ${POSITION_PROVIDER_PINS:-} - POSITION_PROVIDER_INCLUDES: ${POSITION_PROVIDER_INCLUDES:-} - POSITION_PROVIDER_EXCLUDES: ${POSITION_PROVIDER_EXCLUDES:-} - CSP_WHITELIST: ${CSP_WHITELIST:-} - CREATE_TIDB_SERVICE_JOB_ENABLED: ${CREATE_TIDB_SERVICE_JOB_ENABLED:-false} - MAX_SUBMIT_COUNT: ${MAX_SUBMIT_COUNT:-100} - TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-10} - DB_PLUGIN_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin} - EXPOSE_PLUGIN_DAEMON_PORT: ${EXPOSE_PLUGIN_DAEMON_PORT:-5002} - PLUGIN_DAEMON_PORT: ${PLUGIN_DAEMON_PORT:-5002} - PLUGIN_DAEMON_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi} - PLUGIN_DAEMON_URL: ${PLUGIN_DAEMON_URL:-http://plugin_daemon:5002} - PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800} - PLUGIN_PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false} - PLUGIN_DEBUGGING_HOST: ${PLUGIN_DEBUGGING_HOST:-0.0.0.0} - PLUGIN_DEBUGGING_PORT: ${PLUGIN_DEBUGGING_PORT:-5003} - EXPOSE_PLUGIN_DEBUGGING_HOST: ${EXPOSE_PLUGIN_DEBUGGING_HOST:-localhost} - EXPOSE_PLUGIN_DEBUGGING_PORT: ${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003} - PLUGIN_DIFY_INNER_API_KEY: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1} - PLUGIN_DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001} - ENDPOINT_URL_TEMPLATE: ${ENDPOINT_URL_TEMPLATE:-http://localhost/e/{hook_id}} - MARKETPLACE_ENABLED: ${MARKETPLACE_ENABLED:-true} - MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai} - FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true} - -services: - api: - image: langgenius/dify-api:1.0.0 - container_name: api-${CONTAINER_NAME} - restart: always - environment: - <<: *shared-api-worker-env - MODE: api - SENTRY_DSN: ${API_SENTRY_DSN:-} - SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0} - SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0} - PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800} - INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1} - depends_on: - - db - - redis - volumes: - - ${DIFY_ROOT_PATH}/volumes/app/storage:/app/api/storage - networks: - - ssrf_proxy_network - - default - - worker: - image: langgenius/dify-api:1.0.0 - container_name: worker-${CONTAINER_NAME} - restart: always - environment: - <<: *shared-api-worker-env - MODE: worker - SENTRY_DSN: ${API_SENTRY_DSN:-} - SENTRY_TRACES_SAMPLE_RATE: ${API_SENTRY_TRACES_SAMPLE_RATE:-1.0} - SENTRY_PROFILES_SAMPLE_RATE: ${API_SENTRY_PROFILES_SAMPLE_RATE:-1.0} - PLUGIN_MAX_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800} - INNER_API_KEY_FOR_PLUGIN: ${PLUGIN_DIFY_INNER_API_KEY:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1} - depends_on: - - db - - redis - volumes: - - ${DIFY_ROOT_PATH}/volumes/app/storage:/app/api/storage - networks: - - ssrf_proxy_network - - default - - web: - image: langgenius/dify-web:1.0.0 - container_name: ${CONTAINER_NAME} - restart: always - environment: - CONSOLE_API_URL: ${CONSOLE_API_URL:-} - APP_API_URL: ${APP_API_URL:-} - SENTRY_DSN: ${WEB_SENTRY_DSN:-} - NEXT_TELEMETRY_DISABLED: ${NEXT_TELEMETRY_DISABLED:-0} - TEXT_GENERATION_TIMEOUT_MS: ${TEXT_GENERATION_TIMEOUT_MS:-60000} - CSP_WHITELIST: ${CSP_WHITELIST:-} - MARKETPLACE_API_URL: ${MARKETPLACE_API_URL:-https://marketplace.dify.ai} - MARKETPLACE_URL: ${MARKETPLACE_URL:-https://marketplace.dify.ai} - TOP_K_MAX_VALUE: ${TOP_K_MAX_VALUE:-} - INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH: ${INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH:-} - - db: - image: postgres:15-alpine - container_name: db-${CONTAINER_NAME} - restart: always - environment: - PGUSER: ${PGUSER:-postgres} - POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-difyai123456} - POSTGRES_DB: ${POSTGRES_DB:-dify} - PGDATA: ${PGDATA:-/var/lib/postgresql/data/pgdata} - command: > - postgres -c 'max_connections=${POSTGRES_MAX_CONNECTIONS:-100}' - -c 'shared_buffers=${POSTGRES_SHARED_BUFFERS:-128MB}' - -c 'work_mem=${POSTGRES_WORK_MEM:-4MB}' - -c 'maintenance_work_mem=${POSTGRES_MAINTENANCE_WORK_MEM:-64MB}' - -c 'effective_cache_size=${POSTGRES_EFFECTIVE_CACHE_SIZE:-4096MB}' - volumes: - - ${DIFY_ROOT_PATH}/volumes/db/data:/var/lib/postgresql/data - healthcheck: - test: [ 'CMD', 'pg_isready' ] - interval: 1s - timeout: 3s - retries: 30 - ports: - - '${EXPOSE_DB_PORT:-5432}:5432' - - redis: - image: redis:6-alpine - container_name: redis-${CONTAINER_NAME} - restart: always - environment: - REDISCLI_AUTH: ${REDIS_PASSWORD:-difyai123456} - volumes: - - ${DIFY_ROOT_PATH}/volumes/redis/data:/data - command: redis-server --requirepass ${REDIS_PASSWORD:-difyai123456} - healthcheck: - test: [ 'CMD', 'redis-cli', 'ping' ] - - sandbox: - image: langgenius/dify-sandbox:0.2.10 - container_name: sandbox-${CONTAINER_NAME} - restart: always - environment: - API_KEY: ${SANDBOX_API_KEY:-dify-sandbox} - GIN_MODE: ${SANDBOX_GIN_MODE:-release} - WORKER_TIMEOUT: ${SANDBOX_WORKER_TIMEOUT:-15} - ENABLE_NETWORK: ${SANDBOX_ENABLE_NETWORK:-true} - HTTP_PROXY: ${SANDBOX_HTTP_PROXY:-http://ssrf_proxy:3128} - HTTPS_PROXY: ${SANDBOX_HTTPS_PROXY:-http://ssrf_proxy:3128} - SANDBOX_PORT: ${SANDBOX_PORT:-8194} - volumes: - - ${DIFY_ROOT_PATH}/volumes/sandbox/dependencies:/dependencies - - ${DIFY_ROOT_PATH}/volumes/sandbox/conf:/conf - healthcheck: - test: [ 'CMD', 'curl', '-f', 'http://localhost:8194/health' ] - networks: - - ssrf_proxy_network - - plugin_daemon: - image: langgenius/dify-plugin-daemon:0.0.3-local - container_name: plugin_daemon-${CONTAINER_NAME} - restart: always - environment: - <<: *shared-api-worker-env - DB_DATABASE: ${DB_PLUGIN_DATABASE:-dify_plugin} - SERVER_PORT: ${PLUGIN_DAEMON_PORT:-5002} - SERVER_KEY: ${PLUGIN_DAEMON_KEY:-lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi} - MAX_PLUGIN_PACKAGE_SIZE: ${PLUGIN_MAX_PACKAGE_SIZE:-52428800} - PPROF_ENABLED: ${PLUGIN_PPROF_ENABLED:-false} - DIFY_INNER_API_URL: ${PLUGIN_DIFY_INNER_API_URL:-http://api:5001} - DIFY_INNER_API_KEY: ${INNER_API_KEY_FOR_PLUGIN:-QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1} - PLUGIN_REMOTE_INSTALLING_HOST: ${PLUGIN_REMOTE_INSTALL_HOST:-0.0.0.0} - PLUGIN_REMOTE_INSTALLING_PORT: ${PLUGIN_REMOTE_INSTALL_PORT:-5003} - PLUGIN_WORKING_PATH: ${PLUGIN_WORKING_PATH:-/app/storage/cwd} - FORCE_VERIFYING_SIGNATURE: ${FORCE_VERIFYING_SIGNATURE:-true} - ports: - - "${EXPOSE_PLUGIN_DEBUGGING_PORT:-5003}:${PLUGIN_DEBUGGING_PORT:-5003}" - volumes: - - ${DIFY_ROOT_PATH}/volumes/plugin_daemon:/app/storage - - - ssrf_proxy: - image: ubuntu/squid:latest - container_name: ssrf_proxy-${CONTAINER_NAME} - restart: always - volumes: - - ${DIFY_ROOT_PATH}/ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template - - ${DIFY_ROOT_PATH}/ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh - entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ] - environment: - HTTP_PORT: ${SSRF_HTTP_PORT:-3128} - COREDUMP_DIR: ${SSRF_COREDUMP_DIR:-/var/spool/squid} - REVERSE_PROXY_PORT: ${SSRF_REVERSE_PROXY_PORT:-8194} - SANDBOX_HOST: ${SSRF_SANDBOX_HOST:-sandbox} - SANDBOX_PORT: ${SANDBOX_PORT:-8194} - networks: - - ssrf_proxy_network - - default - - certbot: - image: certbot/certbot - container_name: certbot-${CONTAINER_NAME} - profiles: - - certbot - volumes: - - ${DIFY_ROOT_PATH}/volumes/certbot/conf:/etc/letsencrypt - - ${DIFY_ROOT_PATH}/volumes/certbot/www:/var/www/html - - ${DIFY_ROOT_PATH}/volumes/certbot/logs:/var/log/letsencrypt - - ${DIFY_ROOT_PATH}/volumes/certbot/conf/live:/etc/letsencrypt/live - - ${DIFY_ROOT_PATH}/certbot/update-cert.template.txt:/update-cert.template.txt - - ${DIFY_ROOT_PATH}/certbot/docker-entrypoint.sh:/docker-entrypoint.sh - environment: - - CERTBOT_EMAIL=${CERTBOT_EMAIL} - - CERTBOT_DOMAIN=${CERTBOT_DOMAIN} - - CERTBOT_OPTIONS=${CERTBOT_OPTIONS:-} - entrypoint: [ '/docker-entrypoint.sh' ] - command: [ 'tail', '-f', '/dev/null' ] - - nginx: - image: nginx:latest - container_name: nginx-${CONTAINER_NAME} - restart: always - volumes: - - ${DIFY_ROOT_PATH}/nginx/nginx.conf.template:/etc/nginx/nginx.conf.template - - ${DIFY_ROOT_PATH}/nginx/proxy.conf.template:/etc/nginx/proxy.conf.template - - ${DIFY_ROOT_PATH}/nginx/https.conf.template:/etc/nginx/https.conf.template - - ${DIFY_ROOT_PATH}/nginx/conf.d:/etc/nginx/conf.d - - ${DIFY_ROOT_PATH}/nginx/docker-entrypoint.sh:/docker-entrypoint-mount.sh - - ${DIFY_ROOT_PATH}/nginx/ssl:/etc/ssl # cert dir (legacy) - - ${DIFY_ROOT_PATH}/volumes/certbot/conf/live:/etc/letsencrypt/live # cert dir (with certbot container) - - ${DIFY_ROOT_PATH}/volumes/certbot/conf:/etc/letsencrypt - - ${DIFY_ROOT_PATH}/volumes/certbot/www:/var/www/html - entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ] - environment: - NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_} - NGINX_HTTPS_ENABLED: ${NGINX_HTTPS_ENABLED:-false} - NGINX_SSL_PORT: ${NGINX_SSL_PORT:-443} - NGINX_PORT: ${NGINX_PORT:-80} - NGINX_SSL_CERT_FILENAME: ${NGINX_SSL_CERT_FILENAME:-dify.crt} - NGINX_SSL_CERT_KEY_FILENAME: ${NGINX_SSL_CERT_KEY_FILENAME:-dify.key} - NGINX_SSL_PROTOCOLS: ${NGINX_SSL_PROTOCOLS:-TLSv1.1 TLSv1.2 TLSv1.3} - NGINX_WORKER_PROCESSES: ${NGINX_WORKER_PROCESSES:-auto} - NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-15M} - NGINX_KEEPALIVE_TIMEOUT: ${NGINX_KEEPALIVE_TIMEOUT:-65} - NGINX_PROXY_READ_TIMEOUT: ${NGINX_PROXY_READ_TIMEOUT:-3600s} - NGINX_PROXY_SEND_TIMEOUT: ${NGINX_PROXY_SEND_TIMEOUT:-3600s} - NGINX_ENABLE_CERTBOT_CHALLENGE: ${NGINX_ENABLE_CERTBOT_CHALLENGE:-false} - CERTBOT_DOMAIN: ${CERTBOT_DOMAIN:-} - depends_on: - - api - - web - ports: - - '${PANEL_APP_PORT_HTTP:-80}:${NGINX_PORT:-80}' - - '${PANEL_APP_PORT_HTTPS:-443}:${NGINX_SSL_PORT:-443}' - - weaviate: - image: semitechnologies/weaviate:1.19.0 - container_name: weaviate-${CONTAINER_NAME} - profiles: - - '' - - weaviate - restart: always - volumes: - - ${DIFY_ROOT_PATH}/volumes/weaviate:/var/lib/weaviate - environment: - PERSISTENCE_DATA_PATH: ${WEAVIATE_PERSISTENCE_DATA_PATH:-/var/lib/weaviate} - QUERY_DEFAULTS_LIMIT: ${WEAVIATE_QUERY_DEFAULTS_LIMIT:-25} - AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED: ${WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED:-false} - DEFAULT_VECTORIZER_MODULE: ${WEAVIATE_DEFAULT_VECTORIZER_MODULE:-none} - CLUSTER_HOSTNAME: ${WEAVIATE_CLUSTER_HOSTNAME:-node1} - AUTHENTICATION_APIKEY_ENABLED: ${WEAVIATE_AUTHENTICATION_APIKEY_ENABLED:-true} - AUTHENTICATION_APIKEY_ALLOWED_KEYS: ${WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS:-WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih} - AUTHENTICATION_APIKEY_USERS: ${WEAVIATE_AUTHENTICATION_APIKEY_USERS:-hello@dify.ai} - AUTHORIZATION_ADMINLIST_ENABLED: ${WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED:-true} - AUTHORIZATION_ADMINLIST_USERS: ${WEAVIATE_AUTHORIZATION_ADMINLIST_USERS:-hello@dify.ai} - - qdrant: - image: langgenius/qdrant:v1.7.3 - container_name: qdrant-${CONTAINER_NAME} - profiles: - - qdrant - restart: always - volumes: - - ${DIFY_ROOT_PATH}/volumes/qdrant:/qdrant/storage - environment: - QDRANT_API_KEY: ${QDRANT_API_KEY:-difyai123456} - - couchbase-server: - build: ./conf/couchbase-server - profiles: - - couchbase - restart: always - environment: - - CLUSTER_NAME=dify_search - - COUCHBASE_ADMINISTRATOR_USERNAME=${COUCHBASE_USER:-Administrator} - - COUCHBASE_ADMINISTRATOR_PASSWORD=${COUCHBASE_PASSWORD:-password} - - COUCHBASE_BUCKET=${COUCHBASE_BUCKET_NAME:-Embeddings} - - COUCHBASE_BUCKET_RAMSIZE=512 - - COUCHBASE_RAM_SIZE=2048 - - COUCHBASE_EVENTING_RAM_SIZE=512 - - COUCHBASE_INDEX_RAM_SIZE=512 - - COUCHBASE_FTS_RAM_SIZE=1024 - hostname: couchbase-server - container_name: couchbase-server - working_dir: /opt/couchbase - stdin_open: true - tty: true - entrypoint: [ "" ] - command: sh -c "/opt/couchbase/init/init-cbserver.sh" - volumes: - - ${DIFY_ROOT_PATH}/volumes/couchbase/data:/opt/couchbase/var/lib/couchbase/data - healthcheck: - test: [ "CMD-SHELL", "curl -s -f -u Administrator:password http://localhost:8091/pools/default/buckets | grep -q '\\[{' || exit 1" ] - interval: 10s - retries: 10 - start_period: 30s - timeout: 10s - - pgvector: - image: pgvector/pgvector:pg16 - container_name: pgvector-${CONTAINER_NAME} - profiles: - - pgvector - restart: always - environment: - PGUSER: ${PGVECTOR_PGUSER:-postgres} - POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456} - POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify} - PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata} - volumes: - - ${DIFY_ROOT_PATH}/volumes/pgvector/data:/var/lib/postgresql/data - healthcheck: - test: [ 'CMD', 'pg_isready' ] - interval: 1s - timeout: 3s - retries: 30 - - pgvecto-rs: - image: tensorchord/pgvecto-rs:pg16-v0.3.0 - container_name: pgvecto-rs-${CONTAINER_NAME} - profiles: - - pgvecto-rs - restart: always - environment: - PGUSER: ${PGVECTOR_PGUSER:-postgres} - POSTGRES_PASSWORD: ${PGVECTOR_POSTGRES_PASSWORD:-difyai123456} - POSTGRES_DB: ${PGVECTOR_POSTGRES_DB:-dify} - PGDATA: ${PGVECTOR_PGDATA:-/var/lib/postgresql/data/pgdata} - volumes: - - ${DIFY_ROOT_PATH}/volumes/pgvecto_rs/data:/var/lib/postgresql/data - healthcheck: - test: [ 'CMD', 'pg_isready' ] - interval: 1s - timeout: 3s - retries: 30 - - chroma: - image: ghcr.io/chroma-core/chroma:0.5.20 - container_name: chroma-${CONTAINER_NAME} - profiles: - - chroma - restart: always - volumes: - - ${DIFY_ROOT_PATH}/volumes/chroma:/chroma/chroma - environment: - CHROMA_SERVER_AUTHN_CREDENTIALS: ${CHROMA_SERVER_AUTHN_CREDENTIALS:-difyai123456} - CHROMA_SERVER_AUTHN_PROVIDER: ${CHROMA_SERVER_AUTHN_PROVIDER:-chromadb.auth.token_authn.TokenAuthenticationServerProvider} - IS_PERSISTENT: ${CHROMA_IS_PERSISTENT:-TRUE} - - oceanbase: - image: quay.io/oceanbase/oceanbase-ce:4.3.3.0-100000142024101215 - container_name: oceanbase-${CONTAINER_NAME} - profiles: - - oceanbase - restart: always - volumes: - - ${DIFY_ROOT_PATH}/volumes/oceanbase/data:/root/ob - - ${DIFY_ROOT_PATH}/volumes/oceanbase/conf:/root/.obd/cluster - - ${DIFY_ROOT_PATH}/volumes/oceanbase/init.d:/root/boot/init.d - environment: - OB_MEMORY_LIMIT: ${OCEANBASE_MEMORY_LIMIT:-6G} - OB_SYS_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456} - OB_TENANT_PASSWORD: ${OCEANBASE_VECTOR_PASSWORD:-difyai123456} - OB_CLUSTER_NAME: ${OCEANBASE_CLUSTER_NAME:-difyai} - OB_SERVER_IP: '127.0.0.1' - - oracle: - image: container-registry.oracle.com/database/free:latest - container_name: oracle-${CONTAINER_NAME} - profiles: - - oracle - restart: always - volumes: - - source: oradata - type: volume - target: /opt/oracle/oradata - - ${DIFY_ROOT_PATH}/startupscripts:/opt/oracle/scripts/startup - environment: - ORACLE_PWD: ${ORACLE_PWD:-Dify123456} - ORACLE_CHARACTERSET: ${ORACLE_CHARACTERSET:-AL32UTF8} - - etcd: - image: quay.io/coreos/etcd:v3.5.5 - container_name: milvus-etcd-${CONTAINER_NAME} - profiles: - - milvus - environment: - ETCD_AUTO_COMPACTION_MODE: ${ETCD_AUTO_COMPACTION_MODE:-revision} - ETCD_AUTO_COMPACTION_RETENTION: ${ETCD_AUTO_COMPACTION_RETENTION:-1000} - ETCD_QUOTA_BACKEND_BYTES: ${ETCD_QUOTA_BACKEND_BYTES:-4294967296} - ETCD_SNAPSHOT_COUNT: ${ETCD_SNAPSHOT_COUNT:-50000} - volumes: - - ${DIFY_ROOT_PATH}/volumes/milvus/etcd:/etcd - command: etcd -advertise-client-urls=http://127.0.0.1:2379 -listen-client-urls http://0.0.0.0:2379 --data-dir /etcd - healthcheck: - test: [ 'CMD', 'etcdctl', 'endpoint', 'health' ] - interval: 30s - timeout: 20s - retries: 3 - networks: - - milvus - - minio: - image: minio/minio:RELEASE.2023-03-20T20-16-18Z - container_name: milvus-minio-${CONTAINER_NAME} - profiles: - - milvus - environment: - MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY:-minioadmin} - MINIO_SECRET_KEY: ${MINIO_SECRET_KEY:-minioadmin} - volumes: - - ${DIFY_ROOT_PATH}/volumes/milvus/minio:/minio_data - command: minio server /minio_data --console-address ":9001" - healthcheck: - test: [ 'CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live' ] - interval: 30s - timeout: 20s - retries: 3 - networks: - - milvus - - milvus-standalone: - image: milvusdb/milvus:v2.5.0-beta - container_name: milvus-standalone-${CONTAINER_NAME} - profiles: - - milvus - command: [ 'milvus', 'run', 'standalone' ] - environment: - ETCD_ENDPOINTS: ${ETCD_ENDPOINTS:-etcd:2379} - MINIO_ADDRESS: ${MINIO_ADDRESS:-minio:9000} - common.security.authorizationEnabled: ${MILVUS_AUTHORIZATION_ENABLED:-true} - volumes: - - ${DIFY_ROOT_PATH}/volumes/milvus/milvus:/var/lib/milvus - healthcheck: - test: [ 'CMD', 'curl', '-f', 'http://localhost:9091/healthz' ] - interval: 30s - start_period: 90s - timeout: 20s - retries: 3 - depends_on: - - etcd - - minio - ports: - - 19530:19530 - - 9091:9091 - networks: - - milvus - - opensearch: - image: opensearchproject/opensearch:latest - container_name: opensearch-${CONTAINER_NAME} - profiles: - - opensearch - environment: - discovery.type: ${OPENSEARCH_DISCOVERY_TYPE:-single-node} - bootstrap.memory_lock: ${OPENSEARCH_BOOTSTRAP_MEMORY_LOCK:-true} - OPENSEARCH_JAVA_OPTS: -Xms${OPENSEARCH_JAVA_OPTS_MIN:-512m} -Xmx${OPENSEARCH_JAVA_OPTS_MAX:-1024m} - OPENSEARCH_INITIAL_ADMIN_PASSWORD: ${OPENSEARCH_INITIAL_ADMIN_PASSWORD:-Qazwsxedc!@#123} - ulimits: - memlock: - soft: ${OPENSEARCH_MEMLOCK_SOFT:--1} - hard: ${OPENSEARCH_MEMLOCK_HARD:--1} - nofile: - soft: ${OPENSEARCH_NOFILE_SOFT:-65536} - hard: ${OPENSEARCH_NOFILE_HARD:-65536} - volumes: - - ${DIFY_ROOT_PATH}/volumes/opensearch/data:/usr/share/opensearch/data - networks: - - opensearch-net - - opensearch-dashboards: - image: opensearchproject/opensearch-dashboards:latest - container_name: opensearch-dashboards-${CONTAINER_NAME} - profiles: - - opensearch - environment: - OPENSEARCH_HOSTS: '["https://opensearch:9200"]' - volumes: - - ${DIFY_ROOT_PATH}/volumes/opensearch/opensearch_dashboards.yml:/usr/share/opensearch-dashboards/config/opensearch_dashboards.yml - networks: - - opensearch-net - depends_on: - - opensearch - - myscale: - image: myscale/myscaledb:1.6.4 - container_name: myscale-${CONTAINER_NAME} - profiles: - - myscale - restart: always - tty: true - volumes: - - ${DIFY_ROOT_PATH}/volumes/myscale/data:/var/lib/clickhouse - - ${DIFY_ROOT_PATH}/volumes/myscale/log:/var/log/clickhouse-server - - ${DIFY_ROOT_PATH}/volumes/myscale/config/users.d/custom_users_config.xml:/etc/clickhouse-server/users.d/custom_users_config.xml - ports: - - ${MYSCALE_PORT:-8123}:${MYSCALE_PORT:-8123} - - elasticsearch: - image: docker.elastic.co/elasticsearch/elasticsearch:8.14.3 - container_name: elasticsearch-${CONTAINER_NAME} - profiles: - - elasticsearch - - elasticsearch-ja - restart: always - volumes: - - ${DIFY_ROOT_PATH}/elasticsearch/docker-entrypoint.sh:/docker-entrypoint-mount.sh - - dify_es01_data:/usr/share/elasticsearch/data - environment: - ELASTIC_PASSWORD: ${ELASTICSEARCH_PASSWORD:-elastic} - VECTOR_STORE: ${VECTOR_STORE:-} - cluster.name: dify-es-cluster - node.name: dify-es0 - discovery.type: single-node - xpack.license.self_generated.type: basic - xpack.security.enabled: 'true' - xpack.security.enrollment.enabled: 'false' - xpack.security.http.ssl.enabled: 'false' - ports: - - ${ELASTICSEARCH_PORT:-9200}:9200 - deploy: - resources: - limits: - memory: 2g - entrypoint: [ 'sh', '-c', "sh /docker-entrypoint-mount.sh" ] - healthcheck: - test: [ 'CMD', 'curl', '-s', 'http://localhost:9200/_cluster/health?pretty' ] - interval: 30s - timeout: 10s - retries: 50 - - kibana: - image: docker.elastic.co/kibana/kibana:8.14.3 - container_name: kibana-${CONTAINER_NAME} - profiles: - - elasticsearch - depends_on: - - elasticsearch - restart: always - environment: - XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: d1a66dfd-c4d3-4a0a-8290-2abcb83ab3aa - NO_PROXY: localhost,127.0.0.1,elasticsearch,kibana - XPACK_SECURITY_ENABLED: 'true' - XPACK_SECURITY_ENROLLMENT_ENABLED: 'false' - XPACK_SECURITY_HTTP_SSL_ENABLED: 'false' - XPACK_FLEET_ISAIRGAPPED: 'true' - I18N_LOCALE: zh-CN - SERVER_PORT: '5601' - ELASTICSEARCH_HOSTS: http://elasticsearch:9200 - ports: - - ${KIBANA_PORT:-5601}:5601 - healthcheck: - test: [ 'CMD-SHELL', 'curl -s http://localhost:5601 >/dev/null || exit 1' ] - interval: 30s - timeout: 10s - retries: 3 - - unstructured: - image: downloads.unstructured.io/unstructured-io/unstructured-api:latest - container_name: unstructured-${CONTAINER_NAME} - profiles: - - unstructured - restart: always - volumes: - - ${DIFY_ROOT_PATH}/volumes/unstructured:/app/data - -networks: - ssrf_proxy_network: - driver: bridge - internal: true - milvus: - driver: bridge - opensearch-net: - driver: bridge - internal: true - -volumes: - oradata: - dify_es01_data: diff --git a/apps/dify/1.0.0/envs/default.env b/apps/dify/1.0.0/envs/default.env deleted file mode 100644 index cd05f46e6..000000000 --- a/apps/dify/1.0.0/envs/default.env +++ /dev/null @@ -1,2 +0,0 @@ -# copyright© 2024 XinJiang Ms Studio -ENV_FILE=.env diff --git a/apps/dify/1.0.0/envs/dify.env b/apps/dify/1.0.0/envs/dify.env deleted file mode 100644 index 9f6732ed9..000000000 --- a/apps/dify/1.0.0/envs/dify.env +++ /dev/null @@ -1,965 +0,0 @@ -# ------------------------------ -# Environment Variables for API service & worker -# ------------------------------ - -# ------------------------------ -# Common Variables -# ------------------------------ - -# The backend URL of the console API, -# used to concatenate the authorization callback. -# If empty, it is the same domain. -# Example: https://api.console.dify.ai -CONSOLE_API_URL= - -# The front-end URL of the console web, -# used to concatenate some front-end addresses and for CORS configuration use. -# If empty, it is the same domain. -# Example: https://console.dify.ai -CONSOLE_WEB_URL= - -# Service API Url, -# used to display Service API Base Url to the front-end. -# If empty, it is the same domain. -# Example: https://api.dify.ai -SERVICE_API_URL= - -# WebApp API backend Url, -# used to declare the back-end URL for the front-end API. -# If empty, it is the same domain. -# Example: https://api.app.dify.ai -APP_API_URL= - -# WebApp Url, -# used to display WebAPP API Base Url to the front-end. -# If empty, it is the same domain. -# Example: https://app.dify.ai -APP_WEB_URL= - -# File preview or download Url prefix. -# used to display File preview or download Url to the front-end or as Multi-model inputs; -# Url is signed and has expiration time. -FILES_URL= - -# ------------------------------ -# Server Configuration -# ------------------------------ - -# The log level for the application. -# Supported values are `DEBUG`, `INFO`, `WARNING`, `ERROR`, `CRITICAL` -LOG_LEVEL=INFO -# Log file path -LOG_FILE=/app/logs/server.log -# Log file max size, the unit is MB -LOG_FILE_MAX_SIZE=20 -# Log file max backup count -LOG_FILE_BACKUP_COUNT=5 -# Log dateformat -LOG_DATEFORMAT=%Y-%m-%d %H:%M:%S -# Log Timezone -LOG_TZ=UTC - -# Debug mode, default is false. -# It is recommended to turn on this configuration for local development -# to prevent some problems caused by monkey patch. -DEBUG=false - -# Flask debug mode, it can output trace information at the interface when turned on, -# which is convenient for debugging. -FLASK_DEBUG=false - -# A secretkey that is used for securely signing the session cookie -# and encrypting sensitive information on the database. -# You can generate a strong key using `openssl rand -base64 42`. -SECRET_KEY=sk-9f73s3ljTXVcMT3Blb3ljTqtsKiGHXVcMT3BlbkFJLK7U - -# Password for admin user initialization. -# If left unset, admin user will not be prompted for a password -# when creating the initial admin account. -# The length of the password cannot exceed 30 charactors. -INIT_PASSWORD= - -# Deployment environment. -# Supported values are `PRODUCTION`, `TESTING`. Default is `PRODUCTION`. -# Testing environment. There will be a distinct color label on the front-end page, -# indicating that this environment is a testing environment. -DEPLOY_ENV=PRODUCTION - -# Whether to enable the version check policy. -# If set to empty, https://updates.dify.ai will be called for version check. -CHECK_UPDATE_URL=https://updates.dify.ai - -# Used to change the OpenAI base address, default is https://api.openai.com/v1. -# When OpenAI cannot be accessed in China, replace it with a domestic mirror address, -# or when a local model provides OpenAI compatible API, it can be replaced. -OPENAI_API_BASE=https://api.openai.com/v1 - -# When enabled, migrations will be executed prior to application startup -# and the application will start after the migrations have completed. -MIGRATION_ENABLED=true - -# File Access Time specifies a time interval in seconds for the file to be accessed. -# The default value is 300 seconds. -FILES_ACCESS_TIMEOUT=300 - -# Access token expiration time in minutes -ACCESS_TOKEN_EXPIRE_MINUTES=60 - -# Refresh token expiration time in days -REFRESH_TOKEN_EXPIRE_DAYS=30 - -# The maximum number of active requests for the application, where 0 means unlimited, should be a non-negative integer. -APP_MAX_ACTIVE_REQUESTS=0 -APP_MAX_EXECUTION_TIME=1200 - -# ------------------------------ -# Container Startup Related Configuration -# Only effective when starting with docker image or docker-compose. -# ------------------------------ - -# API service binding address, default: 0.0.0.0, i.e., all addresses can be accessed. -DIFY_BIND_ADDRESS=0.0.0.0 - -# API service binding port number, default 5001. -DIFY_PORT=5001 - -# The number of API server workers, i.e., the number of workers. -# Formula: number of cpu cores x 2 + 1 for sync, 1 for Gevent -# Reference: https://docs.gunicorn.org/en/stable/design.html#how-many-workers -SERVER_WORKER_AMOUNT=1 - -# Defaults to gevent. If using windows, it can be switched to sync or solo. -SERVER_WORKER_CLASS=gevent - -# Default number of worker connections, the default is 10. -SERVER_WORKER_CONNECTIONS=10 - -# Similar to SERVER_WORKER_CLASS. -# If using windows, it can be switched to sync or solo. -CELERY_WORKER_CLASS= - -# Request handling timeout. The default is 200, -# it is recommended to set it to 360 to support a longer sse connection time. -GUNICORN_TIMEOUT=360 - -# The number of Celery workers. The default is 1, and can be set as needed. -CELERY_WORKER_AMOUNT= - -# Flag indicating whether to enable autoscaling of Celery workers. -# -# Autoscaling is useful when tasks are CPU intensive and can be dynamically -# allocated and deallocated based on the workload. -# -# When autoscaling is enabled, the maximum and minimum number of workers can -# be specified. The autoscaling algorithm will dynamically adjust the number -# of workers within the specified range. -# -# Default is false (i.e., autoscaling is disabled). -# -# Example: -# CELERY_AUTO_SCALE=true -CELERY_AUTO_SCALE=false - -# The maximum number of Celery workers that can be autoscaled. -# This is optional and only used when autoscaling is enabled. -# Default is not set. -CELERY_MAX_WORKERS= - -# The minimum number of Celery workers that can be autoscaled. -# This is optional and only used when autoscaling is enabled. -# Default is not set. -CELERY_MIN_WORKERS= - -# API Tool configuration -API_TOOL_DEFAULT_CONNECT_TIMEOUT=10 -API_TOOL_DEFAULT_READ_TIMEOUT=60 - - -# ------------------------------ -# Database Configuration -# The database uses PostgreSQL. Please use the public schema. -# It is consistent with the configuration in the 'db' service below. -# ------------------------------ - -DB_USERNAME=postgres -DB_PASSWORD=difyai123456 -DB_HOST=db -DB_PORT=5432 -DB_DATABASE=dify -# The size of the database connection pool. -# The default is 30 connections, which can be appropriately increased. -SQLALCHEMY_POOL_SIZE=30 -# Database connection pool recycling time, the default is 3600 seconds. -SQLALCHEMY_POOL_RECYCLE=3600 -# Whether to print SQL, default is false. -SQLALCHEMY_ECHO=false - -# Maximum number of connections to the database -# Default is 100 -# -# Reference: https://www.postgresql.org/docs/current/runtime-config-connection.html#GUC-MAX-CONNECTIONS -POSTGRES_MAX_CONNECTIONS=100 - -# Sets the amount of shared memory used for postgres's shared buffers. -# Default is 128MB -# Recommended value: 25% of available memory -# Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-SHARED-BUFFERS -POSTGRES_SHARED_BUFFERS=128MB - -# Sets the amount of memory used by each database worker for working space. -# Default is 4MB -# -# Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-WORK-MEM -POSTGRES_WORK_MEM=4MB - -# Sets the amount of memory reserved for maintenance activities. -# Default is 64MB -# -# Reference: https://www.postgresql.org/docs/current/runtime-config-resource.html#GUC-MAINTENANCE-WORK-MEM -POSTGRES_MAINTENANCE_WORK_MEM=64MB - -# Sets the planner's assumption about the effective cache size. -# Default is 4096MB -# -# Reference: https://www.postgresql.org/docs/current/runtime-config-query.html#GUC-EFFECTIVE-CACHE-SIZE -POSTGRES_EFFECTIVE_CACHE_SIZE=4096MB - -# ------------------------------ -# Redis Configuration -# This Redis configuration is used for caching and for pub/sub during conversation. -# ------------------------------ - -REDIS_HOST=redis -REDIS_PORT=6379 -REDIS_USERNAME= -REDIS_PASSWORD=difyai123456 -REDIS_USE_SSL=false -REDIS_DB=0 - -# Whether to use Redis Sentinel mode. -# If set to true, the application will automatically discover and connect to the master node through Sentinel. -REDIS_USE_SENTINEL=false - -# List of Redis Sentinel nodes. If Sentinel mode is enabled, provide at least one Sentinel IP and port. -# Format: `:,:,:` -REDIS_SENTINELS= -REDIS_SENTINEL_SERVICE_NAME= -REDIS_SENTINEL_USERNAME= -REDIS_SENTINEL_PASSWORD= -REDIS_SENTINEL_SOCKET_TIMEOUT=0.1 - -# List of Redis Cluster nodes. If Cluster mode is enabled, provide at least one Cluster IP and port. -# Format: `:,:,:` -REDIS_USE_CLUSTERS=false -REDIS_CLUSTERS= -REDIS_CLUSTERS_PASSWORD= - -# ------------------------------ -# Celery Configuration -# ------------------------------ - -# Use redis as the broker, and redis db 1 for celery broker. -# Format as follows: `redis://:@:/` -# Example: redis://:difyai123456@redis:6379/1 -# If use Redis Sentinel, format as follows: `sentinel://:@:/` -# Example: sentinel://localhost:26379/1;sentinel://localhost:26380/1;sentinel://localhost:26381/1 -CELERY_BROKER_URL=redis://:difyai123456@redis:6379/1 -BROKER_USE_SSL=false - -# If you are using Redis Sentinel for high availability, configure the following settings. -CELERY_USE_SENTINEL=false -CELERY_SENTINEL_MASTER_NAME= -CELERY_SENTINEL_SOCKET_TIMEOUT=0.1 - -# ------------------------------ -# CORS Configuration -# Used to set the front-end cross-domain access policy. -# ------------------------------ - -# Specifies the allowed origins for cross-origin requests to the Web API, -# e.g. https://dify.app or * for all origins. -WEB_API_CORS_ALLOW_ORIGINS=* - -# Specifies the allowed origins for cross-origin requests to the console API, -# e.g. https://cloud.dify.ai or * for all origins. -CONSOLE_CORS_ALLOW_ORIGINS=* - -# ------------------------------ -# File Storage Configuration -# ------------------------------ - -# The type of storage to use for storing user files. -STORAGE_TYPE=opendal - -# Apache OpenDAL Configuration -# The configuration for OpenDAL consists of the following format: OPENDAL__. -# You can find all the service configurations (CONFIG_NAME) in the repository at: https://github.com/apache/opendal/tree/main/core/src/services. -# Dify will scan configurations starting with OPENDAL_ and automatically apply them. -# The scheme name for the OpenDAL storage. -OPENDAL_SCHEME=fs -# Configurations for OpenDAL Local File System. -OPENDAL_FS_ROOT=storage - -# S3 Configuration -# -S3_ENDPOINT= -S3_REGION=us-east-1 -S3_BUCKET_NAME=difyai -S3_ACCESS_KEY= -S3_SECRET_KEY= -# Whether to use AWS managed IAM roles for authenticating with the S3 service. -# If set to false, the access key and secret key must be provided. -S3_USE_AWS_MANAGED_IAM=false - -# Azure Blob Configuration -# -AZURE_BLOB_ACCOUNT_NAME=difyai -AZURE_BLOB_ACCOUNT_KEY=difyai -AZURE_BLOB_CONTAINER_NAME=difyai-container -AZURE_BLOB_ACCOUNT_URL=https://.blob.core.windows.net - -# Google Storage Configuration -# -GOOGLE_STORAGE_BUCKET_NAME=your-bucket-name -GOOGLE_STORAGE_SERVICE_ACCOUNT_JSON_BASE64= - -# The Alibaba Cloud OSS configurations, -# -ALIYUN_OSS_BUCKET_NAME=your-bucket-name -ALIYUN_OSS_ACCESS_KEY=your-access-key -ALIYUN_OSS_SECRET_KEY=your-secret-key -ALIYUN_OSS_ENDPOINT=https://oss-ap-southeast-1-internal.aliyuncs.com -ALIYUN_OSS_REGION=ap-southeast-1 -ALIYUN_OSS_AUTH_VERSION=v4 -# Don't start with '/'. OSS doesn't support leading slash in object names. -ALIYUN_OSS_PATH=your-path - -# Tencent COS Configuration -# -TENCENT_COS_BUCKET_NAME=your-bucket-name -TENCENT_COS_SECRET_KEY=your-secret-key -TENCENT_COS_SECRET_ID=your-secret-id -TENCENT_COS_REGION=your-region -TENCENT_COS_SCHEME=your-scheme - -# Oracle Storage Configuration -# -OCI_ENDPOINT=https://objectstorage.us-ashburn-1.oraclecloud.com -OCI_BUCKET_NAME=your-bucket-name -OCI_ACCESS_KEY=your-access-key -OCI_SECRET_KEY=your-secret-key -OCI_REGION=us-ashburn-1 - -# Huawei OBS Configuration -# -HUAWEI_OBS_BUCKET_NAME=your-bucket-name -HUAWEI_OBS_SECRET_KEY=your-secret-key -HUAWEI_OBS_ACCESS_KEY=your-access-key -HUAWEI_OBS_SERVER=your-server-url - -# Volcengine TOS Configuration -# -VOLCENGINE_TOS_BUCKET_NAME=your-bucket-name -VOLCENGINE_TOS_SECRET_KEY=your-secret-key -VOLCENGINE_TOS_ACCESS_KEY=your-access-key -VOLCENGINE_TOS_ENDPOINT=your-server-url -VOLCENGINE_TOS_REGION=your-region - -# Baidu OBS Storage Configuration -# -BAIDU_OBS_BUCKET_NAME=your-bucket-name -BAIDU_OBS_SECRET_KEY=your-secret-key -BAIDU_OBS_ACCESS_KEY=your-access-key -BAIDU_OBS_ENDPOINT=your-server-url - -# Supabase Storage Configuration -# -SUPABASE_BUCKET_NAME=your-bucket-name -SUPABASE_API_KEY=your-access-key -SUPABASE_URL=your-server-url - -# ------------------------------ -# Vector Database Configuration -# ------------------------------ - -# The type of vector store to use. -# Supported values are `weaviate`, `qdrant`, `milvus`, `myscale`, `relyt`, `pgvector`, `pgvecto-rs`, `chroma`, `opensearch`, `tidb_vector`, `oracle`, `tencent`, `elasticsearch`, `elasticsearch-ja`, `analyticdb`, `couchbase`, `vikingdb`, `oceanbase`. -VECTOR_STORE=weaviate - -# The Weaviate endpoint URL. Only available when VECTOR_STORE is `weaviate`. -WEAVIATE_ENDPOINT=http://weaviate:8080 -WEAVIATE_API_KEY=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih - -# The Qdrant endpoint URL. Only available when VECTOR_STORE is `qdrant`. -QDRANT_URL=http://qdrant:6333 -QDRANT_API_KEY=difyai123456 -QDRANT_CLIENT_TIMEOUT=20 -QDRANT_GRPC_ENABLED=false -QDRANT_GRPC_PORT=6334 - -# Milvus configuration Only available when VECTOR_STORE is `milvus`. -# The milvus uri. -MILVUS_URI=http://127.0.0.1:19530 -MILVUS_TOKEN= -MILVUS_USER=root -MILVUS_PASSWORD=Milvus -MILVUS_ENABLE_HYBRID_SEARCH=False - -# MyScale configuration, only available when VECTOR_STORE is `myscale` -# For multi-language support, please set MYSCALE_FTS_PARAMS with referring to: -# https://myscale.com/docs/en/text-search/#understanding-fts-index-parameters -MYSCALE_HOST=myscale -MYSCALE_PORT=8123 -MYSCALE_USER=default -MYSCALE_PASSWORD= -MYSCALE_DATABASE=dify -MYSCALE_FTS_PARAMS= - -# Couchbase configurations, only available when VECTOR_STORE is `couchbase` -# The connection string must include hostname defined in the docker-compose file (couchbase-server in this case) -COUCHBASE_CONNECTION_STRING=couchbase://couchbase-server -COUCHBASE_USER=Administrator -COUCHBASE_PASSWORD=password -COUCHBASE_BUCKET_NAME=Embeddings -COUCHBASE_SCOPE_NAME=_default - -# pgvector configurations, only available when VECTOR_STORE is `pgvector` -PGVECTOR_HOST=pgvector -PGVECTOR_PORT=5432 -PGVECTOR_USER=postgres -PGVECTOR_PASSWORD=difyai123456 -PGVECTOR_DATABASE=dify -PGVECTOR_MIN_CONNECTION=1 -PGVECTOR_MAX_CONNECTION=5 - -# pgvecto-rs configurations, only available when VECTOR_STORE is `pgvecto-rs` -PGVECTO_RS_HOST=pgvecto-rs -PGVECTO_RS_PORT=5432 -PGVECTO_RS_USER=postgres -PGVECTO_RS_PASSWORD=difyai123456 -PGVECTO_RS_DATABASE=dify - -# analyticdb configurations, only available when VECTOR_STORE is `analyticdb` -ANALYTICDB_KEY_ID=your-ak -ANALYTICDB_KEY_SECRET=your-sk -ANALYTICDB_REGION_ID=cn-hangzhou -ANALYTICDB_INSTANCE_ID=gp-ab123456 -ANALYTICDB_ACCOUNT=testaccount -ANALYTICDB_PASSWORD=testpassword -ANALYTICDB_NAMESPACE=dify -ANALYTICDB_NAMESPACE_PASSWORD=difypassword -ANALYTICDB_HOST=gp-test.aliyuncs.com -ANALYTICDB_PORT=5432 -ANALYTICDB_MIN_CONNECTION=1 -ANALYTICDB_MAX_CONNECTION=5 - -# TiDB vector configurations, only available when VECTOR_STORE is `tidb` -TIDB_VECTOR_HOST=tidb -TIDB_VECTOR_PORT=4000 -TIDB_VECTOR_USER= -TIDB_VECTOR_PASSWORD= -TIDB_VECTOR_DATABASE=dify - -# Tidb on qdrant configuration, only available when VECTOR_STORE is `tidb_on_qdrant` -TIDB_ON_QDRANT_URL=http://127.0.0.1 -TIDB_ON_QDRANT_API_KEY=dify -TIDB_ON_QDRANT_CLIENT_TIMEOUT=20 -TIDB_ON_QDRANT_GRPC_ENABLED=false -TIDB_ON_QDRANT_GRPC_PORT=6334 -TIDB_PUBLIC_KEY=dify -TIDB_PRIVATE_KEY=dify -TIDB_API_URL=http://127.0.0.1 -TIDB_IAM_API_URL=http://127.0.0.1 -TIDB_REGION=regions/aws-us-east-1 -TIDB_PROJECT_ID=dify -TIDB_SPEND_LIMIT=100 - -# Chroma configuration, only available when VECTOR_STORE is `chroma` -CHROMA_HOST=127.0.0.1 -CHROMA_PORT=8000 -CHROMA_TENANT=default_tenant -CHROMA_DATABASE=default_database -CHROMA_AUTH_PROVIDER=chromadb.auth.token_authn.TokenAuthClientProvider -CHROMA_AUTH_CREDENTIALS= - -# Oracle configuration, only available when VECTOR_STORE is `oracle` -ORACLE_HOST=oracle -ORACLE_PORT=1521 -ORACLE_USER=dify -ORACLE_PASSWORD=dify -ORACLE_DATABASE=FREEPDB1 - -# relyt configurations, only available when VECTOR_STORE is `relyt` -RELYT_HOST=db -RELYT_PORT=5432 -RELYT_USER=postgres -RELYT_PASSWORD=difyai123456 -RELYT_DATABASE=postgres - -# open search configuration, only available when VECTOR_STORE is `opensearch` -OPENSEARCH_HOST=opensearch -OPENSEARCH_PORT=9200 -OPENSEARCH_USER=admin -OPENSEARCH_PASSWORD=admin -OPENSEARCH_SECURE=true - -# tencent vector configurations, only available when VECTOR_STORE is `tencent` -TENCENT_VECTOR_DB_URL=http://127.0.0.1 -TENCENT_VECTOR_DB_API_KEY=dify -TENCENT_VECTOR_DB_TIMEOUT=30 -TENCENT_VECTOR_DB_USERNAME=dify -TENCENT_VECTOR_DB_DATABASE=dify -TENCENT_VECTOR_DB_SHARD=1 -TENCENT_VECTOR_DB_REPLICAS=2 - -# ElasticSearch configuration, only available when VECTOR_STORE is `elasticsearch` -ELASTICSEARCH_HOST=0.0.0.0 -ELASTICSEARCH_PORT=9200 -ELASTICSEARCH_USERNAME=elastic -ELASTICSEARCH_PASSWORD=elastic -KIBANA_PORT=5601 - -# baidu vector configurations, only available when VECTOR_STORE is `baidu` -BAIDU_VECTOR_DB_ENDPOINT=http://127.0.0.1:5287 -BAIDU_VECTOR_DB_CONNECTION_TIMEOUT_MS=30000 -BAIDU_VECTOR_DB_ACCOUNT=root -BAIDU_VECTOR_DB_API_KEY=dify -BAIDU_VECTOR_DB_DATABASE=dify -BAIDU_VECTOR_DB_SHARD=1 -BAIDU_VECTOR_DB_REPLICAS=3 - -# VikingDB configurations, only available when VECTOR_STORE is `vikingdb` -VIKINGDB_ACCESS_KEY=your-ak -VIKINGDB_SECRET_KEY=your-sk -VIKINGDB_REGION=cn-shanghai -VIKINGDB_HOST=api-vikingdb.xxx.volces.com -VIKINGDB_SCHEMA=http -VIKINGDB_CONNECTION_TIMEOUT=30 -VIKINGDB_SOCKET_TIMEOUT=30 - -# Lindorm configuration, only available when VECTOR_STORE is `lindorm` -LINDORM_URL=http://lindorm:30070 -LINDORM_USERNAME=lindorm -LINDORM_PASSWORD=lindorm - -# OceanBase Vector configuration, only available when VECTOR_STORE is `oceanbase` -OCEANBASE_VECTOR_HOST=oceanbase -OCEANBASE_VECTOR_PORT=2881 -OCEANBASE_VECTOR_USER=root@test -OCEANBASE_VECTOR_PASSWORD=difyai123456 -OCEANBASE_VECTOR_DATABASE=test -OCEANBASE_CLUSTER_NAME=difyai -OCEANBASE_MEMORY_LIMIT=6G - -# Upstash Vector configuration, only available when VECTOR_STORE is `upstash` -UPSTASH_VECTOR_URL=https://xxx-vector.upstash.io -UPSTASH_VECTOR_TOKEN=dify - -# ------------------------------ -# Knowledge Configuration -# ------------------------------ - -# Upload file size limit, default 15M. -UPLOAD_FILE_SIZE_LIMIT=15 - -# The maximum number of files that can be uploaded at a time, default 5. -UPLOAD_FILE_BATCH_LIMIT=5 - -# ETL type, support: `dify`, `Unstructured` -# `dify` Dify's proprietary file extraction scheme -# `Unstructured` Unstructured.io file extraction scheme -ETL_TYPE=dify - -# Unstructured API path and API key, needs to be configured when ETL_TYPE is Unstructured -# Or using Unstructured for document extractor node for pptx. -# For example: http://unstructured:8000/general/v0/general -UNSTRUCTURED_API_URL= -UNSTRUCTURED_API_KEY= -SCARF_NO_ANALYTICS=true - -# ------------------------------ -# Model Configuration -# ------------------------------ - -# The maximum number of tokens allowed for prompt generation. -# This setting controls the upper limit of tokens that can be used by the LLM -# when generating a prompt in the prompt generation tool. -# Default: 512 tokens. -PROMPT_GENERATION_MAX_TOKENS=512 - -# The maximum number of tokens allowed for code generation. -# This setting controls the upper limit of tokens that can be used by the LLM -# when generating code in the code generation tool. -# Default: 1024 tokens. -CODE_GENERATION_MAX_TOKENS=1024 - -# ------------------------------ -# Multi-modal Configuration -# ------------------------------ - -# The format of the image/video/audio/document sent when the multi-modal model is input, -# the default is base64, optional url. -# The delay of the call in url mode will be lower than that in base64 mode. -# It is generally recommended to use the more compatible base64 mode. -# If configured as url, you need to configure FILES_URL as an externally accessible address so that the multi-modal model can access the image/video/audio/document. -MULTIMODAL_SEND_FORMAT=base64 -# Upload image file size limit, default 10M. -UPLOAD_IMAGE_FILE_SIZE_LIMIT=10 -# Upload video file size limit, default 100M. -UPLOAD_VIDEO_FILE_SIZE_LIMIT=100 -# Upload audio file size limit, default 50M. -UPLOAD_AUDIO_FILE_SIZE_LIMIT=50 - -# ------------------------------ -# Sentry Configuration -# Used for application monitoring and error log tracking. -# ------------------------------ -SENTRY_DSN= - -# API Service Sentry DSN address, default is empty, when empty, -# all monitoring information is not reported to Sentry. -# If not set, Sentry error reporting will be disabled. -API_SENTRY_DSN= -# API Service The reporting ratio of Sentry events, if it is 0.01, it is 1%. -API_SENTRY_TRACES_SAMPLE_RATE=1.0 -# API Service The reporting ratio of Sentry profiles, if it is 0.01, it is 1%. -API_SENTRY_PROFILES_SAMPLE_RATE=1.0 - -# Web Service Sentry DSN address, default is empty, when empty, -# all monitoring information is not reported to Sentry. -# If not set, Sentry error reporting will be disabled. -WEB_SENTRY_DSN= - -# ------------------------------ -# Notion Integration Configuration -# Variables can be obtained by applying for Notion integration: https://www.notion.so/my-integrations -# ------------------------------ - -# Configure as "public" or "internal". -# Since Notion's OAuth redirect URL only supports HTTPS, -# if deploying locally, please use Notion's internal integration. -NOTION_INTEGRATION_TYPE=public -# Notion OAuth client secret (used for public integration type) -NOTION_CLIENT_SECRET= -# Notion OAuth client id (used for public integration type) -NOTION_CLIENT_ID= -# Notion internal integration secret. -# If the value of NOTION_INTEGRATION_TYPE is "internal", -# you need to configure this variable. -NOTION_INTERNAL_SECRET= - -# ------------------------------ -# Mail related configuration -# ------------------------------ - -# Mail type, support: resend, smtp -MAIL_TYPE=resend - -# Default send from email address, if not specified -MAIL_DEFAULT_SEND_FROM= - -# API-Key for the Resend email provider, used when MAIL_TYPE is `resend`. -RESEND_API_URL=https://api.resend.com -RESEND_API_KEY=your-resend-api-key - - -# SMTP server configuration, used when MAIL_TYPE is `smtp` -SMTP_SERVER= -SMTP_PORT=465 -SMTP_USERNAME= -SMTP_PASSWORD= -SMTP_USE_TLS=true -SMTP_OPPORTUNISTIC_TLS=false - -# ------------------------------ -# Others Configuration -# ------------------------------ - -# Maximum length of segmentation tokens for indexing -INDEXING_MAX_SEGMENTATION_TOKENS_LENGTH=4000 - -# Member invitation link valid time (hours), -# Default: 72. -INVITE_EXPIRY_HOURS=72 - -# Reset password token valid time (minutes), -RESET_PASSWORD_TOKEN_EXPIRY_MINUTES=5 - -# The sandbox service endpoint. -CODE_EXECUTION_ENDPOINT=http://sandbox:8194 -CODE_EXECUTION_API_KEY=dify-sandbox -CODE_MAX_NUMBER=9223372036854775807 -CODE_MIN_NUMBER=-9223372036854775808 -CODE_MAX_DEPTH=5 -CODE_MAX_PRECISION=20 -CODE_MAX_STRING_LENGTH=80000 -CODE_MAX_STRING_ARRAY_LENGTH=30 -CODE_MAX_OBJECT_ARRAY_LENGTH=30 -CODE_MAX_NUMBER_ARRAY_LENGTH=1000 -CODE_EXECUTION_CONNECT_TIMEOUT=10 -CODE_EXECUTION_READ_TIMEOUT=60 -CODE_EXECUTION_WRITE_TIMEOUT=10 -TEMPLATE_TRANSFORM_MAX_LENGTH=80000 - -# Workflow runtime configuration -WORKFLOW_MAX_EXECUTION_STEPS=500 -WORKFLOW_MAX_EXECUTION_TIME=1200 -WORKFLOW_CALL_MAX_DEPTH=5 -MAX_VARIABLE_SIZE=204800 -WORKFLOW_PARALLEL_DEPTH_LIMIT=3 -WORKFLOW_FILE_UPLOAD_LIMIT=10 - -# HTTP request node in workflow configuration -HTTP_REQUEST_NODE_MAX_BINARY_SIZE=10485760 -HTTP_REQUEST_NODE_MAX_TEXT_SIZE=1048576 - -# SSRF Proxy server HTTP URL -SSRF_PROXY_HTTP_URL=http://ssrf_proxy:3128 -# SSRF Proxy server HTTPS URL -SSRF_PROXY_HTTPS_URL=http://ssrf_proxy:3128 - -# ------------------------------ -# Environment Variables for web Service -# ------------------------------ - -# The timeout for the text generation in millisecond -TEXT_GENERATION_TIMEOUT_MS=60000 - -# ------------------------------ -# Environment Variables for db Service -# ------------------------------ - -PGUSER=${DB_USERNAME} -# The password for the default postgres user. -POSTGRES_PASSWORD=${DB_PASSWORD} -# The name of the default postgres database. -POSTGRES_DB=${DB_DATABASE} -# postgres data directory -PGDATA=/var/lib/postgresql/data/pgdata - -# ------------------------------ -# Environment Variables for sandbox Service -# ------------------------------ - -# The API key for the sandbox service -SANDBOX_API_KEY=dify-sandbox -# The mode in which the Gin framework runs -SANDBOX_GIN_MODE=release -# The timeout for the worker in seconds -SANDBOX_WORKER_TIMEOUT=15 -# Enable network for the sandbox service -SANDBOX_ENABLE_NETWORK=true -# HTTP proxy URL for SSRF protection -SANDBOX_HTTP_PROXY=http://ssrf_proxy:3128 -# HTTPS proxy URL for SSRF protection -SANDBOX_HTTPS_PROXY=http://ssrf_proxy:3128 -# The port on which the sandbox service runs -SANDBOX_PORT=8194 - -# ------------------------------ -# Environment Variables for weaviate Service -# (only used when VECTOR_STORE is weaviate) -# ------------------------------ -WEAVIATE_PERSISTENCE_DATA_PATH=/var/lib/weaviate -WEAVIATE_QUERY_DEFAULTS_LIMIT=25 -WEAVIATE_AUTHENTICATION_ANONYMOUS_ACCESS_ENABLED=true -WEAVIATE_DEFAULT_VECTORIZER_MODULE=none -WEAVIATE_CLUSTER_HOSTNAME=node1 -WEAVIATE_AUTHENTICATION_APIKEY_ENABLED=true -WEAVIATE_AUTHENTICATION_APIKEY_ALLOWED_KEYS=WVF5YThaHlkYwhGUSmCRgsX3tD5ngdN8pkih -WEAVIATE_AUTHENTICATION_APIKEY_USERS=hello@dify.ai -WEAVIATE_AUTHORIZATION_ADMINLIST_ENABLED=true -WEAVIATE_AUTHORIZATION_ADMINLIST_USERS=hello@dify.ai - -# ------------------------------ -# Environment Variables for Chroma -# (only used when VECTOR_STORE is chroma) -# ------------------------------ - -# Authentication credentials for Chroma server -CHROMA_SERVER_AUTHN_CREDENTIALS=difyai123456 -# Authentication provider for Chroma server -CHROMA_SERVER_AUTHN_PROVIDER=chromadb.auth.token_authn.TokenAuthenticationServerProvider -# Persistence setting for Chroma server -CHROMA_IS_PERSISTENT=TRUE - -# ------------------------------ -# Environment Variables for Oracle Service -# (only used when VECTOR_STORE is Oracle) -# ------------------------------ -ORACLE_PWD=Dify123456 -ORACLE_CHARACTERSET=AL32UTF8 - -# ------------------------------ -# Environment Variables for milvus Service -# (only used when VECTOR_STORE is milvus) -# ------------------------------ -# ETCD configuration for auto compaction mode -ETCD_AUTO_COMPACTION_MODE=revision -# ETCD configuration for auto compaction retention in terms of number of revisions -ETCD_AUTO_COMPACTION_RETENTION=1000 -# ETCD configuration for backend quota in bytes -ETCD_QUOTA_BACKEND_BYTES=4294967296 -# ETCD configuration for the number of changes before triggering a snapshot -ETCD_SNAPSHOT_COUNT=50000 -# MinIO access key for authentication -MINIO_ACCESS_KEY=minioadmin -# MinIO secret key for authentication -MINIO_SECRET_KEY=minioadmin -# ETCD service endpoints -ETCD_ENDPOINTS=etcd:2379 -# MinIO service address -MINIO_ADDRESS=minio:9000 -# Enable or disable security authorization -MILVUS_AUTHORIZATION_ENABLED=true - -# ------------------------------ -# Environment Variables for pgvector / pgvector-rs Service -# (only used when VECTOR_STORE is pgvector / pgvector-rs) -# ------------------------------ -PGVECTOR_PGUSER=postgres -# The password for the default postgres user. -PGVECTOR_POSTGRES_PASSWORD=difyai123456 -# The name of the default postgres database. -PGVECTOR_POSTGRES_DB=dify -# postgres data directory -PGVECTOR_PGDATA=/var/lib/postgresql/data/pgdata - -# ------------------------------ -# Environment Variables for opensearch -# (only used when VECTOR_STORE is opensearch) -# ------------------------------ -OPENSEARCH_DISCOVERY_TYPE=single-node -OPENSEARCH_BOOTSTRAP_MEMORY_LOCK=true -OPENSEARCH_JAVA_OPTS_MIN=512m -OPENSEARCH_JAVA_OPTS_MAX=1024m -OPENSEARCH_INITIAL_ADMIN_PASSWORD=Qazwsxedc!@#123 -OPENSEARCH_MEMLOCK_SOFT=-1 -OPENSEARCH_MEMLOCK_HARD=-1 -OPENSEARCH_NOFILE_SOFT=65536 -OPENSEARCH_NOFILE_HARD=65536 - -# ------------------------------ -# Environment Variables for Nginx reverse proxy -# ------------------------------ -NGINX_SERVER_NAME=_ -NGINX_HTTPS_ENABLED=false -# HTTP port -NGINX_PORT=80 -# SSL settings are only applied when HTTPS_ENABLED is true -NGINX_SSL_PORT=443 -# if HTTPS_ENABLED is true, you're required to add your own SSL certificates/keys to the `./nginx/ssl` directory -# and modify the env vars below accordingly. -NGINX_SSL_CERT_FILENAME=dify.crt -NGINX_SSL_CERT_KEY_FILENAME=dify.key -NGINX_SSL_PROTOCOLS=TLSv1.1 TLSv1.2 TLSv1.3 - -# Nginx performance tuning -NGINX_WORKER_PROCESSES=auto -NGINX_CLIENT_MAX_BODY_SIZE=15M -NGINX_KEEPALIVE_TIMEOUT=65 - -# Proxy settings -NGINX_PROXY_READ_TIMEOUT=3600s -NGINX_PROXY_SEND_TIMEOUT=3600s - -# Set true to accept requests for /.well-known/acme-challenge/ -NGINX_ENABLE_CERTBOT_CHALLENGE=false - -# ------------------------------ -# Certbot Configuration -# ------------------------------ - -# Email address (required to get certificates from Let's Encrypt) -CERTBOT_EMAIL=your_email@example.com - -# Domain name -CERTBOT_DOMAIN=your_domain.com - -# certbot command options -# i.e: --force-renewal --dry-run --test-cert --debug -CERTBOT_OPTIONS= - -# ------------------------------ -# Environment Variables for SSRF Proxy -# ------------------------------ -SSRF_HTTP_PORT=3128 -SSRF_COREDUMP_DIR=/var/spool/squid -SSRF_REVERSE_PROXY_PORT=8194 -SSRF_SANDBOX_HOST=sandbox -SSRF_DEFAULT_TIME_OUT=5 -SSRF_DEFAULT_CONNECT_TIME_OUT=5 -SSRF_DEFAULT_READ_TIME_OUT=5 -SSRF_DEFAULT_WRITE_TIME_OUT=5 - -# ------------------------------ -# docker env var for specifying vector db type at startup -# (based on the vector db type, the corresponding docker -# compose profile will be used) -# if you want to use unstructured, add ',unstructured' to the end -# ------------------------------ -COMPOSE_PROFILES=${VECTOR_STORE:-weaviate} - -# ------------------------------ -# Docker Compose Service Expose Host Port Configurations -# ------------------------------ -EXPOSE_NGINX_PORT=80 -EXPOSE_NGINX_SSL_PORT=443 - -# ---------------------------------------------------------------------------- -# ModelProvider & Tool Position Configuration -# Used to specify the model providers and tools that can be used in the app. -# ---------------------------------------------------------------------------- - -# Pin, include, and exclude tools -# Use comma-separated values with no spaces between items. -# Example: POSITION_TOOL_PINS=bing,google -POSITION_TOOL_PINS= -POSITION_TOOL_INCLUDES= -POSITION_TOOL_EXCLUDES= - -# Pin, include, and exclude model providers -# Use comma-separated values with no spaces between items. -# Example: POSITION_PROVIDER_PINS=openai,openllm -POSITION_PROVIDER_PINS= -POSITION_PROVIDER_INCLUDES= -POSITION_PROVIDER_EXCLUDES= - -# CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -CSP_WHITELIST= - -# Enable or disable create tidb service job -CREATE_TIDB_SERVICE_JOB_ENABLED=false - -# Maximum number of submitted thread count in a ThreadPool for parallel node execution -MAX_SUBMIT_COUNT=100 - -# The maximum number of top-k value for RAG. -TOP_K_MAX_VALUE=10 - -# ------------------------------ -# Plugin Daemon Configuration -# ------------------------------ - -DB_PLUGIN_DATABASE=dify_plugin -EXPOSE_PLUGIN_DAEMON_PORT=5002 -PLUGIN_DAEMON_PORT=5002 -PLUGIN_DAEMON_KEY=lYkiYYT6owG+71oLerGzA7GXCgOT++6ovaezWAjpCjf+Sjc3ZtU+qUEi -PLUGIN_DAEMON_URL=http://plugin_daemon:5002 -PLUGIN_MAX_PACKAGE_SIZE=52428800 -PLUGIN_PPROF_ENABLED=false - -PLUGIN_DEBUGGING_HOST=0.0.0.0 -PLUGIN_DEBUGGING_PORT=5003 -EXPOSE_PLUGIN_DEBUGGING_HOST=localhost -EXPOSE_PLUGIN_DEBUGGING_PORT=5003 - -PLUGIN_DIFY_INNER_API_KEY=QaHbTe77CtuXmsfyhR7+vRjI/+XbV1AaFy691iy+kGDv2Jvy0/eAh8Y1 -PLUGIN_DIFY_INNER_API_URL=http://api:5001 - -ENDPOINT_URL_TEMPLATE=http://localhost/e/{hook_id} - -MARKETPLACE_ENABLED=true -MARKETPLACE_API_URL=https://marketplace.dify.ai - -FORCE_VERIFYING_SIGNATURE=true diff --git a/apps/dify/1.0.0/envs/global.env b/apps/dify/1.0.0/envs/global.env deleted file mode 100644 index e10989fe4..000000000 --- a/apps/dify/1.0.0/envs/global.env +++ /dev/null @@ -1,2 +0,0 @@ -# copyright© 2024 XinJiang Ms Studio -TZ=Asia/Shanghai diff --git a/apps/dify/1.0.0/scripts/init.sh b/apps/dify/1.0.0/scripts/init.sh deleted file mode 100644 index 085059fcc..000000000 --- a/apps/dify/1.0.0/scripts/init.sh +++ /dev/null @@ -1,36 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - # setup-1 add default values - CURRENT_DIR=$(pwd) - sed -i '/^ENV_FILE=/d' .env - sed -i '/^GLOBAL_ENV_FILE=/d' .env - echo "ENV_FILE=${CURRENT_DIR}/.env" >> .env - echo "GLOBAL_ENV_FILE=${CURRENT_DIR}/envs/global.env" >> .env - echo "APP_ENV_FILE=${CURRENT_DIR}/envs/dify.env" >> .env - - # setup-2 update dir permissions - mkdir -p "$DIFY_ROOT_PATH" - - cp -r conf/. "$DIFY_ROOT_PATH/" - - # setup-3 sync environment variables - env_source="envs/dify.env" - if [ -f "$env_source" ]; then - while IFS='=' read -r key value; do - if [[ -z "$key" || "$key" =~ ^# ]]; then - continue - fi - if ! grep -q "^$key=" .env; then - echo "$key=$value" >> .env - fi - done < "$env_source" - fi - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/dify/1.0.0/scripts/uninstall.sh b/apps/dify/1.0.0/scripts/uninstall.sh deleted file mode 100644 index c86c4fbca..000000000 --- a/apps/dify/1.0.0/scripts/uninstall.sh +++ /dev/null @@ -1,10 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/dify/1.0.0/scripts/upgrade.sh b/apps/dify/1.0.0/scripts/upgrade.sh deleted file mode 100644 index ea92b0638..000000000 --- a/apps/dify/1.0.0/scripts/upgrade.sh +++ /dev/null @@ -1,47 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - # setup-1 add default values - CURRENT_DIR=$(pwd) - sed -i '/^ENV_FILE=/d' .env - sed -i '/^GLOBAL_ENV_FILE=/d' .env - echo "ENV_FILE=${CURRENT_DIR}/.env" >> .env - echo "GLOBAL_ENV_FILE=${CURRENT_DIR}/envs/global.env" >> .env - echo "APP_ENV_FILE=${CURRENT_DIR}/envs/dify.env" >> .env - - # setup-2 update dir permissions - mkdir -p "$DIFY_ROOT_PATH" - - if [ -d "conf" ]; then - find conf -type f | while read -r file; do - dest="$DIFY_ROOT_PATH/${file#conf/}" - if [ ! -e "$dest" ]; then - mkdir -p "$(dirname "$dest")" - cp "$file" "$dest" - fi - done - echo "Conf files copied to $DIFY_ROOT_PATH." - else - echo "Warning: conf directory not found." - fi - - # setup-3 sync environment variables - env_source="envs/dify.env" - if [ -f "$env_source" ]; then - while IFS='=' read -r key value; do - if [[ -z "$key" || "$key" =~ ^# ]]; then - continue - fi - if ! grep -q "^$key=" .env; then - echo "$key=$value" >> .env - fi - done < "$env_source" - fi - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/dify/README.md b/apps/dify/README.md deleted file mode 100644 index 80b39160d..000000000 --- a/apps/dify/README.md +++ /dev/null @@ -1,121 +0,0 @@ -# Dify - -Dify 是一个开源的 LLM 应用开发平台。其直观的界面结合了 AI 工作流、RAG 管道、Agent、模型管理、可观测性功能等，让您可以快速从原型到生产 - -![Dify](https://file.lifebus.top/imgs/dify_cover.png) - -![](https://img.shields.io/badge/%E6%96%B0%E7%96%86%E8%90%8C%E6%A3%AE%E8%BD%AF%E4%BB%B6%E5%BC%80%E5%8F%91%E5%B7%A5%E4%BD%9C%E5%AE%A4-%E6%8F%90%E4%BE%9B%E6%8A%80%E6%9C%AF%E6%94%AF%E6%8C%81-blue) - -## 简介 - -### 工作流 - -在画布上构建和测试功能强大的 AI 工作流程，利用以下所有功能以及更多功能 - -### 全面的模型支持 - -与数百种专有/开源 LLMs 以及数十种推理提供商和自托管解决方案无缝集成，涵盖 GPT、Mistral、Llama3 以及任何与 OpenAI API 兼容的模型 - -### Prompt IDE - -用于制作提示、比较模型性能以及向基于聊天的应用程序添加其他功能（如文本转语音）的直观界面 - -### RAG Pipeline - -广泛的 RAG 功能，涵盖从文档摄入到检索的所有内容，支持从 PDF、PPT 和其他常见文档格式中提取文本的开箱即用的支持 - -### Agent 智能体 - -您可以基于 LLM 函数调用或 ReAct 定义 Agent，并为 Agent 添加预构建或自定义工具。Dify 为 AI Agent -提供了50多种内置工具，如谷歌搜索、DALL·E、Stable Diffusion 和 WolframAlpha 等 - -### LLMOps - -随时间监视和分析应用程序日志和性能。您可以根据生产数据和标注持续改进提示、数据集和模型 - -### 后端即服务 - -所有 Dify 的功能都带有相应的 API，因此您可以轻松地将 Dify 集成到自己的业务逻辑中 - -## 功能比较 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
功能Dify.AILangChainFlowiseOpenAI Assistant API
编程方法API + 应用程序导向Python 代码应用程序导向API 导向
支持的 LLMs丰富多样丰富多样丰富多样仅限 OpenAI
RAG引擎✅✅✅✅
Agent✅✅❌✅
工作流✅❌✅❌
可观测性✅✅❌❌
企业功能（SSO/访问控制）✅❌❌❌
本地部署✅✅✅❌
- -## 安装说明 - -在安装 Dify 之前，请确保您的机器满足以下最低系统要求： - -+ CPU >= 2 Core -+ RAM >= 4 GiB - -## 修改配置 - -应用安装后，如有需要的配置，请修改应用目录下的 `.env` 文件 - ---- - -![Ms Studio](https://file.lifebus.top/imgs/ms_blank_001.png) diff --git a/apps/dify/data.yml b/apps/dify/data.yml deleted file mode 100644 index 5f2192304..000000000 --- a/apps/dify/data.yml +++ /dev/null @@ -1,14 +0,0 @@ -additionalProperties: - key: dify - name: Dify - tags: - - WebSite - - Local - shortDescZh: Dify 是一个开源的 LLM 应用开发平台 - shortDescEn: Dify is an open-source LLM application development platform - type: website - crossVersionUpdate: true - limit: 0 - website: https://dify.ai/ - github: https://github.com/langgenius/dify/ - document: https://docs.dify.ai/ diff --git a/apps/dify/logo.png b/apps/dify/logo.png deleted file mode 100644 index 82eaea8a569d693bcb79e0fbe45ab7ce5522213e..0000000000000000000000000000000000000000 GIT binary patch literal 0 KcmV+b0RR6000031 literal 42235 zcmVb}$;($HB8nuP?vWlU zTmnK2NhCNlsCkTZG=Z21iFP#Vg$@@XD#pQUGCK8E6A~Ap@%tRuQNF)Z3gqcVr5{bkBk}wmAL?V$GKoVvmkw_#G14zP5 zBoc{4VgN~)i9{liNDLqeGm%In5{UsMVI~rZL?SVOB+Nu2kw_#4kc62?Boc|l0Fp2h zi9{li7(fzcB9TZW5(7xWOe7MCL}CC*n2AIpkw^?62{VyMBoc`MBw;2Ji9{kXfF#UB zB9TZW29SiANF)-8!~l{o6NyA3kr+S{W+IVDBoYHi!b~I*i9})mNtlU5B9TZ8APF;( zNF)-80VH825{X12F@Pk@L?V$$BnFU#nMfoOiNpYsFcXPHB9RzC5@sTiNF)*iNWx4c z5{X1&07;mML?V$$3?KGCK8E6A~Ap@%tRuQNF)Z3gqcVr5{bkBk}wmA zL?V$GKoVvmkw_#G14zP5Boc{4VgN~)i9{liNDLqeGm%In5{UsMVI~rZL?SVOB+Nu2 zkw_#4kc62?Boc|l0Fp2hi9{li7(fzcB9TZW5(7xWOe7MCL}CC*n2AIpkw^?62{VyM zBoc`MBw;2Ji9{kXfF#UBB9TZW29SiANF)-8!~l{o6NyA3kr+S{W+IVDBoYI-e!Dx6 z@bNX@`b!@#$5{U(u_jTyhS;*9$tM!fyMn#EEGg=XtxnW|hy(=XL}o{)uc~dgUGF{- zP5VxN2uoh4ZQYh>huts^_Me^8q1mOJl(1cXeh}sD64dhS;?~+Pw@Hgz}e@V8;3mn3lVCiE- zQXPVc+wj_~bqCJ?mm8iAFB`bLb2t@61gbv^gx&YE5@snuy}mki;QM~z|Gxk2?|u6} z{uls!3<2N%!*6)i`yi1>+*BlCo+vb7f=`+hsx(J>jVjF%GW60yQg7{(AO=TeZmG^K z!fa_){edFQi5J))>rKK8`aedPn`+ppx@jt^^{B&t}U z`%5GTeNm-T|4`p}qpXnT+V)t6@7U=G?(bjCcX?ftZAU{D)ru z7vBm*AA9%P-}Lu>;Uga~FJ_5E!bd916UEoOc2$@gW=?fTr>-)gm}aq6aP!Qvc1~9- zH!Nn^jdn1oqaALmRG~1>PbUoe-BXxYEXvFORUbQjCRs-YWGFMjAf zKlV32{JyvSDkKsK7fF~WiWk22mp<+d%&w zRpx->(NG@(v#fr(sAk#8KC8YNR(=p;WOqTr6xRj`Q?*-eOgvBNEB~=~z3okZ_ZL3$ z{$E3cxBt`cdDS~0kw_engn6QP;cGwoaSUXn9)#5)*@1mqX=1>_Tk6hBbIAn;Ri@X! z9qLbBN4I@;-krxBCrt1if8u_dIZR#WHtAZzoV@#VUlio??vdKYibu z{>CqS!bHel#5{HvchMdj^$6>EoRrs=1COcRN6RQ&T@(d8q!1<Pe%JW({lT!4Yx^T-kSqWm(rjwnr$#s*cd-GQ`im3bJkN%WEB*+Y=}990K8 zeOb)10|5+79qjq;Cd~8CNGr^a(v#1?sza?XW5SH*FWt|_s}nTw;-Mcz^!ES#dtUW} zAAI+Hf9FH*{jpC%BJmJI66T3Q6Q-w>%&8o3%L)f7>Zy}goS?ok8UZNkTTBGYx=d!8 zy@<-}nM~d5zz7py*E}YwMEBYjVInW%yvS@3<^+tg#t74>T1}XmfJgeV5+=t_-}lDv zc-!~C?xpvq**5VILK5bQ;)Q?hqaXKJDkLT6gp)!g%-vCdc$!LbzCC;AH>agys@$#^ zs!Nz#3Q%PT2&E}Zr;X8h%-v2uuqxCZA-na(WEVN_Kp{*{?m-=li%n%=Kft+<_27f= zdE4Lr(7W$@!}ou8dfO(hK9Vp`6kq+HtfAVBF&agOi;9tbbj7#(j0XF@<`Nc zs}YSfANN$|C7NYoJEF=PtrsoqptvZWAVR_)%mxLHM#%j>#&+0fp(*DOIX{ ziBoNt4*x&j|J|?rj-S5ojj#K;pMC!WkVsrXBw?N?UhvlzldK#Fm0E(ndSi#Qj%@Bc zmP>|Wux9NV#&Sr^>qD%54rbY!XJ;UT3wz5VQ+rMw{aCd=Vd{Hy`pXCt2kO>!S;E9F znJ;aEx=$GKkkx$;+c!Pkp`orsT33EA!&9Z}@vPTdm;)E1E zBcCvLDols8czHvZsOsCipUISC?Y6*uh*jOH&*~HZmc~Gi1{!R4wDa|oBN9!ImG}EL+BWi>(M#559VlC7A9PrU6QWU{|F*~6 z^?SblwfBDD>%aBhZ~dK5zWY&w-AN>FDNfu1!Md)V!esfm zN!INXQ_(O!e>rB3wF=X*B2ejEPhEOtKk%;mUjL8(w^zO*6=&jrG+9n%@|-)Z(YiO?7S?%{T| z8@U{^wCye{PI{kZfX6@O#vlKNZ@u>eFM9dwU$nb$B5{*&?RIw{;p1t)|IdE|1YBlE zSzkSYqZEZR2KWDPUio8{$&x$D&PxmX*i>dq+_S`FPzBodY9qXr85++$ zZiy%#Ra_5Pb*jtrzPaT^9TXF0`;M*85n;lO?~FR&mw(%1@A^H@eD)uC_HXj4Zi9%%_QrQkTuT^kfu$OJDY4d0S!h0I?4g44z!0} zkW1u8NBWVZ=?>7`EPD~c)cx}Nd|;f*GRY1Q=JpOH>-ly#yq1c=Qj$iPOP=2Mqeqrr z+WX&q->d)Pi+|s%A(6NZNR#XpfM?N~L0i};G`V?BKvZNxWUvdoe=cAR?O(2;!F~6p zk*Y?Wa5nE@w+RuCdiNySQN~e-qs&`!fe_A(6OLBw=0^43TE+AsftR%8Nw12&!Z-Wj5OG&25VQZ_Ov}=};=FlEfQ^4|Lw)Ky6K3F26tdDql}t$J?zNu)7^fnuHOe!4@uj5(4;rlEt95^ey+y#L33=cLt}aWtCxJ+ zy+8VrZ@c$9ca%&djzSXViGl+0;ib>60;Q&3JTchPuu2fmH0z1Y!THV2U%uW) z&hQzZ`N&5;=PO_Om*4P?PrmD}r`-LlvDy-eaU@}$IF2GsaYjwAZIdBY(hNLzENMm+ zZ{1Yq{$yM0LW~VF^Da=_wt9qpbvV!+|Dt%@E-q-EMPB(H=c16!ilx=6TmzzQQ9F3s z!!e21_m6eW=cDiW>u>&nd%peNS4CY+B#uE6<`uwR(zJP_87yAt@JD*iI$pD0*?{lb z`G|GXw@T6?WV@`>C$_M`Zg$r!+plKVOM~wigTsxDVAHi{%u-vfOuflXLAYKJjOhF# z?*(49M9U`R=YQ{d>W#1d-hc7QA9>_sAD^*l6PJP{%qxOu{PfcOHJX-8DHeBa7%Zeo zv@zATpOv~LS3%Rvvd7Mr`IhGn8L~j|d)plD)G{Nf&8(xvJ9B@gog?NidHyC*?fj)^ zC#qt!%_CzI*Y?Y|WF<>1@qiIO=g+?K4gcV-r`-Kp2YZr8gh;}?LWt)7ymVh_b{Nl{ zisUrn`@*OK{&`HyE^J=H>cQJ7G;9s-$Ej_m%uc>-%{I`VfB`PSSypty`m6Tav$<&< zDoEyW7*0Fv^xC>Kb;-yQz$)BFeb!yS^JTAl^G`kZ%fI2q1)5AGk}yvdL;(@@NK=Uw zsWjDWV`o0IF0UYFnkAP}RV5@y*%7%RJoW2VrARYW-i~cIY*!xl+-o+ltJE5k{NlFP zZfEu{({QR;6nPNchfp=SyA99Mt5kHTF4?Bz#J;DFI(@`*U+@>+^eu0A*I#|)V;}z+ z+Z|0LERrx!9J@%*uW-i!x0zxCJnFGe_=?xO z;XUuY>#6BQo7j&e%qxJ9G&fAEBFQ7oh_IyPjW|(JCx`%89lNdcI_Lb-T;=AtB0FMN zDcLmXyV+9Bfpe8_b!BGn4X3P5MHdyQW9Ha+F0v6{-|*X+e>~naiwAW}ktx=+-N^Y7 zFMr*ef8dLsf6wP1+jQd2L=xr|!5}vl3#v&Am8N6Lb=#Q9Mhg!z@1Cz5WDD-aOLUy+ zcc^Dv@D0geesM2@jk%0+w_3fqb+047J8r)lErI=u-#%zqC3d^)m(xm^E7Nk!U*dK+ z=)!ZK|B~;0`FFhe&vd$zNC+fhUKIr9#)~-ub|0dn&qJbH!9K4hiewsvWIMv^8;(9YpP0EuK(i?| zIMIc+n>^qNPrdPZ|L7+_@e|Me(=W++%|sVTn5POdf#=rrJ#w4t&#O|wm9#^zGDBe4SB;0!@ATl`{P4YodC$M+2fq0EFZmOl+ezHvNWwg2coUN4(jL-O=iU-@ zPkpL#D5k`A&+SF_R{ykfFXS>9bxgZmk|e+FJtEAjacAK!4gh64zw3L`%n z;p{V5`S#SSf2}{~*-@4|=23CIspoywJ>T+#r{4X{PLqi{7)h8Xk67IdOc%Cvbzyc* zxz;=zk|@FUhSOx{-a=B_0PBa`g6jgVup1p3n|3t0b}$pWDcUS*Ws%A5nIl}=r!7B1 zX1?l^jqX~y(u1!q2@$)Wi$|7PUHazhdhoDUeCJz!=m}4~JHzQE43aQU8XM-!V}cvl z+TF7rX-Wnp;jwD6Za4+?gYHD>6fi+#a#p-J#<5IMlbvG?v0Zt6O!^Kk$o;sgcR$%F zmbgQagn6PM((5Gqu~c32tTDOzCf4p6O3J4i>>9X86c9gK>`Kx>LRT!{^ITya&tKctTM}Qf$Dsx z9oeC3^N!2WmW++s*(_s^sT!`gOtH|2ao@Zpxlc>i^WT2{^S=IxPs{kTcRG?VPZ#TN zwwPk|%pCbjv%?E62@RNRbw0=9%6g66jJp^vkcX^~%Uq_%{!yDF&Dio};>vb85p5o{ z86)-U74e8H%p4uZN$g4?W;Yjm6Y`%bC(ABDYBf1Fm$^A_sV{Cj`CwC)8*c)y{I0kB zK$7O2jU>!d2Sw@)V>|2)G1XU^)J(Gwk`_RT^Xd?RZ<@uSer{MzOFFBpr)-@%M;cfV z4aq@UPCuMXSV!oQPisS39#e(O4}CgaESCLUNxXtxQ*6JB$K?&l5{1E7*z_@eDJgw^ z<#)a1`=9u<8@W#N4n-2?iNdw=9p*IAglh}uG`)HUnN;#e$Eikh!%TS(c)GbQOs>Y+A%u`0=6KQr_)TRx25{%KIdD0`z9$6IwmZ$ofHLFbq6-DfI zVk6dU_n6FaTbD^BMpsuEQ}7IIy|!-yX5R&aLeH7oyZ{KG&+f4@V;>#+Fc|^*Q;og( zQpYU1Nw7-fg`w{Pvh+4CK~+e6J5YXcMc>^y)b#@5fA+^-@UriJ)MwrG88%nqp^7BT zQ->r?WaA-;C_5$B1-AjyWFb9gshMXxrc&-C(+_B1Z!*ldK_;#Wyf^`I*x~bn^;6`v z<>z)uqC4XlDKL@d@ z=P@Y|tDBwL#1@MTTy*(uv=(BjQYtPsiFj1>_Cbx^7pbGS9Vkml(#V#+dY`rcF~v?; z%rC0IBOmv~uY2OtZlr1U4nY#;iNYIynZ>lJOEoq#i2Sk?9|TXp?OU6&aemFy7v(9suMj^rdxtcS>7;~&#~tjYfY>2vVJcJ$TCuv zqTJ}C6$NYudetD?FdM;tX((sk{5RkHy-$4FjSSX)2OtUagh6_kq#*tLr#r9aSurQ( z@2MF%0(tG5{&Yw)RGl@|L_=zO7JA9VT&*;D&h>M~ZYU zwEg2gft=q@G+69@HSq1j2PY^##V`<*y`ETQD&8R5+fHY*la&*fZ!D1_OWC%XXnn-1 z|JGanPLk$BA4!;}3i4G{P4^s8irUmH6KuofIsNp!XUTAZ?Ig)$)T9}jV;O07`=CkF zsiTl{*j89U{DQKlj&>Vk%maze|?qiPIQawz}|fuY2Qrf9St?+Ku0& zvnC!INW#1d7$8kCh7+_v=qNL~s!S8)hRU;ju^m*|(aq+PJNb14D$_LqS2?@Ai%Cp; z?i?_Z>A(hfR*$T<$eCT(@VgPxa@&jbs;vR#uu{ZG8`p6?lGDscsogn6QHr`2=-0GU~iEp@r3wJQz}_gm&!iU`Y| z>$RkPLAOc3)&wl!j*TvPMrPSzIo`|GAEK9md8E?OS<9VMn9bfQ9c@H46guH}jYK)Q z{AKNTYuPzU&UzYRHmn76hu%pbpImL0%)`rk-8(~0!T5a2P#k1MUYLyulj8665M?8^z z7)aS@`rrTl=j3)^4?!eho+^C)5ebG+T{XAsLSu`HXU(OO zG|6wzId(|7L{31_!Og{#@;-FkZU&RNU%z@(HgwWfhhlKu#Wh3<- zCuHI7qI(S5AR|XtM)s3N z%(Jp`vVU|X^V%nJZbGZfes`VDl|Lj$v>nlfI`D%sIN3IE!Pf*?k6kPg!&73wQwAmw z5&S9yvHJBam!e%ryjKZ__y?SdL^`&OFA3Igce;#AmQHn3hb;NYlb(L#8=myEXI%?= zmAGO^!aP~n-9g%w&=hMjc?2ti1fVSoPJI!Xur#@kW}v`21n=HMa3h{N46K{zE-;0@ zS_G%B;&0hzt&6_G1x<3JLUUAoZPwKBx(W8Y95avlt*y6P=Pq^rkStvyL#E~I4y(bl z!1nPWq3VDpyXcut?7Gv2!Jqt^SA2VLDRIS+gn6o93P})LG|2l|n&nl^YaZr~4hOT& zC(G(?ZJ29y2t8lX9{y`hv%$7puIZHgK9TB|RHkI^%QFc}!Rs=7og$5(hwXk&kLAZO zlCKbvRD`p%lLNQuLO363+U$cZ^d&MJ3mIz`NQ{o|cQj!QE=DW&XoHWVym&|_+ zQF`|jnr1uqUgt8sfqK7D6uEBn6udc!+c3HfgKkCU$75nBv>88Fw-NM+xWjec$`ok~ zhqmKKM_n4F=k@`aVY%ZCs|+YpN!&2QdP&ielM!Y5q-T8Yw>mx-%_B+L_q zAPk{4RVHV1W|Ia19}=8c0m%Q+vKObC5ToEK;o-lm%SYoo;p>;^ykWiX6FxleXFAHxe zOSgSRnp?47SJdG~I{Tg8}uBOoPGufnJF4{FNp2EteH|f%F^+wE#**|U=4R- zkgn>v`}aTRPe18%ZamS+lDHyB!aQ+!DslM_1}fC%_td6ITi@CRX?j819iK9 zL#@+*9iYk0APDU6cUlk8UiT}u>A~7gQrl|yrx%IK$^zjBuH-{l-_vY0_!=;)uk|Z znhwV|&*c|Lv5Grs==zxOeKd&!Dv^Kz0hXaUT}im?KN7* z79ZA8mLLi0uxw?ym(Jcb5m|0|!J^;ypf9GLFL~iTuMLVNP8>;?CyL128kuOLIn7N4 z+6cB06%j&NcEU0ktD0w?4K7mS{v2f*>E0Xgc7{U1}2K`CP?`eq{MwB(vUh>!zp{xiV^Mg}%b-VD^Y& z;XeLeH}iW?jD!Q6l?2uY_o2@wY{~Pwsa+yd79vdmF1DDQYZYbr{8$d-M{ZS z&kCwaoG6kouKg_UO<}_o{L>)TMBhYXT)4NwX ztjl!P&ct;#V28dU#O7Ap`R&^L`fab!J6`BSsIFQVeP^E$Gp{nQQki002#?0*EmeJX z-jdoiUe0*KqA{7O{BBz~*?U5DazRyT`t{P+{DZ&yyPkgIQBIYK6Gal{slrG=j~ty- zr8ae8hal}ZZQ=}|!-}?CPhB2Knp6VEyBOpe=URCwsO?4N-KamNT)*`$54yHYl_6xQ zz)sp}M^pY99EZ%SfY%*PV#-Xb@;CjgL(grIWwcIGZ!?CrJKo06LH>HZ>)eCKsY+9& zRKUbuR6hMnzUH1+2303c5J{M)j)*j!Yc_p=G@%XruK5yLpmEZ}?Z6(I-Tf>B(qt83 z36|%oOn!%+$_(0uM#dH+%xm&EqvohuwD+v4CDY1~O}_%_{eSrX7a>3FZSN0WxjS` zdFIB((#TEJ<{q4~VRbIS^p{TPExk0UHtJbFFFDFD`hBu3n3RYdB;)lRkX+W|%w%5< ziUbzLv|{V+V;PX8jt6VZrylWcs8UB&9{Q;jcl|dlFBM<DhW$Lla-rAqi5jVUzM1s>S6iZ=S}@KP5_p) zmixpg#7;SKq@T9Ijw&6NHe`u*)bofgQkCJ0Ly%z1 z&FntP*^MuFUJ~XNK@#Sv!Wpc4YExgcYO|51r#5wkK^oQ_MP`y@ryYSD$DhbKhu7l~ z;+h}%edyS;r0Vt3w4&waW>W?NL_4~43&zwMYhwqfi+UPpvs^W27VZhmog2zlkW092 zmrIt0AVE1I`HE5Vy%DIYgSx$G%LLma%ivLWOt3~-dU15uYmfWVuf6AaPP2&j{G*{0Jrfm7Fj(~o(% z*iy5D*rq$Jz&0vDM-{S>oRQ2SdD>cw;;2i91e?>%2w9>!Mv%m<%Ba||R6TG5!R&g% z9&3W#;{n?as{#gS^SRR$&+C5q*S_ql{VR!6LK5bQ!YahhwLR(3QI`8i6IXjCl2|WE zo8Ge9+j2RixuBV5StUkYI@L$SO+e@dQIB3!A_NVLk?E$E^OFX|Wy>f(SyTy{E@|0eMFW{SG^@8;k^WX9VpMeUs)ZUO}gcsKk>`H_MR_@b0$s! zNth>&hy+2KGd;z#Nwj25w9a;6k@}S7BnxiFo9!q_)kRT(hzINJIzrmW=`oh~au9Q+ zQw15N>Xsj1%VX6kveI6(otAMSOEs?;58=MuG;V|KL}IGZ`|@QkdRcD&b>c|EJW=S~9U>Am*Su_-gz7Ip(Uo=b zpjD%^xu>S6e!bR0=t<&J#Iyu8!1hkB2_BTHg@B}?IRA9iDX8)xv+Ddh$!|uBy)GOM zv)6kHkzH_2sD4`}acxKJMAB84&h}lh&uH4L{o=chczxYFUkS02MU&Als}9>QiOkE1 zsVDqQQe~bzk}yvgR85amNzJHAHaJ(}ankjPrx3N;Gy+bi>GPQuXCM|%k344}e(VsN z38BZ8Z|gt79EHv!w=Hl;bFI4WWFm;IL-6V)1AF-+$!d7D!<)_!OfFM&3NfxEw@zi2 zt;umc>vcb{dZhkbXI-Bx>n9&M-FS76gt!Y$uueHgRRS2No)+Dxr!3>jm%}gnx|h84 zF~8%k&lo73xD80cJW+7^3Zl3LCxZlOvoN(uW*aR-oc0{~kSniS1*=I^cb)`kx;Kb= z4I~IJS5Fpu)o_(bZa>6dhy2F%p+rY%tf$+fZnXZApCQXs)Z7%POQTS^`BRc8d2wQm zLc?ZsZS`T@djyn|4kMexW1Y}O3-ZdfykMRHvIB1wibrq}Q5Nr4*?%#|Jqnp4XIhKC}O9Mq&^)?+$kx!I1B=#eZ)q9my%`-;*_=n*9_wfoekf8L8b*%G%2NtmY#{vKb) zyO|qINv?zJsm+K`0j#RjrpirasnQ~{xAppbI;F8wH++wG(AnFex`&N#`lm$WAv@Qu*Xu}dJ5D~3p>1_P0O|U(( z#FpPxhTgNY_bXmB%Hh!3OxQ=1`bFT&zxHL%?`2Qi9wcF&C>Y5Z0~l4kWxZ1(a)e{m zCR2Ah(78vX&N=FJlb{t?bnNxr@xEP&c_F&uY~)p<;1i&f!Cf{p_vAeEOGMASXLF+L z%la+qg{||*RH;R*;pm(?I9Z8u)dLn?uIF2HP1qtYXvJqZ+zCb?I%}TG@LXka=&8@F z#eVf^&!l!gAKNFV{Ab?y1J8N#M$yDAMiSG?hX~82-tsuA3gS_1c zLGiriay%=qUqzH$4RS?jV!oHM%Bz(MX#y&BDcjpH1tU4TU2(CgxBN1m!%p4ig#tFX zbyKW5q-82bdCiLn+ani!0T%@b+7xTDb?yUQWqH69#f6PLVZCM|6KvqvqfQ8%xyp*b z9CBHzQsdcw;EVoHuXy6tBMI{gp#>ptiVBzrB?8SXT?M(VEX|=yil&?;5Uk?|sl70L z85!NbRGRD_8KdDL&Mc84P1%GYPkq07PSnX~`lsA!+^jayTK&{jPeGz0J+AV+s5|JW zOVxosnXYRt`Mg~vRNfEXCNsSvy2Q5-)WK^vAR47swI?j9et0A`qAH7153;`VaCR7Y z>!La76J@I_en~0+KKBni?~ex6ByJOuFi#XTmj#I`U6K=W2}pI0)1Rvo13ya#2*@-f z*wUW7=n<nO?UJLu>Cy&eQ>D?>7CCuN5f0s!Ip>fNuY!%KHCLX?Kc*Mz4%{d50Z zzjWeOA_?<~zzbebuQd`9n=Q{Qh`A0{uGJv~#A)(6Wrf~!@^q9Ziuu<-b*kd6X-?Xb zG;vFLdgQD!ATeg%RF|SXTDH^(uq8YlrJ>GAT(cZ!&9yDeoVwmoo~2ydeS=-cfIM_# zK3T3#G>*#Cfef6!axsz^K^J4A-c6d)dRd)m?2t;3Oe$eQwM!_I~1njuT@2%EYjUQG;A z1)F*gd^*{7!t;RaSY`rerxt)%QF!I@VJ_ zj$5YMR(AdUt;Bg=h^aaXlqC$N$+CQns3J-VNeV%bWAXYm`CI~>0py&j6A!k;vuy;Y z)NtpoQJD^bd!Ldjel zl07&9d1Q$`VGqt#q9*WYkIEid`VXT28I7pPsQg!aU9QPI6(nJvIFtah*GE+6!eUh| z&4SHH4B34`?5DK@MVwY$RyEA#HI*|^C%}PAnyp>n^>Yp}v1Yp_*^#zubz$ zN=jEn;ub-oGDo7m2+U;ZunAX?j;WPoj8t=7un)3I%CWM_F3OIXVNsEFIi8~VO0?x_ zvmWta?IWQxS2+c1Ds_3@ruQP!^LT|wQTDF;ZG7feeBC|I>t##a8YE#}A@tV8Q|CIh z-87Kr?|Ib9gRwMmF37{GOYoPTR7F@Wc!3N&rRPNhl4~{9QWL(W6nv8`scSl2!cn0v zZ;ookpb@XQV9iOkvaz9wuBVaMN`M|&ih4>SSyM5#x)$OlsXRfi!;Hz#Bg*bvB~+r8 z_v0u^^oVkc%mzsESVbxBaXo&@GjH73$ey?bNWwf-Y!G8ej)AEb+F*{7^k^lfxtdhr zSY>JEDhWVu8KydtD3@Q!tqrn!F|z7HaGte)LcAM$mXx?Lz)+F55T^cZx2 zMEz(miVRU-BeN#ctl6|3_8fyeB7{nUP{~peL48`wT%>EJZPn{@=h*biAt$+;2#Rv1 zF6X32W+RHy?^s8vsxscoz*C;_?C181C2kFpFi#XRf=`sEZ>sH>X^{s%p!!b-h8e4yULF>tos@%;@vwFHQU-)@@+h?miqO6L1e;p{y@A<@ zMqbFK5u;XG!Ko@=|Av~_klLCc)hDrQEZ(bXou5q@IQKa0vNc!9ROR7i;rw&)<|$nT zxTPqAi=m>7Z^PEHLBw#F%S^NE?M4#j6~HEO21`z;qd3V?oQ60@)h4TxRbtAC__tAD z1EV?_wRuXD2-xmP~X~LBqwM>H2+KLZDN=e1G8-;mh;wH4ODPO%pq4^xg*-V6cGV=S z(_9Cz&Np3!*#Za83fszr|tCLJz zKD_3eYaOrJl{#5xNUKLpq``HryY$?qIc{a!yynV|nlwR^oF+}J02TR(=cI`rnnLBz zn!r)@PGq5r0?U6L)rNu%%G2^keL8i;|n_zAIP`i(w zVrz<0+`l%PdTP?72kk*r&tP4q-iZDHjo`aBe z4zf{$LQ?e9r$elyNehhfENTq}v2{q3*GIbYRu__E3{?}a!){(TdK0&Ale;8BGaorxfG(@sEg-4 zLQR5FlO>6-BZaSg@yq^1uj$0iMH1!}gCM@H>hv!PMWo5VAx@ISxu(&QjZKP1q{vm9 zcfK4jD(-mE68ClmJ7F8nCpskB>P1mjEUWRAE1Ev)=PPeZ)M3i;PDJ1Y66IuyFA9_n zzPdEZ%q43_*{k{Qa5CgXk zWJDR{lS^apw>~!KF>f1^Fi#ZRfhY8U)#RrMgIbt5k3c>0t#!_xx+?RDP^o2xosL23 z+^SJ>uPFk>Y90j;q4dNvTq)I5+|8D?@N&&*3=9@c(N#QJGfD}Sbga0gQa zyJW+tHFF@;A4&DdNX$C&tm$OZCnjeN$+0CPT21v-C0CXxwik0(*0eH_B4_P{?;M(N zz5eX16Z%RL$~PaInhg4l^?Ul5&%W#KPIHNyh$PG_f+1B2(e*ND56p9tyx`1nqFTp^ z1cWuFt1{JU($(Y)9&vihPplX1g1Koz{Zhc&KmV%(8*t^U*JpxWSt*n*Nz<_NK*>CP znIRCv0-iD|e>p`mvLiuMAXS!0L$!p&TRu{~VR2QlSk%-Z)Lb#caz~ z1W&!Wc{=3U6kMP|h*@~l5+iD*E}?%ej=@!!rQT&!nUzY^M9q$8XiAoG zGIC{U6tTCIMOW{)51Cj-gD4iDuU0`c&()0lV*zU9#)h|_~o~w-2>*syp z7e6`ZO5!FX3G;-pMT$CKH&47|GxV;F)GEcq2|V}#m7P&M$Dp3N?3ic+(gYLwPAN^T z5P3A9(r>;dvT?m1pq{touqDd_=szft-_RpDyL)MG*JUkaB`vvUbw^#U=G5-IC79(S z$jYHnme3(fqh2*hHS${(B~}ku`BZFsI>V(CrFYFENvATVCY=`|Tl2_T%>|SS^EM#~ z^NL`EJcsf`gL{W~BgNSv&h`D8s^SD4*ga62A&IhMQpeDa+ftDr+@1Yvh#2)cOJMoA z6Ojmj;5=vEH_-j%Kzl{a{TXUSd9sk@dSjlt$kfD2_Ho9k4Tf3Q4&#}^}r0|q7J!_CEv0sYL}B=Q4pMf4u4QG3l>RK1HM5$z;)yi z*VZwq9Xo#boL0_RZ{ijE&vDsAgOnk#Tt#ubb{CKYs zaw(8SUz(WylkDW%jiO=?@1oGgxGm( z`lQE6TWcnr1Y)P{n0d2mqTFi7YctCJ*w22#?*)Ljjn$U8ETqCbS*Rr;fntO`>Jzrr zsa2P87(TB|q&mwS=OHF*UB^kyx2$-2Pf(wDXo&YCw>CTCOT; zf({X@^qxm*xfeZ8xrZn{=Nk-^Xpe9PO|BFWulWIJ>p+XM8#Kb&>JlVE=Z5IhpY+UU zUF)}yxNIb0o+ya@uch%TeMcVXs78^e>kQGmB z5Gj%p^O^wA3EJ+EChGekm7m`b1TQkwdC}MlS9vm%X-RaPf0lsgN_95!qctNbf|A>F zL7*JLnXA;QQv`RPFjSvCqIB-voPat-Na2o66UFbxZ0w1HcV##VJbXUb;6da42jp@hd%>N`sTUx-(kckiJ;jd$m)2b@?)M|s?erau_@U@ zPy%CW^@0%ujy;MfMWh~cI{{JZzI$b$XLb$9)_WGEuh2*mv>Jx`ylAL?P$bz?z0t)D zwfy+F<;2ZE66T45^uVjglWIg)ka~2F>U8q;$hD_fkDcSx#5fDJNxs62NRwoKL7KFB zw5|zu4s-ciA{NPK&q>^Q#!FvOe_jM2lr!&_|Kz>n24p1XhKMuLjOW*?QWj(Bb#4)L zJ-QjxrNnA40OZIe8elNtdWF1S__uX~(jFN@`iey@DvL3H0AF2agPZ_NG>1=QTH2G`Z z!Y*r=$&io%bbW+oBv7_oT;t}w*7gPpBSYe*F;t7CBB>yg4IFk+9 z4tkD~ifUc@G&}ZTaY|Li%I8ebd8`)g6R+8u_a_-b6=gVSqFUQn38k1uE4iN&#F>w4DdcX>57Qi zyriopb$vZ0IZTj2^2NxJqYVa6``yp}A1Ya(G z631$uMM>O?dAP~F8s~syz2|8&5lqzB1SLme33_LHM3IK7|3#B36Bvn+82tGlj!Lzy z$`Vxi#K{U}H4cd~qEvlEr@syfqB?NNWoy|AG=lW%h{DkYO~w6)8W<^aB-$?+*%$QC zQijR9g-C^Ysu;4}fva{_)G?NriFU4AQ+bP42GwVvjzX1X(#cnyT5*zDMp8_*QW=78 zrj=@x{A+A`FRmU7W|GTIK$yPeN5xgBxWI17eQpF|a#R!2#3UkWM;@)xv}sb9Pf-UZ z5M+5UzdB^e6{RQ53J*NvcAsHmfqs@FgtG zAqK6ogu-GS)j5)0?9IhPg)3Gr9GfCtN59oQwJ6c^UUFrLt$$P;g3!&gid$OqqUh(r zmj{^GD-2v@YEg_>SrHd0%%9(qgHY>I`8a#f$-V#eM8*vb#P@2nMzS*-P zUTELLx=h4egFr!Q~k-z zONmV+VO|kv0xjqb25R23z4T+P5~~(sYZQSEP1Q}3Ah)l+eMiLyM>^@NjTGru}>k{+DL6=&$>+l|)! zW?GHjle{0g;n;%TdMVvY3?WUjR~+0N8?BKP`CA!e`NfMiiF_p9;kgM{gzNL$u-BY) z&y=h8>g0LKTFzzy1)NvHpFx>c!$1aLHjF;hwKyK3j%HMxfMycU4~?g7^H@gF-$L$d zMq@tbG8&X@T+gf5s;3~iS1f4r>AGFk61SDO7wDwp!77ubO+)aUiQIE1O`9@d%gdF= za4ja_`lwL$C#Xj|>xh>P_74Ly>wd@|6|OHvNAHax>O|0)ullq1#gn&5L6XscKJzr(u0(a?1 z&DY2k%QL6?Iq3T!r%tkSuH2VFbS|G@@a znp=I{BBV+7^ z(@hPAP_8r2+SOEB=NM`AZmsin1Y+V#c)KF%=Y+sKX!*Sy%(FzzC{5@2nz5~tG%`~y z>+87+zGfaQ+7AZ>y-G5a;!_Y_{d&~7%XNv!gq#EyWeK(o06}KN0}$x^;GAQS&g%!8 zpSy0O4RXFbOTDSIZqr`PIwTrksK1nE*;|Dq%qs;(o}d|y%Yuy> zG=T=?9OA0u5?k9}`_wiaZgFh7PD24v3Nlq`E!q(_vJ8lG^$9v?#Yrzi;iwKlQ0E=l zivxL+M>DQ-nq~E&V+2^uw$%rA;pJxHc3*eY$B66Atwcj25CB(~lihlY?U89swX6X_ z$ZOiPL}X_K=aXeLj|p4EDNoiqMuJGD5q-)bs&xGsW={yZ!x`uGA z%r#zH+PK!r*EXi*A1!stIY~yARD%z!bC|*uYAu7blBIa&hA2Hn>AkOYh!T~z@W>j; zQ56{^4T9KjW&jwy`SgoiDiD6?a~^Z;%P+gygheXMD+F(TaGOM1oFAzy`vf|wMAv-i z^rwoygT=CpETST*7InKqX+~;PsLpk$V@=gj8JD?9tcyOdD$3d$ZKmZnJFhiN&3szs zFRvYREFSK&+*b*LFcaXl)nr?)3LWKcu-KYj!q-xb+yhKqao}McT|fPuughj^>me~zmR>s;qM?#k;@8FN!~MJPhzGu-cTdj65N2!mFTqYN>aRN z*EOa^WdiAeyD`FKgnzJvW0E9U=O}rko;7k0Crja&$#y3JM^$=?@))87c06Qe_3GRO zVrBU=F2`gZee9rfk$zl0PNg4rDsoxLi9@fm9?Uw0p*lq0W*f7!e*Hbu?fa$I)XNbuVL;8!lW+Jr(9=81yTJRKXL zhRTho&n_trm#3gi>$&I9W9kA)b|slA@m0OJ<|pB_1M5&KZiziO{tTD7G@geqI$Wu8 z&9gWGttxCauTHC4In2n-%fu$ELCqJN&ADtvM5M!>((4+OH6j8YICiE3&$*AekYiyi zuJ9(cL}YdBsbo1Z=N`^q6H~1ad&$-V_qbThLzAoeJoVSrBiv0;kavq5C2l1-n&0eY zRt#a~j|PB$b=gfOB$6;s9HjmlryFyyqwXWrWv@IMwu0)=Bl2nK;;B(I?I6Eat*vZ8 zMU-=&fWCten#V{Wg1+J!?_jBWwGXrT%3>lbQXTJNXHv`Ku&cI074)RfqXB+M(0h)4^x8FZ-5BZ+jhoHXgyTpmff zbr?@vT$35IN^`6TM&Pq2Dl_vsm{D1dNi&u0vDTYd+g%T4SOnv`t;yMZxOO0#nXtOW z&T5Xg&S!!(e=a0x#epMFJkU-fp6z^-^ewUtt9R0f49XeQZ7?39H zYhy2ts@MHK4K#3po46?FCXPcA=0hAKX3*ifI+m|v%)45VlA0Io5-2cpE6F5Ug4Kao z`&s5at=ZS>achMtGvK0Ti6)xVr6rQkq9BP5Di0QN#QAV~aGqW7>9Ah2kmt4X0j&xb zD_P;{z*B-3Fm<^`;+eQ}kNj6nv>=tHcuZyZC2i%&fajtX?=d{^DUjgOegg zUf8_hTvp}#s!6iEwMZ}769vs={}C};fl^{ej%+(V%@`lx(u}i*rUcFyuz_UX=)I4oxScB6q*XfK7>oCvDEdL1S zwXTx3_Sww7)ukRFqW8!>E=!c4$tX*jiuskBX~9>h%oDbHxlU^Lk4n%?xr6qi4L)CF zFBB-ETaffxHTnDXj>4-itXC5rZglF1&UsDj>SG7L_YZ#2r|j=hVlPr*UL}w;XNIIH zB)~dQ;eI1dPo2UJg*t4i-OT6AhprdR9O(KVa;C=CxVOY+BUMMFil|OPB|6Zw%vmCp zfaHfs%!4z~yb#*K59pkL&gR(guDzEp0zAktFlF?-6n=iqiZ{zWioZ%(&0QH^h~#_*|tPLKLoX_mfK>sU8d2n zS#(z?Aiye)4jGpv9dsZoDtlF)6X~?@NQwMIhY)%T&UtN~iDty6HVbu6%T`v`7Gi|! z6D%=i4{>Riy(|yMZ7<8!Y|G5AjtLgA1%YqrW1B#$r|OfVIHImcDG7hZ%!8?7pQsJ;mte3-VxzYRl(C$?V&?icBgeg!LF} z{<1Ffpfcw|s&rU+F%>plYQe)s*Vlm_JnVL|#F@QzMo@zrEWM**f<0G|*H-NnRYtaI>PM0EN1xOWGefT z6q9Xrk|AzxMw%91-RYc2Ct9Mk1HjoC;I(T+XEWe6TA~{i5?Eb7kzH825-3B$t(-2$5I% zjV54$ez5vkIgc}hn{SW}uId1?hfP(+L9E>8jOrPpt?}cR7)A2czY1@%sTN>XO9r4_Y07 z&c)+=*c|#?nNENY9LVwzI`7&wg87Va*&h<<`Za)uT?aZR%ZD9E6RN_T#4?lB!N^%p z8L3B?K2i4D{quUtl*VMAWS-t`8mKd8t!1mZn*S>)StKs`reW=h;-Bw?N| z^zRgdV?8c-_S*>2yDO+!KKYBZC!HVd2q6#lv@}DSK^>_|T4PCF><#t=KEV*1;FN(6 zNJq~>mbUI1(#*Bf8RCP}8O`&AGtD%gElpg%hV&`4sLD@y7}BRae4(87kq<>(-Tg z(@v|S^=_GZtin>0yayC>uH?NtKwG@88f>g7$djb^>V$CiAi;wVB0g}P=C+xD(Wib2(!;Npc}#$7>nBqmtKLP#bi_&DiEcy_|4ZS0cC_x~O>9T+=K00x zi(G>7;J+ow@0|25vo*N>V;sRGx5Tak`@n`wi3bvdS$5X$kS31qoWx_|Xr ztHaL|5R&LieOxlHCQp9s5gmUH-`qUbi7S_15^I>Vp+1U&ad~$|g{rCg;i$DKs*Z%*%VWR)= z37Q`~BYg0%)C3MYZBmhGL0?FO>tQx>MAI#E%}J+4!2oRx&dnZ$(})yDJ3u;n z|HZ=EXIDaF%CV%c0oSnxb6*0n!#Pnt_~48W{Q3-^{7+|iPME*`$+PL<*MUCuVSo=H z(gQQ$86h2lxUYm;jIFck3pGQg-$!RW-LkcsVm;$7FS}##?o_i`&j$6sHyDK8Xn#f&d*aq0 z3G+nJU4XxHAh~Jd4&BanHb&JEA|58oWqUAOcN!^7)D+%wLTp3mQihgoz7Fdw=QCK; zoJ%bDLW0W6=fJSy z8K5CKm#ns)o5G$Ud#KKkNsoj!eGHPZZeDlGdxy9zM4!(o&xG6wNW#1m!GCp^HP?4+ z`(e^{Pm1G6H)mu@1xAdk(~NdHSrsD^aMNokN-|B&Q!aa7E&&PFJuzWEn-4(>&dKt@ z2WNcnu)Jhm^1;e}CAj**go|)}B08JvUMWI7UR#_&`F5aaK3jfBdcmR1NV-h$Ji}+Y zfn$i}!r#e`IzFm1UfE0j;Y8iro1VB_Bw=1cfOTkU<%xEXQ z&Urrzh$eSaX5LODVV)?++nH)_9T)DzXr0=C6t&#u{rLG%KL<^$?sYZiNNv@kPmmzh zC#kO2^fhf>6AxQ;&5gVcs`8*L7qVO&e$G`T;5lKg^O_>$Uio(&kshRFLr+?^@gh8s zCM`=&)cvi*NoA=8wSY+6LM!Lw))OJX)|+kG-5b@_vkJ&!givqB_`lawdQ%BjBkJ59 zJFopH&W}HFiM>n&NWwf}+&aSZatsU~X2jb;fU3DYq$%<;b1LtOT`MO?dQ$5yiB)b% zQ5OGgp8xld^R6c0eA!I1gOjzP;!-VIgdC+|4 ze`uAHQuURPJLQg+000CmRGdSe^-)w3ZO;Sc6KXZHR{57fU+ogA(+|_9n~Y=TB5%9M zvmf5aZc|V0C?sK?D#k6A$5+xTri`imykkv|nuo(GNd>E`~7Nt3#6Xs%)eQ+huc_CI{i~Y|@a>jF#T$r<{z`1NpaSacP zGtZ^weAuG8&285GIakwdr7;#<0Lsh5=sX;1`vE!1k(^g0Er9@BGw%jNZK>3)?%yoj zEGHjc|DO9HppRa1ml6(=Fi#YUvz)72=1+*P(`Jrw^y=~|-e{XgiV>zzJtVJ!(g+mC zvg%M_nYooK%5%&!75^FI@4}b|;wxK*9YUbN zqB7^w=Lumt*nk0MEIJZpTsoA`qy!|OvLzXqI23Y)0%@XjKDS^#vvq@iW+-R?&3D+J zcC`%zok9J!)X#ou@NRG5mN|a;vip>805|XpUJS)laTuB1XZ7t^dPu0b47O_n}B8!NR z{JBmC<10 zL1mxl+E-++61Z4tg_|s)dVrc0^@i6ZSCxpO$Ui^%kwk`9FGH!+SE0NHpESKqQ8vG) zTlQ1)cD7yYl*u%4^N@sjs<>>G7*w*m-ktp-Y1`ywj17*w@rr`B3~^G&9BWCErxQC_ z2@^Sy2_;yRA+&i*nh80X&fMu|Jud&C5+#??)NXj$I}^D9^PDtiPzrP1M|fs;J2BGq z)FrVtIC0W4&&i2%c?isc>XK)$T&GK*=;uZ6^Hl$hDD1+-Hd+CCUtXE@)Rk%CVo1U~ zQ5>u8c9-uIvg(fN;Hu+e+Bq?|vNGnAkq#Tg2w+XD5UANLg5>F~&j-?5ctnsT8RD!2 zS^}h36D(9EdA5)xYPC66;#}J)oe{DPiw|s_o16|+QT61Z^=Y1yW?6@M&YlMoEflHP zh?A>LL7aLLcqLB$IdbJm$~hL*XSGG3;r9~RAI3bmNus?9?Viryg$vxOrg!eB(~-Hy zn?S1bX~xoS(8bYtXI$`>d!tR6IX?zQ-&nvktpOWX=!(& zNK`+NPJepXGWV(qs}*6#k9R05!7q;2m^c7T;fT{!kIscH0^LoL;0(Z_*|l7*180{g0UD_Ro2!HtlmPWo66WZGh8&sN zq_&QeDOX48fl6Wowro_g?g>rItja~xvId2U@T|{Z!wIO7BRdxPkssEzor*m5M<(tC zz0c0U5P^C&&?>4?M5`!tN=4SUE(a}Gr=vmQ+K*nv82nYm{>_K)|92PdMq(RDm{$!u z$Wi2x6O4<jb>Crmy=dhFM~lO*e*b|f-H*;kZ8L4xDtBfMdy36{@g z7Dpd&(hp=wY?xm1)o26cD0D2OW#$)GQ|w`yvMwZXNR!)aR~uyYF>Wv+M$eVo_2Y(?T=bYig zAG|;3FmC~pFi#b1@DI(XL}nj8vq>#TQsflH{dI;-tImaS1qo_&R72H}k_0|LgH7hw zh~J|j$}+-p^Q%ymYQ7SHhreT_x-1*P5=6at(h3jR#VH3!v|}HhZ!RTa_^f0XnNQdM zoDxWf26aZ8Ydd7|k4L^+Afe1xN|vU&}d^ zwo_WxrC@u3!Wu>oHkO>!9-(~hnrOJg*fgyM3ZFd5%z3H|`b*Fw7|$}hRVI>!vM&8? z=1xVLTD1%$x1mxm+E<)f$`UGd8IlNoqIau_%R>_8iK2R@YDXJt%3@7NDIP04lPXWz zB*_tlN%|-vz1}rfS*n`1iSqEU3_*gOqZA}59Gcd-N?27T&*PCLbMmpK*kyet5U6NA zRASWC{-OFX$~5E|`f`NNSJnVOT1ATE)kHf}o!30?bg|(z;zUcFU_V-f)?tr4Wf(r` zWm}EJg<};PcmxXi%Q~P!O_>o@7jP1P1|E@mXR#64`?T$upX%SoPygh7|HAKi;#v(3YG*UAOS+1qBck1{Fe%JOs^Z3fgkC;rf~A(`s!CvcViF9K zB>)RT!0MWt!X*H?oP+`O3xRU#Xwqz1lUc~|5CLdeI=b*zG0!?C+e&bY2kr74aM`4K z=9-9=1(gnw>IAm5MWst8A>n0frp`+Zo90`c32q{RdW9Li+o(mhcH4%pJZ+xHm}{@R z^Br$J8@h+Yg^`4LqTpi*GPlKb;0e`ZCpo-0LXt*Ff};Y1@?DYyr53$>?1EC4E>X4t z)GAI*q9ln9g}GFbB?uK+n6Q!J>^Kos^-ApBf+TU1GvFgyA{?+MF5>jjLc8+O(4b5)t_8KGhr zP;q3dY^wyiuq2h3dL^(ANzw#pZE@nH4I;1RTvBN&FAtKjnrzK`5j4(s+merp{qbJb z25>0~lot+^C@)0v={gnaUg%H#9CMmvZxNC(PZhM`93k`WNgh;>w$Q~0(rKxqB%N~T z5u-gOnWl+S%wG~S!%A|axp~mmAnVPnYUeFyPN-{Ni7VLZ{DMqT9xSHb3xtO{q!!Xz zWa5F@xQZkv_&O=lJVXUrBr(;ky~M}g+;fb33R)$pd(YQ$f=8Z=26=eJW&TrqhPr8R zsi;VDr=ocu>_H|UOAm+JI&ulc6;?CDzKcqCz-D8iRgm0=@kBX5uO zT+WP7qiY*V5?rEOCg@6<<`QdqRr9@CWd>wf)atf>i6C!;h_BsZyde$KFCDVO|C7Rgl5OF(v6MgD@$o z%A4ObdF80pip&U(=yFvh_aYW*QeGG2H5bKd1FN@VP{9ih^{C(lay}B~7P!46mHVVh zmMiPBd+-z*0NV?blMwTWrE1OvI3s3yMLDmjO|_hWmt`l5qF!H9n2DAui_+RSDxz`K zWsn8{a+B*IKM(Bh#Ip6iTI1@IHLAUfZn+BeDggerqc5XSrRz5`&9S!-NtmaKy(GCw zZZSz-L`i~BjeU}|*~%Ol6`Dj_t%a?)JqD_L0^7O$0Eyk_~DOwNeZ)Ftl# zzfSh1xajjjv|!nO0_6azA81{dQ8u~e6*#2CNmKMj5osaoS&L7P#KEe_Xa-IYC)sp> zwk!o5FI#9Y4P+mu5VdamE}Z$#W5^R6(vDt+hAQdE;&SP)f6FW0eOyly#~=yw#Ic7U z0l=UC*h!EksY{@3SQsNoL5k?4$*SFBr6|?0xjt9VSL}wt15nGDymrdek`lfXG&Ra}h6 zdc>(zWS2P6eFv!5O_{P|_Ca~JG-b9$(@xL_7lHH8aCxWg3#(AC(uR*+q`JgDBw?N? zMo0}RO&O1kqv{({lHjSO__dsz5s_p?p)*gZ(-5Ia=V@}Tk|{t0IiDyzVS$q+G?D-v z?T42GUQe65lo#5g(d5qi(({SbD$_XsfWL;4lV(ZuNVBxFnrCS>&o**a&)aRE^;ukp z9mEN~>Wqj}rq$;mBp+}-eR1yO2Zwl!l~)|oVT-VXifi3PzJ(a@d9*FHsXDo3s`XUo2*IF@ zR!@Pm5O2m4l0gHiFY!C#E?ks6zx|tE{(oJt3yB>_!aQ-<-+b)ex1|u>WRLLbNkGIA zxe}?Nw;rwolkI!o3`?Q`tvZs4rVvO10|Ff(s0M<5AMkM#PK*xY1* zNnHpSd7#R!hc6!d(izNSf)SG?YSy}WYcIUhHNAgcfEnQ4I&Coq!k z+&4O8tLyBR*TE6UEkYME-Kq}pwLKSApwO8E{p+uJ#ZO*B^@$xw!aQY+kYt#6F_Hx5 z?Y^Hbh_VjLPPHAfq}Vhoj`?mMP?c>&maUjoo0=?VQd!u8RYmlZRaXRCBc6ZIBh+~|qKw%o+EH|qivrh4@)?lsjyN2Nyf`cac? zbOz-pi^%%sWCB%B+OHVCY6CaZc?wF9dnZ)h>|*{S4LjC ze1|AQa)d2a$=P`kMwJwE_6C!8NGPlXP#sf@2I0{yhzx- zbG-A%-}WDlESfkHNtmaM%OFSa8Lv06OJbEnE>$IYpa%@9@6S>iNj>Z;2Z#5z-R; zKyH8L&1Z@TK3a+LbSTWivanrG*2~pM%PSdDn;_fv@{8^SOHyo?oom`jXqo0L6&JNh zURN(U0C1H19u_W295D3OAL)6gxq*Yxz z6(u-C2@XN3G#$LaBhWfOxnx42JcUVCDNX&{q|z;U5j-L!`3f=zYKrFpPAHnl97)KD zr0jXA3Dr#61>y8W-s*W;&9kC!eBf_=Uyind8HjJ(F~kY|dBPsCY2qx$)4IHd*ln=F zru&ycp5l<=x_?cY;LystJv1ah%oYgMaVCZhs8$@ZZbJ8P4 zoQ5pdxkEB-YbPA>?m&{!pok?>S>$!re$9g(l<#Kn+=d7{`Px$tC1d6B6Nn{4%jGe4>7@#;5D zI}~51joi7*ij>? zf?lu=k&u>=OtBsZD$r#4EEu2*%jJ(pvNb7P*fS67!j zi{k8eg7oKoQT6%Z58j_Ul-wpHVO{}9e)E4`TLS`_Ol^oFF`74j&0$5U(?`v(;@o<` zN=9s6u)MuUVM>y0-m`r92v?%w7+8Pmbw1?Bf#!SgvXW74<8{ic7*>Ifg7nO=y>9fC z=E~#c!L}x9{h<14h;So_0qWNc0(0k^#0mW+DO+{fNJ3Rz*S&U7ekaMP&b%y*^q=Ej zf9U>S8qAuwWF%ppD7Hv)KS6@{tupdK`Tp z&9?9Ump}3L&gH~SL=xty!eK70$_9%uqn(iw7?&ATlK@sR>NKq|I&+ok+6GyYAW7b? zw*?p{%UXt1{mc|w%g=lqCvz|AwnclO|CMYcUsNI+ZD=Mn=W=O@Ce}q|`jLM?<>#hc zt_~4m?^#|4^PnXWnJ8#bSjQsB!HQk?MayA*Ms)HHrq3G zVEx-H9?jbpp#^_n)qx^Qw-+edreFQ=hwlI7f!j*l1f;?|aYX7bzAj}9BS~?+SMQiZ zkKL-et2_xL#qeu$?GqZ}()HFflGhAr^1la`Lrt`L-coR$?xW^QVlM~W91Hfvf@H1G zgqxK$!TXSW27wydure-Wbx?TRemhn!3ZbXVSEbbw(I~#PK0Npfp;DXJ9JH0ng;B*x zJD*E%U%hf|ds^(XA&o$t8s?{D8p;$|Tg=7~Zo#(mcbz=m>L|3>A+ z!0)8<1oE7E9A+V2My+S8$Fn5xb^l1KENNiQlHGTC26c{6KMBT=6p^%=yL8?F%yai% zPQVZ$)hRy>jHE_Yh*oVHl^0wn3TM?kH;F)FR4kpYSwklUyMn>}yfzv@;7n?tq{)-n0 z=9a6?)8Pw^|2UTi;am@e&xRt>!48!6A#$SF9;?W7Ih@$b6d3_nZIyQENy$*2CYpj# z|3=g%4BQ_lU;EqIXm_jbXkF)Wo5bc+3DigTZ+_^#(kM)GPX6_EBrDyag>HU;_Dk-9%%k|cgf z%%TAabT*2Pvhxv>m^sxY4z*m<)T2CB-8Gigt5&uT&Jqy>=tl1;;q(q(%5yDKsz;uH zJT63ipiGN9?F5gvW!0|(q^>(<-MUca4+?JeOXOt^Lr~Ri`{cM;doA*gAN(iZ_u+vq zCvFmwFi#X@)MWcxfAdDpcx8L__Vafm^Z>Xj6ChBP{G6Ly!C8N)kGZnc2QFDsVHSsc zoh2lo$(RJmf;K06&rrGCxTNWksRN$~YhPUpU?Ww#&1SR|MG~=X+db~h5q6~CVeW2P z$eit=CA?^TwaM?wESc(8g3c|OO_Na zN3oNcq{&gMOVamB?Rm;NeRpFuSekjj-9Xx`2;=(Y+#{h|Ur?`}&m8E2OmkdwJ$o>M z=Sd6e7vFDW>sj{ZH#^DQ`YtQK-lx<2_SXCU$#?wo@7~d5;wB&o^JGE5-?be_9R#so zqyHKk5v8k?Iu1QXDJilvYZsxB8dOzDfy#8|B*Ay;0c~~_97yeHsrt0C(?o94NIU}j zf&d^N0%^+p|JXa%Sk12UuCH|pUn)^PA@Kzy#Mkr#h=@y7kxUS(lh_G$oU}kGR7I)^ zQcxlUNG;5n_&$l_B%%rmX&XST=#1^y;4~5e&zbSeIF@XZs&h*WRd5nTr9vt~Y6Ho6 z(42Q))_R`*v(~fUGc(@r`2UmadEdR)b-y$FzyHs=?7nzs+9geB}DX z&N;DlM#(84V#D;$yDEV8;&x3T#q?=X?tUw#&xQRFr)KJs`*eXf%Mq0Yn5K6I_i9*0kq;Nrrb*M zB-Oss5z}Hmi{mqajn+S%dOL>mGx=%qylZ|PpiR}0R0!KV8K@rk)Md9qvoLM0^{hHy zZ=*MLtthT&q<%TI6r!0;|I>o8%~bXSWY~I)Gng?Ft}TW0lc)E8Gtd-ro1tK?lrl;) z+=e$H!qoo9xI`#z=x01(os@A_DFrrGp9aq+H(ZG-aFZgSOtVBqi`?X9yOVtM_+>R| zNAS#8)L+r!s;`eI2RefdAbLPB8OKR6S@cVxRbgs>Hmh9aeSH+oa&z{qoG#j=eTitA zehr&3$f0SXXmeSQYnJ~o^6;zVZXXfop+hIWonxGhYAZzK55Mr-na>8BKyD)x%=J>b zNi%^(vus8z-uKlPMx91*8kwhF7Q&a^aZUXhiDd#}S@*<c34}w*b+X%-nSBp$HVQ+jg zrR8IkNq|`DamqB`{*7T(I5Spt zK&taY$H8wPrsL+M_jS3VLY%w4I+imS-ve39*qi#G)9NuzM4sAEO1Co=*u7zyM=LW} z7#ZL6u0bV$aP-;O(;#n>=lRWE1rqW7Sq$ z6&#POdzPJ(p#0;HX^#EXQ3#N&8rKy4K$7fBtaXLG(5Fe$u$7C)IMX;V5x1$EYnNa7 z@}&c=y<7=&m}><&7Fp;hli-=J35cZtSLukQlp=R1<+x%_vRUTR6w9hl9kJAclq#{T zM6tdO;7umFzo|->%l3-CMzB4iZrW`Ge1lDE6gP-VB_PQ+kI-eJ@LxFtSG%Z)^J*p0 zPE(gZzc$OAIrC@h? z^yi^WlYB}ST2Bg^*J@T}Zv-<>+whI&2O-_O7EI-p!}-P4QiR--q{H9&(QlX6NM8>r z`f@l<0uy_!MgO#-q!Xsulr_A1%Z%f;^6PV{^^D>?I92In^NO&6?55WbI8}0)zMBU_ zukBuYf*FFw(a&cu>i_$*e{%0nZCNb24KO6TVp>jPQRp=-6UvlYOGQ*YgF6EuH6UVT zGl8>2vtf(l^``4K+zQW4X&mu2Vl&%pS0Ku3BuS;W`})>hAH$wf-{{Lk-bLEwt6H}%f8f{hf7&;r=rE=G)|6Ho zK^PLJ%jFwS5^Q2w0NB)FJ}uyy)a|^LVOp5J!}!~l;o4vRS08_VK@sE*K*8J<8baA~ zmD(NQ8L`e-rB{y;komCwUN={8f1t~po#ot?dijW6Z;8tj)rP8`tkWme2gEe1);(Vo zDfoCv^yVs}RAbSYqPY1cu|>kur~{5yrjBTO^*a?5uf`gmI2O*L&C}Cek6s$6lMAj- zgt7epcH`=ow#ZIyBNWUXzzE!Y2H${@C??-&nxj_bwC$Rlr4dKnpi)@9#rbOd5Vdt2 zvn(^$&amwk#gr+PXvsa!W*Wsc^n@@!)e`yK(h<3$u~i3Yx>(ZMGL=Gi5Zw zv{62B`s8O8Bqw(W3g$||E<%d%B)DHhCickeKsILR;SAEP4C6-yVAV$K3{o^tn(P2~lRsY$g z@JI7`uDx6* zoF%&>g!g?-K>Vt-(oS2%AJsAYIxbHv1MRG5#wurN##9Bm%u+1NuxTx{x}Ed7%W|2B z?U$H#CMCcL^{3J2QuOup&Pla(!S_i6>W?aok(Flpa*C|poE_yu@7$cy3?EQkIn_H9 zcLDj=TX-FjtMU z=WA*UWdcz|Bb7!dhZ}|rdyuB$ev(=OgueSBSnc4nSc+NOiOUl6f3<`}w@a$J>&1D< zg_>(A<;0?F`U0G)rQYB?Rer}F8^7p{&&LE(?#yGVste8Ib_aSRAGEQ0>9UGGX>rpx z{G9DIL87TIPee2)r#ZOI&BM+nyei|=>AK0LtomAuI-iHXIUp_@cngZIE1FhSlRj~J z|H0>khW@sr&8Jb-(w%1C~C?`94 z-LP#=lf;2yv>H}nTFd;a`LJ-XnQSnA0=)=m2TGq)&_O4zKE6KBH%a1G}4IVBa+)nyc}x1oyJzX)E(%&S1F z^P!hMt8BS2Q;{*xSq$2BW%Xt7cG6fy3S+uEhG<9USc|5l#ssV6P59|`1GvO(;sVvrP!#Zq(yMT z!74TtH#~I zY=c*vIG0C!001PmNklug8_y66m{L;sRS;-p+1#_h=ag|AjUmNaE?FE~v@k;4ANxkWSG`G5gV~n6| z^SP+6?nlenflzF1W!0_JahIU}IlUx&PXrGFHUMg#aa!M-)dLz?Coc-u^{Ocr04+c&323!Le>Xb}1)MT!VAFY`UifRfYg}3&uZ_QD`y2xtQvvIx1*0X&HlVF4YGz zeh!GSaN^4JmXtZBDqaCS5jDq*Sb?-b(Uf5-^i9!p)DJrTvA|s26miRQYxzlDdTr%* zzwq4IFLslWRY1X9E3T`QT5eJ;pmY4Gc$S`>Wp&dI@7$w8qoH+{`n%esAdTt+9i{#3 zEg^xrsLI5y6!aVDqtstb;m8$_xtg z=fcuX`|eINYK^zXZgZ-t{kNpr`lvz6Z9e(mGLObM?0;OM%HJ54EkBB`tX@k^PAkD|YIuv{% z;IvXC)=5dAS3J7q=0cdnOC)8QX+Iu(Uj{FHwlxOGn<=GvYQnfNd%b3MNgGffJsD~p zNA(|VrB{3}LirTitcdYF(}ai!h<=bt_Ex2$-?MNzi z#Zhu^gjD&5a1q_j+=Vv^ONs`8}6ejJKA4rd5t@7_I}BF`B%p%TCx8l~cZm zS_R+)XMiAqC{K7rbO$H%97HG`Un`%ngt?Hupv#d&c^ zKr!|GIJOH60GQoD)is*Z&!&hXlB|r2YrjX~*S@=RW_^rGr-+Nyti}V6GHz$DaC_ zRR7Ee5y*T;_HM`}MGYfZ4Mti+t zJj<-cFp)P|pvWL^Hs;&l`R!$o0@H_D7}P$qJrV1LW*cex8GE9cQ{FR=2W8&2+bpJ- z+Y;&#P0wjQd3vAjaz~+H?gFI%O~y! zbJeq6iw#)S2b;fp%!Xl`-?d;Bhev05SSXbdRU?p6A8+gxYlODWBV{;R`*lZmEugbz znTu|xDpN-aN@2CrMsT|FnCQ<^evj?*YAb`;HliZ94b!_XofkuQ+t8S~8!0c630=b( zDK^R-(&t=llHs-^*AGwC!z1`}6wPma>szlr@U9cTvan}lMbKfc9H|`C{9kc={P&n| zwOG0;P!s@@n7d4|F#!^sqVVPt60aF``{!A~z5XQq@ZqIvXsUN&BBxS~P}`5?G^d^5 z{E%qxcyFw-<+i2?K*N~ksajADFCtD6T7;@T*k6?&XUIm!5y_?3b5ygscq;=1M8W=x85UeG?u2 zou}cJ9NiDLJ6@U0j(WAQNG*y9?BG+^?azpvKWEct``L;xaH|>FHY|=Ecc~X)B2hEf z+l+8-8YP|OrV*Tks!y}Vg#Trif2-nSdX<>vc?RmH4SD`mBNK9>gPxu7!&Wh_JI!W& zrv7v6OZVc`ZZj3vcJK9%KfeFLP7lcrK*3xqg;1vXmX@QlV9~5sD~w;?A~7lRI!wozkCXq4bMDU1`#4j%-4*RamxVYvJKW zYdV5fK2gkVC`2>BQV|Tf(uK}6tBF7|Kg~&+*Y5aE(-HLdzvpcqeCguB>&se0)(8c2 z2e3PSr+Qr@6ou9yE0oD|pDKZJxWgY(Zbv?ApCw|~67OxtKiz!eI?ZYmcavJO9aTq#|Mz$N$PfRVQx(}k zD3~in9M=V%n2i!{j+uYXKrGR1((F{@h-GnRc6wsU#0I#LPK}G2G<9cTcyrV?TyL zNoU%Yw91g2zW=~`PJH0&H?A@idlx~$Tr)C-8*@uQV`3RRruK$yiltp^Y4ptKOK||Y zPShEFNa`mF*S$JLrN)CtFW+=JWX8l)l|dD-sBLcYoBxMxqAjbFb-|b*65CLixsj&d z_fCR{XqV?U?;N$;{bd-?u6X|0GoQN5am%|73g%jo@}IcON~X%#2VUPgf{(QPQ*C8`_0WZJg9oD2#c4sa*i;J)?;Eys3e-LE6+JysVv z%&~-CyQK&pf`8Do=}_ zr&A=^LAW*EYQaL88sR{+Y$TFb3uWp!OEFb*g959(}lU z@!-QxJbvo4og&B%L&01t;AZV^Mxew}ddoz{@2$6v=w=jRIcuAU7Hi`)mE9B69&y^) zw|lk@bF%)^JXaY1s9qNBwZm!B7WxE>ULsc_Iy9;FmF*N{PWJ@O8DpHrWb-Ucd3tB2 z3eQGGbBSiF@N8Fv7mDV*15oX|bIx-4;=zX=xbMWTEod#-K`59zfa^BRF=yFGU|(1$ zs6b_Ahj;YJx;#`cDBlVMPEd&Fw1rG^LYv8Xg;#SE0uxnpPB$noLcPyTJG)e6s4|;x zGq!2#a?3DiD`VuG6Rn7DG?4HFpzPG&oKzG!w{#-VwoWt8PX?D>JonW5D3)&uD3~iJ zE|$KC=g{fS8w`oseqTwz>E`wxfNogvK*Z z*G!vHcnM4*^kZ)RSQHek68oF6$IFzMMO9_b?s7Qh%$g0C+7ah%&-D`Z^Gf>q*RI}p z-+d?kVWb+e`%o}f%rddG2m8(vgkh^Mxemi_Bq5`=fmJJRJ76dlWG-bCiCro;W_QD- zt(mT+a+Q@j8`-;UcPq%{n5G%*ZP}dMDH$bq5^pmSS?BRv(JXuHgW0vH{VKAhiKgh{6CRfJ!^NAMjhMBm&8o`-3&OzBrsiWz1p3;ItDkz}v3>rDg&b4T!8<>IaGk|T`Z znAo+Ic4LBsoTk9At#!MqQdq74rLmpE^Y1mzL2lG1T>~vO1s(sOo=6m(^1pPRnTYdiGg>(CV^)J5V;Z8PkmqEeY0q~s< zD*Tb zU=#J~xZWEUrb%F}B`)8JnP9sH9d6(;K;Ku5NVZ;@?YK)&hUgNY~m%Wm~oI^ML)59U(3HQ5?^$ z!WGSzH`~PBa~n~rU-gx@{Fm;GUWS@AO?WDP^Wi1UScMn3%vh_I=W7_ubn(Ku^Y_2| z#LsM5Ex8MzV6GH2=_f^B{2W|oY0p<;na5il6mI19P}%UaK(U-Y%h*?Z|7yBRMAM;9 zm3QvHo}~xB$57l7UxqI4wzFG@>vR05Y}Fd6>R8mK>Lu5MY1L_#7T%czbe!=_UB^vs zT)%ST{(Db+AlN!`mqNkZ2?S2?3GL`JB&;UbsE<;dA5M)sl$uFCUY*r>)Rw7E5VAD~ z>ghn#E;+e?k$@^?jpGP`VJ7oJgl~byEKk6lo=#&(&C9bStR82u)Xynz#h}?K(b)`GQ_xZ zd@M9;ufzOHO0m>rPf|MEq>ys2S+qeqDtA1Q8%u5Bq$%l?StNb&!V4e0|K0ESSR)yE z6G6dTEe#P`5OQrE6O~Y=F3|6vwT&7yLpZdp@|+;VQV;Sip=bD|kMcj5fG55Mo;cW}!) zGC{#yF-x|;vxj3#M^YVzwdu<5CN%1#ciICBF3TSMn5g@6vZ9N0((i1uS4sChL|@6F z9fR4x!Q6YOa5$`n-ue#LbA+BS)lVD#(vxPhi}3BnWjbwKBAOkt`n8W}IL-412S5A3 zeJ7sZqAGG1!!gX20>>u9ZWAmWF^l_^@Yq*eCilCmJ6`*0u{6dMt6#Q+Hy?mD=h zLq{nx$l7aTYqCt_yjRzvwU}Kpta*t@Wjz}fPBdCLS?M_Ez|7g}*RK5gzwz!9+#i-e zD408d*+f0Hoh1@186;_(5qp@*moXRmB(;&lZc?hYwc4a-#X@%}b-j8JPGD)apJ8#xjAxr|l*HrAGbsoc!*4-*w{eU3&50Ra7J)BXpQ+1?|)$zF5Y}Gh*lJmT`(e zJY7)%1^O+l1lyXJn3ZzVcE){OPtr6i+GTf|m~=0}dKu68VL9@T&0ElgRt0T=uK5@v zhh{7@CA2wvv?W_qozh``<-PAZ@z*GpBmy1gN(sB9fU`_?Mr<-uO|)1#AyL=}=paE_ z{aK31Gct8YwR`@64JkO_h$J}aZsQtW`|2PnB-_r4*L$>GX&<}9q*%5Q%&*hsX_utj zOxIfKfo80ZR$PWQn~=7%B&OxSd;NUv#+A?hmAC%zFEo-6QbC8gD=Y}Z+I*Wk+^iXD zkJE+#3P@zd*v;PluI{J-9j-Oo`)u+{>QNa9cML(rAl=ix0j5|Od*Ha1WqWLxp?8+f23HFrBE<;frwaE$%lJ&z2)67BS;CK zy1|+ot`^IdnVZr|-EINmR=&V`yytof*)))i`zm~ZFb=bUf3~_Tj`2phU>dI#MnwAP z*|o#IZ17Td=oKC~jEGL1 zS-cFS5X-~iH`)unN-GYYYYK~P)T7<-#8JC#n~%}t??3+V{!dXX$#J1zu9((+9;L09 zR#a*2m}SRZqFJ$JhMsupa;tj9P6z;?r`n!}1%8Ak~ zeY(l@n?YvhWp~m6S%b)CGOfSL^f1Lpor9yl|DkE;2ssp)NFJtdm?P=0I$67lh- zwlz+g)+u~H=cG5G+%0zeX~t2@7RARhQE~eCxIui~=Sck5A}N3Mz4yHB!xvvXxYABZ zNDMm6UBKDtC+VBbbWfS|zzPE{ramAEY6{Gw*LQZ>sFH3p9P3tJubg~V;By_y_U_zu ztK4>#FXQT6p0fPDtk{xrV_W!^OB}nsF@cWYEWpOhr8seGoMvfQYx8P1GjPio{=9hM z+^7D;AIm>Ru_U(=3g+5Ddx$9^+Pqx4oDplMr@CQRslU&ur5}3L!lc8mwbPxq?wj*v z{Br2IZWz{8ej7Vy(Eg!L)O6PwLz**j@=Y^uZt9Klky(;dPny}5VRxpm!}LVhH}AIP z-Z*A&#_TjDE%!GwaCG{6&pvbJ(?9aoxBTdP-g)9-ugQdL3q!JN1-<+kIUb~?lI*Lx zkXYi1QFYE8-MULytUZ|hCPa=di!S2yZC8AZ>SPLk>j*%jcb=Gtm$#u};~PPyH-m`t ze#~CiIXCAo$HuOVJ$+lb6B=fuH@hOnZNVE&p-S5vtMb~Ldf<|Fn5sJ z9c?CH6q9_)TN50&glj2v!f>n+oQKYHSZHxL9nGx*TXi8bi9Q!b7F#^=+^H=m*Iqr0 z8Kd)`JxspT8oz8bBbUoLBo#|sRA@FJVtqulR#eN&h6U>z+dqir-t^a|?!#Ez#S7=2 zyziYS9y@MN29e?rbi5*U8dp;P>L@h!sY_!rm zV3@SI)!vvvI*zQW-c(kqvE^a8n7=&HTick+mr0kUZNDDVPgOo4iFz>b&331b*B^Q4 z8HwK(1azjk=_7GD^->$X2LROW z)N=RAB@Q2pF80SQk^63Rra42`aeh-B#@J=?!m`mlYw@p8t^+C0HP&P%x8FB~@?(!Y zwEr8i77=pipkS_)>V8_k!*UG8PD53$P6hs0W&b7DUh0 z&6j<)^-`ye?{MB)Ls2A2qJx}H8GvfXpQd0(ExVVgxNb(#bF+An^y;GzpM2q&r_X%m z`n9Y7dub~Oxsy;ZSIow)n2ibSi=a(LRF*w~-a>+fOl%q?mhc2{T}mBYv2^Nl-6fuJ zn}>KU+7NnC%~OX{wdbk0;(IK#5`a{8^aXV1L& z+%sp+KK0a@>%DdmvKAfAVCB%dXRgW@h4`&3dwc)|g<9ZWwXB_i53no<|<^QW-^`KNDR z2bE40QY6~O2uigH``qBD6E;()B6Z%p=s90|=p!fp^}`SC|N6ov6S7(;m}_SWZMI{t z?NDsvR@-xzIMiByuf@`5u@hU6VQRx@$R(sN(d87{zt#$fr-o+mv{MEum$=!R4)9R7 zb)kaJZP;=@*=|hu=&$LehaWom#m_%|=9jNty=sPC3E5>Rm@7qj6={xJMw}%|hs07( z^ubkzLb(1W?tzz6BZ2nps4jc{U}nd*Xo=@GQCIJpZB>?e&DD18$+vJE^QNsn6#2$8 zPoMqIPd|0$(zR<>Ubuek+8-RFiG-{g3g((AUIdN9h&^Z7N$92#^hZNAr)4DDITtT> z8O$=1%hu#NLfpQNvGOq)%^B5C1FDtLE=R()t=X*Qoa*9<3l2eg8yHmO=alwx{!bq{ zb@Ju&2QU2F3m49FDF}JfK*3xqfjfKj<`0uC-JrlN%amf*T>=N#Yj)Ss!UNuB1xssN zX1HX`qGPOu%6OaKNiQ5LID{KzT8nvDwso65W#!w?Jbm_apZ=wP`8kRtd9y;nTrKSx zv2HGR@Ubo{YC^m2QiglFUj2ewXA_i%oEUBM!C*>;wQ(DfNv7Z3hlpwY1lAq?|8 zx<%)DX~@$4Ov_1fy*FU1zTxEe&L5onweuGaUORv8h2Nk^5<lplxDLAGsc$6I$kQ{0z2hxE98qAuEODF!vH&RXl~KBANc1QZu3z_N}v$}h|wV1s&^wR824;q^{mgJQG$5T(8IeX=|fBP#BJ$UL% zo#F{06wLLqR4ha5E!|M84d1$YETw^~8nqlJ@cJTm4pxg1#`{Z zO0h&)7sN)!!6bwbLIO}Q2_b}# z02E9@2q7c@1(Og$2nj&JB!mz`0#GmsA%u_s6ih-0AtV3=lMq4(2|&Rlgb+dkP%sH0 zgpdFfOhO1DBmf1I5JCtEK*1!05JCb_FbN@qkN^}+LI@!w00ol}LI?>!!6bwbLIO}Q z2_b}#02E9@2q7c@1(Og$2nj&JB!mz`0#GmsA%u_s6ih-0AtV3=lMq4(2|&Rlgb+dk zP%sH0gpdFfOhO1DBmf1I5JCtEK*1!05JCb_FbN@qkN^}+LI@!w00ol}LI?>!!6bwb zLIO}Q2_b}#02E9@2q7c@1(Og$2nj&JB!mz`0#GmsA%u_s6ih-0AtV3=lMq4(2|&Rl zgb+dkP%sH0gpdFfOhO1DBmf1I5JCtEK*1!05JCb_FbN@qkN^}+LI@!w00ol}LI?>! z!6bwbLIO}Q2_b}#02E9@2q7c@1(Og$2nj&JB!mz`0#GmsA%u_s6ih-0AtV3=lMq4( z2|&Rlgb+dkP%sH0gpdFfOhO1DBmf1I5JCtEK*1!05JCb_FbN@qkN^}+LI@!w00ol} zLI?>!!6bwbLIO}Q2_b}#02E9@2q7c@1(Og$2nj&JB!mz`0#GmsA%u_s|33f#|Nm(U Vy|==Zb1eV>002ovPDHLkV1kamJM;hm diff --git a/apps/mastodon/4.3.6/data.yml b/apps/mastodon/4.3.6/data.yml deleted file mode 100644 index dd28335bb..000000000 --- a/apps/mastodon/4.3.6/data.yml +++ /dev/null @@ -1,194 +0,0 @@ -additionalProperties: - formFields: - - child: - default: "" - envKey: PANEL_POSTGRES_SERVICE - required: true - type: service - default: postgresql - envKey: PANEL_POSTGRES_TYPE - labelZh: Postgres 服务 (前置检查) - labelEn: Postgres Service (Pre-check) - required: true - type: apps - values: - - label: PostgreSQL - value: postgresql - - child: - default: "" - envKey: PANEL_REDIS_SERVICE - required: true - type: service - default: redis - envKey: PANEL_REDIS_TYPE - labelZh: Redis 服务 (前置检查) - labelEn: Redis Service (Pre-check) - required: true - type: apps - values: - - label: Redis - value: redis - - default: "/home/mastodon" - edit: true - envKey: MASTODON_ROOT_PATH - labelZh: 数据持久化路径 - labelEn: Data persistence path - required: true - type: text - - default: 3000 - edit: true - envKey: PANEL_APP_PORT_HTTP - labelZh: WebUI 端口 - labelEn: WebUI port - required: true - rule: paramPort - type: number - - default: 4000 - edit: true - envKey: PANEL_APP_PORT_STREAM - labelZh: Stream 端口 - labelEn: Stream port - required: true - rule: paramPort - type: number - - default: "" - edit: true - envKey: ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY - labelZh: 数据库加密密钥 - labelEn: Database encryption key - required: true - type: text - - default: "" - edit: true - envKey: ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT - labelZh: 数据库加密盐 - labelEn: Database encryption salt - required: true - type: text - - default: "" - edit: true - envKey: ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY - labelZh: 数据库加密主键 - labelEn: Database encryption primary key - required: true - type: text - - default: "" - edit: true - envKey: SECRET_KEY_BASE - labelZh: 密钥 - labelEn: Secret key - required: true - type: text - - default: "" - edit: true - envKey: OTP_SECRET - labelZh: OTP 密钥 - labelEn: OTP secret - required: true - type: text - - default: "127.0.0.1" - edit: true - envKey: DB_HOST - labelZh: 数据库 主机地址 - labelEn: Database Host - required: true - type: text - - default: 5432 - edit: true - envKey: DB_PORT - labelZh: 数据库 端口 - labelEn: Database Port - required: true - rule: paramPort - type: number - - default: "mastodon" - edit: true - envKey: DB_NAME - labelZh: 数据库 名称 - labelEn: Database Name - required: true - rule: paramCommon - type: text - - default: "mastodon" - edit: true - envKey: DB_USER - labelZh: 数据库 用户名 - labelEn: Database Username - required: true - type: text - - default: "" - edit: true - envKey: DB_PASS - labelZh: 数据库 密码 - labelEn: Database Password - random: true - required: true - rule: paramComplexity - type: password - - default: "127.0.0.1" - edit: true - envKey: REDIS_HOST - labelZh: Redis 主机 - labelEn: Redis Host - required: true - type: text - - default: 6379 - edit: true - envKey: REDIS_PORT - labelZh: Redis 端口 - labelEn: Redis Port - required: true - rule: paramPort - type: number - - default: 0 - edit: true - envKey: REDIS_DB - labelZh: Redis 索引 (0-20) - labelEn: Redis Index (0-20) - required: true - type: number - - default: "" - edit: true - envKey: REDIS_USERNAME - labelZh: Redis 用户名 - labelEn: Redis UserName - required: false - type: text - - default: "" - edit: true - envKey: REDIS_PASSWORD - labelZh: Redis 密码 - labelEn: Redis Password - required: false - type: password - - default: "127.0.0.1" - edit: true - envKey: ES_HOST - labelZh: ES数据库 主机地址 - labelEn: Database Host - required: false - type: text - - default: 9200 - edit: true - envKey: ES_PORT - labelZh: ES数据库 端口 - labelEn: Database Port - required: false - rule: paramPort - type: number - - default: "elastic" - edit: true - envKey: ES_USER - labelZh: ES数据库 用户名 - labelEn: Database Username - required: false - type: text - - default: "" - edit: true - envKey: ES_PASS - labelZh: ES数据库 密码 - labelEn: Database Password - random: true - required: false - rule: paramComplexity - type: password diff --git a/apps/mastodon/4.3.6/docker-compose.yml b/apps/mastodon/4.3.6/docker-compose.yml deleted file mode 100644 index 89c4d4142..000000000 --- a/apps/mastodon/4.3.6/docker-compose.yml +++ /dev/null @@ -1,56 +0,0 @@ -networks: - 1panel-network: - external: true - -services: - mastodon: - image: ghcr.io/mastodon/mastodon:v4.3.6 - container_name: ${CONTAINER_NAME} - labels: - createdBy: "Apps" - restart: always - command: bundle exec puma -C config/puma.rb - networks: - - 1panel-network - ports: - - ${PANEL_APP_PORT_HTTP}:3000 - env_file: - - ${GLOBAL_ENV_FILE:-/etc/1panel/envs/global.env} - - ${APP_ENV_FILE:-/etc/1panel/envs/mastodon/mastodon.env} - - ${ENV_FILE:-/etc/1panel/envs/default.env} - volumes: - - ${MASTODON_ROOT_PATH}/system:/mastodon/public/system - environment: - - TZ=Asia/Shanghai - - streaming-mastodon: - image: ghcr.io/mastodon/mastodon-streaming:v4.3.6 - container_name: streaming-${CONTAINER_NAME} - restart: always - command: node ./streaming/index.js - networks: - - 1panel-network - ports: - - ${PANEL_APP_PORT_STREAM}:4000 - env_file: - - ${GLOBAL_ENV_FILE:-/etc/1panel/envs/global.env} - - ${APP_ENV_FILE:-/etc/1panel/envs/mastodon/mastodon.env} - - ${ENV_FILE:-/etc/1panel/envs/default.env} - environment: - - TZ=Asia/Shanghai - - sidekiq-mastodon: - image: ghcr.io/mastodon/mastodon:v4.3.6 - container_name: sidekiq-${CONTAINER_NAME} - restart: always - command: bundle exec sidekiq - networks: - - 1panel-network - env_file: - - ${GLOBAL_ENV_FILE:-/etc/1panel/envs/global.env} - - ${APP_ENV_FILE:-/etc/1panel/envs/mastodon/mastodon.env} - - ${ENV_FILE:-/etc/1panel/envs/default.env} - volumes: - - ${MASTODON_ROOT_PATH}/system:/mastodon/public/system - environment: - - TZ=Asia/Shanghai diff --git a/apps/mastodon/4.3.6/envs/default.env b/apps/mastodon/4.3.6/envs/default.env deleted file mode 100644 index cd05f46e6..000000000 --- a/apps/mastodon/4.3.6/envs/default.env +++ /dev/null @@ -1,2 +0,0 @@ -# copyright© 2024 XinJiang Ms Studio -ENV_FILE=.env diff --git a/apps/mastodon/4.3.6/envs/global.env b/apps/mastodon/4.3.6/envs/global.env deleted file mode 100644 index e10989fe4..000000000 --- a/apps/mastodon/4.3.6/envs/global.env +++ /dev/null @@ -1,2 +0,0 @@ -# copyright© 2024 XinJiang Ms Studio -TZ=Asia/Shanghai diff --git a/apps/mastodon/4.3.6/envs/mastodon.env b/apps/mastodon/4.3.6/envs/mastodon.env deleted file mode 100644 index 12ab2b6dc..000000000 --- a/apps/mastodon/4.3.6/envs/mastodon.env +++ /dev/null @@ -1,109 +0,0 @@ -# This is a sample configuration file. You can generate your configuration -# with the `bundle exec rails mastodon:setup` interactive setup wizard, but to customize -# your setup even further, you'll need to edit it manually. This sample does -# not demonstrate all available configuration options. Please look at -# https://docs.joinmastodon.org/admin/config/ for the full documentation. - -# Note that this file accepts slightly different syntax depending on whether -# you are using `docker-compose` or not. In particular, if you use -# `docker-compose`, the value of each declared variable will be taken verbatim, -# including surrounding quotes. -# See: https://github.com/mastodon/mastodon/issues/16895 - -# Federation -# ---------- -# This identifies your server and cannot be changed safely later -# ---------- -LOCAL_DOMAIN=example.com - -# Redis -# ----- -REDIS_HOST=localhost -REDIS_PORT=6379 - -# PostgreSQL -# ---------- -DB_HOST=/var/run/postgresql -DB_USER=mastodon -DB_NAME=mastodon_production -DB_PASS= -DB_PORT=5432 - -# Elasticsearch (optional) -# ------------------------ -ES_ENABLED=true -ES_HOST=localhost -ES_PORT=9200 -# Authentication for ES (optional) -ES_USER=elastic -ES_PASS=password - -# Secrets -# ------- -# Make sure to use `bundle exec rails secret` to generate secrets -# ------- -SECRET_KEY_BASE= -OTP_SECRET= - -# Encryption secrets -# ------------------ -# Must be available (and set to same values) for all server processes -# These are private/secret values, do not share outside hosting environment -# Use `bin/rails db:encryption:init` to generate fresh secrets -# Do NOT change these secrets once in use, as this would cause data loss and other issues -# ------------------ -# ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY= -# ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT= -# ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY= - -# Web Push -# -------- -# Generate with `bundle exec rails mastodon:webpush:generate_vapid_key` -# -------- -VAPID_PRIVATE_KEY= -VAPID_PUBLIC_KEY= - -# Sending mail -# ------------ -SMTP_SERVER= -SMTP_PORT=587 -SMTP_LOGIN= -SMTP_PASSWORD= -SMTP_FROM_ADDRESS=notifications@example.com - -# File storage (optional) -# ----------------------- -S3_ENABLED=true -S3_BUCKET=files.example.com -AWS_ACCESS_KEY_ID= -AWS_SECRET_ACCESS_KEY= -S3_ALIAS_HOST=files.example.com - -# IP and session retention -# ----------------------- -# Make sure to modify the scheduling of ip_cleanup_scheduler in config/sidekiq.yml -# to be less than daily if you lower IP_RETENTION_PERIOD below two days (172800). -# ----------------------- -IP_RETENTION_PERIOD=31556952 -SESSION_RETENTION_PERIOD=31556952 - -# Fetch All Replies Behavior -# -------------------------- -# When a user expands a post (DetailedStatus view), fetch all of its replies -# (default: false) -FETCH_REPLIES_ENABLED=false - -# Period to wait between fetching replies (in minutes) -FETCH_REPLIES_COOLDOWN_MINUTES=15 - -# Period to wait after a post is first created before fetching its replies (in minutes) -FETCH_REPLIES_INITIAL_WAIT_MINUTES=5 - -# Max number of replies to fetch - total, recursively through a whole reply tree -FETCH_REPLIES_MAX_GLOBAL=1000 - -# Max number of replies to fetch - for a single post -FETCH_REPLIES_MAX_SINGLE=500 - -# Max number of replies Collection pages to fetch - total -FETCH_REPLIES_MAX_PAGES=500 diff --git a/apps/mastodon/4.3.6/scripts/init.sh b/apps/mastodon/4.3.6/scripts/init.sh deleted file mode 100644 index a1156ba97..000000000 --- a/apps/mastodon/4.3.6/scripts/init.sh +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - # setup-1 add default values - CURRENT_DIR=$(pwd) - sed -i '/^ENV_FILE=/d' .env - sed -i '/^GLOBAL_ENV_FILE=/d' .env - echo "ENV_FILE=${CURRENT_DIR}/.env" >> .env - echo "GLOBAL_ENV_FILE=${CURRENT_DIR}/envs/global.env" >> .env - echo "APP_ENV_FILE=${CURRENT_DIR}/envs/mastodon.env" >> .env - - # setup-2 add update permission - chown -R 991:991 "$MASTODON_ROOT_PATH" - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/mastodon/4.3.6/scripts/uninstall.sh b/apps/mastodon/4.3.6/scripts/uninstall.sh deleted file mode 100644 index c86c4fbca..000000000 --- a/apps/mastodon/4.3.6/scripts/uninstall.sh +++ /dev/null @@ -1,10 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/mastodon/4.3.6/scripts/upgrade.sh b/apps/mastodon/4.3.6/scripts/upgrade.sh deleted file mode 100644 index a1156ba97..000000000 --- a/apps/mastodon/4.3.6/scripts/upgrade.sh +++ /dev/null @@ -1,21 +0,0 @@ -#!/bin/bash - -if [ -f .env ]; then - source .env - - # setup-1 add default values - CURRENT_DIR=$(pwd) - sed -i '/^ENV_FILE=/d' .env - sed -i '/^GLOBAL_ENV_FILE=/d' .env - echo "ENV_FILE=${CURRENT_DIR}/.env" >> .env - echo "GLOBAL_ENV_FILE=${CURRENT_DIR}/envs/global.env" >> .env - echo "APP_ENV_FILE=${CURRENT_DIR}/envs/mastodon.env" >> .env - - # setup-2 add update permission - chown -R 991:991 "$MASTODON_ROOT_PATH" - - echo "Check Finish." - -else - echo "Error: .env file not found." -fi diff --git a/apps/mastodon/README.md b/apps/mastodon/README.md deleted file mode 100644 index 88fbd12c2..000000000 --- a/apps/mastodon/README.md +++ /dev/null @@ -1,66 +0,0 @@ -# Mastodon (长毛象) - -自由开源的去中心化的分布式微博客社交网络 - -![Mastodon](https://file.lifebus.top/imgs/mastodon_cover.png) - -![](https://img.shields.io/badge/%E6%96%B0%E7%96%86%E8%90%8C%E6%A3%AE%E8%BD%AF%E4%BB%B6%E5%BC%80%E5%8F%91%E5%B7%A5%E4%BD%9C%E5%AE%A4-%E6%8F%90%E4%BE%9B%E6%8A%80%E6%9C%AF%E6%94%AF%E6%8C%81-blue) - -## 简介 - -Mastodon 是一款基于 ActivityPub 的免费开源社交网络服务器，用户可以关注好友并发现新朋友。在 Mastodon -上，用户可以发布任何他们想要的内容：链接、图片、文本和视频。所有 Mastodon 服务器都可以作为联合网络互操作（一台服务器上的用户可以与另一台服务器上的用户无缝通信，包括实现 -ActivityPub 的非 Mastodon 软件！） - -## 特征 - -### 不受供应商限制 - -可与任何符合要求的平台完全互操作- 不一定是 Mastodon；无论实现 ActivityPub 的是什么，都是社交网络的一部分！了解更多 - -### 实时、按时间顺序排列的时间线更新 - -您关注的人的更新会通过 WebSockets 实时显示在 UI 中。还有流水线视图！ - -### 媒体附件，如图片和短视频 - -上传和查看更新中附加的图片和 WebM/MP4 视频。没有音轨的视频将被视为 GIF；普通视频将连续循环播放！ - -### 安全和审核工具 - -Mastodon 包括私人帖子、锁定帐户、短语过滤、静音、屏蔽和各种其他功能，以及报告和审核系统。了解更多 - -### OAuth2 和简单的 REST API - -Mastodon 充当 OAuth2 提供商，因此第三方应用可以使用 REST 和 Streaming -API。这带来了一个拥有众多选择的丰富应用生态系统！ - -## 安装说明 - -> 项目使用 软件版本 -> -> Redis 4+ -> -> PostgreSQL 12+ - -### 密钥 - -您必须提供唯一的加密密钥：`ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY` `ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY` `ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT` - -您可以通过命令：`bin/rails db:encryption:init` 生成。 - -您也可以使用终端的 `openssl` 命令生成： - -```bash -echo "ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY=$(openssl rand -hex 32)" -echo "ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY=$(openssl rand -hex 32)" -echo "ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT=$(openssl rand -hex 32)" -``` - -### 其他密钥 - -安装后，进入安装目录，查看 `env/mastodon.env` 文件，里面有其他密钥的配置说明，在您有需要的情况下。 - ---- - -![Ms Studio](https://file.lifebus.top/imgs/ms_blank_001.png) diff --git a/apps/mastodon/data.yml b/apps/mastodon/data.yml deleted file mode 100644 index 2900e80b4..000000000 --- a/apps/mastodon/data.yml +++ /dev/null @@ -1,14 +0,0 @@ -additionalProperties: - key: mastodon - name: Mastodon (长毛象) - tags: - - WebSite - - Local - shortDescZh: 自由开源的去中心化的分布式微博客社交网络 - shortDescEn: Your self-hosted, globally interconnected microblogging community - type: website - crossVersionUpdate: true - limit: 0 - website: https://joinmastodon.org/ - github: https://github.com/mastodon/mastodon/ - document: https://docs.joinmastodon.org/ diff --git a/apps/mastodon/logo.png b/apps/mastodon/logo.png deleted file mode 100644 index e80d6c710f240bc628540cae7ecffc6a5c928d07..0000000000000000000000000000000000000000 GIT binary patch literal 0 KcmV+b0RR6000031 literal 41324 zcmV-yp_5*TP)aVq{s;j%D*1n;AwU7jAEDLNgfRF)MGD7TOn=vutjfrs(#CRgc zI2<#MF@y)O5w@^_!A6zFTO?@6G$=$&-0co;-OnbNGGVPta3OJ@wSne5hJ913mTBQ%^TD4S^f72<{Rm ze-U{P;{;G*2d80COq_znbao}MZ87VoQ%WF!?FAb>?FHKl_7)NBkO0uKRVPAZzuCLw zbL@)2GV`h_4_jXn*!&A%iLg#fabakJ$zTCe+KHFOZ1b2lW7`O=$+C}Nh*cV8t95yxm5BpR5+D-O=!i-XSPLS^Aq`7GS?sH1atUFzm@#GSLmrl0vUY*C7BjG- z1e#%c!S;gf1$)a2cIa94w#c4b_*0#LD{d_a-IK-Uc?Onv4`xk!tP3f@PRbP3x(LgA zMUN$ZVY$t~W+l)7+Y7cAY%kbeutRQx3sUijgq}%yg#KkCEF~`k*kr9Yu^L`^m|pF) zfW_d=2(}k&FW6qNyIIr$ z3hNUg6#!+%L`UoR-5K6=X+=*5}+`4gJg4Q zWMDcD%io%z1m*Ga+FcO36F7Nh zy_A?=W*((rV~_FtV8v?0#Je$OqXc5uUa-Ajd%@o7f*lt4X&U%O!TC|*)zB;EQhd(| zHoA;KGD3)@UkKX^wij$K*jrSvL;q2JBN~x!HwP%-=U|g}On_SiYgaEz?wdwfb44L< z;gXF!2@)uP?FHLNy>9_=_Eo?8?Ua-AjZ#lsZ z1vpBnWsG@YzcXDx1{N7?(9<<`f{l-2R!jQUrh>G9^5nkK$_Mu=#fz9|Z~GZYmEe?^uz5?FCy7+Y2^Ny(@S7Zu)Sb=!S;gP_ktZZzy*9Zx`RuZ-qw<*qf`nH%Q z9-G<1_JW-gY%kb3!S;gnVVx!G(id6T!SrI%c22?yxsdq_<$@VENUnD*gbnZ;VZ}Eo zowh^*g|NL~V_5%ZFW6qNT^6k5lO=g>jzz5@i^O%O=w!2sU`>(Sp*{6`WO^$JHa@SC zlbyKqq$I+6n9|;CA*>{UX4t$060p5sd%^aCy_p0%v{AhX&LWq(A5UI!kQnbdh^5cN z@@6kOI=TQo7Y8D;qizH52Lt2jMNws8(L1NtgQXNK#r&{`h~^C89JkSH zVlk7Y;FuU3HQWT-3pP`VUa%={OC*pfMK9PCwY_>3QXOrp9JZgjm3AXuEqF%7QV0*#d@`4o(QVh=%_j1vt#VEadlz2V3 zA1AVoWD6C*3Y8~;q+msscrGQxCC~^P-!Fj;()WUmVdMKHutEA>urX|WzXUc&-wQT? z9j0Dxh7U4Rj_vfj!6R*(M~>vM`|@EMh1=ZQN-UMsS*|c;4|~BjQ!m(Fus5Ax+Z_pR zX9)$kRzTUeINRjs-md%wgi($~>Dlj0ves-!k9xtz$y&1^J?aG;Cu_}y^r#nXkW8>- zGepAAwzcD4i%QdgSyKA8ux%@fOMvDB3u)LA>IIvEg*0pl^@2^oLK?P&ZhFBE(+Q;c zxY}(|bML1PKuCt+*A&6pM;QB)?GtrJavwFqhOFu*`6DW^wFH`Bd%^aC?FD-a33dpv zICRMpWr*!*o+g%Q5>~1?{)PZc=}`)?dXZrT3W}M7<@cQbM$RGy+Y45J<@b8Q_JX|$ z1v?ZFDe*gzxpPZoa0J+Nv3Zzp2%Fx0hteE2QzNW&T~u?4%U-a(V0*#d8iH*X!sSZq zbLBlsyq$v$bBVeXG=FC6?Pj4O#k>K?qX`K%xZMjj#~VN|*hcCFyAK5`DA|Izjr1iY z`;Qj0fw9F-`cHZ76p`V!HEg~p2_f`?Eqbv4HoV;nw&cYE*zk5Q*pe5UU^CGL;@g5- zBK;^2i^+E>37d(%Yliho)D~8LF%Mge*$cK8tjJO?*qcGH>STnZvo}p*Vv?9Bhb@=L z!dcy4u)Sb=!R{~En@X@l*H@tAvJMMHa`8P7`&J&7r>C%tVlseq+=lg7H^Iu)l!k2~ zfedUf*ob<;_JX}N1UqcVfJ;j6d_y4?8u5{I0$Cn5?gM!G7&h)^kiFReE0w4bHY0%+ zu)Sa-*j})`U~dh_5(p?fJ zALU@Zl=@vt!+Jg$ib|V<758k{g3G~{N+5>q1=|a@7i=%sp>)W&kW@W1%OcRGWtU+I z^RT9R%_P{NbUU<_jYcQ4$Rcn$pf#OE24q;$ zuemK5n_yW76?GXtZ0J6ZVEM~b04qwM5w<}ByP)eNQIWmg!^V5(O zl*F72>z5@iJjJjzqevha@}M6DJqkvwx*kjYCikukTP6V+wij$K*j})Wus6M6hjB5{ zhu{TcKLS1kxi-Ke9}jr-5pSL&!bWg)uY%n398@#GRIr5-kYIbk_JZvNd#ejpIucyU z2?QR4ej}M)gq35}Am~!!PA`0^95#c~2pbRz4MN5#$Ls~$3sz1j;q-#tM}lp4TCKN| zn8O9#O#x-m&H-Gq4#6qy{r7*j})`V0*#ddV;MdzM?tAq{-|%CiET8Tqd83BrGD2 z+VwpeECeos#klw6l!H~5lqgpgR+a!Y!S;gf1=|bumKW?$fT0-JuxOnmPIZ$cZt2p8 zrFvPK5dn0=T^KE zKZOF=TGDc7lF76&Ji3v2@p4YEmU_X?7S>WP*xABb>IFM9*ea1to*G3drf=_Cofo?`4#39LwY*pvk1Db6%(FWBUxUa-Aj zZ(6|)1w?+CuM(an7R1!B3aSvc6{{JV0=6;7Ua-Ajd%@oFf|Vw|;%&hLtZ<8S^d6;N z&%kDK;jpQGa%%E=y!N~`!p8So!S;ep!N&Jn!S;ep!N&Jn!S;fcV8tWB=hNM_6-wJ) zbPAdpHvi((9c(YyUa;j^%<#otu=5mb(FQRVCRW;+M_q&E!e|Ry!s?u0d%^aC?FGB9 z1sf{a;E-GMJ46!tydK4Po^FEG@%u zh{GWa2QXNg{5@Qn+^H%W3~(?2^`{!ZpaQHWe^&#jDy$F?2`4`Y5wY^D2K77k$&oo( zL~&&QuKy4bPJWChKgI;(G0_;uV;YZPJcgYSj7O6nqx#2aG`TYx(P#%oV;JqgPW?y! z7{SgCZEwNm7Hw}~-(m}4yV+t>voDp@{#Taex4l}SlcF|%I; zyS4^Lj=F z+T4WAO<2DHH*V0z2CT2s`Z`>{1~+cN`VG2q18!WWYuDl0)rtC^t}KPrx7d9oSZ~vA zjNH-^a+ttmgDGoXghlV5vm)5|)HcQ?Q5kITh)GI@%}SsFw&Q|DgcG;H$y0dx44yuX z$4|h?lW^ihH5kYRBbi&7;*U@qvb80YFxyh&hati)FXPfOtQ~I18DU~6-?%~7ufvm9 z=<+4HdKE5TrpuS$$tUT`Ww`nzjHz$2w~#6rs^OPmuHh4CN+4#_4BONrI$76((@)#O z3XfQQ6v6VRQabVnJ3CWgRHKn-e6P$M}KWsK3ILK79U+B|@5rLUb3eJ>qyt0ZD0mSilN!2pjQ zgQLgr+0V952Q-FDm*|PJ^!Q_wzaM>+9(qtRp>FmTdsC_ceD~kF(%jM8ZVo;7zXznm zSICEIm-%l~gw2So4XmbOSXlz8z0S%ls5uDsjyv&L&&Fpyt9tq~@aVDJs5WCWV5BpP%$SZu8cAXpo=^zdnJ|T+!OSL&yBzICHmrDj-R|@?%s?o z_NG?_wURBTIeD9dOwyY_%zR&n*02lrw@0+H3U}X)PkRPF`#IH9pN6ZeMT*s_LTt!C z)>Gx0aNg}@PiuofJXk8Ppu^!Vx%3D!U`$t^q(>j2FMW}|{KfHu57PG5{%)}?GPx;K zffQYk$%do^$hA8}1FQnrAd|=paLYVqDpt#F3s_MC3E24l3xcDK$=;~6WowMt+cxXr*yFU~-) z&wN((wf9sne952^H>ymdIu9l$z7C8>P~ifW!gb$4jxwLS@C}p@QO;VN))W(bfe3aS z>-$-1jhXodZ6(NQ(lajzu(3%W`@``c{NCu&#SBI#T5K8YO{)r&yC60WWL#{h_dIi{ zrrtR3Qc~ttDPsmo6Z;Zq9AwW@um=vpt6nqs>epAdpAnD0giuMkn_j-i8kA*HS#1cE zYCR|^-6R|Aw_x&R@k?L}#Tq^$;bx9iiP{)YT43ZZF$Rj5mwcV+d}$1y{mkh1?;ZW+ z=S!N_p0?PQus5wL2rSt`^7uxt8MOk5ML&1gHbT$m0&{~6C2;CAyy@!)FMCC`v=pi+ z4A^mZ;*VE@qvsWLZ{>BU;BLsU9>W%?=iQG08?sRPtMOwJ6S$j+*JAf;`s3r~Fsq0V zT6+&-*q9!Bbo}e@AKic7xVTJnY_Yv6@XVT)N_J1&-FuYFbhMZA2z2xq-t(rx>)tRN zM$YqCWrcSz_=X9iL9U>bvQ7reSo(#?at+v8V8sTEq=OOs%8&|6DOaRVDf3g-zy7S4 zq;N$XPG9)k=)FI;bK^RcaJM_^RY56l`0lq~mi0UMH#4xQ^yRQJYf}2S@0mAjMgqGD zh{*|-4jjany|Q}AO9#(-j$VJ|@#QNEPl@Tr(=0Mdy78v>G3B&F~0A!qtQ;Z zQOaCeY*YGMTNTtwHqN`m*U^?RVttBS8X1_5!?sbN(@{~m=(*3wzy0pzwZr}lR-mUm z#cGH02$BOKQp(&t)&!h z0Q2M(`sH8PzVEZ+21ieZdQ~uslw8T~zQ1dHD@uU8X_UjJtcy6)6l{5~nvphGp1=>P*CYb&kYYrfH!d z=#412Ok_n~N9L`nhMw>WpC#;nlCL-ttXLhmRn?=}?g0b#|+#3T=93s|JQDAM}?83}iLt zY?RcTMhLs62GNx3XuddzSAnQ}t>?gdL?M)RDMZ>gc=76!^#1p4|M@3Ub7Gu&RWN%A zC?y-e+^W$Qrk@k+J|cN`>-6o_cYgQMT~Bp^S;CI=k?AVwR%5P0sHwdne?o6WnzXg> z_lxzKr`_4Mf&}t_!NXAPIu8T8>1$i(y;X6f39I)0`^LZWOWPMO%=H`WRe?aFlI>}a zXl)H%_qBsJe%)~OfMme>)@x|GM#+$mycm@P&!*_+(3|t7>GX2ad%$d7$tN3X+j3RA zvqQiCyQAOw(9X_wG9bFAnbVAvtmxM0CT#4YSpe*$iNF49s&9Pj(#neLQ4OcFB*p55 zWW}mkU*-liy$)RnrIj*@35e~!r|%edkWT1nTc?mkReSE-_~(Ci>*0qe?ww~*wxB2- zhTSVwfZz2Um(03d{ZRPuBoB#;U*QLs#qPfnSnpmAHo)9F*o4boEL{p#T~-x*^V^o* z@Wx?mu^LV4e6U=%2HpT^YRj?_ilA4f`-LL?i^0v<&Q)z&(zecHOOZeK;)U^h-?R1L z15{6edOdxw3TCSc1}}Z#kJ!*3b0{P`c~RAI#Fl@MIRD9*%fn)LUOCSt1*@iUkin9l zT@E(QZ6j=60!i3V0u!Ns`#Y9i|Fv4f@{_EXKGlXSnm5&Na|3Obh#bL}norQvJ|VHz zOhqHFbUn;5_kcAa?RQj=nA!^b1EJSd?cL(J1$y0j3z4&%oVInU z*0n&=tIvpUm{xx`ZK3&X#>c^ z>iNN#D;`!F!BT+9pJ4;6RDR8B1~wxBOh=Uy&=363>T{nzkUX%6;RII@Z)2SU)T`H? zT9G+Dg=|!{Yqo?o_CPl&LSkxHxgEa#8_s{&}0Kt>e+PzBcYEi%zC zXmIJJNZ=f7CR74hIRjYC$cP$XGt>wxKS^m=qUS!Zk~FL_UU>j)Qo};;9O!8ZV$FuE zNlVtGwXOrOt^?1wTUx^J|Do0AJh!TYlzLSV!pcvwc{RBUdTK#BLh-M@dFk!%TD6;P z8`pprLV(6a0L%kxzm8tL_Owgl-UHx^5hT|E_@nXR5MTbPrK?ZU!w-(x$h>cmQ<8Kf zc$K639i=~g+jJ!NioRS=SQ?rClwr)abw)2v{NYq$mMEHKGx z*fVGF8^0ycuwIasGhjUp3%&cbr#VsJJ%|GjSY!+EkOM^c)^A^V!3&4p2DZH_XwPaD zyj={@A}0}6DpCVx)RPKT-WHaGw+dU5OQSUGp@aDSfA65$w9s?HvLG!!g^9i&w%4#d z&5xL#1>my+Y=Fh)Wp%Tx2Jl@!uzLJBW{&^vRY4S+eV z!f6qL054_)fUjp)SK%Aqx-!wSWA>Hws-TSoDwo1$;nfV&?ZFJ1*mJ}jCSe(uVOb~% z8<&N>mxoQ&avnA(0kuiQc=GSJe*5ZkpU=*f<$DnzpT-qJ2%x8)_KJepFmQSn{f6rF z>?>Y9y!#myAX}Z=tAaS3APrkV9GZ~pelqTqNPG>jX$u^iV8yaE!p7;#VTE*>vB7}8 z?Hwy$^L0y_cRu)Haa!PM*xm`-)50j&G7-(pK}ye76@35SJ#g1kv^~g%{1M%vsvupu znyO^MQf$Qu(Epu!y(S>{uK!$tJec}@_z1q^-K+IY z>+4LImbZ{9Xex_y7i8QCXK*B;IpTm7DoJBIHqUq zQ~nP;?*&V*dhJks9dt{pf+l6n9&t;yjJIT_sccfPBw#kfX5`okwiT=Tk9I}XxxDuE zOK7=`(zn_m@#ce3O{ zxQJM^L)-&JWt7uLd^EsDEE2JeDVi`T?tyZ!e)>XKCjonu5#9CF>N~#kK&3nah~cIL zy@u^+zYz~PpmbapBCH<3d)}_TH}SuLN-2V6%m=x6uqJM!(e`h&>+PuoeEKpC>tKlJHLqKG z`m+YySH-*ptV#45wx|6@c1ai_xXt4LydxC=4zA%FzHYhJuXdh@ZVgqC;4KR~^jB19 zF^Us}$ndbXxQ}|<0l^9xpH}Q{o2m;tD~*W(f0P30GEb1T*Bp*!KvGq zkDVBvJT+81YoqP0@%Hu@5eCC*Wu;m>GCXv6c=YJt z#L3~|!&RzL?hCTJBa%LcQ6Dp|e3HgqrL{G@=gli0`n7e$3hRR#nNfEWs{#%isB%id z4($o%6g?K0HMwRC>43QutWxeVNFFv`>k(8^TUfS-L<+V(4Ya;<`~<%FEi0yh5V9o* zXnaOtMeQHj-li{oe&Z`&+IalYttTGex^!XZ;`#0C*LK{}9uz`qtgH_l92`Bqblb_{ z9Zy+#%F|Y!a`(!ePhB~DL|X0AZMyp8_|b|?YXFXVv%crf*pN#K*SI zpBvXUuWVG@WU9cw$(3P}*$J!f`kPPKYhkULFJ-T5DQ-3y*bvip3Z>ZId;CnG7_akTS7-;QkJmnR-GYyJPGt5!QVlqUGxXE%QDcP{<$N1oi; z8ik*W_Ps+>&tex$C#;&fC7n36{I!4W*gao={KUz@j7u>e3iK@573C&od_0E#?SHv) z>0<4cW!oX#bgDoAz{JUrF>I}5gO|nl;-*K9B#b`V=hDc)bQ~t$Qr))>1bq6lhX3Gy zJ*=A0em7$`*2nk$)|FrT&*!dQ9qC)4n$*1oxx-CUh0?DX0s3;Zu=V%xv}Ydt#=m*u zHE%dvb;F?h+-KJReP(GE zg_t7|nL(VXL~U-2?G^m?2RDBGeH;38Sj22o(XuqP_n~`Eyl+yNS-pS`F z!0NMpOJN($shCw6Hr3$;WcGEN=-Kc2JBMEW>Sb=m?ne!~wMoD8!OI`~FXyjc-61}G zXM7;`iui6fqO_2E|2=K05r`y%f?o9U!$0^x-+Ao#BCWYAmqzdVg>%36+n2^;3VqG4 zQ_&^VchztOojs*nlAiS-|FhGnT7VLrrq4$hfHc#P`yfa(v=yw5Nesp z@0FG6pZ@qWp8l+r`4(BCogMn%`!4?ae>uOoJ_?*9te4R%`IsROrj$|@YdNSXd8S|8 zDnStAmQI{pdgu4v{+c%&o=Z_@L^g;@*0V%E`){uO_dng%@ioXBQb_w$6=YL4mq@f^ zdjdN)Qp2Nne)plT{+gAP8Qc9m3?F`A^A~>ZiBEs>YS8+TFYY03iaTYZE-C(Yh@1n? zwlh6c<~AJpE(LAyBI3(mefS%`<-`kKd~nXCcl6PFpZw+bK5_Bf7PDT_51c@wZHY~& z8)qY#!t#nH`>9zkfti4JC1z&6r)?)cp8E6yZ~yMoFL}kGJ(EK#@|*@W<74ib1^A8k z-}un4t|O{Q61%@=PnrfVeZfC&`woVe(+ITjojJjl5%b0Zoj6|o?eAN|O3<*tR>T><=S8{cj!ps$^UUl@)@OgO;aGRIy`;!=FYlN(l} z1~a#Se{0*@^oc*(ss&l0@t>4`i``ZQGsvY~V2v0d+tU8GZ#CvJW7u{$#_~Xd*Sv0} zN`!lMT*IC}xAT)f{_vN+a6?^&!(n5$sqUj*wqtt_Wt*9sz}^F9<1)vi@mPXdq%%>r z#`>*;F13AUEJ0&91N`B=m&RlIyZ`XcxqcSE{wo*%^Lx*#f|J{EszN{DS;<4$rHB<7 zxfqk3ucp?G4avn6AUGYPX5(u>W7w)qtFWqns5J{?v-+QY^8@F;aR2qc|07R1ak87? zZsh#)eA=qs|8RMkwzdIiT&IXu)HdQKs0*qfMUBe^EHzoOjb7vFDCHw=>b4s4%)(~K ze`r03+LHZ_cO5!>w8}&jbW_7V_Q=*h`$u0s``A|fg;&~a1#7j{I;FPPCU=zi#>}z$ z6=u&WBi3Knt{$mh_MjaTLaeO03fy81V@G>F--#l6_`!|y=XPHDsHN+|fA7k3UwEi%dNwd-(T_O63P1a)t;-kd6$$94XrxZ7f&^wuWjJ{0^Z!v8S?jG; z=6jxi-$C*85+miX;t;{sZ+!ECr#)*a(6HETGxp;jx%#s| z@z}!;YydO7l(sO6!x(7Qz?fo#+9QkB?^-eC%Z)g9$Z5qDM}_*-oys^R(OGX!9Xqva zUE1}>=ARv`|UR;^5V2VfO$eY0|Y zT6+^KL|{VD=B~AC!Fq3*57z`X8QT`DU)KI({rf;L9?_qC^va7~zINNm4h7P3W7dvD z%&3_**6GjxWYdmf@?XV%QU%kKgB6tQtxaU-%GHnW`=KL)p)&+4?DTxs#>V))KXvv$ z|A(_zF6}sT5^4=tS)Tw?F7-e4qd{f$Y5gBm)(gNitW3=Rzz5XUUUm=Ez}XF-xn+w8 z7tU>e{P&++IWTzE^Hz5$*z;$%|F3`c-~(UWWLcXTty-lTqjliKQt4@~%1w4z^A?%y z&kAlesg*;mMJqN+U=paffp1@QQ-SD=?LYmatIv4Ofm644NY7d_b9TmHC0sj#AO4VX z{i6=HX*vCM6Vv|Nzhj={?aZwlvdb&r?`H_yfbEoq-QK2u`J)fr`&*ZcMOFz~pfZ2V zZ+w^g~gmalUgxDbNM?{%uW)UGT_WmGV+bG0;BF}bs) zQgYD3uXITPxXW7=c~I5)nhH{a8h}1&LrsX`wQHk)@uLs?>Bp|ku7T{9Y@0`aJ8MKZ zd}MIvQwHGHE$Al;;iyuBX01)s1%b7@jFZbBD4Y2%aB;#cN=si>M$2edtr}fddQjlB7`N;2SN`L< z?d>Tgyt6|;@#7C)zPQcYqm|aSIxp*lH8y5t`w~|!Q{D=^(j$a_Sh*DksG|%3_&A_4 z+Sd9IDl@65itoD`CJhjO=3hPX*dtprZ6>=S^gXh=ZPdcK`x#5#q%n2z8(9cdCJuo| zM;AsWa7uy978aUvX@x1_m?d5+{^mK)T@p^<5F-Z{P1{@ad%tr9(e?w*d1yalsEk&% z?o>OvcQKyEMTkuALFx}MJ#43MY#C0uO3Sw$eYWin86q*~hm2)4vUO)hMK2 z_}O!l&PI2dHoUp2oDm9I#~HVPlLKgjS|918g=B2@q#V$R44p5)1|XRIQ=C|B*#oPY z`Ti&Wudk2)_5bnk#`<`+t!4Mbj9L91J?)u8xAug%=WRc#f?2{=%u*xgY_XT&iDJQV zXo^pr`5m3%jp@T5y8OsP8|pXONq-3K zBlFCQt_L?81I{_(#KKf629`a)wu;92B=y!z%vc6CW$!VdOu5?ct@O+9{^o^Ge!TTy z`OiOb?ZY2DZ`|f)77oD8beZA2-?dnQu=y-C*!K!3%$z$rR#U|lZlyLiv}UjwTR3HG z1{`W&!D2zQ1^viFoB!@79_y4*h+*u&zpoKE@U@PFqr`t55 z`VKG2e>eEu1Z(5DTfssE>pjiGCf;KExPe>ZJUCJ9@zY^zj)4A ztTvc6a0O})pqq6uU2GjkRU2!>>{B-$woy5V_38}4eq$4Xz)t5RJ{b)N!2Fn%H-grT zsa0df+40l=>X9$pw_YxXzx>?#PyL^dS{oFM5vtt5EL00E8#dU-F-b}ews+ydXn^(p z!d~&~lGZn^xJ=v7OBA>-!N@^}9&5iaxRqwQricmtk3aI{zyE*EiU+#vJ)s}Eq*tvV z-1(H@V8E2l{#FIj9}gtYss}6iWD|8sYO9E{nrMbKf)I<41}VxVC7BkmL`RNP$BqqH zbiFlYI;36!U~7wh;-5dVabx6$_s&q|qfx%xpaM3-ZM1F02CLDWMPlsd6SIM>CFsq_ z0|c?U%7al2>JCEB3)xVr^&8`#{1*?e-zXX^Z*S30{`e#7*T(?JCZlS_T^SXIX2uD) zeGT3q9Rn8$G6_uHDrs8CT)fIx04|D7X>R2uH(?l+*YN9%&L!PU$W9$gAItty1&LJU%CHjCiELp!SWLfI3QN=qwk@k|V9n+qddmX1 z?NsHb6@M?7i0IdT`NHFmZrU&?J^Hm%E68TRjT*F0QgY5_G6CPt)3yu2>JJ9Zt}~w1 z>sFmr%!$Ca0#Nqse z)nd`EAVy>9JG<6)->l;?vt!1ktLhFv{2P}#V$7!K#HosXPWs=}CgvSh1ubCnq+XPk zF=7rP&kg6G9JWz4TUZITnN`6~bsvCzm#;;h{LtIiqZi5EwJEPhAKL!l`_3`XW)+x_ z;LRyjJe=Gv#m{(KcP&`s;x!|0bTL5IcUc89_1Y9wuUGgxzjpDF2e9 zEfW=6!;-e3jd|<385Pf|y#`^4XVzl50IXb$>(%&kShSp7wqQdbCiKaVUw!1k?nD~s zQZgyR+Tlu%ob{ni0HP_|byd(BHucE4&%&h9z>u8FAd{j6d!+U?K6P{VC_k&G_*A7=?eAdCxZ~v%*2G|m17{FE# zW}hsrpJkW~{OlWHGnlD&16V%W*NRn)FfB5WJI3h5$$=CSyZ9!qh=}g{i}m~d;=1{4 zk=d%1Ug!xnzTIvjWk#Z`(I~(<3D)X7J_QTlv>pqPt&F`1fNX08!23RZJu?F~8qv@H z%vl$ifWD4$vs+rJnMek$UkQL)nR9NjU?+PJEF0FxQyFJM#XZZFiT=3%)7S6&)Or{6 ztgmYI4|O=PX;ftX-e;;{=CG9?m_Xs1YW)WHT$(#EA91eDus$X`v`%;z5}05sH4B@? zG`qd)$b!k`soMwkV*tteN`|3*Ez1)au%v@T|f`il7pR(OQo zv@Zfx%vqo#4bb)wrhxDNr3*9;CmR$e|LNbJd#K*1!5PJ911+q*ZUY32A%$Ks_qfIK z*>5DnA+X3dyLil>l>7Ogd3{$N%}? zrcq8_dj6*gmVaqMK}m$A2oro?OCDBy%a|5~VDr_tZo5rwH|Iu1T~M!O=qHY@n(LtDT3{!1Vp9k$m*x~m}F z5ga~(RvN})Av>eBFH}JWHlqyluodvrD9!umm9t6Grd09$3~UBh3nvZhCALEeYJhDn z20On9h>jeqAauqqyjg?#y0*9Iw|@0veKpY6$|Mst4+*n_5Qxpx31BWWN8N1t|eV?g<2H1jE0+Qlnr4#cwRlJrC89HZ z_E4~SSUsbozc_MREqI{@tZ0`n?tI{vFSubEz_0$l7cO1cVLF<}%4w-q&Co5xG~G($0z?EI9M?|R!0Rozqfm>v#Ov4ELVnkSV74) zS6t-D;DRVr_S*gL-?4K7A}mq*dvLDtnAu#PLF8#pvsE{ox_yWSG4~zrIjQgJzE9s! z0if2>asB}oEyTB+bH32M6Ksjx2<=)r1as6aT4NU2W-SvV?gJNXksp0{`?r4ef`hR} ztGANCb~a89-E6UD19NWMb93HSZUu;c_`6T0KkdCHt40qTupf;bPYd$xuqtT(rBgF( z#d4SRHGgW0$r78ixGka;FII|BD;- zfC%}4hBlCkjJhGe(d@ZkbFlml|74IwblGrxt8GRj`rK#MRh|8(pFTU~vu>H|(7~1DQd;RQV+YQZR&*{K{iqH(zRRaa?#q7Q+Xl${v zGDIPPgROk5IFXkJ35i9bMpy()fFxm~KBFyc3e)zvbs2HeKF-`RgfOOa@rHwHXiq%8 z{l(91=ux!|-U8=!L^~owjM|w5J1@cJVHtU6Z=*5jtW8?!#r}1YpZQmhUOd13i9fpb znNMA3GetHKf$f;3mmz>#S(O%T2U@J|Zt7nZ@o6wHn>0G}96$Ig7xmQ8B1z|NmI}k_ zik)T^?bwd1g5nknVWdO`w)JVX>R)N8T)WB+0@J*4lZVffiTReoie!`!x!?8mnLE36 zlAYDCMDT%MIzJjyWka>Jnyu`iFK(t9>;N2QBG~7B)$ke5UIKvO5Kf$|PTW=`ZP8eI$Zc@OD z=XQSbUp#vK>WDcj-A)KP?8ytNuoIXVmMNk^1sbXK{KYGUjLha3jv3&?Xi-1zu6<= zdI+TSF&8DU{(G9~2$opvTr#^ftVph>bvwF`f#|l=Lo*Lykr!(+D8ilX@hAT1TClFk zZAD_`#^!b`O)c2vW&G-|U4FwotEZS3MWnl*>2*%muZ{ogk2gR38ylA|MbKW3da*(s znuDbFbyCV?qFBdcb#`}sfHq+D<-gplU#j@znDtFFcw-ckuVJMYyR-zadBgHOZ$6;n zqce2ZQ@zV8m&PCd(E7(dvbnW2s}@V>EZf?erOFIY$E3=F)tJU#xPSfCuRFY`mWg#0 z1%*3s058>@0_lU$f%cCoi1`sqqIdUnz} zjvXIZROT*Rn7v@kSo*^K8(W)Wwk5Wk712K^$>=nKMSA@`D{p!0!9#1)9HMb(t@@h3 zdf?@+UiskrZhY(yHiA(m7>y1D9{Y{GJ&Re%wbRwAi9+Pzi5vq8MTD{>z z4{W~btJmskU6?UzRjs1s6*F#7cDS8dPgQ+~RKYG_vpEjqgsOIBBwbqc>{&$Mf(WxL zfHgqsk|+V|(sCfNZN&*lNRQkVL)wG_8Vq3VFhaO+aN(Bhgon?3@`jswb}EJMKu|@^ zc{;&P=-a>Z(ChD6-6h{^hpV^0d+pV)TlvMGyLRsE*w5JHOO`cs{w}Rqtc_cHT=nEK zn(?)oAOgEO&w2=*uOt|OISJ4mcMab8eQQsB+HSo=hYnZY@m*`L`s$Vc@YC0>TpBxf z{$?yCZDxs{n!yi2wYuMeC@gM%^(UYeKK;!z) z)Gd~k!}Dh9A8K!khrY5IG>?Um$$YqMr#TcyV{kiPc3l+!IZ&!?fA)oXOMcu@~GS zg^nCW@TR;LuWVJ_|KcdQU9~w`Cyd#;DwkF&cFjMo z40TEs%)Gl2kDm$h4fJ(heV69z$C)+u3f`M3!uGJC#iy$7z@dTuyt4~S_Lzv^p)YSR z_p6Q}Wjl=2aiLQRc5FY=cYg2M(c=|2(9CZ#xtmxce=z1eEH;_HZq;g{cm3euI*6lo zIL2}4j@YZNXQ`OO08RXso(8ND>=-kIRdxK7y9e+5o;4Sh;FS@|%82SGIw`FC-cJRr#%mI}?1Mj9|%(#^}W_ zTYAyURuZbm&NUh5XzZpm>CmYkh}F>YGQQ*$OX?$}$Q^8rxH?i4*#Zj-Tmjn~5UdFw zoN*Wml3)x=L-@|`KRg&>s*G4vM)1ohsM?pla^(dt8fw?1tZEutY*3fRW(OAz{qR@1 zweD*;jSX6$2(#7EN%kZ6o71%P@m@a4hJ;ofSUa*tkSSm1#f-F8rKxysU9{WXPSop;bVHkCB|w9 z5#Ijp!>g>?z0=ndH{-%R>+%=5K2;9%o zP)3Z)=&4$Z{ETNWLp+Rc*J9a8X<%0|sV#vf|2_ES4O4>)^cA=d#4MHoavvD(2USoE zD=I_E!B)cCLZ@RN*_-Hdlwu?eOYvKFG!_fVzLm)W8eo%enXlU9d*rB!mt44ZbwmUg z&+S~fR4+4v&|S#a5dzR4Ex+A$BgF+gY$PmQkf0kY?Lr07;E>TovTis;CTe zu%b_v{NG{)Quw=BA&Iak+(b;k=3S(e;5JnRp5p}AZV_>4ZJMC;c@Q^Go_K8AS_Ym1 z(`16q+6mTZ*!t>~uU%!@$4<03)uVI@J9HsdLH3MX2v2kbwzEQ=-D_UA`n<1N24}E_ zmFR0vXTWil&Lsc|Pl+igz5bq66;5D{bXV32(47UtN|7%kqG!JY3*SXJadPnbdk*Mw z38rRIi)G$e+k+z8n*#YxF$=S2(L^q*AJiCb#D8}|6_n_)j55r@wv8?bJ6KnmDQj1H zizo@Zi#8N@N%pqcpHx3lJIU@Uvssd^^@|sGwAIB=n1+;MDHJTaZkgzr&sk#H2e_NS zbGdStq(6>!i6MpHnR{>etE+|qXVusOu$7L%sGhjJ>p4%Ng4fX6_5S=9E*sT^JRSj< zZR@cO1!W9wqSu$a;;*ba)T=e8`1BTHcuC-EBIZUgC|XIp z=;bR%jt-0ykI1u2ou+oCoPJbU^-BDREO1MUY}aA9fs>~OcRqDV>&37G!0F3q-6Tx1 z)>^*%8A~Tl4s2zNLD;~yvBmoL$gUz*s`v86ZS00cU?M-PhUJuNoC{Y4<*+5nFo3Nx z#fx7~ai6+u1)D98cPCGI*oZf@_pRBqw9*-0EZcnR^2M>9<^r`No(+Bq%)K^()c})! zp7+9K9T%lQJbNv4hXMpg5U>qTnKOgz+#L6>q8r!`hxoErtvE*q*-e=(tLW@mRK>@! zRnm?*TXbInNhN{x-({KvnA(HXy9Z&_+Xsr_1DtISkiygoilnr&S>RkpPjj*x2 zP|77JVJeqAY;YODx}A5ISHPP=X|Bz=5cvU+m+M(Ce=v(-eYX&-KcJ)Wv!1(b?f_R7 z_GPAbtl231VeV3YFwUlgSTGp8_!TPz04$OV!}_u?q&7fQe^>(`w|9eUv39OW|6VR5izR_&$kka?$OCbZRE{VdFd013C4oPXIfUOHPb}7vs z$jhsU*pZb8ZXjq~Z(tmahDX#}hiUy-C;_c~&}j4Ly>QvibTM-b-EU^}=L0XuEd$s7 z4c!*&K{%P6>J-p(Ua)lV5Zt(~KF(Z+7Jq*FGTCCu>RkdjeP-azjajX4oC8yrkqJ~s zLRhy2Aw2&@D=;2Y9hBg9zOibkyv3^hi-4a8j<#Wt)$-C>&+ zYn=ovMoeeExfxi;dpGckrBsJ-nPX~0r--30s)A6(rC>#6n1`)mF~p7!(W4xvNl^}# zl}P-Mg17PwKjZwCFT)cdb?jR;uy#o&NPR;)+s2bfddf_lQ}$ayycRSxRdN^qtIF{Ke#pU+@;)0Pf=hr#JHsuyA9@{IIdl~LvFYi8z2 z062CW$wliX0@nN@#Fy4}Ogg+mi)nky>><~I_KKDG)sSh$&{0+3=a|QA3mchi=|3?y zDHlmh0$^eT5A+L~fsNTiFA_Y04d3;~TxO4VQqKEyQTCLqnjoUh^|2e%qV1gR;(BZ& zSTY9@=;8FqQv(bpyIA5~+VV<;p;xUQ+L=2CWaH?J>JOMNYzEGnH1(=By?)m7mNh0a z)vwvJDssv)T0P4;5;n00uy(|(`XSf1wQR9QN$Jne>>h`(wK=w;Tl5|=U{|z)=M-_& zNmWn;TdoX)JKj#3h4mAg?)lfn`>_|z!BP@7W7IUmhL>nZZPrYZ;fVxwkdvB^GR^{0 zzcIFbJSk;v6S2@+y6f&Ge|ny6gfPVBf`R`hvg1cwe)ES5~&G^Yu-XtBUsEUMVG zF>G#*BaO6RB3{4zzLdBFs-OjIm`jv6h8^;!=nbHSDvP(h1vXYqWYG*8b4d~`!x3_6 zgf*9;iBvZUwOzkDwuh<;BV%h}L}mtIYl|JQY|jSJCCc$C2v*N^lMyMc9j>@JL0*K@ zYy@G{5IfG<(9z>VW8Il!WgPRlwv=jGMAqojvB0O#4DCDIQ82FplDShis+Cpb2U_N< zEY)K5N-uCLbXAQ_dS7GfF1pR?)AiX@A{kQv(EEhDrV7Nil!FzOp$N+lQnV36QqgoR zqTu*Zwt#l%Q^-{UmQrN_?-7S3h8dN;8P-n^hB@*wt}VMkS60>Xvvg@ZA{M))t+862 zD4$QcV6EPEHtq7V)ThqnleG-GS@@&JDo}f5Sqq)angwrc<_ERqS}fb8q#jG3uFrT6 zzLdEZkkeoY+K?v%H|)o#L=qnN+qjbp(fS9Gm~Fmjsv|m>cGZ=LUdP%&RS-2T0XCxy zk^c^1#a*}(dthe9Y~%)K!Tl7h9qz`k{80dl;wg1yuwr^2)*Sv{#a_V4issm{0Y>v(^DUrrpu%u~ zX7w2XKUS_yi)F(M)fNan#n1^N3I~hIf9$i^eN`YO3vLF*PQyy;M>EQ0H*WQykK!#X z%p{phqhG&`o>|MG=I!oHtLUlWd)WZQ+?hA|ZTj6-@P3amocR((lG5n5MOx?{hrvnh~qWZsr0^1<9=D15=jpD6g(5Yl)7+@#2}v7@mJIg_?6s{P`L+%%tEPP%9A z5;LG)Lf6f;q*T*V!$l+-4AG8U<}s(2Bx_@`d9SHmQQnea3eznB#yN-9%75{iBa90Wg*xnFuaQ7KAZv-qSWLxP5h?*5D>zus+kd zN9OU#9;yu{@Ypa-Bkr8u$dQS*kQy+ zVfDnxQZJUniW14_`l(sv{&0%Y(0DWk=t_hEIPUE97DBr*uOwJ)HmYOJti`eSI!LoO z(SxJ{)AT3lf0?bDfttBTf-%9;(q8wP;dTl(Xv+nuWmqa`v0e}p6Vjs1gYg*rsUM6u z>!2!_FYK@(X{eerxu!nL6s&10NiId$RCHQfSPq3jE~8O58mu9%0e#;<#AG`O@Ye{Z z@;gjRew`u>>c#zRU6a{$HfzGl_q+v~gfO;89B&>}+8)ImL5KW?H!P@aO6R@)=_u?y!HqCO)i+M4~Tu3Zs znwBmY*;pb%DY$zN9I_r?q?I80R;MatS&Ky%)=g#wjrid$k|qWU*}z!S#8mgzWmQlJ zn^J~Z*rD(^ZvS~KTZ{}&44Wx-u!&6`HfEzSW$LlHv9sN&cFPD|52|+!1jN>YCAQcr zY`lvz;OoUvq&Jvs(16V?4FSfch*bGy+ViE-(ttzsHWxAF5@B3_3nE*Z@s8QJ$n#C5 zi`fZP&<3_7rB6}_SEI8CrS$eu>h)s9@8!Z_OFoTO(u{k&nzpyvfb1Eiir+@CWIYaA zu$Zf|`IC*T(wiZxSa3>2aiv)0{u67Jo9`1T*b8zI{+1S1HWGq&9&z_*v_t%x zMbW9=aaB-AqB4|Vhmt{;|C)mZYyLkZrYO#)XMuhIPT9%j(xVoqc zN?;{!Q!R_Z4y89!)M(k~8H#TvHdsi$8+*RN|GLUyqo)oAw>CLuP~^g1SY$PwyDZo? zj-N2=780n>CCn(t=>!|6&zK5+NqwJ41k$YH^(Iv&G>sZq6`3z7kq8@@%{Fr)tR%0& zbS*ZeITzAmo%&C@+RT#mbk+-31-odmS=eD&y7B}wd`rZMKmM7J2fMwUS&cx6-*j*x>y@M((n97sSU^EQI*bkMk)6%9INh+)0Ced(vPSWiho2Fk>~uNzt5<#Xm|4 z*ve*RC$-1m_6YC}lxkvZin7FCX3%M+EJOr%G8?pMu@v!xi*B)60;3(0HUvw%fjXfI zieTF)Ll1UnZ3gj$*qm@Ivh>)Jj{w$VkqJG9&4?`6dtZW$ZZdzYyQR+a@D$BLrrZ;D zA9+;}9QRltSPhHzrr=1=`-Nsg6rX-*j%FaknGR5EYzE$T1huOH$wh9d18)6-%)B<6 zM8vhC&n?$S%`Gm01xqBEK^-A7D})=5V^23N*FHTn zU1{5ek4tLux0{}}#nuUEK?XpYcDBa?OZ!O`G{80}LkV_hx*YcqrSS>R582>|Yy99w z18h?+B5ZVixtB87$})t72$t+>8NS4mZd@Np_=~2mD1dFF3_V!8slIG>2QQiTf}*2|-iyo90Gkb~6=0=Ycy=YQc6jBK4EomH=0=yc z;W9*FHA>?XLwUg(ci_S`YfWw$6dFB?{_|KprJ9zhN20LrSv-Xn4==?uEf&qqE?KhM zn`7h$j);}eSyj*gD{xCui;ZEcxG<@2FI^xah8`D5gtdCU92R|(C3S3M6D*hs0<_Zc ztbXd~im$+#>|9mt1sec%WgP7&>`a1VXe|XztBcjN2#hdwtAtu+5Qcv=n%(TgO*dZzqtz9@!31{tldY-`Jo9Xho4 zC0pfQDIr-?wh)0io{3jY2b=|p$R09iK2bC`d78FOt5c-|nCdhxH8$lZewxc}t^HE- z8Fq;s`xmEZX?vy$?9X!81Y-j1Fc`*!seQ$sSqzcMMuZKmsWRA1vAxwpZQ3wmeK0@U zF-1>&bw<4^k}TPX%a(#&o)MYK*xnx7qdkGS z*i~EYxGHF9KE=u~Aa55gfvpUSeiaKF)&Dr2Xv{hI+B0|kcRC|U8S2A|GsVcI#5JnV`k2B zs}@V<4X=+}ydkS;^5J+xBopR5?Kiu3s-PIQK^aQ0Lm`_eO5DLKH8e@!1};3k7Af1B zBMD1MS2fGUgN2gQ*3z)Cw7dg{O`?gCRnY}qYQB7WiVIO|&US*;SEildLQjWcRC}AX zw^4h;z15Sfb;(VO;=W$(?A4WeB(@tlXeC5Jf_#ewecDW$!+hsVPJeB&A)wm=Ubj!z z%sQ(I$X^}U0PiWo9IUX_VZm9uUPI<5`ewL{?h{uWoJ+2$Ijnz>QIb39PLd^?iy|)^nK(w6yxgX4rN|f@9j_HRUPiO;7>sJoEuU`0Zvlh*>C6xGpwXyIH{! zbjlRsWP1*KJsp=687~Va6o0lO*R6J`W2~uWXM2lGmuBqP;&#>rRnQ7HqYMLTr({Jz z%xNe#{}CSfzue{amQ%8wYt7(=+P7zpy0GnyNL(q}8@pz;E7iy9Yqu=f0rReznk5n0 z?dz=ThKzf5S6zBnn`>!_+9}yYW;3P**&f!1*Ivuu@6 zJf(<<&1j};a2&RnCkxA8+S=;o#Fy#U^}een0I`i=DFp1y)`wBcZef4Acm1+-sxRRY zA&%Pa@Zwr5K-cyyV3QgC2q_v`bWjx(!?st34JRX*j0@4)5X}dAT0E|Qwj(857BaF& zMEo0*A7=#78Ku)q(;8`HzVc3$)mtTj(|escV8<-k?QQc5y?@QN8wo}`rV3^b+ww^8 z-B4$mf+2q_>7ov4G=lM{Qy-`yVeH(lyY}KvI$1iJ3C{+A3m%3zI{uvk|k&}P%EZ+z>+`UZA%z}fzv{po1!nUlhkTp-DUL}`Z5Z~ zV@*w~gN2=m6N923i>A>|wAZxI-a4oX<_kOYCdhJ`1!;mismoTdjk%}Qh;h=GQt6_;i4`baga=-|uT+5O2D%Zg(h&mF10 z+LA@JNF9vt8Q9{9E~|oaSdd`D^Km(>e2`)^aI^Wj;Q)q@BPQ~&(J^Q4w~oC?!e&^_ z!6xwBr#-eOO5=7X4@c1CT1m76eUo6x_A5kP={z*?ai!Xl)J7~uW<{oHvAxah{|hJO z@YnUFqkl}frf9J?4L=ucab%m)cx-loH#_|>i(o&ff&y4k8G5_XM6g5QNnmZzMo}z}5h3szc0jO5x7)NZ;u{9F6)c+Wn&Q_NM0p<=t1l>NTBKK4&4tw|$XK%alI+5SC{m!H#X3!Z z9dZ?b+O)fteue0tC`=gdvK3r(Kovl9)0zr)$j*H-7P_RK#gc&kZst)QR_Zrez@{jG z_0K>+A5*0;<^ha1JE>&R+htW~Y6XIIA{5QTMH0oQU+IBpR9|w_66>rBwtA=<5)vUJgGuGPN0X z238h=nW4Avs$;6RFX)(#jSeYwVTi?ob)y)vA3`^DtRbWOGrKcnnih4g?@&bSZ{W@X z?L8=Mu|$zY)}2Du6JO>$FBPdqseq);se)$Mj55scL{vefw*y~*Xqv{gEPM@F*tn0g z>3MK{0E-zJ#h+F2qPW<%y|uacF=jyFP{;PtZ3K(HU_11IDzZy15u_Mkmn_#}#q^7& za38*DTC5v)BY&kcq(ZpR*|LmPR{pN5f-J0Xr)dHBFgB3P+X4gR`jzMfieJpaQYwwd zaR5tUOsHT{r(hFAuFG^oFY4r};AW~l3W(W-V9h&=E^ZigNTLxNjIhE-`pb@r*@YoV zGzejPT1U^bM6t^52#t1(8R)vl`iqUCM!Kg8N?@agxv&|2KFlw)}svwtGh9&oIiZ|pN#HhKv{1+>> zj<_rKzX1u>#7Shz6T)KnwFHHsHn1T?z+MO41*jE}TMMN}|5FIoZyH_j9K86Iho17Z z5iglBeqysduvpk{ZO$TDze9cN)E!HES(ca*Cyx;e7%FP97~SmDnP#J%nAJLz#jKs| zxGIP`fqrB%HBrvT?K(n zZP9qN6y;jX9?`eG`xKF#h@||vA&sOzX``;OYJHymY>8Ow#q0*wO*ppF(S#l@x_e|a zW*-fotVjRmbhHPmfD5(&mJ+{1*rt;a;@%?5Vkz-?!-xWD7UqI_?Q?4W5voaphO5)36_{XW5O51QU*4*-;upH1-GQ# zN2t9>de@W=TC$obFbqi4BI1jJ)l)X*I)9Qmm_pBDvYDBQrm6Uw4XG1rjd4f1;Uzd~ z{Js*s<=&H3g(JS=i$%=t4^_|v+t75j2qMCuPRgT~P&zaZaAM0@$GdhCvfxkL*B)66uBT%L3ToCM96=Dl$1anD$<~ zX)j_lm4tZ9=$MDdMSx zykJrP))P#NiMk}q5o$M@=F!YS=+dh%*0oxRRI8%51X3uaX?7KI}Kx(~koYjdNU6JO#O zv(-oDwN&dNnGJVSksSit?eT@c*fIv=SuaH69`ID$LevslUXfVP)$Ea7H?<|Yaf-msQSoL??7AyK0yPFB)iYKrGw8n3yW#Y(A(|zAR$XWs~K3iNaX#?UfG@~SzgM8 z$8$w1V4Y{LrC^|PoT+gc6MRG^Dg5)-6h6Lkz2%NeL4Jru8c#C)0Vqt+*7ZJjx z^V_=lsWnp=^bP2LYaLVtWv~K31ME<^o7fzYj6T&{l%xdVlzJW(8Ak-X`{ObVq9vQB zViCg1Y>eBWh+zbCmg1D&v$+uWcJY|c_JRd+v%j>+sgqdGYUY`?ZAG>sBkPqG=Zy`> zkC-*L?7!I-3)&W@?&w!d=g)2hA#{xPohrz{f}{*{utQ-DOk#o!S%M%v01F9<(~Gc% zMQo1SaIo=~Q(P~)l1Bm&NuOy7^$8K);nAeGFX+N2=_pvUWDQ&L7PyoM7TxcrO*H0C zOwXDRV;3=V7=c@RZ_ygo9e=61Zd-ZfEf(090FC>Y?gcqx>--ZtcJ|UPmPH%n!Kss~ zpb<7GHfKH$JB+vJ%9{_uP*q)0GQ2nkOB56X{W=I?qg*g}S7H^??nl#ydR>^hx$Uj2 z?Z#kpqJ84=mALb&ELf+iyL8Ygi{&DaLtUpJ4%nIAQmG-vk1(h;_oM0|V+E4$D(FBx z5?p*jor_1FznQ%AhWCjoNWw;i_EM%`LrXSaUHt52N^=lDied9-+@xUh$CWq2#{5`o zP%Sg!s&;du3%gT=6mt}hk+Kq?^6K78;(Cxochjz67f!^CEM&c9d5ew5*d6g25YWR9 zYlc#vKOH<3yqTH=%RlwN#oHa~lxCb0xq}p$tzFn+i_cQoJKEl)#~;~%sFNR6L9Ta)k_^{s+Sc@5#mfFCQbJ|ca8Etp) z>D<2Ek#!lJcTC7vb8X-_13!_UHc9a{6 zf3~)zYHqu(3L0QD$}kT*1ZkoxxwcGn6iKf8X4tfoQ+enLVZ&S+&)iACg6|Zf?k@UL zdX|Vc=$3*thoyGm^So7vMT?p^S#@LD7E3VID$x1R#q-;s1Di>2JLLI)LOZX^s-OW@ z!sn_yhLx5yMWA-64C#45K}X5vat@Zz-%%NPE0kc}{&(4Ig0ZIT*5SutqAQp2TY|M@ zyJX^dWyfSJOJ1d3cx6H}rgQOg!f>`SD0UxtMc0i1t)(>AS&`3q%5*I8AN zQK{gvj+J2^b{H@rdL<&66r^c_C1)~1_$vWRlPkt%3P#z7m? zSLIB!O*VD<>7b_1#kjkS6GaJ|HrBi6F0h3}r*3zFLxmHmJ?)~s1qsBD zQulnpQs}$yX`Ym7O08OKTwe=45?n8gxPEPP;fXDOKg0M$-lVzGJykHhG8AE@<7fD# zpI#c9aB;{U-5e~6X_BznT=>>L>8#~kECh_rxr$qzjV=Jb!@j>FyIHVy)M+J25XGbP zGzSuv>baqGX^REZJK7Q0;{CFp|Mc|<3-yGTTF;iS0QQ9{NW&H@!{AQhv|3R$2ggzS z>4lnZfJL?uSx^>A!BXZ(Dx^GYhIs6u4v!+(*cf+U=PgG1uz6BP)qy(slpiu(AXqC; z(l}bpF8o8i>B;+g(9|WWgTYH%teLK~AEc+D7eWZ|;Fs4;kgPicfxt}?*;sD(PG?m? z4wk(hp3R?w6;7-5ybPs1t7IwXVMTr22%8a*PTvFzX;|`lob~I@lI_SbUz*swEvk>z zd(Q zAEoRzbWDaPWodz`K#m_MgN+CB4t5CM5V`QRG+VH4;^W zIdELa&X_)S? zK77PB;k}+EVp~~5tz=J;+1rP9?NQaAd%ga#LjUADSg>()Q;-p0J>mZ1SFgS3m1}xp zl}JA2q?pX9WoCA15f*@Ig7&+{SToNcT)wcqc6hLG$E>eyNgt6x!r7I@fc9@5AxpQ$R<3(X zR@tH#9WaZ!^OP9wxo?&Te)GRP!Fv;rqhPZ!PTf@n1+azq3|8EQOL~E`lB&zL{Yv3# zm9|5TLQGQ@w4-SBCX)!@k~-yhp@d*uT&TAE(NfU!4A{<h!PN{9vFj!sAcNAj#`!9WN{ZpTK(tO5f7{li6hPtW>WZq)TLS<+Y@QJS=NqogC zG2%s-ipj!KoJJBMhow9wU#u*`Lc|+SU!P56vQzv0UOK;BSX1+(bfuHEaNFuby?Ylk zeYE;^-*E3Pm;sqxRgv$Qu8uypmTddFbJH^6zR`QtRu$*}?Stn4jEYC|fcXh9$5)qC zL7LSoAJ>U`ju0xwoKr*J9JXKcy95QY(Qw2dMV>O8a6hO zH+(hr5vH1LPg9d~@~|KFI{Ns%m+B70Ome9RS$U#(U#Wsp zSj?K%?lPG8LNN=56h6yzD^0N2)OWnAsv7sM>Q39R&h4;Q^=3`-5C7Wv`pkS~ znpe6-^5`vD(eDRUkc5Q-WhlUg(FG(VYOu=-s0fy)Nx*u&hkrO)5o`i87+f<606ZxJFs5Fs{7W)94@gcyD9 zxVMfTBKqUszjXETHenU_5$5bU)ft56!ggL2qw3d+Dum-)~LGR-V89MjE zY|3GIRpntrepvZktY;q9e~aBD2W70;^JlkgQZggFFyjnilufEyQr`LcJX$d3tZBNg zC%`FS?Z>HYTJsMRpJ&!$5}~yOGLQCBu=#bBvw&4~hNfj2ed<>96Srbp3D&p>f;aRJ zqB{0@E`lZV0sqbi&N)lkyn&|Rs+D>c!ah<3S=f{^%)<)1Z~;3%M+oJMv_11WiCRmB z#fTSPP8+S=2y5$Dn5&gKrns{7Uv@_-a>h7>)&HXjmzaNp}Yj@#`ERRUH{Vk*VQ@}dn&ChmsPMP)^NY6f+pA)q7il| z9!|?5PLNyXhI>Tt&KY;7_9{WgM*vH(+<4^gTBraPq_ZTYenp0jBxE1ep<6!7#QHAp z6ALs>i9y8g=QWOKE~&vLk_&%O56#A%!snR4(RV8Swdk-lU&FQ-c$QeHZ9nfl6KqLz zWXU3Ph}5h3t@}u|--X(}ms~337HNJKC$16FI*mM&R_Y*UCs=b<7ya^k9@XEsau=X8 z91$uqr$p{gRUkYJU`1t^hZVOv8qvD%)_4Og zuW`^oCGqM_mBTvp+=SE#v@HBC~dwClqJz3HlV4P`( zW=P`jw-)@qQa}Xzgw=xH&Eh22lO7MM|0O!k;0%HM7C4T$W(OENOPVRnG>| zwxmtn&(Ty(RPg@%>B6pwUbB50hm_^V)lYQ_M`arokb(w$2I3*_>_O z-7KY;rKC;gY|tx1E2U+}ibDhOBTDxHBRF?z<)Oz$*%jLo6=2cFjs}w%SX-O#JU#Wo z_h&$NeozkvFCRvs?@tnr)K8m0~>bT;jI7jkA)*s+Ex-7K8DP16DjpkaZhY6o zs;4K!>2xVrmwY$gI9?kXw0lErRY4&kbBMr

Y)Y@j#%2Ro3=_MxVm57|8HK`*^D$Kq z%i8PIzEoL3xB*OEEdI&wzf&yK+b1xt?CPWfG)b|b;;_Kx>gXCN2$}V)_-=c;+0ZCl zX{iZm&j2r&=`Bw)+o<<09||q;9BZ5%(lnEm^kzx3*xO(7`OsmH+Lh zjxJm)n+A8*+W`5X;d==nBn6v7Qe=b5+~No| z4K~ZdEM14$QjLH61a^8Z?WIPh1D8s6 zqdQ;nDuNnHmeJrI!0wPv*EItqwrHxBOdBE=TGHtGhjTRnKao53U;3q1kJ8T3>~vM;yvWz9Wb0UR==F_Tv$NKXHDE3Pswtm znB}<{?ophwx@Ps<^#QQCSzcO5nzbiM>Y!$?x#{A}mD0rCKE1O94TR2SX|eL`H>bY) z&8hryS%nR4^{gH)ATy{qvdL)G)Sej2ZGBbuNkN*~reYX0n+t?`6Gt$E;FvLSf*BNk zdRa?m(G2;JHjpDb|CXAb%w`SDdN%D^^q*Jyv4|($TG^vSRuDRym!6w_>Px5dOI3(x zUyOhy5`fOv;=|tB(Yfo(qIwk%yIBg-Z6?LAvDuvC-y(Puc#-ob5g-X|!;CdF%Xafh z>GlSz6Y9tKMB-)kZ9(o?_MbgM>m>@VbE;Oi7d1*CUsh18+n7gw`I_5 zVzyyxhdms9vuy75WN;cAnhnLdeY1MFHWi)G6Q!;Fs!qI>*H=x3?iMTEw^SV)vVhAWSwS1A6>KL%|gRhpMHC}TBRPH$RY^_LZ?tF*1q?Rsc(ICvOXMv zZmL4GZC1#KCO||rzbXRr?c#Y5l?iX=amw z8ftJ9{s_Y0{>{t=Kcf3Uj#IXrr?ifQS8H@_rZlmyU!PV>4I;FtrWTGt;bnxOBd-M~SQ;Y-wh%mVWx<+2_7J zH8oivVCrZ_(y}um#+d>vCl<``TA;feB&UAtdMOB-O+7-o*|br(Qp~20!bQoVG&I|w zeNa!%9WWbc%B0Y~4PX_a6tnSVHpfR(kn^WkAAD>~Vg$lg=8c!2y9ZCw34U* zkKWA$J1NC%3waxqyiUQ=@=xR`ETIlMIsFp=uha*Ym9{ToYjW}I>Nmb};pHFAn%m2| zpXd$aqF3^0EbDRrpk)eKhp+7=1t|otKtr=R7O3H+3wpwsvH^e4GtBp~DX*ZPwpjACH*P__$QNJXus>e`)&?whXlz9eZQx`Dd@b_=A~Bh2p+6 z=*(ZB1F+xTH6{)O?zMJk)W5Bn*~Sic zbF(Ql-KLRQGN~hRl|#=dKXtJ{_K_rQUqYL?cy9Ike>3&dAI~n#mEyiiNPNsJWU8tK zG+s|U6V^0IF_$4$SbZBLj=Wu@py6KV%X*3tFI<2Dxo>{>mOSi)*%k*bZ?KE^z@*m9 z25tHeD?OWr4b}tU(tLS-uDok^?|SSD!X`64RXluX{?Je6j=VZgwR#tUxMpt}tLm8Q zJxe8s9aBUvkO0W*Wc83)gsBc=%yy81q)VPwss;zbT>5UC$i}{prn_v4+0b*$)Q!BA zh(}&o_~6GTuzSO@OAD2O!Kk-SrZL_s5YhZx`O>-7<8Lj!b7b-Ssr`3>Z1(Q zl~aARe{946%mlM~I0Eb7I!X7aYjV8KyP0Rx^1^l5$xI410cx$`YkQ#{Xr$^j#GZ(B zo7`7o z*#&&EF6-^u5E;vs+U`;iG8^2zq1lu?S#uRy@t|!0#63=9vuWRl7aM76)|`2=e$%K9 zk+>wG(#AjHn(-fq=B7(?)1_T|x^~RNJ^Kb0=1TmsoISC0_QcZnpScWxBcr){-m~Mj zyNB<%d*t@JhbHz)*NhEPDbv)&!lm=8=TEOpo>@J4ba8gN7_UNB&5w1}45TZsv(?oCT7I7_NCxue<)kpj6W_?$-%B@hrtNiCwP+UH zeJRCk&@zE*Gu>>UMD7tiySfWV-KV9vWdR6I99?(r>)yHDRY;Ne5_k9}wt zbZOhyzWoDcx@Z2I(#{mS%YjywDla~F^~LAZzP)|X_(cDnef{Hm`o?zkjg9y2*qIyK z)i=JUf7e9s&`?j@WZgB?YE;PAmKQ5ai{;go>dJCub)}kLsVrWr%+D2<7AgzZ$_sPl z#f5UISWQ%tO>Zna#-3VAJWJb7wq+l8P8il5DT|N#%44tAxnqe1riTF~eZM-}UJ3$c z*R^APtu%b4f$GO@?f^9&1ibcAJ#QxJLZ^+0Zog{;Y<FL3pyZd)d^xbrG|HQujcilQPwySq!M{aaSZfsZYz);T(JkeB$s92~K z^0n1`HGZuuR+bjZiwmWdrRvI3Wo4*&x&Vr8*%_C)@U zdxqOx$W12ppKiTt*g8HIT@|&D9I|cP_8|niYoaH!Yge&Wqq*tA+;s8eu|;cBKkfSl zqR}0FBV)ZIqq+XUXlSTsV5p~mAXHZZ3Kz^`|9 ztX6BaD%7e}snn_!s#e!trDC;MSd-4;YOP$Vm5NlXFDVvkr9!n-td&Z&wI!>ST9u!7 zpyJ7E_h>H_nPHsxj82Jaf$N1rqH{|uh&mvk`o-v{94xvapRQkUG3&cm>K2!S9a>S(RLJKeP|uyncErL+ZOTU@#7IwS zU?!ABFE`fd*F|pmV6&cELUTl9({N%l?OlO46Tn12AQ z{>BR@u6}^y5uyt5REg+3gu4x}y-V;kW$1!VN)0HVv{jKC$|nmfOGj4`+=V zOP%k~8ifUdkN(}gXmvAE>aeDz>ZJuE0*KVV%n#Px@zG2)#8X5mot&Cevm4wEd+qK$QR6lN1{}v)$2E75( zXnU#aceGpc0Q8>+!VN`YvT2}gxX`0-ke-HvfZlp_;oQmm?RO8EEjyIt6JqZz{Ri$C zo;;H`K}GA;qu&^<+rQ8}j?8wT<1DJ-5aVui>cK^huNAzAI*hyStDB;;2!YJ=#GVu~ zWJHR9byd~zV;d!~jeqELDgYCkwk=jHUQ)0ByIb*OSQcN!MB)5UE_j0&h^n?5@noCA z;#kD*dHnJJyxP`+Z8EVN8;iz$4~?2EOJr4f9T_w}X~b&6Hj<#Dfst}*&Di_IBa0D_ zb=m+Wa~|t2Q>(`fznE!dHsHWAKQs|ri0ZRmMY@>rgQfm5mqZmZwj7xm39a9bY-i>2 z16ZdRtm7FQaf36Fw!s|ggk$detKzqA2}ER5(LYZ@-W9<%=g^DK%@zx_E{GL)w;~bU z_sA#!8`0Sp2&NmXmJPc4tZTIxk2u1GSPK?<>dZ6?kSh$tb?r!NE|rUZPi`ngByQg|22XfdLV9_TAUe|2Ogn92QbknXN7%>Pf61EKD$u`BEL(be~^_xTI za&_A;yT3nLdw8JNdLHBWnLI>bLJGQuA0e35@rY+`fobOf>+05b?Qwia0_{A;2i8qM zO<&rvb-$XZK20ERtg^>-Vhdn`(Qyl21h%coBmze!auV0(^|gwu!)ltmST=yY2&P#I zSSWy}$mz>%uRJ8f0|{?d*kXvtHid^{!F6BYr~i9)ezx5C5raVaKm2zlxElvv?Oy$j zScayl$-1G?xU#S0H)7(eqY6%Z7I>IbZLejH)$Lo1!lJi3OM!A!R`(re{~_=rbDF` zc{Q1F&x0d39~dwx!mcaJ#FWJ$!NebJw*%B^pSl%`she>XRan#bj9``oXhmbW0w&OA zK_y6mpPHsObA-~QUd6HX=|}-Cy|VIM~n#_*%e2Ct%uSP<3QbQVY6*4qRxGjrh7<3Eg7_ z8?r*e1Wdx*E#1A8Eb_u@Ed-Sjku+#@4!|kD`YqU>gi&ZRy*U6`MAdnp^itE~0V1g# zjEHPAoa96!8`jOOR_U3qUDV0^9qG)*Bt6<+{MdNTn|dZ7v!4EfX|u8UN%dunQf@p+^A%ah>9iOf3gFE~Q!HOX`Pzyh=CMLdqd9v)yC5Rl1Pn$DoL&iQuaifY zzVXy#=Qe+V9vRl-y}z*I?)!)I>>t5-dSa5g#+|i>;)|~0P%tWSoqCjVV1IC~6z8&u zjJo4!`6eU>V7ntCyAIrpMex$)pZV(K(bpH+RkrJ)K{twAF8a++-!{6_c3Mf9*&}S& zQ<)UU6G9mQ$&EJtYAyR9=?1s%FZ1&iF%=v{WSfGHGi%#)kbPFSD)S0zH z!y*O%FtQ`}Pd~9gCDChhjvSIFUn!ePUW?I#bSd0i-&qh8Jr5lC=j|>-XTci3SVznF z-{pn!P5TFLyKAU3yV#;LE0#FK3W&o6Zv!kj)}^%?f(W=fBIU}w}((_b6c z+hkgS&aP6c5#Iaw*u^u2D;G;(&$pA#Q4rdKh-|B{ign(WM0paZNmEPW-dmbF^ zxS&C@yj)469(?fqJ5C;3nY&tHD?02P1>puGBHJRqo*+7+#3Qqa@YZV!kA84`Y*%jw z>1>)aYg6+9dV28jU)pu=L&HZ7EtLu+{;VK0MPjn86I4|Di3bf3;7>n$e0izTj&fcX zTx!t^is;@^cilhy=`Y@S=lw%%E2SWG4&uqK1N8enp&8=YQ&>P)S*n~rnScDF6CLEt z8jyEu@=tp0)4)*A`#-$1TB)5pw(34@1VL~RkzGGlYsqzQ-&{Ug_{oy-g>ZO zJU&D};%wfaw*(-H@ZN_;u3jo$JXaK*6@)ZIWY-0{BN%|02Fnl2>UZxPUcC3g9piiY z+fmw$V}k~MkALL-!w})&5A3-8-Gc-$d!<~h*ojlN6+6dsx86B$-^0TXe_-_L69$6sl889EE%|LcF)8~tzG*`J7d`|x-F`2PDI-qG%ow+flFu~XPWd_qKe z`~tn!IPR+})#sj>{n6jfuCCO&US|F-`rZFF^TY4V zmP@Tnde}*fjpq&=9Ju9v*zrLyz)M7`IYLSpDeuk{KCnjtL-WM zW-u@q?K{wS>z#x5J~({m{X?T;ElutG)RPwuJ-=utyA`S3_K3)C49A((k`ya%O^Z)W z{Z&Fl`)(Qh%oiURpXh6I*;^wSG)U7~KER{bop^q>eB{v5%RgE;^Y&I(+rgn|&&_@B zx~>1#I|pw*(7*SVzMbQ}8?f`#7uH19&B_p+-PVZ6ZWv-Cuv$Ul;es{A)%q06(BAz6 zfB0wb8Qsy6PtV9PcklR~ z-hBu9Z$8jJvA1{k-oByXo^{zlM0Xqq^`ucE>u0}-&Td~i<8I%YU_4&}dGAr@bEyn3 zJ^<^Li>qJw{bRrN`FnTl+=!QSgF##qjyNqX&YVR;0#fhm+mKqPX6K4OC8c)f?%u~f zJoea!#{i&Ms7+rgUY;y1UaKrztE?RUGhog;UE+=;K zN~o^@>fAn39}&E4KVf?zBD-OHeO1{`r1i$!Rdx3dQ3=wCHe~6}kEjEX#HBXI6WsoR=$3%mK#HM0RC@Zq9O2Y=lyb!MvYxlg=#;dH)j z1z!(#`Y%4utXc(p&TF;Xe2j0k{cZA>FbYjz0syCY+wq8 zgogTS!_zw`XI3|Of8+9>~-RdfXEs< zoSCA`yo+pB6U?tv{@w2!eet=O_7#2|c>XM((H6Zav5a@CRVhW(sKL}*Efy(lLa^^l%nbS6zEVQQGZ{#AL4@JzxQPQ~o2NiXhbA5I|I~NY?ZK z2UxApmp^~Je;|6_FOIjb{H+qlXXE+9O`ujgwKmm4H;AbR4gm|$+IY3vFf@e(g<6?{ zw4_~3vcty$X9HdFcgI@u%j0*i);qCdNKjUY5l?ngaDuaFhvfq1!m3M+PWS({zhD0R z@n^m|Su9lBQuK9!Ecgg)mTwaP@V#2JQ-W&`QC|O-j zn!-$VKB+;mM2HY0LsFWyBP8bhW>UFUq_|W}QX^Y(E2)uM zt2Xvj*L}3qQ69eNs~{q~xp1BJ{-Pa4&`OJO4A=flT`c_T-#q;C4?8AAn~c)>j;%gj z^xeRKpUd0N*8fV|u~E3Tfgy87QRMCv@ObT0R9zaLT;L#*yG;?1-CTH>z|kLFS&f+R zL?<3rZ9~%YJ3=#{SSTT4d0TyK@a5iNL zzs4XsSrBgT6R?Aq34)01=7UXi);O;55?ime`@i}6!YBXn>)(0$;%bMuv>~Ylw4rH0 ztz6)T6x{lLTtjc!fnD=MBis1oRqefn$=F1!r(9COS5;4HP5%PY4R<`>%9H8gx~(f{aFIP!WuamVE3D! zE&b^qy#4fFoNvoHTqg-J;-Oocf0}e?H}DF%vfw7x`3mVer^MtkRmzhmXwE_q(vZ#w z+2M6kK%2&2UrY5Nt+bq)4UzR}hzIt$sP)*7Uay2C zp?(ShgAJjS_v^JI2pdN{*-SyVMZ{@`HZel|j}0W6+O`>kDGr^E1Ew z>#rYrey$zokqM1O@cL=@`3Ztd37$ELj$pbWEMDZLcWGyqK#$*Lc8wP;FIE1}52xQb zyf{A5zh_^+=*X60`f~BPXQr3tD`s>uf4ECw`ytcM+%WiD;%W)88DGtWu<^`bs3)<} zv%ZjHr2hWE?ZdzJ8wVcy(6~r#yC6N4WT{a5)?Z)x?l-Pbjd#KjkrhN_Zz!J5su>1M zTM(Jqz|0)uY%OaG(mU3d-+FNP*M9xLqfdy`wt-k=Uwz@)(|>;9%B2E;P6vwvaU!yU zi0lo=*I7GWQ{7!frLP3OV+*e4BCweZ0pNX)kAM8P?%cV%Gp54r8uBZZuYBp;3(roQ z!D)3HW~2uZj@4E~cKaeJTsIgyBN%}BqukPZDmx;?Q@NrZg%-7c0Q~@7+AUN4(lhn4T&=^R>wro}Dfg)#K3k zu=;(ZW3nLO0zpK!T?BMiza{Os^0qG%9AFBoW!Tf%cp}1w9^Luq2Y289$k^Wf18q6O zZlYYOoqlKeox@AV4llg<+CrsVV}o?ZvDc`sr1gL8AY*on3KWIiu87FCmlT)Q%RnIW zhPV*3c&-zl91C6WR5KY3=QW#@R5l}pVYLX{6S!NcQP-p0Qo#`EU`dDcAFw1yLCurcOgN|w1&BngkByjbyK8l(iT9NgQwhdh9q{jk?$O&L7RJ3n zkmnMZ&5@7oV-pO*6BdiYZga$w-O7aXXg#ksUO;}o2B+u3nhyIJ3{DdnKO`4iaKgA? z8rdgq8aQxpc;Ej1`yLuQaByg1Uw7l)S9@h-p?i~_}aSW z+nTmDY#36ob3Ay(i6Y#6Q~$)?f$@pHJ^T7@x_NNdp1xhX`$ord!=t%P>E=r{T3M;C zELNr_3v)B2tCv@2rb^dl%hOYZnJa}_%@#YMs>)#pM_AGOgp}0QcyUE-zP>=1WzTuF9?g1Ofo$hC%caNCsPZo`BU=dv(F>cHqsJ|)L^Hd}nOOFDn+RS1+$#y`1!bTRm~-lkaPr%i*i4kyJNBzy@3O&S7n339hl5i~35C?aJjv z6GU8v1R}B>gt?Q+PB~3%VO>46w#IuPK#ic@>J{g6Ia)$wT{*J;o*L{6oW^z{$FMCG z)yGb?YrI$|`P+w^o|0?OZH}UZ5jUc0V*=*c1N>RSty%Ax{5faQ3$t3mWj3P3+(1s~ zRpPJ$M?|(02?r2jaUtz;X(5f`h0OCb&ac`~=YA4#4X+=>i*%YOfQkmA2}$sZvLnTq z5LFW%4V@RHiIW>k<;BtNrEx!5Dl1quMcXUZy0*HH7Lkd!CcRo$LA}6qP+mo01&fGm zhr(SpFILOd58^qg1)WGB~QLmI2RQbp&|rZ^U=ER(N4;;1#{)BCkRNL}WW13`#9?AyqFWFqyU1 zpVPrsGxRqaIR@jaYA3P&mXwOdn#&78eu&b1Bqu*r9gq@dkrFF#1`i;=ldG<_E5}=% zsvX_j$g0!JfGxzpG12pZ`6(si0TLV#8Y3dx9VDa{{AMd#ttY2e9>)um;>2-Xigff= z`+3S?L`qblP2Lxuzd^Z}>L_tjo2!jhv%J7-GGNO~8}XhNtnp1vD#27WB3|Qn{8B5t z@q;6*wxK;GI3R2Q5!r466YeaRRIQ>aF3WveyR$ZdXp^|C`^r6C)R73XHFOG$hGY=OTOHu{}qIEL}a@R zE?+8qYE_h6zY$G5HE#AI-Lj)ps~)H&h?5gc3K^;xE$Uz{vuPFH9K(c!dGR15RJL!K zS575!==Uf<-yKHVA%MB6&G z9*Q znur*HUaJGP_T0HY>y!q>ZxyZ+5!vkkI=*cnZfm-OfuC;xY%Chyn8tSFLZ)*XbZpl2 zhESV3kz0SHRtEwn3BnuHij1Bb0VN&da88>wjp?shFSV~M;98%IQTTj5A*P;Hsu zqIFe`3k%>(Qf_4ySkEvbh)k0gxFJy$?`_`a3lm+n%wct)0+L!8*$-Nq$sW@VERfc4 zB{2bE(-D!~o}{a7s^BVt(}Nu7JXK;YrjDwb9%XSX)gHx|ZB4;~V`b@}stQWjo)-X4 zH#J{{u|cbqXseJNBC^{YUu_!*t`Rh};%3qfc#=N34lbA;S*>`m$?_qObf|VZWTPe6 zvkAQxR4nLqueSm|zBg%_ZO~(HXBx1w_%wUUfWMKIT>8xXE4#&5CFZf#x$0*RywHy9CFp#gr5R2?!6SUf_&J|^{>5l~@^A|fkXKfe3u1RMgJwJ5@_`y5`LwnPxN z3L>&XrUd101DYr@Ds(DcKE1vm2ts=ikrf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP z1VP9U5m`YHgbWdp6$C-Z5D{5H5QGd7krf0%$Pf`(K@fxt5s?)HLC6phSwRql3=xqP u1VP9U5m`YHgbWdp6$C-ZkpC9|0RR6TuA+zTv8{Ok0000