From e3cd3cec3f9e6d305d8d610b49a2b42bd1606702 Mon Sep 17 00:00:00 2001
From: Jephte Clain <Jephte.Clain@univ-reunion.fr>
Date: Fri, 30 Dec 2016 18:10:59 +0400
Subject: [PATCH] diverses modification de apacheconfig et apache.tools
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- rétablir deux répertoires de templates différents: celui pour debian wheezy-
  est distinct de celui pour jessie+
- support d'une configuration complète ou partielle
- support de la mise à jour de la configuration réseau: configuration complète
  (interfaces standards et bridge) ou partielle (ajout d'adresse ip)
- support de templates pour la création de nouveaux site
- améliorer le support des certificats: utiliser ceux qui sont déjà installés le
  cas échéant.
- support de fichiers *rewrite*.rules directement dans le répertoire
  principal. Les fichiers de RewriteRules/ sont obsolètes.
- quickstart pour apacheconfig, afin de simplifier son utilisation dans des
  scripts
- fonction legacy_mkRewriteRules() pour pouvoir traiter les fichiers
  *rewrite*.rules dans des scripts.
---
 apacheconfig                                  | 163 ++++-
 lib/ulib/apache.tools                         | 659 ++++++++++++++----
 .../apacheconfig.d8/README-apacheconfig.txt   |  76 ++
 .../certsconf/default-certs.conf              |  15 +
 .../templates/apacheconfig.d8/cgi-bin/.udir   |  24 +
 .../apacheconfig.d8/cgi-bin/test.cgi          |   6 +
 .../confs.conf}                               |   0
 .../apacheconfig.d8/confs/ssl-config.conf     |  15 +
 .../templates/apacheconfig.d8/modules.conf    |   4 +
 .../modules/ssl.conf}                         |   4 +-
 .../templates/apacheconfig.d8/network.conf    |  24 +
 .../ports.conf}                               |   8 -
 .../templates/apacheconfig.d8/rewrite.rules   |   2 +
 lib/ulib/templates/apacheconfig.d8/sites.conf |   4 +
 .../sites/default.conf}                       |   0
 .../sites/default.ssl.conf}                   |   0
 .../templates/apacheconfig.d8/syspkgs.conf    |   9 +
 .../apacheconfig.d8/templates/SITE-certs.conf |  15 +
 .../apacheconfig.d8/templates/SITE.conf       |  31 +
 .../templates/SITE.ssl.conf}                  |  90 +--
 .../apacheconfig.d8/templates/SITE/.udir      |  24 +
 .../templates/SITE/favicon.ico                | Bin 0 -> 1150 bytes
 .../apacheconfig.d8/templates/SITE/icon.png   | Bin 0 -> 29641 bytes
 .../apacheconfig.d8/workers.properties        |  17 +
 lib/ulib/templates/apacheconfig.d8/www/.udir  |  24 +
 .../templates/apacheconfig.d8/www/favicon.ico | Bin 0 -> 1150 bytes
 .../templates/apacheconfig.d8/www/icon.png    | Bin 0 -> 29641 bytes
 .../apacheconfig/RewriteRules/update.sh       |   6 +-
 lib/ulib/templates/apacheconfig/confs.conf    |   0
 .../templates/apacheconfig/modules/ssl.conf   | 103 +++
 .../apacheconfig/modules/ssl.conf..d          | 103 ---
 lib/ulib/templates/apacheconfig/ports.conf    |  29 +
 lib/ulib/templates/apacheconfig/ports.conf..d |  29 -
 .../templates/apacheconfig/sites/default.conf |  51 ++
 .../apacheconfig/sites/default.conf..d        |  51 --
 .../apacheconfig/sites/default.ssl.conf       | 190 +++++
 .../templates/apacheconfig/www/favicon.ico    | Bin 0 -> 1150 bytes
 lib/ulib/templates/apacheconfig/www/icon.png  | Bin 0 -> 29641 bytes
 mkRewriteRules                                | 207 +-----
 39 files changed, 1395 insertions(+), 588 deletions(-)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/README-apacheconfig.txt
 create mode 100644 lib/ulib/templates/apacheconfig.d8/certsconf/default-certs.conf
 create mode 100644 lib/ulib/templates/apacheconfig.d8/cgi-bin/.udir
 create mode 100755 lib/ulib/templates/apacheconfig.d8/cgi-bin/test.cgi
 rename lib/ulib/templates/{apacheconfig/confs.conf..d8 => apacheconfig.d8/confs.conf} (100%)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/confs/ssl-config.conf
 create mode 100644 lib/ulib/templates/apacheconfig.d8/modules.conf
 rename lib/ulib/templates/{apacheconfig/modules/ssl.conf..d8 => apacheconfig.d8/modules/ssl.conf} (99%)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/network.conf
 rename lib/ulib/templates/{apacheconfig/ports.conf..d8 => apacheconfig.d8/ports.conf} (65%)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/rewrite.rules
 create mode 100644 lib/ulib/templates/apacheconfig.d8/sites.conf
 rename lib/ulib/templates/{apacheconfig/sites/default.conf..d8 => apacheconfig.d8/sites/default.conf} (100%)
 rename lib/ulib/templates/{apacheconfig/sites/default.ssl.conf..d8 => apacheconfig.d8/sites/default.ssl.conf} (100%)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/syspkgs.conf
 create mode 100644 lib/ulib/templates/apacheconfig.d8/templates/SITE-certs.conf
 create mode 100644 lib/ulib/templates/apacheconfig.d8/templates/SITE.conf
 rename lib/ulib/templates/{apacheconfig/sites/default.ssl.conf..d => apacheconfig.d8/templates/SITE.ssl.conf} (69%)
 create mode 100644 lib/ulib/templates/apacheconfig.d8/templates/SITE/.udir
 create mode 100644 lib/ulib/templates/apacheconfig.d8/templates/SITE/favicon.ico
 create mode 100644 lib/ulib/templates/apacheconfig.d8/templates/SITE/icon.png
 create mode 100644 lib/ulib/templates/apacheconfig.d8/workers.properties
 create mode 100644 lib/ulib/templates/apacheconfig.d8/www/.udir
 create mode 100644 lib/ulib/templates/apacheconfig.d8/www/favicon.ico
 create mode 100644 lib/ulib/templates/apacheconfig.d8/www/icon.png
 delete mode 100644 lib/ulib/templates/apacheconfig/confs.conf
 delete mode 100644 lib/ulib/templates/apacheconfig/modules/ssl.conf..d
 delete mode 100644 lib/ulib/templates/apacheconfig/ports.conf..d
 delete mode 100644 lib/ulib/templates/apacheconfig/sites/default.conf..d
 create mode 100644 lib/ulib/templates/apacheconfig/www/favicon.ico
 create mode 100644 lib/ulib/templates/apacheconfig/www/icon.png

diff --git a/apacheconfig b/apacheconfig
index ec52ddf..6f824b6 100755
--- a/apacheconfig
+++ b/apacheconfig
@@ -16,6 +16,19 @@ OPTIONS
         Créer un nouveau répertoire de configuration pour un hôte
     -d, --destdir DESTDIR[=$TEMPLATECTL_NAME]
         Nom du répertoire local de configuration.
+    -f,--full
+    --partial
+        Indiquer respectivement que la configuration est complète ou partielle.
+        Avec la configuration complète, le serveur peut être complètement
+        configuré avec tous les fichiers présents. Avec la configuration
+        partielle, uniquement les informations spécifiques à un service en
+        particulier sont disponibles.
+        Cette option est utilisée avec --create. Par défaut, la configuration
+        est partielle.
+        Pour le moment, la seule différence est que --full crée un fichier de
+        configuration nommé .apacheconfig alors que --partial crée un fichier
+        nommé apacheconfig.conf qui est visible et donc découvrable et éditable
+        plus facilement
 
     -t, --template [OPT]
         Gérer les fichiers du répertoire local avec templatectl. La valeur de
@@ -46,9 +59,12 @@ OPTIONS
         Lors du déploiement de la configuration, les valeurs des variables
         dynamiques sont remplacées dans les fichiers destination.
         Les arguments qui restent sont passés tels quels à apache_autoconf
+    -N, --network-config
+        Mettre aussi à jour la configuration réseau.
     -r, --certsdir CERTSDIR
         Spécifier le cas échéant le répertoire contenant les certificats à
-        déployer. Cet argument est requis si le répertoire certsconf/ existe.
+        déployer. Cet argument est requis si le répertoire certsconf/ existe,
+        sauf si les certificats sont déjà déployés.
 
     --localhosts
         Créer dans le fichier /etc/hosts tous les noms d'hôte ayant un suffixe
@@ -63,24 +79,45 @@ OPTIONS
     -S, --one-site SITE
         Ne déployer que le fichier de site spécifié. Cette option est utilisée
         avec --deploy ou --localhosts et est utile pour le développement et les
-        tests."
+        tests.
+
+    -k, --new-site HOST.TLD
+        Créer une définition pour un nouveau site à partir des fichiers du
+        répertoires templates/
+    -K, --new-site-templatedir TEMPLATEDIR
+        Spécifier le répertoire source pour les templates de site utilisés par
+        l'option --new-site. Par défaut, utiliser le répertoire templates/ situé
+        dans le répertoire de configuration.
+        Si TEMPLATEDIR est un nom simple sans séparateur de chemin '/' et qu'un
+        répertoire templates/TEMPLATEDIR existe, alors prendre ce répertoire-là
+        comme source.
+    --new-site-force
+        Avec --new-site, utiliser le nom d'hôte fourni même s'il n'est pas
+        pleinement qualifié"
 }
 
 action=
 destdir=
-nohideconfig=
+nohideconfig=auto
 templateopt=
+FULLCONF=
+netconf=
 aac_certsdir=
 bits=
 oneconf=
 onemodule=
 onesite=
+site_host=
+site_templdir=
+site_force=
 args=(
     --help '$exit_with display_help'
     -c,--create action=create
     -d:,--destdir: destdir=
     --no-hideconfig nohideconfig=1
     --hideconfig nohideconfig=
+    -f,--full FULLCONF=1
+    --partial FULLCONF=
     -t::,--template:: '$set@ templateopt; action=template'
     --help-template '$templateopt=-help; action=template'
     -l,--list '$templateopt=l; action=template'
@@ -96,15 +133,23 @@ args=(
     -8,--jessie '$array_add TEMPLATECTL_VARS sysver=jessie'
     --bits: bits=
     -u,--update,--deploy action=deploy
+    -N,--network-config netconf=1
     -r:,--certsdir: aac_certsdir=
     --localhosts action=localhosts
     -C:,--one-conf: oneconf=
     -M:,--one-module: onemodule=
     -S:,--one-site: onesite=
+    -k:,--new-site: '$action=new-site; set@ site_host'
+    -K:,--new-site-templatedir: site_templdir=
+    --new-site-force site_force=
 )
 parse_args "$@"; set -- "${args[@]}"
 
-apacheconfig_loadconf "$destdir" || die
+if [ "$nohideconfig" == auto ]; then
+    [ -n "$FULLCONF" ] && nohideconfig= || nohideconfig=1
+fi
+
+apacheconfig_loadconf "$destdir" "$nohideconfig" || die
 apacheconfig_sysinfos "$sysname" "$sysdist" "$sysver" "$bits"
 
 ################################################################################
@@ -128,7 +173,7 @@ if [ "$action" == create ]; then
         ask_yesno "Le fichier $(ppath "$config") sera écrasé. Voulez-vous continuer?" O || die
         rm -f "$config" || die
     fi
-    templatectl -d "$destdir" --config "$config" --no-load-vars -m --write-vars
+    templatectl -d "$destdir" --config "$config" ${nohideconfig:+--no-hide-config} --no-load-vars -m --write-vars
 
 ################################################################################
 elif [ "$action" == template ]; then
@@ -142,7 +187,9 @@ elif [ "$action" == deploy -o "$action" == localhosts ]; then
     [ -d "$destdir" ] || die "$destdir: répertoire introuvable"
 
     args=(
-        -d "$destdir" --$action ${aac_certsdir:+-r "$aac_certsdir"}
+        -d "$destdir" --$action
+        ${netconf:+--network-config}
+        ${aac_certsdir:+-r "$aac_certsdir"}
         ${oneconf:+--one-conf "$oneconf"}
         ${onemodule:+--one-module "$onemodule"}
         ${onesite:+--one-site "$onesite"}
@@ -160,11 +207,113 @@ elif [ "$action" == deploy -o "$action" == localhosts ]; then
         apacheconfig_deploy \
             "$destdir" "$aac_certsdir" \
             "$config" "$oneconf" "$onemodule" "$onesite" \
-            "$custom_sysinfos" "$sysname" "$sysdist" "$sysver" "$bits" || die
+            "$custom_sysinfos" "$sysname" "$sysdist" "$sysver" "$bits" \
+            "$netconf" || die
         eend
     elif [ "$action" == localhosts ]; then
         etitle "Mise à jour de /etc/hosts"
         apacheconfig_deploy_localhosts "$destdir" "$aac_certsdir" "$onesite" || die
         eend
     fi
+
+################################################################################
+elif [ "$action" == new-site ]; then
+    host="$site_host"
+    templdir="$site_templdir"
+    if [[ "$templdir" != */* ]] && [ -d "$destdir/templates/$templdir" ]; then
+        templdir="$destdir/templates/$templdir"
+    elif [ -z "$templdir" ]; then
+        templdir="$destdir/templates"
+    fi
+    [ -d "$templdir" ] || die "$templdir: répertoire introuvable"
+    force="$site_force"
+
+    clrtempl=
+    ssltempl=
+    certstempl=
+    wwwtempl=
+    array_from_lines templs "$(list_files "$templdir" "*SITE.conf")"
+    [ ${#templs[*]} -gt 0 ] && clrtempl="${templs[0]}"
+    array_from_lines templs "$(list_files "$templdir" "*SITE.ssl.conf")"
+    [ ${#templs[*]} -gt 0 ] && ssltempl="${templs[0]}"
+    array_from_lines templs "$(list_files "$templdir" "*SITE-certs.conf")"
+    [ ${#templs[*]} -gt 0 ] && certstempl="${templs[0]}"
+    array_from_lines templs "$(list_dirs "$templdir" "*SITE")"
+    [ ${#templs[*]} -gt 0 ] && wwwtempl="${templs[0]}"
+
+    found=
+    for i in "$clrtempl" "$ssltempl" "$certstempl" "$wwwtempl"; do
+        [ -n "$i" ] && { found=1; break; }
+    done
+    [ -n "$found" ] || die "Aucun template disponible"
+
+    if [ -z "$force" ] && [[ "$host" != *.* ]]; then
+        die "$host n'est pas un nom d'hôte pleinement qualifié"
+    fi
+
+    etitle "$host"
+    hostname="${host%%.*}"
+    clrconf="${clrtempl/SITE/$hostname}"
+    sslconf="${ssltempl/SITE/$hostname}"
+    certsconf="${certstempl/SITE/$hostname}"
+    wwwdir="${wwwtempl/SITE/$hostname}"
+
+    mkdir -p "$destdir/certsconf"
+    mkdir -p "$destdir/sites"
+
+    sedscript="\
+s/SITE.TLD/$host/g
+s/SITE/$hostname/g"
+
+    if [ -z "$clrtempl" ]; then
+        :
+    elif [ ! -f "$templdir/$clrtempl" ]; then
+        ewarn "Le fichier $(ppath "$templdir/$clrtempl") n'existe pas. La copie ne sera pas complète"
+    elif [ -f "$destdir/sites/$clrconf" ]; then
+        ewarn "Le fichier sites/$clrconf existe déjà. Il ne sera pas écrasé."
+    else
+        estep "sites/$clrconf"
+        sed "$sedscript" "$templdir/$clrtempl" >"$destdir/sites/$clrconf" || die
+    fi
+
+    if [ -z "$ssltempl" ]; then
+        :
+    elif [ ! -f "$templdir/$ssltempl" ]; then
+        ewarn "Le fichier $(ppath "$templdir/$ssltempl") n'existe pas. La copie ne sera pas complète"
+    elif [ -f "$destdir/sites/$sslconf" ]; then
+        ewarn "Le fichier sites/$sslconf existe déjà. Il ne sera pas écrasé."
+    else
+        estep "sites/$sslconf"
+        sed "$sedscript" "$templdir/$ssltempl" >"$destdir/sites/$sslconf" || die
+    fi
+
+    if [ -z "$certstempl" ]; then
+        :
+    elif [ ! -f "$templdir/$certstempl" ]; then
+        ewarn "Le fichier $(ppath "$templdir/$certstempl") n'existe pas. La copie ne sera pas complète"
+    elif [ -f "$destdir/certsconf/$certsconf" ]; then
+        ewarn "Le fichier certsconf/$certsconf exite déjà. Il ne sera pas écrasé."
+    else
+        estep "certsconf/$certsconf"
+        sed "$sedscript" "$templdir/$certstempl" >"$destdir/certsconf/$certsconf" || die
+    fi
+
+    if [ -z "$wwwtempl" ]; then
+        :
+    elif [ ! -d "$templdir/$wwwtempl" ]; then
+        ewarn "Le répertoire $(ppath "$templdir/$wwwtempl") n'existe pas. La copie ne sera pas complète"
+    elif [ -d "$destdir/$wwwdir" ]; then
+        ewarn "Le répertoire $wwwdir existe déjà. Il ne sera pas écrasé."
+    else
+        estep "$wwwdir"
+        cpdirnovcs "$templdir/$wwwtempl" "$destdir/$wwwdir" || die
+        sed -i "$sedscript" "$destdir/$wwwdir/.udir" || die
+    fi
+
+    eend
+
+    if [ -n "$wwwtempl" ]; then
+        eimportant "Ne pas oublier le cas échéant de mettre à jour HTDMAPPINGS dans $(ppath "$config") e.g.
+    HTDMAPPINGS=($wwwdir)"
+    fi
 fi
diff --git a/lib/ulib/apache.tools b/lib/ulib/apache.tools
index 722b6e5..eaa8d8e 100644
--- a/lib/ulib/apache.tools
+++ b/lib/ulib/apache.tools
@@ -5,28 +5,101 @@
 ##@require sysinfos
 ##@require apache
 uprovide apache.tools
-urequire base sysinfos apache
+urequire base sysinfos template apache
 
-function __apache_resolvcert() {
+function __apache_rc_destdir() {
+    [ -z "$3" ] && set_var "${1:-certsdir}" "$(get_APACHESSLCERTSDIR_prefix)"
+    [ -z "$4" ] && set_var "${2:-keysdir}" "$(get_APACHESSLKEYSDIR_prefix)"
+}
+
+function __apache_rc_loadconf() {
     [ -n "$__rc_dir" ] || __rc_dir="$(dirname "$__rc_conf")"
     eval "$(
         source "$__rc_conf"
-        set_var_cmd __rc_cert "$cert"
-        set_var_cmd __rc_key "$key"
-        set_var_cmd __rc_ca "$ca"
+        echo_setv __rc_cert "$cert"
+        echo_setv __rc_key "$key"
+        echo_setv __rc_ca "$ca"
     )"
     [ -n "$__rc_cert" ] && __rc_cert="$(abspath "$__rc_cert" "$__rc_dir")"
     [ -n "$__rc_key" ] && __rc_key="$(abspath "$__rc_key" "$__rc_dir")"
     [ -n "$__rc_ca" ] && __rc_ca="$(abspath "$__rc_ca" "$__rc_dir")"
 }
 
-function __apache_checkvars() {
+function __apache_rc_resolveprefix() {
+    local __prefix __cert __key
+    local __certsdir="$1" __keysdir="$2"
+    __apache_rc_destdir __certsdir __keysdir "$__certsdir" "$__keysdir"
+
+    if [ -z "$__rc_cert" ]; then
+        # si pas de certificat, alors générer un préfixe pour chercher les
+        # fichiers
+        setx __prefix=basename "$__rc_conf"
+        __prefix="${__prefix%certs.conf}"
+    elif [ ! -f "$__rc_cert" ]; then
+        # si le fichier source n'existe pas, vérifier s'il existe dans la
+        # destination
+        setx __cert=basename "$__rc_cert"
+        setx __key=basename "$__rc_key"
+        if [ -f "$__certsdir/$__cert" -a -f "$__keysdir/$__key" ]; then
+            # parfait, les fichiers existent déjà à l'endroit prévu
+            :
+        else
+            # construire un préfixe avec le nom du fichier
+            __prefix="$__cert"
+            if [ "${__prefix%.pem}" != "$__prefix" ]; then
+                __prefix="${__prefix%.pem}"
+            elif [ "${__prefix%.crt}" != "$__prefix" ]; then
+                __prefix="${__prefix%.crt}"
+            fi
+            if [ -n "${__prefix//[0-9]/}" ]; then
+                # enlever le suffixe numérique, uniquement si le nom ne contient
+                # pas que des chiffres
+                while [ -n "$__prefix" -a "${__prefix%[0-9]}" != "$__prefix" ]; do
+                    __prefix="${__prefix%[0-9]}"
+                done
+            fi
+        fi
+    fi
+
+    if [ -n "$__prefix" ]; then
+        local -a __certs
+        array_from_lines __certs "$(list_files "$__certsdir" "$__prefix*" | LANG=C sort -r)"
+        if [ ${#__certs[*]} -gt 0 ]; then
+            __cert="${__certs[0]}"
+            __key="${__cert%.*}.key"
+            __rc_cert="$__rc_dir/$__cert"
+            __rc_key="$__rc_dir/$__key"
+        fi
+    fi
+}
+
+function __apache_rc_checkfiles() {
+    local destdir="$1"; shift
+    local file
+    for file in "$@"; do
+        [ -n "$file" ] || continue
+        [ -f "$file" ] && continue
+        if [ -n "$destdir" -a -f "$destdir/$(basename "$file")" ]; then
+            [ -z "$__apache_rc_quiet" ] && ewarn "$file: fichier introuvable
+Le fichier existant $destdir/$(basename "$file") sera utilisé"
+            continue
+        fi
+        eerror "$file: fichier introuvable"
+        return 1
+    done
+    return 0
+}
+
+function __apache_rc_checkvars() {
+    local __certsdir="$1" __keysdir="$2"
+    __apache_rc_destdir __certsdir __keysdir "$__certsdir" "$__keysdir"
+
     if [ -n "$__rc_cert" -a -z "$__rc_key" ]; then
         local __rc_name __rc_ext
         splitname "$__rc_cert" __rc_name __rc_ext
         if [ "$__rc_ext" == "crt" -o "$__rc_ext" == "pem" ]; then
             __rc_key="$__rc_name.key"
-            enote "La clé privée n'a pas été spécifiée. La valeur $(ppath "$__rc_key") sera utilisée"
+            [ -z "$__apache_rc_quiet" ] && enote "La clé privée n'a pas été spécifiée. La valeur $(ppath "$__rc_key") sera utilisée"
         else
             eerror "Impossible de trouver la clé privée correspondant au certificat $(ppath "$__rc_cert")"
             return 1
@@ -36,30 +109,31 @@ function __apache_checkvars() {
         eerror "Vous devez spécifier le certificat à installer"
         return 1
     elif [ -z "$__rc_cert" ]; then
-        eattention "Seul le certificat autorité a été spécifié."
+        [ -z "$__apache_rc_quiet" ] && eattention "Seul le certificat autorité a été spécifié."
     elif [ -z "$__rc_ca" ]; then
-        ewarn "Aucun certificat autorité n'a pas été spécifié. Cela ne peut marcher que si le certificat est autosigné"
+        [ -z "$__apache_rc_quiet" ] && ewarn "Aucun certificat autorité n'a pas été spécifié. Cela ne peut marcher que si le certificat est autosigné"
     fi
 
-    local i
-    for i in "$__rc_cert" "$__rc_key" "$__rc_ca"; do
-        [ -n "$i" ] || continue
-        [ -f "$i" ] || {
-            eerror "$i: Fichier introuvable"
-            return 1
-        }
-    done
+    __apache_rc_checkfiles "$__certsdir" "$__rc_ca" "$__rc_cert" || return 1
+    __apache_rc_checkfiles "$__keysdir" "$__rc_key" || return 1
+    return 0
 }
 
 function apache_resolvecert() {
     # Calculer l'emplacement des certificats correspondant aux arguments $1 et
     # $2 (qui correspondent aux options --conf et --dir de apache_addcert()),
     # puis initialiser les variables $3(=cert), $4(=key) et $5(=ca)
+    # Si ces valeurs sont déjà calculées, on peut fournir $6=certsdir et
+    # $7=keysdir
     local __rc_conf="$1" __rc_dir="$2"
     local __rc_cert __rc_key __rc_ca
 
-    __apache_resolvcert
-    __apache_checkvars || return 1
+    local __certsdir="$6" __keysdir="$7"
+    __apache_rc_destdir __certsdir __keysdir "$__certsdir" "$__keysdir"
+
+    __apache_rc_loadconf
+    __apache_rc_resolveprefix "$__certsdir" "$__keysdir"
+    __apache_rc_checkvars "$__certsdir" "$__keysdir" || return 1
     set_var "${3:-cert}" "$__rc_cert"
     set_var "${4:-key}" "$__rc_key"
     set_var "${5:-ca}" "$__rc_ca"
@@ -93,29 +167,33 @@ OPTIONS
 
     eval "$(utools_local)"
     local action=install
-    local certsconf certsdir cert key ca
+    local certsconf certssrcdir cert key ca
     local __out_cert __out_key __out_ca
     parse_opts "${PRETTYOPTS[@]}" \
         --help '$exit_with __apache_addcert_display_help' \
         -C:,--conf: certsconf= \
-        -d:,--dir: certsdir= \
+        -d:,--dir: certssrcdir= \
         --out-cert: '$set@ __out_cert; action=dump' \
         --out-key: '$set@ __out_key; action=dump' \
         --out-ca: '$set@ __out_ca; action=dump' \
         @ args -- "$@" && set -- "${args[@]}" || die "$args"
 
+    local certsdir keysdir
+    __apache_rc_destdir certsdir keysdir
+
     local __rc_conf __rc_dir
     local __rc_cert __rc_key __rc_ca
     if [ -n "$certsconf" ]; then
         __rc_conf="$certsconf"
-        __rc_dir="$certsdir"
-        __apache_resolvconf
-        __apache_checkvars || return 1
+        __rc_dir="$certssrcdir"
+        __apache_rc_loadconf
+        __apache_rc_resolveprefix "$certsdir" "$keysdir"
+        __apache_rc_checkvars "$certsdir" "$keysdir" || return 1
     else
         __rc_cert="$1"
         __rc_key="$2"
         __rc_ca="$3"
-        __apache_checkvars || return 1
+        __apache_rc_checkvars "$certsdir" "$keysdir" || return 1
     fi
     cert="$__rc_cert"
     key="$__rc_key"
@@ -129,9 +207,7 @@ OPTIONS
     ask_yesno "Voulez-vous continuer?" O || return 1
     urequire install
 
-    etitle "Installation des certificats"
-    certsdir="$(get_APACHESSLCERTSDIR_prefix)"
-    keysdir="$(get_APACHESSLKEYSDIR_prefix)"
+    etitled "Copie des fichiers"
     if [ ! -d "$certsdir" ]; then
         mkdir -p "$certsdir" || return 1
         chmod 755 "$certsdir" || return 1
@@ -140,38 +216,36 @@ OPTIONS
         mkdir -p "$keysdir" || return 1
         chmod 710 "$keysdir" || return 1
     fi
-    if [ -n "$cert" ]; then
-        copy_replace "$cert" "$certsdir" || return 1
-        chmod 644 "$certsdir/$(basename "$cert")" || return 1
-        copy_replace "$key" "$keysdir" || return 1
-        chmod 640 "$keysdir/$(basename "$key")" || return 1
+    if [ -n "$cert" -a -f "$cert" ]; then
+        if copy_update "$cert" "$certsdir"; then
+            chmod 644 "$certsdir/$(basename "$cert")" || return 1
+        fi
+        if copy_update "$key" "$keysdir"; then
+            chmod 640 "$keysdir/$(basename "$key")" || return 1
+        fi
     fi
-    if [ -n "$ca" ]; then
-        copy_replace "$ca" "$certsdir" || return 1
-        chmod 644 "$certsdir/$(basename "$ca")" || return 1
+    if [ -n "$ca" -a -f "$ca" ]; then
+        if copy_update "$ca" "$certsdir"; then
+            chmod 644 "$certsdir/$(basename "$ca")" || return 1
+        fi
     fi
     eend
 
     return 0
 }
 
-__APACHE_AUTOCONF_SUFFIXES=(d8 d)
-__APACHE_AUTOCONF_SUFFIX_d8=(-d debian -v jessie+)
-__APACHE_AUTOCONF_SUFFIX_d=(-d debian)
-function __apache_autoconf_check_suffix() {
-    array_contains __APACHE_AUTOCONF_SUFFIXES "$1" || return 1
-    local sysinfos="__APACHE_AUTOCONF_SUFFIX_${1}[@]"
-    check_sysinfos --vars sysname sysdist sysver bits "${!sysinfos}"
-}
-function __apache_autoconf_filter_suffix_files() {
-    grep -vF ..
-}
 function __apache_autoconf_setup() {
     if ! check_sysinfos --vars sysname sysdist sysver bits -s linux64 linux32 linux -d debian; then
-        eerror "apache_autoconf n'est supporté que sur Debian linux"
+        eerror "$(get_sysinfos_desc): système non supporté. debian linux est requis"
         return 1
     fi
-    urequire install
+    urequire debian install
+    if [ -z "$__apache_autoconf_no_require_apache" ]; then
+        pkg_check apache2 || {
+            eerror "apache2 non installé. impossible de continuer"
+            return 1
+        }
+    fi
     compute_apache_prefixes
     return 0
 }
@@ -193,24 +267,8 @@ function __apache_autoconf_fillcopy() {
     # script sed $FILLSCRIPT. Le fichier temporaire $FILLTEMP est utilisé pour
     # le remplacement des valeurs. $3 contient le cas échéant des commandes sed
     # supplémentaires
-    # Si des fichiers suffixes existent, ne faire la copie que si un fichier
-    # approprié correspondant au système courant est trouvé
     local src="$1" dest="$2" sedscript="$3" perms="${4:-go+rX}"
 
-    # vérifier les fichiers suffixe
-    local suffix have_suffix found_suffix
-    for suffix in "${__APACHE_AUTOCONF_SUFFIXES[@]}"; do
-        if [ -f "$src..$suffix" ]; then
-            have_suffix=1
-            if __apache_autoconf_check_suffix "$suffix"; then
-                found_suffix=1
-                src="$src..$suffix"
-                break
-            fi
-        fi
-    done
-    [ -n "$have_suffix" -a -z "$found_suffix" ] && return 1
-
     # valeurs à remplacer dans le fichier
     local var found_var
     for var in "${FILLVARS[@]}"; do
@@ -225,14 +283,16 @@ $sedscript" <"$src" >"$FILLTEMP"
         src="$FILLTEMP"
     fi
 
-    copy_update "$src" "$dest" "$perms"
+    copy_update "$src" "$dest" "$perms" && return
+    estepn "$(basename -- "$dest")"
+    return 1
 }
 
 __APACHE_AUTOCONF_HELP="\
 --confdir CONFDIR
     Spécifier l'emplacement des fichiers de configuration apache ainsi que des
-    fichiers 'confs.conf', 'modules.conf' et 'sites.conf'. Par défaut, prendre
-    le répertoire local DESTDIR.
+    fichiers 'syspkgs.conf', 'confs.conf', 'modules.conf' et 'sites.conf'. Par
+    défaut, prendre le répertoire local DESTDIR.
 --confsdir CONFSDIR
     Spécifier l'emplacement des fichiers des configuration. Par défaut, utiliser
     DESTDIR/confs si ce répertoire existe.
@@ -264,7 +324,7 @@ function apache_autoconf() {
     local autoconfdir certsdir confdir confsdir oneconf modulesdir onemodule
     local sitesdir onesite cgibindir wwwdir certsconfdir rrdir onecms
     local sysname sysdist sysver bits
-    local destconfsdir a2xconf
+    local netconf destconfsdir a2xconf
     local restart=1
     parse_opts "${PRETTYOPTS[@]}" \
         --help '$exit_with __display_apache_autoconf_help' \
@@ -288,6 +348,7 @@ function apache_autoconf() {
         -7,--wheezy sysver=wheezy \
         -8,--jessie sysver=jessie \
         --bits: bits= \
+        --network-config netconf=1 \
         @ args -- "$@" && set -- "${args[@]}" || die "$args"
 
     if [ -n "$sysname" -o -n "$sysdist" -o -n "$sysver" ]; then
@@ -298,13 +359,13 @@ function apache_autoconf() {
         sysver=("${MYSYSVER[@]}")
         bits="$MYBITS"
     fi
-    __apache_autoconf_setup || return 1
-    if __apache_autoconf_check_suffix d8; then
+    __apache_autoconf_no_require_apache= __apache_autoconf_setup || return 1
+    if check_sysinfos --vars sysname sysdist sysver bits -d debian -v jessie+; then
         confdefault=000-default.conf
         confdefaultssl=default-ssl.conf
         destconfsdir="$APACHECONFDIR/conf-available"
         a2xconf=1
-    elif __apache_autoconf_check_suffix d; then
+    elif check_sysinfos --vars sysname sysdist sysver bits -d debian; then
         confdefault=default
         confdefaultssl=default-ssl
         destconfsdir="$APACHECONFDIR/conf.d"
@@ -340,6 +401,19 @@ function apache_autoconf() {
     local -a FILLVARS; local FILLSCRIPT FILLTEMP
     __apache_autoconf_fillxxx "$@"
 
+    # Installation des packages système
+    if [ -f "$confdir/syspkgs.conf" ]; then
+        local -a syspkgs
+        local syspkg
+        array_from_lines syspkgs "$(<"$confdir/syspkgs.conf" filter_conf)"
+        if ! pkg_check "${syspkgs[@]}"; then
+            etitle "Installation de paquets système"
+            estep "${syspkgs[@]}"
+            pkg_install "${syspkgs[@]}" || return 1
+            eend
+        fi
+    fi
+
     # Copie des certificats
     local modified rehash conf
     if [ -d "$certsconfdir" ]; then
@@ -350,17 +424,10 @@ function apache_autoconf() {
         array_addu FILLVARS ca
 
         etitle "Installation des certificats"
+        [ -n "$certsdir" -a ! -d "$certsdir" ] && ewarn "$certsdir: répertoire invalide"
         array_lsfiles certsconfs "$certsconfdir" "*.conf"
         for certsconf in "${certsconfs[@]}"; do
-            if [ -z "$certsdir" ]; then
-                eerror "CERTSDIR est requis si --certsconfdir est spécifié"
-                return 1
-            elif [ ! -d "$certsdir" ]; then
-                eerror "$certsdir: répertoire invalide"
-                return 1
-            fi
-            apache_resolvecert "$certsconf" "$certsdir" cert key ca || return 1
-            apache_addcert -y "$cert" "$key" "$ca"
+            apache_addcert -y -C "$certsconf" -d "$certsdir" "$cert" "$key" "$ca" || return 1
             modified=1
         done
         array_lsfiles certspems "$certsconfdir" "*.crt" "*.pem"
@@ -378,11 +445,9 @@ function apache_autoconf() {
         local -a confs
         local conf
         etitle "Installation des configurations"
-        array_from_lines confs "$(list_files "$confsdir" "*.conf" | __apache_autoconf_filter_suffix_files)"
+        array_from_lines confs "$(list_files "$confsdir" "*.conf")"
         for conf in "${confs[@]}"; do
             [ -z "$oneconf" -o "$conf" == "$oneconf" ] || continue
-
-            estep "$conf"
             __apache_autoconf_fillcopy \
                 "$confsdir/$conf" \
                 "$destconfsdir/$conf" && modified=1
@@ -395,11 +460,9 @@ function apache_autoconf() {
         local -a confs
         local conf
         etitle "Installation des configurations des modules"
-        array_from_lines confs "$(list_files "$modulesdir" "*.conf" | __apache_autoconf_filter_suffix_files)"
+        array_from_lines confs "$(list_files "$modulesdir" "*.conf")"
         for conf in "${confs[@]}"; do
             [ -z "$onemodule" -o "$conf" == "$onemodule" ] || continue
-
-            estep "$conf"
             __apache_autoconf_fillcopy \
                 "$modulesdir/$conf" \
                 "$APACHECONFDIR/mods-available/$conf" && modified=1
@@ -409,12 +472,12 @@ function apache_autoconf() {
 
     # Règles de réécriture
     if [ -d "$rrdir" -a -z "$onecms" ]; then
+        # legacy... remplacé par des fichiers de règles directement dans le répertoire de configuration
         local -a confs
         local conf
         etitle "Installation des règles de réécriture"
         array_from_lines confs "$(list_files "$rrdir" "RewriteRules*.conf")"
         for conf in "${confs[@]}"; do
-            estep "$conf"
             __apache_autoconf_fillcopy \
                 "$rrdir/$conf" \
                 "$APACHECONFDIR/$conf" && modified=1
@@ -426,9 +489,9 @@ function apache_autoconf() {
     local -a enablesites disablesites
     if [ -d "$sitesdir" -a \( -z "$onecms" -o -n "$onesite" \) ]; then
         local -a confs
-        local conf confname destconf certsconf
+        local conf confname destconf certsconf sedscript copied
         etitle "Installation des sites"
-        array_from_lines confs "$(list_files "$sitesdir" "*.conf" | __apache_autoconf_filter_suffix_files)"
+        array_from_lines confs "$(list_files "$sitesdir" "*.conf")"
         for confname in "${confs[@]}"; do
             conf="$sitesdir/$confname"
             [ -z "$onesite" -o "$confname" == "$onesite" ] || continue
@@ -449,27 +512,44 @@ function apache_autoconf() {
             *) destconf="$confname";;
             esac
 
+            copied=
             if [ -n "$certsconf" ]; then
                 certsconf="$certsconfdir/$certsconf"
                 if [ -f "$certsconf" ]; then
-                    apache_resolvecert "$certsconf" "$certsdir" cert key ca || return 1
-                    __apache_autoconf_fillcopy \
-                        "$conf" \
-                        "$APACHEAVSITESDIR/$destconf" "\
+                    __apache_rc_quiet=1 apache_resolvecert "$certsconf" "$certsdir" cert key ca || return 1
+                    if [ -n "$cert" -a -n "$key" ]; then
+                        sedscript="\
 s#@@cert@@#$APACHESSLCERTSDIR/$(basename "$cert")#g
-s#@@key@@#$APACHESSLKEYSDIR/$(basename "$key")#g
-s#@@ca@@#$APACHESSLCERTSDIR/$(basename "$ca")#g
-"
+s#@@key@@#$APACHESSLKEYSDIR/$(basename "$key")#g"
+                        if [ -n "$ca" ]; then
+                            sedscript="$sedscript
+s#@@ca@@#$APACHESSLCERTSDIR/$(basename "$ca")#g"
+                        else
+                            sedscript="$sedscript
+/@@ca@@/s/^/#/g"
+                        fi
+                        __apache_autoconf_fillcopy \
+                            "$conf" \
+                            "$APACHEAVSITESDIR/$destconf" "$sedscript"
+                        copied=1
+                    else
+                        eerror "$(ppath "$certsconf"): définition des certificats introuvable
+Le fichier de configuration $confname a été ignoré"
+                    fi
                 else
-                    eerror "$(ppath "$certsconf"): fichier introuvable. Il a été ignoré"
+                    eerror "$(ppath "$certsconf"): fichier introuvable
+Le fichier de configuration $confname a été ignoré"
                 fi
             else
                 __apache_autoconf_fillcopy \
                     "$conf" \
                     "$APACHEAVSITESDIR/$destconf"
+                copied=1
+            fi
+            if [ -n "$copied" ]; then
+                enablesites=("${enablesites[@]}" "$destconf")
+                modified=1
             fi
-            enablesites=("${enablesites[@]}" "$destconf")
-            modified=1
         done
         eend
     fi
@@ -478,16 +558,28 @@ s#@@ca@@#$APACHESSLCERTSDIR/$(basename "$ca")#g
     if [ -d "$confdir" -a -z "$onecms" ]; then
         local -a confs
         local conf
+
         etitle "Configuration de base"
-        array_add ignores confs.conf modules.conf sites.conf
-        array_from_lines confs "$(list_files "$confdir" | __apache_autoconf_filter_suffix_files)"
+        array_add ignores syspkgs.conf confs.conf modules.conf sites.conf network.conf
+        array_from_lines confs "$(list_files "$confdir")"
         for conf in "${confs[@]}"; do
             array_contains ignores "$conf" && continue
-            estep "$conf"
             __apache_autoconf_fillcopy \
                 "$confdir/$conf" \
                 "$APACHECONFDIR/$conf" && modified=1
         done
+
+        array_from_lines confs "$(list_files "$confdir" "*rewrite*.rules")"
+        if [ ${#confs[*]} -gt 0 ]; then
+            etitle "Règles de réécriture"
+            for conf in "${confs[@]}"; do
+                [ -f "$APACHECONFDIR/$conf" ] || continue
+                estep "$conf"
+                legacy_mkRewriteRules "$APACHECONFDIR/$conf" && modified=1
+            done
+            eend
+        fi
+
         if [ -f "$confdir/confs.conf" -a -n "$a2xconf" ]; then
             local -a confs
             local conf
@@ -564,9 +656,30 @@ s#@@ca@@#$APACHESSLCERTSDIR/$(basename "$ca")#g
     fi
 
     # Contenu web
-    if [ -d "$wwwdir" -a -z "$onecms" ]; then
-        etitle "Installation des fichiers du serveur web"
-        cpdirnovcs "$wwwdir" "$HTDOCSDIR"
+    if [ -z "$onecms" ]; then
+        etitled "Installation des fichiers du serveur web"
+        if is_defined HTDMAPPINGS; then
+            local htdmapping src dest
+            for htdmapping in "${HTDMAPPINGS[@]}"; do
+                splitpair "$htdmapping" dest src
+                [ -n "$dest" ] || dest=html
+                case "$dest" in
+                html) [ -n "$src" ] || src=www;;
+                *) [ -n "$src" ] || src="$dest";;
+                esac
+                withpath "$src" || src="$confdir/$src"
+                withpath "$dest" || dest="$HTDOCSBASE/$dest"
+                estep "$src --> $dest"
+                cpdirnovcs "$src" "$dest"
+                # par défaut, le propriétaire est root. est-ce nécessaire?
+                #chown -R www-data: "$dest"
+            done
+        elif [ -d "$wwwdir" ]; then
+            estep "$wwwdir --> $HTDOCSDIR"
+            cpdirnovcs "$wwwdir" "$HTDOCSDIR"
+            # par défaut, le propriétaire est root. est-ce nécessaire?
+            #chown -R www-data: "$HTDOCSDIR"
+        fi
         eend
     fi
 
@@ -587,6 +700,30 @@ s#@@ca@@#$APACHESSLCERTSDIR/$(basename "$ca")#g
         eend
     fi
 
+    # Mettre à jour la configuration réseau
+    if [ -z "$onecms" -a -n "$netconf" -a -f "$confdir/network.conf" ]; then
+        local -a ips brs; local host etc_networks
+        eval "$(
+            source "$confdir/network.conf"
+            set_array_cmd ips
+            set_array_cmd brs
+            echo_setv host "$host"
+            echo_setv etc_networks "$etc_networks"
+        )"
+        etitled "Vérification de la configuration du réseau"
+        if [ -n "$FULLCONF" ]; then
+            if [ ${#ips[*]} -gt 0 -o ${#brs[*]} -gt 0 -o -n "$hosts" ]; then
+                network_config "$host" ips brs && modified=1
+            fi
+            [ -n "$etc_networks" ] && network_update_etc_networks "$etc_networks"
+        else
+            if [ ${#ips[*]} -gt 0 ]; then
+                network_config_partial ips && modified=1
+            fi
+        fi
+        eend
+    fi
+
     if [ -n "$modified" ]; then
         [ -n "$rehash" ] && elinedots "Hashage des certificats" c_rehash
         if [ -n "$restart" ]; then
@@ -604,7 +741,7 @@ function apache_autoconf_localhosts() {
         --one-site: onesite= \
         @ args -- "$@" && set -- "${args[@]}" || die "$args"
 
-    __apache_autoconf_setup || return 1
+    __apache_autoconf_no_require_apache=1 __apache_autoconf_setup || return 1
 
     # Configuration
     autoconfdir="$1"; shift
@@ -711,27 +848,48 @@ function __template_updatef_dhost() {
     [ -n "$ips" ] || __template_set_var ips ""
 }
 
-# toujours placer une variable dépendante AVANT la variable maitre
+# syntaxe: var[:depvars,...][=desc]
 APACHECONFIG_TEMPLATE_STATIC_VARS=(
-    hostname aliases host
-    certsdir caname
+    host:hostname,aliases="hôte pour lequel ce template a été créé.
+# les variables hostname et aliases sont automatiquement générées.
+# utiliser @@dhost@@ pour déployer dynamiquement avec le nom d'hôte courant."
+    certsdir="répertoire par défaut contenant les certificats à déployer"
+    caname="nom de l'autorité par défaut"
 )
 APACHECONFIG_TEMPLATE_DYNAMIC_VARS=(
-    ips_namevirtualhosts ips_listens ips
-    dhostname daliases dhost
-    admin configdir
+    ips:ips_namevirtualhosts,ips_listens="liste d'adresses de la forme ip[:port], séparées par un espace.
+# ces adresses sont celles sur lesquelles apache doit écouter. ce paramètre n'a
+# de sens que sur squeeze. en effet, la configuration par défaut sur jessie rend
+# ce paramétrage inutile."
+    dhost:dhostname,daliases="hôte pour lequel les fichiers doivent être déployés.
+# les variables dhostname et daliases sont automatiquement générées.
+# cette variable n'a besoin d'être modifiée que si host=@@dhost@@ ci-dessous"
+    admin="mail de l'administrateur du serveur"
+    configdir="répertoire dans lequel le template a été généré"
+)
+APACHECONFIG_TEMPLATE_NOWRITE_VARS=(configdir)
+APACHECONFIG_TEMPLATE_USER_VARS=(
+    FULLCONF="Est-on en mode configuration complète?"
+    HTDMAPPINGS="Mapping des répertoires destination dans /var/www vers le répertoire local, e.g. html:www"
 )
-APACHECONFIG_TEMPLATE_NOWRITE_VARS=(hostname aliases dhostname daliases configdir)
 
+function __apacheconfig_initsrcdirs() {
+    if check_sysinfos "$@" -d debian -v jessie+; then
+        TEMPLATECTL_SRCDIRS=(apacheconfig.d8)
+    else
+        TEMPLATECTL_SRCDIRS=(apacheconfig)
+    fi
+}
 function apacheconfig_initvars() {
     DEFAULT_ADMIN=supervision-gdrsi@listes.univ-reunion.fr
     DEFAULT_CERTSDIR=1507-renater
     DEFAULT_CANAME=1507-DigiCertCA.crt
     set_defaults apacheconfig
 
-    TEMPLATE_STATIC_VARS=("${APACHECONFIG_TEMPLATE_STATIC_VARS[@]}")
-    TEMPLATE_DYNAMIC_VARS=("${APACHECONFIG_TEMPLATE_DYNAMIC_VARS[@]}")
     TEMPLATE_NOWRITE_VARS=("${APACHECONFIG_TEMPLATE_NOWRITE_VARS[@]}")
+    template_build_vars TEMPLATE_STATIC_VARS TEMPLATE_NOWRITE_VARS "${APACHECONFIG_TEMPLATE_STATIC_VARS[@]}"
+    template_build_vars TEMPLATE_DYNAMIC_VARS TEMPLATE_NOWRITE_VARS "${APACHECONFIG_TEMPLATE_DYNAMIC_VARS[@]}"
+    template_build_vars TEMPLATE_USER_VARS "" "${APACHECONFIG_TEMPLATE_USER_VARS[@]}"
     __TEMPLATE_DEFAULTF_host=__template_defaultf_host
     __TEMPLATE_UPDATEF_host=__template_updatef_host
     __TEMPLATE_DEFAULTF_ips=__template_defaultf_ips
@@ -740,7 +898,7 @@ function apacheconfig_initvars() {
     __TEMPLATE_UPDATEF_dhost=__template_updatef_dhost
 
     TEMPLATECTL_NAME=apacheconfig
-    TEMPLATECTL_SRCDIRS=(apacheconfig)
+    __apacheconfig_initsrcdirs
     TEMPLATECTL_CONFIG="$TEMPLATECTL_NAME"
     TEMPLATECTL_DEFAULTS=(
         admin="$DEFAULT_ADMIN"
@@ -751,11 +909,14 @@ function apacheconfig_initvars() {
 }
 
 function apacheconfig_loadconf() {
-    local config modified
-    local destdir="$1" autocreate
+    local config modified autocreate
+    local destdir="$1" nohideconfig="$2"
+
+    # valeurs par défaut
+    is_defined HTDMAPPINGS || HTDMAPPINGS=(html:www)
 
     __template_set_destdir destdir autocreate "$TEMPLATECTL_NAME" || return 1
-    setx config=templatectl_config "$destdir"
+    setx config=templatectl_config "$destdir" ${nohideconfig:+nohideconfig}
     modified=
     templatectl_loadvars "$config" && modified=1
 
@@ -779,7 +940,8 @@ function apacheconfig_sysinfos() {
     __template_set_var sysname "$sysname"
     __template_set_var sysdist "$sysdist"
     __template_set_var sysver "$sysver"
-    #check_sysinfos --vars sysname sysdist sysver bits "${templatectl_suffix[@]}
+    # mettre à jour la source en fonction du système cible
+    __apacheconfig_initsrcdirs --vars sysname sysdist sysver bits
 
     upvars sysname "$sysname" sysdist "$sysdist" sysver "$sysver" bits "$bits" \
            custom_sysinfos "$custom_sysinfos"
@@ -789,6 +951,7 @@ function apacheconfig_deploy() {
     local destdir="$1" certsdir="$2"; shift; shift
     local config="$1" oneconf="$2" onemodule="$3"; onesite="$4"; shift; shift; shift; shift
     local custom_sysinfos="$1" sysname="$2" sysdist="$3" sysver="$4" bits="$5"; shift; shift; shift; shift; shift
+    local netconf="$1"; shift
 
     local -a args
     args=(--ignore "$(basename -- "$config")")
@@ -796,6 +959,7 @@ function apacheconfig_deploy() {
     [ -n "$onemodule" ] && array_add args --one-module "$(basename -- "$onemodule")"
     [ -n "$onesite" ] && array_add args --one-site "$(basename -- "$onesite")"
     [ -n "$custom_sysinfos" ] && array_add args --sysname "$sysname" --sysdist "$sysdist" --sysver "$sysver" --bits "$bits"
+    [ -n "$netconf" ] && array_add args --network-config
     array_add args "$destdir" "$certsdir"
     for __name in "${TEMPLATE_DYNAMIC_VARS[@]}"; do
         array_add args "$__name=${!__name}"
@@ -803,6 +967,21 @@ function apacheconfig_deploy() {
     apache_autoconf "${args[@]}" "$@"
 }
 
+function apacheconfig_qs() {
+    # fonction pour simplifier l'utilisation de apacheconfig_deploy pour un
+    # répertoire spécifique
+    # $1=destdir $2=certsdir $3=netconf
+    local destdir="$1" certsdir="$2" netconf="$3"
+    local config modified destdir autocreate
+    apacheconfig_initvars
+    apacheconfig_loadconf "$1"
+    apacheconfig_deploy \
+        "$destdir" "$2" \
+        "$config" "" "" "" \
+        "" "" "" "" "" \
+        "$3"
+}
+
 function apacheconfig_localhosts() {
     local destdir="$1" certsdir="$2"; shift; shift
     local onesite="$1"; shift
@@ -815,3 +994,241 @@ function apacheconfig_localhosts() {
     done
     apache_autoconf_localhosts "${args[@]}" "$@"
 }
+
+function __mrr_joinurl() {
+    # joindre chaque élément de $1..@ par /, en évitant les slashes en double
+    local i url
+    for i in "$@"; do
+        [ -n "$i" ] || continue
+        if [ -n "$url" ]; then
+            url="${url%/}/${i#/}"
+        else
+            url="$i"
+        fi
+    done
+    [ -n "$url" ] && echo "$url"
+}
+function __mrr_has_proxy() {
+    # vérifier que les options $1 contiennent 'P'
+    local -a options
+    array_split options "$1" ","
+    array_contains options P
+}
+function legacy_mkRewriteRules() {
+    # $1=infile, $2=thishost, $3=outfile, $4=htmlfile, $5=proxy_enabled?
+    local infile="$1" thishost="$2" outfile="$3" htmlfile="$4" proxy_enabled="$5"
+    local -a rules; local rule prefix index done current
+    local tmpinfile tmpoutfile
+    local src dest host suffix options prot proxy_acls usrc trail noslash proxy_url proxy_use
+
+    if [ -z "$infile" -o "$infile" == - ]; then
+        infile=/dev/stdin
+    elif [ -z "$outfile" ]; then
+        local outdir="$(dirname -- "$infile")"
+        outfile="$(basename -- "$infile")"
+        if [[ "$outfile" == *rewrite*.rules ]]; then
+            outfile="${outfile/rewrite/RewriteRules}"
+            outfile="${outfile/.rules/.conf}"
+        else
+            outfile="$outfile-RewriteRules.conf"
+        fi
+        outfile="$outdir/$outfile"
+    fi
+    [ -n "$outfile" -a "$outfile" != - ] || outfile=/dev/stdout
+
+    if [ -z "$thishost" -o -z "$proxy_enabled" ]; then
+        # le cas échéant, lire les paramètres manquant depuis le fichier
+        if [ "$infile" == /dev/stdin ]; then
+            ac_set_tmpfile tmpinfile
+            cat >"$tmpinfile"
+            infile="$tmpinfile"
+        fi
+        eval "$(awkrun -f <"$infile" '
+/^[^#]/ { exit 0 }
+/^#+ *host *=/ { sub(/^#+ *host *= */, ""); sub(/ *$/, ""); print "thishost=" qval($0); next }
+/^#+ *enable_proxy *=/ { sub(/^#+ *enable_proxy *= */, ""); sub(/ *$/, ""); print "proxy_enabled=" qval($0); next }
+')"
+    fi
+    [ -n "$thishost" ] || thishost="$(myhost)"
+    normyesval proxy_enabled
+
+    if [ -n "$htmlfile" ]; then
+        echo '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
+<!-- -*- coding: utf-8 mode: html -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+-->
+<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<title>'"$thishost</title>
+</head>
+<body>
+<h2>$thishost</h2>
+<ul>" >"$htmlfile"
+    fi
+
+    ac_set_tmpfile tmpoutfile
+    array_from_lines rules "$(<"$infile" filter_comment)"
+    prefix=
+    for rule in "${rules[@]}"; do
+        if beginswith "$rule" ^; then
+            # Collecter les préfixe pour la règle suivante
+            prefix="${prefix:+$prefix
+}${rule#^}"
+            continue
+        elif beginswith "$rule" =; then
+            # ligne litérale
+            echo "${rule#=}" >>"$tmpoutfile"
+            continue
+        fi
+
+        local IFS=:; set -- $rule; unset IFS
+        index=1
+        done=
+        while [ -z "$done" ]; do
+            current="$1"; shift
+            while [ "${current%\\}" != "$current" ]; do
+                current="${current%\\}:$1"; shift
+            done
+            case $index in
+            1) src="$current";;
+            2) dest="$current";;
+            3) host="$current";;
+            4) suffix="$current";;
+            5) options="$current";;
+            6) prot="${current:-http}";;
+            7) proxy_acls="$current";;
+            *) done=1;;
+            esac
+            index=$(($index + 1))
+        done
+
+        # mettre en forme prefix s'il est défini
+        [ -n "$prefix" ] && prefix="$prefix
+"
+
+        [ "$thishost" == "$host" ] && host=
+
+        usrc="$src"
+
+        trail=1
+        if endswith "$src" '$'; then
+            trail=
+            usrc="${src%$}"
+        fi
+
+        noslash=
+        if endswith "$suffix" '$'; then
+            noslash=1
+            suffix="${suffix%$}"
+        fi
+        if endswith "$dest" '$'; then
+            noslash=1
+            dest="${dest%$}"
+        fi
+
+        proxy_url=
+        proxy_use=
+
+        if endswith "$dest" .woa; then
+            # lien vers une application
+            if [ -n "$host" ]; then
+                # sur un autre hôte
+                if [ -n "$noslash" ]; then
+                    echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(__mrr_joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix")${trail:+\$1} [L${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc"
+                    setx proxy_url __mrr_joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix"
+                else
+                    echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$tmpoutfile"
+                    echo "${prefix}RewriteRule ^/$src/(.*) $(__mrr_joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix" "\$1") [L${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc/"
+                    setx proxy_url __mrr_joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix/"
+                fi
+            else
+                # sur le même hôte
+                if [ -n "$noslash" ]; then
+                    echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(__mrr_joinurl /cgi-bin/WebObjects "$dest" "$suffix")${trail:+\$1} [L,P${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc"
+                    setx proxy_url __mrr_joinurl "$prot://$thishost/cgi-bin/WebObjects" "$dest" "$suffix"
+                    proxy_use=1
+                else
+                    echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$tmpoutfile"
+                    echo "${prefix}RewriteRule ^/$src/(.*) $(__mrr_joinurl /cgi-bin/WebObjects "$dest" "$suffix" "\$1") [L,P${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc/"
+                    setx proxy_url __mrr_joinurl "$prot://$thishost/cgi-bin/WebObjects" "$dest" "$suffix/"
+                    proxy_use=1
+                fi
+            fi
+        else
+            # lien vers une url
+            if [ -n "$host" ]; then
+                # sur un autre hôte
+                if [ -n "$noslash" ]; then
+                    echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(__mrr_joinurl "$prot://$host" "$dest" "$suffix")${trail:+\$1} [L${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc"
+                    setx proxy_url __mrr_joinurl "$prot://$host" "$dest" "$suffix"
+                else
+                    echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$tmpoutfile"
+                    echo "${prefix}RewriteRule ^/$src/(.*) $(__mrr_joinurl "$prot://$host" "$dest" "$suffix" "\$1") [L${options:+,$options}]" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc/"
+                    setx proxy_url __mrr_joinurl "$prot://$host" "$dest" "$suffix/"
+                fi
+            else
+                # sur le même hôte
+                if [ -n "$noslash" ]; then
+                    echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(__mrr_joinurl / "$dest" "$suffix")${trail:+\$1}${options:+ [$options]}" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc"
+                    setx proxy_url __mrr_joinurl "http://$thishost" "$dest" "$suffix"
+                else
+                    echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$tmpoutfile"
+                    echo "${prefix}RewriteRule ^/$src/(.*) $(__mrr_joinurl / "$dest" "$suffix" "\$1")${options:+ [$options]}" >>"$tmpoutfile"
+                    setx url __mrr_joinurl "http://$thishost" "$usrc/"
+                    setx proxy_url __mrr_joinurl "http://$thishost" "$dest" "$suffix/"
+                fi
+            fi
+        fi
+        __mrr_has_proxy "$options" && proxy_use=1
+        if [ -n "$proxy_enabled" -a -n "$proxy_use" ]; then
+            if [ "$proxy_acls" == "None" ]; then
+                :
+            elif [ -z "$proxy_acls" ]; then
+                echo "\
+<Proxy $proxy_url*>
+    AddDefaultCharset off
+    Order Deny,Allow
+    Allow from all
+</Proxy>" >>"$tmpoutfile"
+            else
+                echo "\
+<Proxy $proxy_url*>
+    AddDefaultCharset off
+    Order Allow,Deny
+    Allow from $proxy_acls
+</Proxy>" >>"$tmpoutfile"
+            fi
+        fi
+
+        echo "" >>"$tmpoutfile"
+        if [ -n "$htmlfile" ]; then
+            echo "<li><a href=\"$url\">$url</a></li>" >>"$htmlfile"
+        fi
+
+        # Réinitialiser les préfixes pour chaque règle
+        prefix=
+    done
+
+    local modified
+    if testupdated "$tmpoutfile" "$outfile"; then
+        cat "$tmpoutfile" >"$outfile"
+        modified=1
+    fi
+
+    if [ -n "$htmlfile" ]; then
+        echo '</ul>
+</body>
+</html>' >>"$htmlfile"
+    fi
+
+    [ -n "$tmpinfile" ] && ac_clean "$tmpinfile"
+    ac_clean "$tmpoutfile"
+    [ -n "$modified" ]
+}
diff --git a/lib/ulib/templates/apacheconfig.d8/README-apacheconfig.txt b/lib/ulib/templates/apacheconfig.d8/README-apacheconfig.txt
new file mode 100644
index 0000000..bd574ef
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/README-apacheconfig.txt
@@ -0,0 +1,76 @@
+# -*- coding: utf-8 mode: text -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+Ce répertoire peut contenir les fichiers et répertoires suivants, qui sont tous
+optionnels:
+
+confs.conf
+    Liste des configurations qu'il faut activer. Si un fichier de configuration
+    existe mais n'est pas mentionnée dans ce fichier, ou si ce fichier n'existe
+    pas, aucune modification n'est effectuée. Ce fichier contient une liste de
+    ligne de configuration.
+    Si une configuration est de la forme -conf, elle est désactivée. Si une
+    configuration est de la forme +conf, elle est activée. Cette syntaxe permet
+    de supporter les configurations dont le nom commencerait par '-'
+    IMPORTANT: Ce fichier n'est supporté qu'à partir de debian jessie.
+
+modules.conf
+    Liste des modules qu'il faut activer. Si un module existe mais n'est pas
+    mentionné dans ce fichier, ou si ce fichier n'existe pas, aucune
+    modification n'est effectuée.
+    Si un module est de la forme -module, il est désactivé. Si un module est de
+    la forme +module, il est activé. Cette syntaxe permet de supporter les
+    modules dont le nom commencerait par '-'
+
+sites.conf
+    Liste des sites qu'il faut activer. Si ce fichier n'existe pas, tous les
+    sites existant sont activés. Si un site existe mais ne figure pas dans ce
+    fichier, il est désactivé.
+
+confs/
+    Répertoire des configurations à installer. Les fichiers de ce répertoire
+    sont de la forme CONF.conf et sont installés dans le répertoire
+    /etc/apache2/conf-available. Il faut mentionner la configuration dans le
+    fichier confs.conf pour l'activer.
+    IMPORTANT: Ce répertoire n'est supporté qu'à partir de debian jessie.
+
+modules/
+    Répertoire des configurations de modules à installer. Les fichiers de ce
+    répertoire sont de la forme MODULE.conf et sont installés dans le répertoire
+    /etc/apache2/mods-available. Il faut mentioner le module dans le fichier
+    modules.conf pour l'activer.
+
+sites/
+    Répertoire des sites à installer. Les fichiers de ce répertoire sont de la
+    forme SITE.conf pour les sites écoutant en clair, et SITE.ssl.conf pour les
+    sites écoutant en https.
+    Pour chaque site SITE.ssl.conf, un fichier SITE-certs.conf doit exister dans
+    certsconf/. Pour chaque fichier SITE.ssl.conf, les balises @@ca@@, @@cert@@
+    et @@key@@ sont remplacés par les valeurs des variables ca, cert et key
+    définies dans le fichier correspondant SITE-certs.conf
+
+cgi-bin/
+    Répertoire des scripts cgi
+
+www/
+    Répertoire des fichiers du serveur web
+
+certsconf/
+    Répertoire qui contient la configuration pour les certificats à installer.
+    Les fichiers de ce répertoire sont de la forme SITE-certs.conf et chacun
+    d'eux correspond à un fichier SITE.ssl.conf dans sites/
+
+RewriteRules/
+    Répertoire qui contient la configuration de réécriture. Tous les fichiers
+    RewriteRules*.conf de ce répertoire sont copiés dans /etc/apache2
+
+Tous les autres fichiers sont copiés tels quels dans /etc/apache2. Notamment,
+apache2.conf est le fichier de configuration principal d'apache et ports.conf le
+fichier de configuration des ports d'écoute.
+
+## Configuration TLS
+
+Le site https://mozilla.github.io/server-side-tls/ssl-config-generator/ contient
+des informations sur la façon de configurer ssl côté serveur pour la sécurité et
+les navigateurs modernes
+
+Voir les détails sur https://wiki.mozilla.org/Security/Server_Side_TLS
diff --git a/lib/ulib/templates/apacheconfig.d8/certsconf/default-certs.conf b/lib/ulib/templates/apacheconfig.d8/certsconf/default-certs.conf
new file mode 100644
index 0000000..2ca6ace
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/certsconf/default-certs.conf
@@ -0,0 +1,15 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+# Cette variable est utilisée par la fonction refcerts() du script runs. C'est
+# le nom d'un répertoire à chercher dans RUNSMODULESPATH qui contient les
+# certificats à installer sur le serveur.
+certsdir=@@certsdir@@
+
+# Fichier contenant les certificats racines qui valident le certificat à
+# installer, ainsi que les certificats qui sont rencontrés dans le dialogue avec
+# d'autres serveurs web
+ca=@@caname@@
+
+# Certificat et clé privée à installer
+cert=
+key=
diff --git a/lib/ulib/templates/apacheconfig.d8/cgi-bin/.udir b/lib/ulib/templates/apacheconfig.d8/cgi-bin/.udir
new file mode 100644
index 0000000..eb74a9a
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/cgi-bin/.udir
@@ -0,0 +1,24 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Utiliser 'udir --help-vars' pour une description de la signification des
+# variables suivantes:
+udir_desc="Fichiers à déployer sur @@host@@ dans le répertoire des cgi-bins"
+udir_note="Il est possible de déployer les modifications dans ce répertoire avec 'uinst -y'"
+udir_types=(uinst:rsync)
+uinc=release
+uinc_options=()
+uinc_args=()
+configure_variables=(dest)
+configure_dest_for=()
+config_scripts=()
+install_profiles=false
+workdir_rsync_options=()
+workdir_excludes=()
+workdir_includes=()
+copy_files=true
+rsync_options=()
+destdir=root@@@host@@:CGIBINDIR
+srcdir=.
+files=()
+owner=root:
+modes=(u=rwX,g=rX,o=rX)
+root_scripts=()
diff --git a/lib/ulib/templates/apacheconfig.d8/cgi-bin/test.cgi b/lib/ulib/templates/apacheconfig.d8/cgi-bin/test.cgi
new file mode 100755
index 0000000..dd4bf37
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/cgi-bin/test.cgi
@@ -0,0 +1,6 @@
+#!/bin/bash
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+echo "Content-Type: text/plain"
+echo ""
+echo "OK"
diff --git a/lib/ulib/templates/apacheconfig/confs.conf..d8 b/lib/ulib/templates/apacheconfig.d8/confs.conf
similarity index 100%
rename from lib/ulib/templates/apacheconfig/confs.conf..d8
rename to lib/ulib/templates/apacheconfig.d8/confs.conf
diff --git a/lib/ulib/templates/apacheconfig.d8/confs/ssl-config.conf b/lib/ulib/templates/apacheconfig.d8/confs/ssl-config.conf
new file mode 100644
index 0000000..d00b377
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/confs/ssl-config.conf
@@ -0,0 +1,15 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+<IfModule mod_ssl.c>
+    # cf https://wiki.mozilla.org/Security/Server_Side_TLS
+
+    # Choisir un des profils. Clients les plus anciens pouvant se connecter:
+    # modern: Firefox 27, Chrome 30, Windows 7 IE 11, Edge, Opera 17, Safari 9, Android 5.0, Java 8
+    # intermediate: Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7
+    # old: Windows XP IE6, Java 6
+    #Define SSL_CONFIG_MODERN
+    #Define SSL_CONFIG_INTERMEDIATE
+    #Define SSL_CONFIG_OLD
+
+    # Faut-il activer HSTS?
+    #Define SSL_CONFIG_HSTS
+</IfModule>
diff --git a/lib/ulib/templates/apacheconfig.d8/modules.conf b/lib/ulib/templates/apacheconfig.d8/modules.conf
new file mode 100644
index 0000000..84e06fb
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/modules.conf
@@ -0,0 +1,4 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Liste des modules à activer. Syntaxe:
+# module ou +module pour activer un module
+# -module pour le désactiver
diff --git a/lib/ulib/templates/apacheconfig/modules/ssl.conf..d8 b/lib/ulib/templates/apacheconfig.d8/modules/ssl.conf
similarity index 99%
rename from lib/ulib/templates/apacheconfig/modules/ssl.conf..d8
rename to lib/ulib/templates/apacheconfig.d8/modules/ssl.conf
index d733884..c7eb837 100644
--- a/lib/ulib/templates/apacheconfig/modules/ssl.conf..d8
+++ b/lib/ulib/templates/apacheconfig.d8/modules/ssl.conf
@@ -107,7 +107,7 @@
     SSLPassPhraseDialog  exec:/usr/share/apache2/ask-for-passphrase
 
     #   Inter-Process Session Cache:
-    #   Configure the SSL Session Cache: First the mechanism 
+    #   Configure the SSL Session Cache: First the mechanism
     #   to use and second the expiring timeout (in seconds).
     #   (The mechanism dbm has known memory leaks and should not be used).
     #SSLSessionCache         dbm:${APACHE_RUN_DIR}/ssl_scache
@@ -116,7 +116,7 @@
 
     #   Semaphore:
     #   Configure the path to the mutual exclusion semaphore the
-    #   SSL engine uses internally for inter-process synchronization. 
+    #   SSL engine uses internally for inter-process synchronization.
     #   (Disabled by default, the global Mutex directive consolidates by default
     #   this)
     #Mutex file:${APACHE_LOCK_DIR}/ssl_mutex ssl-cache
diff --git a/lib/ulib/templates/apacheconfig.d8/network.conf b/lib/ulib/templates/apacheconfig.d8/network.conf
new file mode 100644
index 0000000..31e2bae
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/network.conf
@@ -0,0 +1,24 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Configuration du réseau sur le serveur. Ce fichier est traité différemment
+# selon le mode de configuration.
+# - En mode complet, ce fichier définit le nom d'hôte ainsi que toutes les
+# interfaces, ponts et adresses. La variable host et les tableaux ips et brs
+# sont pris en compte.
+# - En mode partiel, seuls le tableau ips est pris en compte: il est utilisé
+# pour définir des adresses ips supplémentaires à configurer sur le serveur.
+
+# Liste des adresses IPs à configurer. Chaque élément est de la forme
+# [IFACE:]dhcp ou [[IFACE][//GATEWAY]:]IP[/SUFFIX]
+ips=()
+
+# Liste des ponts à configurer. Chaque élément est de la forme BR:IFACES
+# BR est le nom du pont, e.g. br0. IFACES est une liste d'interfaces séparées
+# par une virgule. e.g. br0:eth0,eth1
+brs=()
+
+# Nom d'hôte pleinement qualifié. Si ce paramètre est spécifié, les fichiers
+# /etc/hosts, /etc/hostname et /etc/mailname sont mis à jour.
+host=
+
+# Contenu du fichier /etc/networks
+etc_networks=
diff --git a/lib/ulib/templates/apacheconfig/ports.conf..d8 b/lib/ulib/templates/apacheconfig.d8/ports.conf
similarity index 65%
rename from lib/ulib/templates/apacheconfig/ports.conf..d8
rename to lib/ulib/templates/apacheconfig.d8/ports.conf
index d858a80..92c0c92 100644
--- a/lib/ulib/templates/apacheconfig/ports.conf..d8
+++ b/lib/ulib/templates/apacheconfig.d8/ports.conf
@@ -7,16 +7,8 @@ Listen 80
 
 <IfModule ssl_module>
     Listen 443
-    #NameVirtualHost IP:443
-    #Listen IP:443
-    #@@ips_namevirtualhosts@@
-    #@@ips_listens@@
 </IfModule>
 
 <IfModule mod_gnutls.c>
     Listen 443
-    #NameVirtualHost IP:443
-    #Listen IP:443
-    #@@ips_namevirtualhosts@@
-    #@@ips_listens@@
 </IfModule>
diff --git a/lib/ulib/templates/apacheconfig.d8/rewrite.rules b/lib/ulib/templates/apacheconfig.d8/rewrite.rules
new file mode 100644
index 0000000..b445618
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/rewrite.rules
@@ -0,0 +1,2 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
diff --git a/lib/ulib/templates/apacheconfig.d8/sites.conf b/lib/ulib/templates/apacheconfig.d8/sites.conf
new file mode 100644
index 0000000..0a2108b
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/sites.conf
@@ -0,0 +1,4 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Liste des sites à activer. Syntaxe:
+# site ou +site pour activer un site
+# -site pour le désactiver
diff --git a/lib/ulib/templates/apacheconfig/sites/default.conf..d8 b/lib/ulib/templates/apacheconfig.d8/sites/default.conf
similarity index 100%
rename from lib/ulib/templates/apacheconfig/sites/default.conf..d8
rename to lib/ulib/templates/apacheconfig.d8/sites/default.conf
diff --git a/lib/ulib/templates/apacheconfig/sites/default.ssl.conf..d8 b/lib/ulib/templates/apacheconfig.d8/sites/default.ssl.conf
similarity index 100%
rename from lib/ulib/templates/apacheconfig/sites/default.ssl.conf..d8
rename to lib/ulib/templates/apacheconfig.d8/sites/default.ssl.conf
diff --git a/lib/ulib/templates/apacheconfig.d8/syspkgs.conf b/lib/ulib/templates/apacheconfig.d8/syspkgs.conf
new file mode 100644
index 0000000..5efb6ae
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/syspkgs.conf
@@ -0,0 +1,9 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Liste de paquets système à installer, e.g. php5 ou libapache2-mod-jk
+# Chaque package doit être indiqué sur une ligne à part
+#libapache2-mod-jk
+#libapache2-mod-auth-cas
+#php5-mysql
+#php5-ldap
+#php5-gmp
+#php5-gd
diff --git a/lib/ulib/templates/apacheconfig.d8/templates/SITE-certs.conf b/lib/ulib/templates/apacheconfig.d8/templates/SITE-certs.conf
new file mode 100644
index 0000000..2ca6ace
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/templates/SITE-certs.conf
@@ -0,0 +1,15 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+# Cette variable est utilisée par la fonction refcerts() du script runs. C'est
+# le nom d'un répertoire à chercher dans RUNSMODULESPATH qui contient les
+# certificats à installer sur le serveur.
+certsdir=@@certsdir@@
+
+# Fichier contenant les certificats racines qui valident le certificat à
+# installer, ainsi que les certificats qui sont rencontrés dans le dialogue avec
+# d'autres serveurs web
+ca=@@caname@@
+
+# Certificat et clé privée à installer
+cert=
+key=
diff --git a/lib/ulib/templates/apacheconfig.d8/templates/SITE.conf b/lib/ulib/templates/apacheconfig.d8/templates/SITE.conf
new file mode 100644
index 0000000..91c14d5
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/templates/SITE.conf
@@ -0,0 +1,31 @@
+# -*- coding: utf-8 mode: conf -*- vim:syntax=apache:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+<VirtualHost *:80>
+    # The ServerName directive sets the request scheme, hostname and port that
+    # the server uses to identify itself. This is used when creating
+    # redirection URLs. In the context of virtual hosts, the ServerName
+    # specifies what hostname must appear in the request's Host: header to
+    # match this virtual host. For the default virtual host (this file) this
+    # value is not decisive as it is used as a last resort host regardless.
+    # However, you must set it for any further virtual host explicitly.
+    ServerName SITE.TLD
+    ServerAlias SITE SITE.local
+    ServerAdmin @@admin@@
+
+    DocumentRoot /var/www/SITE
+
+    # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+    # error, crit, alert, emerg.
+    # It is also possible to configure the loglevel for particular
+    # modules, e.g.
+    #LogLevel info ssl:warn
+
+    ErrorLog ${APACHE_LOG_DIR}/SITE_error.log
+    CustomLog ${APACHE_LOG_DIR}/SITE_access.log combined
+
+    # For most configuration files from conf-available/, which are
+    # enabled or disabled at a global level, it is possible to
+    # include a line for only one particular virtual host. For example the
+    # following line enables the CGI configuration for this host only
+    # after it has been globally disabled with "a2disconf".
+    #Include conf-available/serve-cgi-bin.conf
+</VirtualHost>
diff --git a/lib/ulib/templates/apacheconfig/sites/default.ssl.conf..d b/lib/ulib/templates/apacheconfig.d8/templates/SITE.ssl.conf
similarity index 69%
rename from lib/ulib/templates/apacheconfig/sites/default.ssl.conf..d
rename to lib/ulib/templates/apacheconfig.d8/templates/SITE.ssl.conf
index 52f4a83..1af0b69 100644
--- a/lib/ulib/templates/apacheconfig/sites/default.ssl.conf..d
+++ b/lib/ulib/templates/apacheconfig.d8/templates/SITE.ssl.conf
@@ -1,54 +1,27 @@
-# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
-
+# -*- coding: utf-8 mode: conf -*- vim:syntax=apache:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
 <IfModule mod_ssl.c>
 <VirtualHost _default_:443>
-    ServerName @@host@@
-    ServerAlias @@aliases@@
+    ServerName SITE.TLD
+    ServerAlias SITE SITE.local
     ServerAdmin @@admin@@
 
-    DocumentRoot /var/www
-    <Directory />
-        Options FollowSymLinks
-        AllowOverride None
-    </Directory>
-    <Directory /var/www/>
-        Options Indexes FollowSymLinks MultiViews
-        AllowOverride None
-        Order allow,deny
-        allow from all
-    </Directory>
+    DocumentRoot /var/www/SITE
 
-    # Pour les serveurs qui ont le module mod_WebObjects:
-    # mod_WebObjects et ScriptAlias ne peuvent pas gérer le même préfixe. Pour
-    # utiliser des cgi-bin avec WebObjects, il faut soit changer le préfixe de
-    # ScriptAlias, soit changer le préfixe de WebObjectsAlias dans le fichier
-    # mod-webobjects.conf
-    # Sinon, il suffit de commenter les lignes suivantes:
-    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
-    <Directory "/usr/lib/cgi-bin">
-        AllowOverride None
-        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
-        Order allow,deny
-        Allow from all
-    </Directory>
+    # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+    # error, crit, alert, emerg.
+    # It is also possible to configure the loglevel for particular
+    # modules, e.g.
+    #LogLevel info ssl:warn
 
-    ErrorLog ${APACHE_LOG_DIR}/ssl_error.log
+    ErrorLog ${APACHE_LOG_DIR}/SITE_error.log
+    CustomLog ${APACHE_LOG_DIR}/SITE_access.log combined
 
-    # Possible values include: debug, info, notice, warn, error, crit,
-    # alert, emerg.
-    LogLevel warn
-
-    CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
-
-    <LocationMatch "/cgi-bin/WebObjects/.*">
-        Order allow,deny
-        Allow from all
-    </LocationMatch>
-
-    <Location /WebObjects>
-        Order allow,deny
-        Allow from all
-    </Location>
+    # For most configuration files from conf-available/, which are
+    # enabled or disabled at a global level, it is possible to
+    # include a line for only one particular virtual host. For example the
+    # following line enables the CGI configuration for this host only
+    # after it has been globally disabled with "a2disconf".
+    #Include conf-available/serve-cgi-bin.conf
 
     #   SSL Engine Switch:
     #   Enable/Disable SSL for this virtual host.
@@ -56,7 +29,7 @@
 
     #   A self-signed (snakeoil) certificate can be created by installing
     #   the ssl-cert package. See
-    #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
+    #   /usr/share/doc/apache2/README.Debian.gz for more info.
     #   If both key and certificate are stored in the same file, only the
     #   SSLCertificateFile directive is needed.
     SSLCertificateFile    @@cert@@
@@ -99,21 +72,6 @@
     #SSLVerifyClient require
     #SSLVerifyDepth  10
 
-    #   Access Control:
-    #   With SSLRequire you can do per-directory access control based
-    #   on arbitrary complex boolean expressions containing server
-    #   variable checks and other lookup directives.  The syntax is a
-    #   mixture between C and Perl.  See the mod_ssl documentation
-    #   for more details.
-    #<Location />
-    #SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
-    #            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
-    #            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
-    #            and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
-    #            and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20       ) \
-    #           or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
-    #</Location>
-
     #   SSL Engine Options:
     #   Set various options for the SSL engine.
     #   o FakeBasicAuth:
@@ -134,19 +92,15 @@
     #     because the extraction step is an expensive operation and is usually
     #     useless for serving static content. So one usually enables the
     #     exportation for CGI and SSI requests only.
-    #   o StrictRequire:
-    #     This denies access when "SSLRequireSSL" or "SSLRequire" applied even
-    #     under a "Satisfy any" situation, i.e. when it applies access is denied
-    #     and no other module can change it.
     #   o OptRenegotiate:
     #     This enables optimized SSL connection renegotiation handling when SSL
     #     directives are used in per-directory context.
     #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
     <FilesMatch "\.(cgi|shtml|phtml|php)$">
-        SSLOptions +StdEnvVars
+            SSLOptions +StdEnvVars
     </FilesMatch>
     <Directory /usr/lib/cgi-bin>
-        SSLOptions +StdEnvVars
+            SSLOptions +StdEnvVars
     </Directory>
 
     #   SSL Protocol Adjustments:
@@ -174,8 +128,8 @@
     #   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
     #   "force-response-1.0" for this.
     BrowserMatch "MSIE [2-6]" \
-        nokeepalive ssl-unclean-shutdown \
-        downgrade-1.0 force-response-1.0
+            nokeepalive ssl-unclean-shutdown \
+            downgrade-1.0 force-response-1.0
     # MSIE 7 and newer should be able to use keepalive
     BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
 
diff --git a/lib/ulib/templates/apacheconfig.d8/templates/SITE/.udir b/lib/ulib/templates/apacheconfig.d8/templates/SITE/.udir
new file mode 100644
index 0000000..a212c72
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/templates/SITE/.udir
@@ -0,0 +1,24 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Utiliser 'udir --help-vars' pour une description de la signification des
+# variables suivantes:
+udir_desc="Fichiers à déployer dans le répertoire des documents web"
+udir_note="Il est possible de déployer les modifications dans ce répertoire avec 'uinst -y'"
+udir_types=(uinst:rsync)
+uinc=release
+uinc_options=()
+uinc_args=()
+configure_variables=(dest)
+configure_dest_for=()
+config_scripts=()
+install_profiles=false
+workdir_rsync_options=()
+workdir_excludes=()
+workdir_includes=()
+copy_files=true
+rsync_options=(--delete-after)
+destdir=root@@@host@@:HTDOCSBASE/SITE
+srcdir=.
+files=()
+owner=www-data:
+modes=(u=rwX,g=rX,o=rX)
+root_scripts=()
diff --git a/lib/ulib/templates/apacheconfig.d8/templates/SITE/favicon.ico b/lib/ulib/templates/apacheconfig.d8/templates/SITE/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a1a0be8884a24d60bda51751dcbfffcb3a99b76d
GIT binary patch
literal 1150
zcmb7^eN5DK9LIldEw{2p|G3dwYtE*%Y32H(Qfi3DjnIu$lJeOUSZlMC4zQ4mL(Gem
z2v;a+Jm`2jl62w2qKtc}<8I;I!65=7ryx>rcif?F-M#w$zV7(LR$IT{KEKbyckj>l
z{dw3=QD%uZE>02Or<Cjm6lJcWC<}#%kcixi3#BOH?EdG{=?_Rx_p)S}pVYMh5>x!V
zn(SxE(n*q11FRIW7Zdzw(*mTdzUOOJ1xV0LU~A4t#b;+-Mqd)fa3D<H-VnNvLu}k0
zB=fx~@(V+xt_ff~G)>{YFs0?w6c|Em$@0(OHOW29Upy(Lc=HzOa*}8+euon}EsgrO
zX)<i4@skb0UN7zXf^<&mlCgX?U*2DHu$-?-Dy3Y|&%;@<7<bL<bRBtx;fwp}Yt3Y!
zZ5N}?Z@7A44<nsNxKx#Z*)T`q)f!^bS@9gMW6S9}x{S`Ur}5OSqPJx$p4yeTzSZEa
zO%?eU;X0m#y==h@E{1oXNW<4*#Ao@O!Si|anl>>k{K2z2hT8R#OIPJfg2zWV4!<yi
z@3&Sk;j{B+-&w9(%W#xGgQe(Uto!1y7#@+ft>iHrUo6C|pDki@u<f5K@uS`|M59q0
z=bN}43Nken<*z$axCP&i0_9&tt-s&$B{!~k=<l+UlNgVwvW^bRU2cs>=y(3ic(;kc
zb2`E2*?;6w@e@7=IZ2PBPg}&{ci*7BwS)GHcNza9g1xPtTdoGYjTu~S*(UR-y^V2F
z@wbCx<fqJ|bW<YVmltuZ`**_OD3M5nZu2=NuKvov5AWkMmx>wgmUHWAd`tF3#ZL#u
zsLI`drTI9vmKug!zj1T04|CHoYV}!!#s?U&f6dU3g>ru0hIRDRuf<)h#daW`;Fy=z
zioKNW&~jSbZ#7k8GUj32_!=K-o?!SFqvUJWKPdL;W%^F-5P6dEHe}#AxteRv8hY(N
zQMBfHSwrQ{bsXHff}G{?9L>#;yBMoCrqvmG#2$H@){FV=V)D9!wyIC5F5FJ8=1F!g
zjpI<ZmhR@vnO?=PF>Nh=RPvB}cV;&up6|F59A&tt6K89wsPRp)GY|czsQZ2Y|KR`n
Fe**|-!I}U7

literal 0
HcmV?d00001

diff --git a/lib/ulib/templates/apacheconfig.d8/templates/SITE/icon.png b/lib/ulib/templates/apacheconfig.d8/templates/SITE/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..581bad1b4f515184b0d5af4f1c66474d0d283961
GIT binary patch
literal 29641
zcmV*&KsUdMP)<h;3K|Lk000e1NJLTq00961009690ssI2(-1!~00001b5ch_0Itp)
z=>Px#32;bRa{vG*UjP6nUjZG4x@rIb00(qQO+^RZ0uv1}4)w9c2mk;e07*naRCwC#
zU1yjSRn~sby;a>knHh4<S)za_7*J6O;s;_}b6m5lYfh-U#$9t(3@9oXKm}Y76cJG*
zgXEm^FbosB>fZDHxK$lydWIPoFma!L>Z$4Js;;g&;XRp{8GnJr3?dv^M^=et{Y8E!
z5w_)F&Nj^3hS^)OGariKYG}q0zW8e{#rSwI=&z{(!V38g^23<91z)YexK$t^AdfJ^
zUyA|0x$rN;0Q+5wc3{>POkRsA>!2Ayc?2^3*%?4%(h&woxIS5ecNbzsHuA!dbc7R*
zFu-4CMUWCR7#Oo0cTGW&dxQs$Fu-4!8J6zCt8?(dA|%-mM>yfnvRsXc7aU=L3Uk8d
zT)Z#~pDsh811XN&l|S~<jGp!J+0Z`)128iY#qL!6W91)`P;Xv40pG4eu{xp+{=gC~
zBZNiQfbhp>07Jq5{qM9bTXO&V-+>7~uz7Rt&Yk&Py3~u1`^b^=cJ9nS<&+j3I@CD;
zHYjv((?oo^0)ZpWqCeou3uETxXjL8f6EJ||sAkQcYSX6Xgb9~hmWa^t!w*mS<dcO;
z>8r2q(Wg(du3ew$-@n7)!R<c!Xu-GNE(Hi6K!rldO`B$&dTNXQ{o9;zM(av}qJ=wf
z*A&d&ijZ}LsQyUM|EBJ^x0m-2|L_bjc<}qHS7$F=cuTAl4~JDS_zxfzK>PN!e*N`U
zqB{T!P=GWv981pt18!Pc>MghQ9y+u`r%rV%t`=UIgXd==&pCpK{utn=V{J@0Kl;ue
z-kR&(yUC(O8^8a4Z7i|=``_OI$wtgCUc9qiyXU4(y&gbJ>WA=uI{^Y9Ah2&=_+S5;
z+`03!M7O^G{@e<JqU*Y1(Y0uq1!f#^DE!W;-<B9PB>I?`|M(ifb@k_;FCI5;`S9U`
zi;CQ|w4izarI&ub>85cJqrZ0T^sm0UC@IN)<&~MedNmp|X31xtEr{0!9HS5bsI;`?
zi!bi-^2>uOcqQMi!v$jykVh!(ce*6umn%>!#ryNUh3H)SH(~&TE=G-7@ci>X-gVbW
zXPwpV;9Wofh;9Oc{(mgMjt5KaKL7jzqFVra%9QIr`e@->Z_Na>&ju*P3=HT{C~)`P
zeg65+6H-zF<$xjsDA(oSig8%J`v@HR-K~5F?+wD4ExjkTJrAAU#N>;9BM6j}Q&g?m
zgSX!L)tE6C9~kwA!zw4I$eilQC#Sb={XEefL|H(J{|fpz$3r_!np6XD+;JU%q#;8-
zdg6)GjytZ|n{S>|t5%wif+DZTpR%Y(4I4HoHT9mCUYenlF6(*>Uo_6Zw-@20#?VKw
z(C^IfefR{N*)sZ0|4|?U4l@LbNYGnu`SOAbI(P5hKvq7a#LSyF?`zobskF4DlTK<n
zZrq9r`~-gR!9K~!wrz_~KKb?MpEm)JQYfYFy6gCN-<`L8`@S+X0LL53m^A6?zI|Kn
zFW`WW7URZ=NU@L5-fzD&<Ek!r_yiC76XBt07(Nf04|^)ah7Eg8J@u`nOK&%HUs>-v
zGb_dCoHKgt*u^pMz4RF<o|?@&DrTQz{^ho4QESzzU8N4;Qp{ks;S)}1{oQxh2qDU0
z03yuZf&rsoiz9)8-*Pz$r!>XL|BEKJe6R?&Pewo<_FSO1-umVG>&Nu(-zF<7dCZu_
zd-e>g$Whz3=Y8|d>QKlYGNkRUT?LIAJyTq);)%Y3^u_UXk3{?BY)kCqzW3f$mt1mm
z`Cqv$4}C`>yXc5X@Y^h<(XAf7JU2@H>-XZs5m4;?_b@R)Zf;S(es9m1u_h}kb@%RJ
zrHxmVoz5_D;K=dgSB64XcJ^IeyS}k(*{(9EpDM-!D1!$gJ359>BKw?3C+OO>(^js$
zGc`2;pd3}!`AzI9IHCs*zoP}Ms^i;>qSU{)2yI@2C8F#x>B7Te1ZQO2*P};6pkT_B
zYa;v>A@|6ipMJXd<Bu1W;EKl{I|T@b!`!mvOUst+^a-8f4O|(sQ~D(my<$z?SpE?)
ze~K8$gi;@-?c4WNuRiSUw`Z5*8Uir;O4Lg`LXd|W_czPLHy3)K-#myjM?;o+P=`YU
z%$c)!z<{^!y|>TJH}^L0+<NP{;lpRQXi;PC+#7DZaomUz^Yij@eXphQwD8cO-Tv{9
zp3|nSzvrHbfL)4SOOj(LGl0t${~Yrw2kxWn55&F`KKbOfQ>I)~jws4^aPkM(yzdAW
zI!r#FPPOsB3*t<&E5~8Ns;KxstPrTE$o=%wMHgMv1;G0Cdzv<VnwfnuTm*zl%i2Id
zPMvz$amT$5*#3V-Jn5IFeyT9|DM7(H(VG>d{>V$OUVU$~W?AK!#Xa6W!UKl`_jjs|
zuj8rzpHnbm0fJV^PaY-+6be~}`tQAWVv{CMGsCBT0Lk&F!)%M^&;R>z$Gr{&d<<jx
z2*-*6HdaZfLjoj05<-G3kbn??09i2rNyMY0(mSQOE5d;#kP>3z2BLZM$G`r1Svdmb
zmn)DNIzpm{7WW_9z@z?%)AQYh_~_S?)PGnZkg;pKb$e;foQ-}qP8^sC1mut*?fUd-
z+O}=Ydi7G9H_z(W@r^}`c9sI`F)tzr00aVv{PR&sHNd{))&LmVFLq>(m)~)+yaE_0
zp&kIBKltE+zx}OiX%DXvMH_Q*^jk-gs1M01c5!ZdymWe82ar)qaP!2(`6*$ADSta$
zZqUY!pWLuv4<HkPcpQCn{RbaBanPXFbLMQl<BloceYZA77{~K~FfT*&ksW^<bqEo_
z@kHy>Jp<a`npXk_(52qoFZD<MEWYWcJ}<m*R#{PwB|FjQgCi+JRlM>Y+}Z;V9`8}V
z*^XL*>n0#2kQgal)B#VOa_AXg)vDbsTRsG&mutlmz{eloq*=49_ugAniu47DAS2Z8
z)4iam?2jsecw->)>kQEwC1B`2mItDopcAoyF2f|?viRZNdr$fIzfUiV2SzT!9aE0f
zRaP17A;RN*a8ZZ2cP6gEC0`^KG@8-2hVLUfbPQk~fBpK8Z`qRP$Dt^Z6&vw6#?rmN
z6+Y?5F#v%O-HC-jC>;o9pDcYPpnWW)8Oo=A<!=-4fG&sD%U}k+^2%f0dTVG|Sm?U1
z@x}5ZJWvITfbT9w^UOHpGj0{Gn^0yy%vvd!bEUU`Xlt2z_I!2AmfRTPPUyxdLHGWS
zNB5#61IQS<k7Iy%6vQzU7hwQIq<$g>P#O|Y<g<afNbPTRrJl?1;WHdZz4OkwC7yv%
z(69Exs%$LVeT0Ay%GuvA9iI<Hy|g&wGhz{L|0Z#3GiDSke0Fw}Hx8i&SiXE`n>J6!
zxbP7Q1&WH?Qan&1J|#c`7D4*dZ(c%p;K#J8iZcdcsK3OIHoq>4{^8ZF=m-|lPz((y
z4dwHLtGykM?sbep&=tl)S_m<D^3{F%G*76wH}AtS?|9dKWL0)K3MVwe=(FQmIT7LY
zxw!jVqz1|i5sW<t$J9T>ULa=9%L}KcKM+g(&6`*M{`)H$G<dp{fh*#6ECETd4D}00
zKnPgz;$K8~Acg@%JOnDC0X#FnP=Aab&@psxlz{SgT!vz>jv@WhJb+SmLL`mC+xh03
zYfe42Wx^XZbv-T`dxQZh4f+{)<V0NAxg^NB|2w?BpiE%tYP>ZN16oA6<xoK&BD(+n
zZ(>j0q)FC?AD+{o!P7BrP($=F%pe4$FZ(?<h`~S7*aHUo3kVoCAcEOaR0;S9$fr-k
z<jl+(@#3GM$!7pV`s9(mAP5at!zJhvUVp^Eq1c4eSm$em3q{|)ujJ=HnUrLgHU>^=
zjIMPsXWNnJSS40U0AHVvW|<{r|7Bld(wZ`<ztF)0$74VXzZRaLG}i7t1R8*ur%YMX
zx9`h9a)fA@AE{RDiM@M^<10>L(s&HHTV^X_@Q*M4Wt<%>1Q8Jg$WXr^&juzUj?r(%
z|F6O3cWTxe%nZ%U90fm~`1dt{fk3X=(cVsCJ&@2c*75sPuU`7*&G(h%6l(J-@|`1u
zT>($O!vD3#v!|ByY!<utzfUl48|*Ti%Z|nso$y$nI9%N8J-pVxsx^Rl#t%I3jbD=v
z0NuLP@6zS9y?cvFVIH6QZC~~q>bC?WV2K#&_lyA|5|T)e5Cj21Bm|jWC?rVu`o}Yp
zz{Elu+0S5R?K6PZ%$ixU)(k}+?w1UgAT)>|G=v5T2!J$5AOVdgG>c7^2gmMj*^<+}
z`wO#X-JDRN-_r|sPB{`8*pIy%l6dlDTzFJ`NjqUvE>0MMuqu=KnQ=xlJk}@9P<~<t
z*5-KG1XT=v7A@NT^UrJj%r>f4Eos`cE7H@Sh|L-R-0QDD_LWx_fP9L#D25Hlqkf+a
zNP>hAl1P#ul9GfFf=CERL7o!u0a2_M$aDQ027qAzR+_bj(poDP46U?Q3;`&BGz1_S
z4nYv0{b+**5ghU%55@2R$9rC>)D{5Ep1o=9+UzDxGD|CgOFQDzWthM12%VQn!EI|`
z+<6FDKs@aEaTCt@)O$o_aZab&c>Bz#|IGx*Uiig(W>w4pTJxYm@B6kd0O#}1FE1=~
zV@dz1r_Pu*ZOc3FEb*w{_IbcCfKAb@BuF772}vY{lw?VgLI^=p7}*aYhzP>x0Z#!i
z;3vU);vdkOnOSQnX02H%p)|WnD?viAmZTL!0xm&m5W_V-Dh*GyXh6UPw5cx>@f2Tz
zF-n)JakFNREA>=quPA_LPQ?i$;&K&_EJNik<JEo`+&b<C8#*2~4R6dXFP5S-PHBqw
z&x*U-zih!jzJU}l1>RN604rAPTE9Lg;^pk!yG5TqP516Ca$OfdixxE=c;NU;FP#7g
zkc2H@Nl*5BO2C)>HbDxqgpec!2}@X#q!hOB-jM<Z{0L(J5C}v9<!AuS%o<v=X4V?6
zWUaMQ<S153D@9spC5XvLeeF4#9D=bb2p|mzI4IQsNS8uE338GEal;K`Uwt(}pOuzb
z7}yfyR~`wCMM=NNMc-z4tv@n?CA~cb4z3!9Z`YTH8#SX(6TE*`+_Bs9alx3ls(>ms
zf?KtEcIC?5kqpY`pYMP3&BvI3O_;EH%9QobJTn`RzU-GC#T)S-Q3aA<3n58bLP)YK
zVM}3Tza>csk_HGFB_Kc`A&fheV$<Q+cL90vUqkvv2`JXgO0lb1DRz~16+5ohN^7N+
zv3gzK{B`_&N5R!_7>))j-xO9cVY1Q|FyhVS0_K+zK5rtldIg2<5#k3kQUe$<2tDd2
zh~{q0MXz_k`?DE3*232p#2ubnjE-->)!sW*To1s^qeuUG{`nurr?2tCh1YlJP}>;C
zL=ONNfQ*uR?2fl3vV@RASi-i*lEU`Izhz{<*%Ao}K|~QfK%V(aF&w~A3mBSNGg!0o
zUs|)PJT`D$?JDiM>?o~VtzBl12Yd!_d>$}6VHHpPs_gXAIM+~z4s{nSxV5w;z>K@U
z#fU|Jbs&@%#(lkULpLN@apY_EAN(HgEZEP?Pe)-uOT0NC>RdLT@A4*g#?+=d3R5qx
zA_&CHQ>U&u|NK#<N?Y*DFIzfvsBQMY{PMCvgT_W(J$9+BMPx~7laRu;ML-J67M2i}
zB+D}Z3<C&b{(1&L#1TX#i*qC5-=KfZz8%c0G;0MZv@2L@mY!{`$t8!NNNW<hWXYrk
z3$VZAAil^(CyE152~%OwqOI%K=QL@OS;~KaCr`nrOA*$8QK?_7FsKzCIRW+4quKnC
zm0g4@zrxHdu*z+;QRL#9F8Ft!lJ~anhuBdNWeLqVs}<VRs3HweROBWlJy^QERQ2k~
zyLSB(z_Mk#Uwm=iM;|TUv(NF7kFN(}lz^~=u!Lm^+alYRzW9f22`R|a1A>GgDPVw5
z6mAol&rqxlz+N28(*T;4273&kT?K7qzh>8ES82!9j$+r<j;kG4Ye(yd5{SGae}*+w
ztR7JDL1G;r6^_1Iw5YLi<(&!d<dZY-;;g?`Y?v9YM(gT$^dy|nD6w>(x*q3!zJE`#
z()jz)(WK}Itq=Sd^S8&@S0M{4uB!?o*kGHKlwqZFJc%%K<`vAGon6$S!@I5vkVGI7
z-V!n9Zw&R@B47#I61FWYNdb#28KVKDkiH8@N+Muzp9bxlRXe#`Z2;fS-uCo}rBaHx
zasbv^6Tn(SYppbECZ$;^lB5-rBoazX!Q_Gj30Dh0sO&I6@fI!_XeGc5CO|+%5P!s3
zq+_&3oHNwytXj2e!-kxO4Kqpup{u&!$r(tt{}Mc4WUnnT>TL9CP*Um}A}&_w{}Gn$
z-VgPgsOEqB;==YNRmbTcV(G3p>MwTjSf46Ng&?9)qZVn+e#)d3b4}E|c@|(il>&f)
z_%T*5MR32cgs_EeiGVF^OWMW&uqYsfC52@f1`tsjKvF0mKm6BmX~|yuwdo6XPMNhm
zDP$qe24H6CyMS10shC-_t5^$mB`Kv{A|c=^CXgV5dNh$V2DR&WMFdd^ZZWim7Jfd3
zh^a4&#5y>h=u0pI{rA7qo_~H&>HAqd30HQ;M~nab)bDB}+jzDw`Zb3w69|6euz%=#
z><jNdRis#9{Q2lnuVjA2|Bc3yT_q3i*#H-J@IFulHo(Ofk2V)PcyRkMV-^7c^O!HW
zq@(%3k|nzxM?+dMvEE3sr+`Id`^d)@wk>TbY>RA51T0}$WJ|IvVM!qcEGY~FSW>+B
z&!Y|X=j;ogfA5b;AuC{0Fd#|@hDZp^_&^Q%mx7gMso51Igm#4>ViKBM;YC%9#}iRa
zq7f_m{U|Rpw1z7Z)lZgX1`xonz4miL24KeRJuzwt{>05i3thCx#O0lEZP$|VkO<*!
z*@t_+!?=}5-rrzC%}5Vo>cwcD8FwBc4Ee;f8Dej5SmBwzRhkUvIC(%S;C%l11w;!Y
zV(-28&H}J<<(}TX-+@St%W#hPe{6y!q?DEs|CX?&2v}s>!j{6eg)PbQd_kTYR7zn9
zG_IS{q+Y7IfaH+XxL#^Okt4j6paeF6v3)%ssAeVD)mkVB(t;p}iC8EQG(m9GyDv=B
zf0vnAux3~qETXB@Qov$pf{qA&v!hE<zwk>703aML`tr*qg9f!LZ3@>;MfGIt%>T2Y
zAd`hyErh2|!3FJ6mM_@V_;4})F$u{wlK0nKRWll;W5#7A-w(Su_C0LNOW;y_wLe<K
zI3TLT<wgJx8+N)+Gz92dZaEIX=FR(BwR!_ciNXCo3i1;Dg|vjUg>8wTEp1EM7TLB4
zcvy&R4-t_;M*&*|EDG3Sdv@_{&(1YpAF#zMcXhk(^7hReq}q~#0THx?zonop{Fe;c
z(mO-Id<6w;5%Ax%jqPDkz&1O^2$8lWEK5i${`zBn0<02Uw@@lDOr@e@*2Ia+6M7&B
z7<K}jKbJ4aQK*rEDHmbkHMpRCf=MEV`d4P7>u}un9Z~}O=YLmYaBKW{S==X$&hPd%
zw&#^p9h%W13um{9qzF_+AZ+&R&E2~{SGR7hS+lOq$thaAc;|WNeblR0i|NxZ``5o_
zJn+ExKmbA_Xu@6+0fH?N5C}-vLfBH;6fmS25CKaDYyxm<_d0!#sq^&vOKnS776mL}
z86YG``o@3|s8=(&TidK5eHum*Emv>Kdtvl))-i5S-v_EVnhWGAv(>JO`hQ%d9hV)&
zj-wox9ak5-+HrKTqr;94J4!i9dHx@Tu)pIl!U|yp6>$W)rOF0$sepj)(4p?ah5sl^
z5dJw*M3qK?gY(+s?_JTQPW0E6UR(2U`(#XBQ_+?g1rA<51LwCddBU6`oH`QQ@)DdR
z#m2&GqQ-QQiw%1Z8UnR$U88^hj^oE)eAH1d_w3o=t+&qV)$6VrHIgp5<g54JH}-(=
z>bW9iF249A=?8j^&qolzwv@+qtnupI-TU1#RZ0rj!jfcL#uSDng)M}%JUcjNUwGNN
zT*P?)S8v`IkRtN4q8ShzNrPjhSqN523lf5upvhn-5BeL$s2PI&5*lWhFtXNQ4M>J%
zW@|8%^7Me>m>M^ZFU%>OAxDcAtwEv|+2*gF^)Y$v9~A`|s9iq|r!~X9y^s-#iu@AN
znh5z}ygC<8{D_cMX7`>FOqChJSLdR0osuT+irqNvL#RYNR^;Nfey~MU_MiFzUhRL-
z5GXAzIDY)a%)EH<7TdOz(lu))pLW_u@4vs;ONkSaT9%kf7eC8QT4YOMTOv6mk7{1+
z(Z6?03W*=*?*uUZ*%SL5T`L$6p`Z)}q-{~ak^xKD0THkwkVb6WUVxY$qt!El!JrHV
zWH2Dj2Mp{9+S1cAmIy?)QNNRKb4z1(3uA~|marvRlFYuegtSaqrilI=%dgatrTe%b
zVG}#cl0*aqo_lV3S$#!^wnee}<Iz1c1fhB|J{p2~SL4Z3kP#|L_pxi-N;G>J&&@<q
z1w6mz{GDoJ@!!#@cJ#D{`e$vy@qXv$(g)skEC#gn>wpPgufggZP*o+vO_{P5z^GA+
z$BkRLX;ZG>!p*O3m+)kNq^Q@=@wBDTjGNDG_0NmihJq5nCH<T3*%vm>(?|c_sjyf%
zt_E=TOY;khlr&DEn6!vsK)x|%)ir}#7#=vfP1c;H+1qv(`M1Uk0JCPLp)@H8rC5@1
z6cYi^CWnroqwt+Iv(OBd-i~G{$w~{YSXiuCLlY!H0fJx&Xogf!v378o*s@>0*7w|V
z(s9Q<7A#xh4Q%O&t3S#LD+s~^$75(4Zw^=a2@9Vr!M}gR_WVi|LO2>PoQ`wbCP<NZ
zVHTd6k@!^1=w1*1JT_VnuzC-!_{w|OR#oslpL%MuZrz&9p1ozyo}#$+%M_ylL|mOa
zNs^YZEYY%I+Wl7^6>ExQrbP>WmaorUwl3GUsAgtx%Z@^05?Df5maqg&Tx{#E!uKbv
zy|{l<bI2*(>x`bfUI<}am|C-D7^kPwtTZX1UBM*SFD>>+pP`wB@#!-&GixSGlai!0
zDNAT(rATX`6+;S0f2+tZ)MV(A{f^?TVF2{iSBo#bw97Z&+&*g5f^u%`kT&>Y#UCJl
zA=Sp2tuVL^`ZSIL3?%ALVBQ(G5--fc{A~zY6-|6{HR`5f_&{{2lYsi~oPu{3B3K6X
zrw8$AY#Ru|RpVh-VLCJs?cQB5d-ggYShDkvL|k_h|0M(o>E(E)r`YBsh6lFnEG!Bu
zB63{)%4aLrZ^=(dwruISfGp2B11~Nn$r2<aZQETmcIrlEEL*=X7!b)JE1C+*Fo~a@
z`K#F_BGN<=+3$Hgy(Aw9&9GQ$CYyz3wwSaMO0rgDNue|gNm^0tFN!uS(y@WC(z9v|
zGsvMs-}?63o8NqMXgOnY&TNIT%YTn%fC;-+3!!lauI+-sZOWtj2$?c4ZyT;0hb{XM
zkQIXaz9Sn0TjI?DaiL;!&O#UGe1`ek6H~wW@bpW)Ft9n~?_Xp2?kM9`jsXe^!l95I
z$-6Y-KO9zd>ij2C0v6xNP(=Heh)AOcL6W5R62}}>J;F#Ie7)|iv8ycO@w9|(QF4+M
zhy(;oa6po=n5}4n5DB79I|_uLj8rSWGa`98aDo-Ht5_&4DUv=Nk^NEeuUXrgn1$BR
zT3JG932iB*g_3MZb`@zUv}6wjiI|dQNl>P0EIu9)=L`jaCQa&_b}8k|7HC@?t}e6E
z@3$g-N27BcJa!T~*N!X2Du+>tFmp35`4R;Vm@8NOX-j;40oqhA`4vRiuor#aN3kk1
zQda0-<X~haMGN64t-%+|<J3;&7+~GHJwu0%T(ac0sBvB7wru%=>#9->lj9q?$!J3>
z;bpT4leku|Mv^(~wrA)5FmFd%ifu`<1o`$Td3g|)XP8DzRm(R9Oo5n@=Ej-h`B_X3
zoL~lN$x5*l>=L<tk(aRnjO=Fyvo_H#Ey>cPC21|R)=HbNU@1&iHY=rtB<%_iN7-BW
z&FWNaLIjoa2$?&%b>+%kEnC(ohiDpQK#Kh!>BF!zqtHRM5dL-)2DU_->YiO&!3%qH
z9^PGmmD!$uvx2|H3{|+KBOW~w>A?iB=Z$%I^oR1U!BKd<KTdBJ<(yS}aM_n7L09D%
zVAZPKOP6krcwLC-zWXL`-n`czSx1Q)*~TISudS7kWJ#Dgb46kG*|!_s8^3nj?xN%*
z%Sd!-k@RtnCCT!lRAhU(qR|MkR~|_u1VAKWgX$4CC_@tq!9p<+lj}u%$<weA*$+!A
z&B9`6%~A^~SV)qZEG3j=sYz-Ql7tZCk$w#NkNl}h`+vApL@adMZR5ZC>eBLW_~6zU
zvmA$?{*{KKk!+(&Z5&+}XSPJ=Itf^`oVBw6W0&K<KVwf(B>+!^b{l8liBr(0aRS&A
zR=95}-d|K+#6W4>+5=~|jT*lD!Wi&zf`Yrs1;U7K0Mc)`;n<g68U$eO+^t6+{Tz_w
zKic>qMYbRR3Q7co*-}8tfUpBrC?G=t8MH+pAVRhbc;PS+uw~FDFFG3u344)R8L&J!
zWZNPV4)aUHC{h<6o$_V;_h6-=m5BprN3r8-*VT^8VONJ8?YKJZYRA!GR~Ls>*x|6N
z!j29*91g2uSBD){9OfcN6+61PSQUj;IINVTIIIy?DAowODE0$nVG|2eG37D|Q=<!*
zpDX`{&)kB+qYp=&WTb;$P$J1fw|cm`3wk%K+!+k1?JmR<GcaP|fpmdqh9nGbgXd05
zeEvN}IO%<47w(69`?tVb1LO3=DIZ`(cFB)Ty0DTO;Q#*bn6YD*y!`TvZQJrb{q({s
zt{4+DnLXb59ow+YZ(;>OrhLm70;Z(h%WW3qCHhMU>8E@O&r~qxvdItiLc*T;3n_$@
z-l<|r<0EckW<i=kU=1RI^7;lD*rT;4`=x^3Jpce807*naRN2y`rI4B}X<(0#f`woq
zNoaE=kcv#*jFcn<X(EnvX^-vNOD0pAkhocC1Pj^kzB~J}%es|w!;h)~TOPu(+s2#?
zD^yRy(6+d!1L~(DCE($NN}(?ze7^zreuvGuaP)ytzpK%-8a_Qc+Uv6f^$(wqe@%y@
z$~!YN{;xG&>E~UNIdH(oShhQ{sbE$3PB9UU8uhpI^kK!t>a)-0O`X~^C#Nvccp@K$
zi};4-!nANBA~N8ouvjIBEJ=QayYOlqC6N@QnGLB~!pj4-gs>&q7TFeA!fO)Yl?eMN
z$ZL@jTMn<GH50MYOv($>l9wtC&01^NQm}^7N(vwLC^Gwo4_!e-94*H8IXRZM<6f#n
z|I-q|V3QbU-G2M{@)^LENVSn0u1ahZ)^HW-r=v$b^r(lnHPE3Jswb6nR-(d9OSk6X
z?fLj(1=i+xEonvNNxym$o;n5nTa^52b3H{at{RU?YY?)^yDH5X(grV{9@hfsj>(w6
zz06CpDo*`fyFNd6?k)b;i(h};v1d<F2`LbL<XXWo9zXJ05t>GBemj$1ooc-J&u%AP
zJ2@#RiM;Z5DTo23xIwMtfydYTc;b4?h+dNgZ5bO>NI^nIB(bmrgcO1hu!Yuf_fDH6
zPEDklpjC_nmP|sEP!K{0p$#KR%|dw`7zI}ZQ-g0>&<R9%03?VFtAn65VE94A_lcmg
zf?|%N3k#j3q%xBpErFE40Wtu`v_DM?A}a|slhL*Y`ZPxGhNu=wK=G(dr`|#b3wGeu
z+4yP|k}L>9sPayA%?L_d)B%t8@dCZ21^+KwaNcKd^nT9oYMj)#B=x^E3m^PiUbMlg
zn0BN0-kY<0`OZCi3d3OqATu+)MT_dWxkd4P&m-Gn=6lSs?|i&$<Mskb@zJF9%Qx*K
zf)o^X`O*Q+8rDuWr7{sB18~{EW@jE>KVS<0W2SB*hKGd&S$;K)@ZS-FED7UKYEn0)
zQ>)Br^LOMIC?UWa8Vn|-S(6F+3Xo=o1eg&BSv}fkxQdy1;i|nGx8*A>1aYL<M5N=8
z_a{a43<*TE4Y42)0wH<N&7EHxzIgk_eIQOWfHi?NoRShKhx!dSHApLOv|b4dE-Ji%
zY9aJ$gcBR$wC0Hge5EKpHtVL)#jt7k@K^8f6#GD!(}<yC8(`F6&&Vl#B}BM(0>-c0
zzx#+8r#6i?LGh@6HXfb6AFpdgdG_tMXB8CW7Zy5Nb8>QU%9Ja*c6}ZQl+pkIC=f_F
zW8m1!FK>6=*{v==zm56dyj3~NH|H6m35WIIlNtb+J>v8&y9!5sy)G0Gr}eDYp+!b=
z$TB)-UxBMN2P`3cOTcslB7ul`U<r~!*cNqdoh2l>N}tfVR&JiNetW*5HLX#<R#IV+
znzdxNW)1~pp;k)s@tte7YMd7F!FO(zxqELoBgJ~|;}u(X6^cmHAt8tq8N4IdZ$kvb
z10LAQ4L|kZF}GaOE?~=U9cr9;<`*%|i4s1v2pg#DuRnIbcfM;~%-94WqastsG_lqi
z4KmOw3ms~qRTkRUL`D!9L8JxZ951nP&;t#3LTNnt6UME?hFoY}UO%>q<V~E^7*Cyo
zCe;$KrTO#w4Y=ul*j2E9K;>#&7heiYgpZft@gMgebEpslD5V!H*m~4ajq24)2YBYp
z>rOlE-I&N%sh<~C6DMt$IC1^??zofBZ5?LrcS<A8Ou{pd8`n)SpRAS^$Vj#SeSN3W
zI_I937X&Qd$4_1(ASp=tO%VloKu8E$uxgJKA|uu6(kd%G)$Wj5El$s-b6QI6joS-4
zG_ST|eJ%s78>h#9AUR|uhpaivvbXIn6atRR{#U?jJwyb*`HCPi)-MRU(4G4EnI|6Y
zwY@m~ltz?nagheG9}c6KoCpTOKmcIC1^9*=dhYk;pVSyLHX$>Fv;eY_P$LO7Q&1}z
z_0v%&1vQc@O1=jmq|H&=^D$*DzF2{YYY>vKB?t%Tm|{kOgX0_F)?>W9iG-I|=;EPi
zcy|Fp*8ac9)wt~#+;MCi7k#k;H%}}xJX~o8(3<z|-8*;g%@<zy(X-E<Iby`zty?3$
z|7gHJ6te2otCpP|&e`jF;4Urj?exte$(p?)=Z6pbeLH7Ikz!_?e_EqhS}$#KY}!!}
zc2qFnMV&oYyHAC}w?u_+K-*GC3CH2tOS4-wO3O?S5W$kdoUO1(En1b6v(H(xDX)9`
z>UFCp9#(pEo2(xf?A*A$;Lc0h-S^4@5Ru<+%QNgEt%m>-#7y(X4C>q}T3=*a;*IC~
zTz&22gy-+uxB2klXZ7s)Mkpk%yY84?y&7d^CheDEdN;&`^AphJp<X#fn7<v5&%m6m
z2w4z>w7|i-SsSF|jRELbtIUEJ0Mj?(+|M9Ig)9nY3_AhWc8x<mW0vEJugaW}aUgL3
zrSyswyV|y`RaE4xT$$am<1;byt0QA{^;chAG;m<c;$l@?tjuXcA?t*p<96qT7f&1#
z3`ke$FQ;vuv1r$SZthY}4h(>CKWxs*2!8hMhM+BjK`-;!WG`D%*f!ZxSboQpNZSb0
zJWCLS5X@XHEs&aIt=hEDakb;JtJrll5eD?CFC`_k^#Lf&mK6UTxpel@?BcL04s+O1
z#f~a=xG1cO!>TB(io?7;yKv5kGrF|SjQt^A|1bMFD1en83h<%<qeh)`?z!#p`(Ccb
z>vQqi9OOB0)PXCI5}wv3)$rl}p>YNTmC3_JE>8altFtTgjm8uiGZZH@j-&pM7ULh^
zR49?Q5^(@2MccNu0E9wz$Bs_}Ok~G1j(+jQfddD&1P~0$U{FS=Vg8cc+vff)7?1#@
zpdo!4#ujjuShJSwp7`^&u%kBZC}>hQwSKMSoqLMC*%#!yIEf=7+4DyFT~aLHHXtHq
z<m?OY+EeVim{@2CK}vI3H`iQ}C5f54wXHt$*WG|1Qi!oEP4mU=*@Zv6acT+bkDTG^
zYdXI9N`f@c^UfQ&XU~vpukH3br2840@cA;#*@|Vm!R$4kI!IMxXmoIE+}O<vB$sY?
z6=8;dPsbbc;OYvwP&Fgj#t)aGX|*_i|EqKG=ns`kBd>Hx<i?GAt5pl7r{4=094`Po
z^iZE+!%hS+XwYY$d~#MK&Hd45<_sOwylsnW`#tTJodw^`+40`^wbj!D$9AZ(HM?l<
zKBqygB-^H<VjZw$FhD_DT2gp5VqPg(Bu6MxI7XHw1Q9d4D$?bOP3uo)KD9?3yJ9)G
z=iD=0D=v0)v7?H^y4cahVO3D<Hm;L0>BT<fsIMi<vIh<vJ9tpDXP*5DpqL6t0D0Nj
zkM0-w9MXty<igkQ#nN5)as|dNN3rs7PL(W2AuWhLjd5>pG|AY{ho^184PRqtK}FO4
z!U{d=;j8mX{-~E{<KbzQ$hkPE-k?Oc0j4Q~vvK3y4H{$sSg>G6w{9c$?!6^B*<QOo
zw^{oUU3%7?JNfLgVhgU~W$SWZ`eem|6*<XCGAU?<Y!M8|U_jK$3N@{la>lXsYE}zA
z{r=MAkQEG2!0Q!9w&g(}!vKMpecLbTQrau<bsg;}?YO!)to!z;V_8HMlWhO{Y3rL~
zSA`v29QJsi$WgYWS?`@uK7Nb2OOFC}JOel*Mx1l;#hpusSq=mBYlfq-DHpHK!N-fC
z*c&)lwfPi53paGbZO4>pu|(d?F2vu)V&RU8GM+i`oVIa&P0YG=5=JelTwB!xNri~4
z-o4vSpS}@5T3T9z1{vlNwrP{~>#tXYLKcAfbyIe4yeca*RO0EHKbNh~{qM-73s>&V
zFLaYaG8B*|2oM=(x@TXwXq`$=4qSLf<NL2{zi?&F_w#mA6lNqs@cxz=O0&|?(b)iC
z#)(~P*%j7~%zSj4%s1n`mjp;DP<9S;S%eqsb$I*jxe*4)&kw)*?wlKLIQCEr`zh-%
zW*KH}L3R=H!d}Kk6?WleMuCfC>fzrfp<T_W{hIJTnK!Q*hskRzig_aT$)`inyJ5*v
z;Il?!_SOUZIacL=Dg(53?H=>zHP>{D5JVs#Ter^Iv!_^Vos|{J$_$mJm8o-gJp19Y
zDYJJ}PY)yoWhf{qQBa2%T4VOI-2k6|TH~&5vYOUQ{c8H=a9C-rSqKJslYhN|cdVJT
zW)1B!X+bf)fZ)2iLyL@*B&#wij%sFxPCB~w*FSFIm^kjXU4=Wci)v+sDlTYlxS_|(
zFaP8-t$X_EEn|Q2jW>Q$RSXbI@vHV=))vg&ih0|yXa|%=Kzg40s-^oPg&N7Y_$Zv)
z4lT11#O6w0-ZL}t;w%)qkfNgc$JJ<=h4%)bX|<@y3n1UYd7qb;=}`3y;JUhX>t{D_
z&IN>R%m4i6v<PD`W7x1CA9>{a-p9B2VcNN+j~y|7&7}|joS7C#OSU|b&oOf>d;#uH
zb7TT7UbFX=Pgh<)v}I;`;BTil`QYod%A0m)K1m*x6SUF_0&IqQF$1jGb=kJ4XV=;X
z;J0Sxo6c=DYw_;QI}6!c0AX*QQ(*>RfFFCT&&x0W9Jzm&U*6>)A3;J`yr&4+g_yYo
z<5yzJIsgbtkJbaycUe~*-77|ljh0!su^R@ojHCOqFppw<yB61shoimXsEU8rS*`F|
z|ELXZPPii<r;J2S(LtFmR;36+DbC7zG%qh~(z#xLeQ>PEY}Dw*O`8gVKytjSji4aY
zok4S?VVmEy$H?zU3xAKFykwqTImQ3^VChZgwh9I1r30IdpT2olPO%`?niR1R(3&-o
zA~teC_!5GdTQ^RxnHfCL*e3xP@$j)j?wq!Bk1`k2qCr~AMrjp9?QPrEU%GVb_U-w*
zcHMQx86V7^z2TT+TGXzc8gn=&CkNho>z6C9?0x`d!0auUuo_>l#+H3v>7XHzWa|*d
z3N$0d#)HS>{PuAsMEMnAlh@*^aZrBSh>9;;VA2I>SEFQ>-pXwB9T}Z=aX1*@r=K?T
z?)@rr6oQ|4V&llOY~K8(O`CGf2@TY~<Ng`LM=jrz8$P376PJL1*ts`s$UO#|N5@zD
zz5M<5J6>5jG_&LKE1#~sbYQdU8G!-4>#y0A_sf#qO0y79+6+eZI?@UDG872t-YzRC
zXdR@9$;==9yVqH_|4>+5l${%X<*x1(Kj8@{G+4THD-l(%o-}LL)um0|)YKp|)~v}c
z=Y;0LZ_LH~ZJ56uzwX4&0_-Zlu0km7l^azyfAau{zQ94_4BXlSCpPw+j}=^Fm*d%)
zShgE>C0(n9E{3+j6DOlus3hor{uews<Dhae4uk>Td1rPkyt6EsmKG$U#fx{GcG}1-
zTlPiHHh%mnqNfl_Lb8RR{NL0~2nqxw1*8>_vE8OLa}+@N9UQc2XX_7i(HdH_tNDYk
z*IqK9Syp<WS%cJCS;2ABw<yI#tYV&%6d+=yxLvc1P(W7RU`?P00+#sS3nxAC?vmbJ
zYWD6_v*O2QWrYA5IdaiM51mj#u|(GD)pypdn_do65#gi}n7_m8Bp)GnNsx!KT-cQV
zGNW@HoY)9M+MsQX@*sX`tpC5&cwz<???g~mt`1mfB-{AUsW`7)g3!S=<MH`2B-vH-
zGb?2mmWYm#ZOaWC_8xWAe}I(u;kXuT+nYsZB)s+=G@b_Vr}lcLD!lGJJ|a>+-79~f
zi&m@ze>8F38OPRb-XJX{$r^e}!_U9l=qkU3Et6o<nm}mZG^0VS<f<YCLz;JA)~-@|
zgNUxZw)5kUPaihy+x-0SQ%{|m@RN1xrtg<aU42k#2$l6?GLU4US_qeR#0}j_B9@A@
z?EGa5E*uL-RWzfa1oIr%5TBkM_jTs|T?IIC1ojqJ8TF&$&2gEzY16D&f1^@dty<{B
z6W{hrA~|jwp?E||Khk4RX;yy2l9<_b5z_ampG_wptrWXjyNVr0e?4Q%^!Yo9ND6Uw
zpN7nET~-RF%V*ftCw8gTuy%5c&+0c=M0EAl69F85d_#b~`f7Q(UbX#PXP$F7NI$H+
zAw}cQ!@R38>k8b|-OF64Am;#hWi~pzfpb5H(v?n_Gv>knF7T*7_Irsieigb8$KK*9
zhIv-SpJ>~*wEzW3fNIuE*|_n}e*H$QTbCW<Vu)#w&%WT-QMhA_T%}_hwn4|tZ&aGK
zVkMz9E5%B&7Ep?nWTi+6?I<Ea^H=Oywm!FAvy2YSGx{D==c^w!2W_boAJrnGL-T4v
z(9(5#7q8jdv3X{z#%cJCR?V78&6~gGx_5Qz^!mbu8@F!VSGR6jEZr|(zH|5Pf?mCv
z)U5gN<jL1`>QuKJG<+zQt5M`4BZ!k4qfZlbuZMOu5_nWALU4PE@SmSCW;wD8J%4MZ
z*-zu{<8W(_=&`Zi`;STZ;Me_>gB@}RRKI?@=?4phw{82^0}o98-~X1E$_eGDLsN4U
z|LCZTlR4U?R%_OZwPdYW3uwVgu<1nN!yfGlAzUp8B!m#!RUnA4qZh5*vtaq2quXY+
zZj@e7<aTbInVA;YxV_+q`8#YW6mv?_Z`o33*sxxYKmJ4Ay3Z|NeqBb!!y`s4xa+Ro
zu>$3+v)<pjH8(f+;l_<KSFYTZkO3m?V-Nnp8?S@XAVR$~)JsLr`cY(GKHMz_=r7rY
z*XLryLT{2qKvw#yT#e%z;I;m!l@cfQBMs9Be}e4711UGFavQ*_<d{ACmb>qs^z_p|
z#3Lw<o01Z7%W0nzJPly%TJ~hTWpIuM_myd5s8|WD1i7S59-9*EDi(qrVnlkMTf!*W
zo*imv&CAy3emQNkEeQliv8#0bsxt!)VA-}<z54p*&0l)#vFShmeElPjd~X=Qm<N6O
zytQJ*&dkgt$59VIeA=Ep1!dV?u1217AT~g(W1av@;`oL*r!5Aw^rY+oWL8JLF~E--
zaoq%%s@T*6x;!FegfQWJG|ouS{)7l`%*6xWBOni9UyMpHK(}rU1`qD?_~U0h{qzsR
zhtCA;QjMPwHx4mE_i+$NvxZW_)!JfV#J|$4%-}lBuF^tCp;!u5g3KHj@@i1L-sNV8
z8Cnv6k0z}zDpp!+A%vsY^jS<zvhbTOB5KwwQ%dpVlhc$^qeq_;q5jpYv!_m737~!Z
zTDC0*3}{o%c^2=2q{<0YGq<31bsXOar!+y^8psSGGjxE(kR=Yu597h_F?k(!<R5q{
zks*q=2jbMGutb8o<YI+Eqp)yCrB%wI4TOFE`Nf}px@h?DA7i?qAdwP?FaV%U>0b0t
zR?t#wCA8MACaG8otrRK2%BTgQl@PAdruJ446KUZU!+1QPS!)T4X~x1`0h@#=mSIg^
zn^DxSaJcG_uF<21oPG9(W5+Ig`svdQR}3CJa_rdofCUtf9{sodo?+qk1Pox}qoy#@
z(WsY-hUsWp4b3vqG7D{MMA1ABx`rmw*>l`Ve7qQw)<g$AAHZ@HGD5iSXx!Q(s-{Zx
zfOu~q?wWGoUvWqw5MFrUNB<}t-~A8q4FEY7`FItqilL#INwcf9<3b9dBr6T2v=ZbB
z7Q{lbRO|{CO1orkzK(RG@J2SWU{=gRN-B1|0(mlRB8iF}-L*~DZ%+NpJY-1Q%*@nP
ztF}f1Lu2Ro;=}6O_pM)kxiLApJOD9oo6&l(1%eVm3jvADB($rJ&UMhSme(o2;{NLj
zUp+uz#`b)?yAaRL^!mUbFc#O0v;c;5z+-*la84}g=M>?BF<7wU@O4D3^skvacT0T7
zKT4zowD(`lP>AOQ4FwjY6e|f=YpF;IErbwK3k4-ex!Un6Ax#@+5D6mf$IOI@C78yY
zQhCMlLU@DXiMVOql)&$xyT0MT<BxCj<(K(GhkpF&r>3;g1wsJ#>({nTn;N@!7nIKc
zH+RP)CzfnGB+BSKUR5qplX3gzJUsmqiWQXh;<yKV!eWJcd*S+{qxt%!%VOS`hsS?}
zqYj7QKX3+!@pV$1tSI3IH7}(h37TT4pP-;6lhTe$mLw(FHEnBM7Q}+IAVGo!X|I<F
zG|Ucbc&0UJCQCw@o^9Ie-eXF}wC3YF*7!Z(AG5yr;sPm$eeuPz+}xt{^w6qR!&<cX
zHz1EWrs3IVA2oLD;+t;jRSxMisa6qAtI7-ha4|kvin&`+tUL&Qz~^@qguvr{Ft|0+
zgJm+?!kxHzB9`qsC^kE63=pCCav+fZGR{zs?in%yU5O>M)~@ngoPM3V7DObNh{>aS
z)A81jzVLdzX<=!hy+&>%bfh*C40LN#y=G<zzni5sZ`yQwn>H^vjt0=YdDf;)51x7E
zd*`3usZO1={BlR(9cpTbsE(W>%-M>u%kjxlX!aT#9<TvwM1HF*TzC|2=oaUaD)H3?
z4xXQdXJ;a09ddg&@g1&IthA`e$;=#9ROH6g!i)IkALdPyfGYqAArXj<h4dQb+7h;q
z0b$uP7!V=b@+OvA!Ztl|rLg=axY2>ZrYpMe#zhK$I)>LBnm|MWTRd>(QLz&Yeh<s2
zqrAK@5mHhDv2WrqR)m#wWirAFi+AC{@A2~{1P{6-(vXrM)J(=}1JJ#0c@<$wW6~O2
z^5vm&@b7mWNJUsdfuod;*8`<n;FE6#2;U4a8bCvmR{|t71Xz(0+I7hxMM4s3&)o^_
zm!HS<7-XSYGn1Ca1w>Ml7D6cY8V3n-l{%|OgEFZ<@-$Yhz?e_)({!v~hrE5L-vI49
z;I#fYb8yuI>KJ3-yz@SuFkxAT4z(99yd{?C4>PZtZ+mkdM*fOzdB`n>peo3&F=GTS
z?}XcXqHbz5Yd_&b*p!Q*pJ8L}Z$|wG2!Vv@zg*Jx<x+z|V@+Wn{}}Ki2ui~x2-dEK
ziFTQun<R|M3lhG|-_*Bg!$&rQwXig6EtEFhq`gjtrsHDcx+y1jtIcJp+ZD_3)W0z4
zYjo;@<NM&E%aNIhU<mv6VasMrnt(fRL3#$Rx(-)ge<+l|`0<y#@y0LDJTpBQysx0(
zQ7I3%j+(a(|67ge8!>Y;gg`)m=wM?^rq@;58n~<z&TWT`V43*MBmI5&*K~Zc#ETsN
z=BsiHuyyOcaM(>W`A5fOgHlNzh$sP<LB0l11fjJ{3J4QOknhCNKvecK0}#yGVrCXv
zvSyYVQj_wVg!(<RaM{47CE<kUUCY5gZ^Xn2c<^5sJ~HuRy!>haShog$zZ`e}1D}n@
zNvBq!Ht;&8T;2VeYkG_vIj^9=NlObJqK6uL)!Xv0DjT0H!|26ce_5&ud2b?a86kA2
zg?o;}(RKHKJ-NkrZ7!bv2_Xw90sKyubpTH>5&jWn`+_t;aLu$lKpG8T0`vkVe_4>@
zD3AUlqz}QYy%R}dCe!F#YaxY_T6hx%q&F7e%0bO*R0}1z@zcJ;X(!|LH>0FqR)<(-
zG--yfr=qX`y}F`dLwq^8Y7vpSfq(m3mqSYWL|C&2ug}BiB~aQ+Ns$6pl~|b!4WtI}
zY+v+m5!aNe9MJXJTs$((>mdER8v9o{1{ghhK`CDlC(;1$N#9opMq&^_Xb^!I!eav_
zt%ywPW`Aa*5B*sHY-z<TGz+b@)TA{_DWq0HkR%e?OnFD2ZnfjYzj-E4KZbW+$Lfu!
z-(de8Vk7S-r(oW4Jogk@)yKkB2!^Wmp{-q;9ST{d5}*p#4;%5>QY_kmP5Y2j<j-U~
zxSqJNtX1fuQ3h`Ajy{b`HnlD1{QvnG?=Ql(yx+#jQ^gFhapT??*i%{$pwv!`5>Qd1
z_nk%r(ja0Y<ypPnZS|vF&|uA`#RIe?$)q$%&1RH_5F`}2u738mt|hHWB8+?&@4bcD
zOOTXY2`Y$agIn)JR&{i5k6#ueR0TX>CTiyAhnqEfbmGM84xRxv=3?nCEZC0k*W;(n
z01))^#;S_iOv-fon&{O47arwBoy)0zk8p)%e7pot&cOCO*z$Ku{W!Rm1Z7cwd|tFi
z>>6xr02mh#1i@9lBUKwNas37nY(`kH(ps=3wAMDW)<XJ`FEi@Y3`lKQJEd*YQvJtf
z&cH3#Vas0F_5r4SG2@aev3?!SJriF|t`bk^S!a!yJb48WP^!|EI!dF+MS+8#x8UQ&
z_;wv!4O@6(KDp|Oq)Z~OC6H?4wC1?K7pf;$B03S)n6egEjrWEG*}qrPKX?Wx!3ikE
z3>4!FB0xa{E_rcw(%vK$KZKyo=pv3(NkJReC!jTH7E&ln3orCbBm_wf$92y?y-@;J
z`k=m8ycU6ju(r$zA9xfO490U$;nq7368(Sj$-;>fmzYq=9e0fH*ROR&tk|u2n7A5W
zuE2_HgcXWhDE21rSXJ#q)Qn<<25GpxCkD1es_l_)#qFR+r{lc^D0Ct4dmQn7unge3
zD&F~1dirMx{6jIufb?9V<iY)tV9Hc%7`G1;n=&yim{|#7nl>w~q##QPFLJCXztHX5
zqm&Qgy329#6{uaO%tx1SBtu!m`0`t5Tmv`V1|bjlsVb$fzy6Cz_1xmc8^@1d+P{CB
zgh2ozJo*EsZot|-*jw!7MUqcaRqH)8ASW|~vs&ZiCg@fdbyLeUj>=j&MR@8bj9P;H
zFl_m|@NXUx2I$_s;k)n7F2w^0-Jl7rVFHX95HSEEUepLuFy+F+E19>THCdMN{j;S=
zNK%3$^8tz-?YO#RzuV77V@JMubcr3KTQ+0H5195H_U52vYYZ5KuHDPj16kGa)N^?J
z5#0aC0o>xPTXVx<y>4Chu3dX$%0~lt-Z^2wfVO2x;^Fg+ET~Fs6S)DVNob8^G|51>
zy13w|xb*2td0H3m#GCUlVj+_3KLFrK@OUdZC-^2HVVPBlREXG}$SaZ`ApnyNL0+#9
zTf*}9Edh%lg|r1pvOH3bKmY(B07*naRHTrm<*h#pOo+%3RWD=ogs!z-yE~>`&+9KC
zcQ5X^FM_;x?aHrFBPDvVcin>LU%+j*<D$!unTel%#1oHT(+130hPw3<KkeMTsGEts
zVc3<medBXxPqg(D+nHoy+qP}nc7CyK+qRvF?TIt7ZQIFn^L~5pA8<dOUDaK6PVGLu
z*6zJlmq`?Dd|Gikf(%bhm0VsL!63ce%zC_+Q<IcwW~(75+2t(3a=3{E2Qv=-GTCO=
z<pJ5a|CYS(4UtnjQ;i@J@%m{mE@BopNKHjUd25K%=mAKf9X-hzy&?pIXZ*_e6A(17
zEwd+WB&DA91MuDsq$5N64-HytH?nqy3A#d{ZbtuTiHoEB`=Nk7z^{&rWlxb0#$8iZ
z%a9!5kk5jF1ZSp0U0Uq`#A&7@375+xLg@r0gsb)a6M}yq!_tKX7<AtU3d#$2FLFB`
z2aYgEj_BJt8f;Vpb>f;J{V=gi4P^4R5!mBqGvPJ6PU!eqVUacst_DHFmjatrA&`d0
zIXOi&HQ}gCfb@wdn!BjiP|$!QDiG!%0rgL`k^nlwX?`JCqeSGv{AlWu2>3B_RC8lY
z>_zFkJ9PtM#b<lgx=39JA^<vOS7qgk`<1r;@l-ZoH#YtDY%GHn4}c40A~3Secj}1C
z?FJdZ)y((`Z@ZeC!OD*vxKvFY8Z>Cc!Se7gC}@A)MEPP#W~X5fKa&#4=*>Qd`yL>c
zRT(aeRHS0}r!tP-b*{s0zv%@`kVj>C|A6e(n5(2>zxUi99zjqvGgC@K_uto5n?Kc(
zVnvNoJGP**G9`Kw@cYI7Bxm7!UZzj?k7b)XG!3WtEnL1(3`>L&)1Lsbxtf-_q)_tO
z5SkWr;v`UXB~Y8z!xjPm!TEn+4HP(Aog&a+evt4U8?L$Ja!tGekGEf|IbZ;s<zinn
z&Hw;xV0PUAT>Zi6HRlOv_d94^7uSFS*9j>6xeisIg;3x@C-o=+^4Ez)z8>uaa^8zi
zoBtZF6<5FDU*W3QMZ&nM$OD}Hl2OYPM@8n|;YJ=fMk|DCAbuz!XcH<L<#&iUW5C|f
ztmnrSRw-mjnp+s?ZYbP;KWuTKDFoScgPDP$+wz||0rE$~Sftxb5Jp3{(DfWV##~u~
zprw>{lVS-(vOqN-_e8qoNZ4kMPx<<@9cN*@(Tdrmo6pA;wV?fWcX|Y)33ey`mG8sa
z*T8pZ3Fv>lfs=K@E7$F(PC1^|ppb@PW+n%t(&N$L_*uA!Jdx+es<U~qsPmgidap(z
z`*&ee|MXeTh#srrle2aYM=Nso*>o^eliZME-bvoj(bV^PZxZytlR<D3ULR_yO;0q*
z`U6;Omg(@ghnK4TfL~raTIks-cA$o!HAZi?hU-4mVPu5R7$PX7RzeA)qS_w6l0^du
zi8YgEy4**Hzqu?o(ff0_vO8V9w{<n;<%s}O*}=u1|7ai53EBUX1jKK~H=_M3p@O|v
z(v2}>3?yl&XkdPo=(!!_5LAXa#|%oN@9ClqU$Ai&5-hwpnpu_-YnJ^}9f*->se-2^
zRgoBzHSVZ248{A=S;OW_qMsYgwb4*MR~_?KT%1d75#S^mnCP~r-=pnzp)Qcfqc!4_
z)Uyka?diTHOn|VwS4=RM3?kM9ov02slcEK@4(=qov06=p$>E8D0s7fid@u^TeLtdl
z>dQHMX;2O#9x_tI3V-QGW7tKX;iB~j@OiV_uQkc4Zd2mbKZ*pqEGmc$MR{5w_8tU-
z3^%v!Uo3g}qc}w+m<FEChPk2Ef!(n^UaZh_t;I>XMd-BBjmGy`zdzc@0IU6hX+vST
z#AI)|`z}-HN)XEqthf*o19x2;AuT}Ve;SR#jW3Adsr2gHHL98eY6x*wqZcax&aX%H
z#O}qK8dJdOJVNxRX>VNZL7g5L5-;pe(i4%jl)T0>iYqIJ!bJDInL`++f(l%R6X<Ko
zLrmd~8C&W+))*+A3;aE@w4EKZ+bNiF{{0EFofY07-1KFE@di~5lHoZRLIVqzyHxG&
zetP@oX7@#1Tiao!4hk%ASnn<KtuS1^`}^G<jl8BC_+6RJeii*F3r<?l|D!1c!4QFw
z3^F}{V@9SdV+gugCO7zF<F{9sCz-~200oKfU9$tnAUivY1h&@(?CW_zOm33Ieyyjl
z)lbWD))aI?6+=b_2Nw%r**|kXuKBUYh{`)#?0SHw@XCXE8V3I@h)hb!_2VCt)-ZY8
z-{eX0_%ik=J3BQqML$VfbGytk%X{<qxY1bES=HJ3zJODjvVTAD*(t?lwms`&8H)vu
zKBSk7#R<K8G5fYt4%)1x<GHIBL<rkor6xgBrjY66n$7Mydl2Z0G-;4D+|`$qQZC#j
zmc>9^QeTGkhZr3r?d#oUg6F0tm&JlbQ~Qsl$LU=1KQ(?kCZE^GUo>%NwM=%BY=JV5
zm>IgJyQAK-!IKLUu0DW3!_5eFXMxW3oNT!d@*Fo%VO|*2O9DTSN#7R)a1S8fvCm}E
z62Po<DqF-6h0klDO`yNkpu^8ak>zwH-}x{>o09qfMHrgsd$y-PO&C1l)Y8WBZfAyM
zKA+ZbfJhzJLJu~Sop`#>ljfU?Em%FIz5S<GcmoM%8RR;H&-+D9!!@Gn9!r7h=>EvP
z)t--yi))3B#+w~&(^#qlCVAL)5Wa2>#T;q73loG0d3Z#pyw9&xN^nSgc-X<g-+pM>
z5R4|`^HW*vI5__902jYE+`mW06rE$c3g?dnrb$?ngP7vRUf<4POIx+E7P_!(&MTLs
z1FNm(Nq->bj{(EUYGXH-^EL0-Z=}Oiho%5ADW9I~;_`@AO8+xUILMFz*uzL0Mn~fp
z7GEW4&(GHb9yim+vj=?5Zp;43#F<|ze~B0arOs9G>BFtTg_VzKC3_Swzb+@IzWC4Y
zEO@D<OWN397MSzAf<i3we3HBgi1`DjFFen*5DAPgK(znB$0)wNU2cx|3#p-_kH(z+
zNZedLu6%#AM#@CPjV4r$jZfn7@-<d_V<rQ%?u>Rgz%3#1M0F$MTFlBE6%}H|c0!u!
z3cC&WsA#)hL@{#Umf7C%7d|L5sL&W9Ot{<U_896CX<SUvQg!@KEoJt{QpWozm5B*I
zpBXc*q_oKz%SJshb%2a7gE2CXD4xpim3~d@^Qc};cav9>zErp8{dBGn*tlW9u_72_
z@}GGhLpaxmmTOQ9@jP50oKatEnOK3g5J0e4yxzj1OE~0146EwY{Dd5m43uc9Y+(&)
zc*N@rA8DKHVi5(Hqm4oWMu?c&A#!pwU&q8{mNBcTmZHr6ys8^6^5ap0U^MocgZgaI
zOp@$6UL$|(f|Yo@lP6Fn1OVW1cju<0oQOLHaiYI@W^}T^1*Rx}*DFLmk#OdSe?b~q
zZeH~jYY?P+Td@_WRrgU)2sl5VBBH0N7+YvyJRsc<3CX8YV^RlC=M#`|#@w!&fc+e?
z_3EG@_o7IKuDmht$q)qyf*Q}}UD|JTvu9w`70A#eJw!xs(xeBZ=acYMudgEcylh=9
zje2YJA0CZqd1O3MrEpWa8@lI{!+t1%h`{jw=dk4(sldAj-84q~#kBn&gkV6kr}Iv*
zEEv??@`vtn@)J))OwF+#<-+zs7nbd+mR%b&)lq+7ZS~ASbJSYy__M5=X@XN0+S_4T
zMf+hMG7@?4j)4dGT(7V1OIiaomP;al1`t=NGWMfkBBGo-<dNc+-<kPriaVyOiW<h3
zna}|q2KzT3%&mop!B{>xE+uG4yD@Q%;7*t*U}UST<%(6}RbK=o=orPZuYQgQ0tAC0
zVYs-+etGoWw!~(2BWms&0m;aYekmbQW#01!LoW1^8O#{YPs4sdW6g;`PfWBIaUftj
z5|)|^hcerf>&$O@dtL97OktLdnb|?A&{>72FtfQvrAH?|ruy@47jN5_a9=0fSos=Y
zx8GCGJ7;oaW5D=4I~tydBdL{?GnrGyns{8{VboW_TteY%4Y#_~n6LCaL!#y>RM4pt
zZjMf5+h^Tfwej?%fGF){M@h`jF90`7q;$!Yr>}EmeRD_PPM5+5M5Hc-n~ybX4o@5}
zDRtNzjj0^(Hi6JDyqeBipL+l#x|#tSBm_<p8bvx{01`qB0dOQ<;2KF308Sc=Lb49L
zpUhRG+QJ(*#N3%RUhqm%AS6>#dc2;jX#BiR>(8?C=nO-)l|QOtsKhZV$QJ?-?JX#@
zZTh~@GPoPZlPmtnu@UjSszk!Q_8gfiurkLWDCC{r{1I^EuZRP*J5hIBHTr6G@&lY0
z{H@YKcORoTsD;SM*>6^vd@zNVe?R9_o4sQG{`(*0fLbWOZ&rC}&s^Jo&J7TvzAH>w
z{y=ZtE8XGlJr909{-P=Sif%}d92izR>^`%}A9>e@W^yEK#SM7*xG6SURdGeF<q`2z
zjWPYlf3bD+kh%rnyUNk|eqOJEVE)fN?qCk^So7=xz_;~H4<b&j{(@OXoQnUD1zjB_
z0eC#@nqALA?yoK|5cPe2S5;~+V<TdV$D<59qx}k0jac1%7$llkm<4<?1BoOZZClT-
zswqeR`QxydN_J^)?`C>;_zUfB6e3h0C{|Aw^jRe&Nnk#Fecukhuoj5J^mAfin=djr
zJ50kP9{yehZUBM-gJJK&4SS^SQ^mvP9^Ajd9TE$Bx5jB~JYH6!X{u6$0FZ>><K-Ra
zGSarAD0IO9dj8jgS)b;WvD%%V(eyr<P?|}@TMv$sCi#<u0nzYJ3OVNU?j^qnLju1b
zL3CwT^Y#DIIdkSzm-vIhgSKlLF2V4xP85-d2MGNPC#R&e(BYn~H8fyP#ISCANCbfd
z2~k+5YP~yD_TvpvAwCjw)Qb`Vgau7D`tWZKW|_tvf><l8BzXSJWypm8m)cwc@<RFb
zjxgLQveB3w>l)q&$0B@j;LAEYdT~S&kQe>e&6E+yD1b{?uc|kLFpPsZWduR=>g#Sy
z3oYb_#qzR9KjXBA7BDov$Ez&we2BiWu$CrY80!R8>V{{=K9K-!19>TbeK}sO0aAkL
zbac`}PZ@R;gmwCzpP(Te0uc>Uu6oh{JCSgj{WR5E2ptPe#)g1*L3O#4JJO!XnbRVl
z-RYp2ud*Ma+!g<bWur+qOQZ3=?-j6>8Iv8VvMjDM7~1#jo$v7=E7(6wU8Zr6T7|B5
zHr`!z2p?<o%K#pOq#b+u!Swmi=fZlO)Zr4{#A44yy(N+89QMw5N#bUo7?2%2zSYPD
zl7>gpCyTJ0T5I(iEJ1B5>R_GqA8Fb^Z3429`MZ2Aj^=dCMa5wS0#yn6Dah4!20em<
zbPaj$daXTW6IaHfn3cDbr|t9{y$F-~sEZ=#>Hw~rdDZV;JG9dsT#JH8Rv5&SMm{|?
zY&$bssC@5Uxu6nW^*q8+?8PZ#=Q+YGfyXjAya~J-f$^6QCXN0WC#b#~p$;$*?<TH<
zVpRVXwv?6RrQw$kN6CO?7<kLDkR=LDPh6smgbHW!qeiwKR6fp$!IoT~utD0@#DQbh
zb5TfST|9YmR|IUAsbj+dqr;I7(3Dlr2kR$ZH^{E0l!nLh$<q~h!vm=_Qmc})<%l+k
z3-=Q|7n9mh_pyqTaEv6~f^ctTi|ecEJb|@6asWj<e1VNfKrR;i2kI<>Io-bJnBGXO
z^Pf-lieL4y(Cdj<U2A!Dd1%D0BwxD+cHQmNfVSog4{vm|uG5rpJ`ZQo+1kTNJ^oWo
z+k@D|bI)^eF#s9+H%r!><JB?Vpb=DicPRct)a?j8dnpPxw2u#|iUdSjWtqL{IXMt<
zJ?GQgWo};jidK5?8vgSJ!u|q7U#4UsoyKEy#+wmO`NY4ZPhXQPW$o*sLMsuZDw?&K
zTZ`|-GG?gKQ>|#F)=U6z+4;;N?2nn65NKkO_dDZ<IIw5}uiGDi!{s?0jd-e?Jt(^i
zLJTpNev$f|?mzHk?(Q+h0;M`wJ{a8~t=p4HPdo6VH~_X`1GZgUv<_4S`4Keg1<hUw
zc2%}i0~x}5MbY}okSj#l*0|w|+%S|gSeFKR+QY0XKWG5*<t$7>^X32?P2yZJQ*tM=
znUFNS-OTQCjm+{i{*pY5o^q1L1ZJ0Ia{p7Lwz5ICthQ0bwWyAVeJN_7aV;;4X3Kdq
z9`1x1anUrEAv~~s7?`rzi%Yu?Z@$;%Yb#got9N}GxfGJJxtvRY*u+of@ZH8<RroBJ
zNrJwF1&)k9MV^N@6<s}JIM{7rtdRE2Re%K-UjcD4!48XwbY#c|fw95AaW<O@0di;_
zo~+Pn!oHWn+Y{r9L@jhtS_lsmX48?rzNp5m)+bQ9799K(k;N&WN4wAv2GGa;g+M6&
z1p<&s()819K8ecN|Ehi6(j^<tv<s=_AK>_Kkk;3k9SB$5-|F$D+{EeKsrS+ROp7zr
zom#y{B2(JjX?q{@c`>^<nbfvaUnd{H6DDRm6%WxeWP0-nB8t7(fo5@|aDJ{fZ>u|K
zZdqYf=bKtn_yGc$&@3#^me@9_iXEo=TfhIq-;;umFiMNU;}WsoU+;-zOxBn<N2>~+
z4&Dh>c03g}AhAIfq@<@O+rn1rnKL3ENFrr3ibP0}be0maOVaTso~q?btcQCUWkI?_
zPq9&rU~OiL_0_tZB(6Vf+q*hhKSUwUK@<yvR)taLV~J>FsYctIvo?PA6K|1#&KliM
z$pBAhoyTf5M<(d?<)&&W9G8hz6>hMZKHCD%7TFrYG%*`&qt2e}_I3<v1O*?VSa~s{
zJ5#OQIG!eNEuk9SA;u3^simOT^yE!p+)eq;uVVGk)UjKqc7BC6savWsVEJZ`;Z8)~
zNKl4jWDEaVI{mvQk87b`{4?3n*M)L>H$*>y*ZuSHIl8i99jE=D)OV)C)VVb|ndqbl
zcw_i@R%ba0g07SCh07`UfHL7ZMsY6ACoA#z(WnKWd)KVq14GRs4*==;WZ=7ocP1NW
zHDAQYa~jg6qqq5497WOE;_P466J$?QOMD^Lc+gOxD0wg-Xix_Sixq~dgFex}uAUqu
zWi_?dSr)47hOn{s-Nr&(u~&y832E%T#HTrZ48w#OiZJ!+#rn~y@$FGqU+;wF$g@<J
zC;E-!BBju-y@^fucFKu=M=QAcGzP~<c^>wZs}>SQP+A}BxC@-i>QS8%lu@*xpn*rm
zaSr1y##U$g?e(m|3x5r=z_UBM5;F&6=hr|wReW)E^`9%On9RVXOO<wHTe;#3C|NCW
zqYmqgXzg$QoN`ErRgEgDz>gdoZ1O->(E{rY+@BmxP6z8|t;yOjGPv1my#@qpTbWp9
z=Ef8i*jBENQvA4ot!!xpDvj-#KEdE78QG!h<Tl0RB=y5e8FA&`90u3M*pK1${9aK~
z8Y~8THTB+Yo6(Q?JmDq?wiVKv&Vxn^nsraoI3EhG`T1^D7KAK!&*XXS=+%+tj!QZ5
z2vkv9qnaJ9$<q1moGDf<e@C-%K79#5qY#b|?X!Zn#y4@WHeq+`^m#iuPv3l-BVVDH
zb4}%7f9xroi==N<^K+8fn8O(A%k=*ME0!sJnsQ52_^D9LhhSYW;3_6Vlzpk0tKS&2
zSwW^Y@z}Xmi6a_shd@FEq3y5By6>pZFll*<I0osDH5nj5RLfLrxpctgCRC8>_zb&}
z<tq15!a@xby~hyR+uHmwuTKYheB0}hVvRRx;`>P{DOG-c=Xr2oW}ISpKd%-#1A=d6
z*52|8O#xT&%%?2eK&8gl-rF2K<ge%EMN}<M+2baR=`T=3rE&X-oQEUa)!Er6UoR=)
zS=tvH%ec}+Wd<1I`N^&Q{OC3qp$#wU;ZzkbEfaYS<`-AuH`5O-DIo!Zr?*T!VYLb=
zX`ljhMAPjt<kIxETtkM>J!X1!J{q@)d)0i_uoXx7XH%A*SoL-ya;T=P?vnZwQ}gST
zHN4UpL>;)!^yPG!j!4Mv*1t#lsrO`F_5gMm>Y=s|YLu){!)L!d0%f^A%Q+}5-G*05
zGO-b@w+{#4gQAT}N&$ha23JP(bRlk^KK=yD<dghE;{t1>h_v5M@GJB&UWq4fJfdPd
zF*ua7we{x?)>VCQor2MGAd6xs&*H&-+Mk${y6w(^g;q$sC;`1uD+4e3#)pZl0_JT9
zc|fAMzTRXyS^{eGZlE9UoI<>bIm*U7jloy4Li6Kql67_eJ^k#dU$vX$1;MF@@vYR8
zl^mR;0=Upm>V8xoO=oN1R2>~S47KV`LCCz_3DfSC`U<C0Av0Mjumk>nWL+hwDpD<;
zK)oI?m&1)OH8CD4Pg6iV{H@jPxhVz(g!*QwsZWu=u@RTQ0Zz&fOvT$xFW&46Q0@Y5
z&+YMg$v*6W!AipY!}xCEwZvC~ApSh6Q0Hnb)36|eX^()b*TYZVT}!2AS{I(=eouWA
z9`zS73jOE|{XwtajqFpa4BZp;#uCD`eSX8ud!)%H;Qf9m-J^5wU!i?ShHTBdj56_#
zHXQa>@;#EzrVsCs&t^uoyO7ChQ-edCMC(O*hk7fZQ`-t95YdFSb5Lh5=FO+jh*BwJ
zw-ffLHQWOV;fV<;n6CkW$R+3vw~})rcU|3aD=F)0R!4~W&;Q9Eb@__wfIznF8pb7E
zhZyQ`^9dMx;9Q@Jb$K14KiFUs*psyka{aE3{53|^M5I{W^I0%8FkhU)9l@BWhE6CV
z9cZmDxSFi?mZWp6C~_`zeYj8~XJp6xgAG7Sq#AY|6kGT2KjEZJFh|AK+$eknp4UKY
z{(9glXG(<hV-G{jpUsdE4IZMQ51V-2I_Ll4*@F71&F&misUxc%IdF>LeX@CS4R~{m
zj&w)cMd@DIms_e3mV1Vyb)mrw<`NOkr>s2{21R}RQdYhe4IsT`RPP}nBA-;>6U?DH
zRBD>r#$6WV>uIN-z!1)ruNtN#2b~1_5kjL?70qUf9vO$Ng>+2#-lZH5rjoV&W5$n;
zBtW`5oLA%-P+JRt!-Lk3C~)yB!>g2rs)k-l+lSYP*x~)z?1j6h1cp<NM)@EuAV=kI
z|NEVjGz>X$eYeGr{|Zx$a<%xwU!br>n=jo0UfLXfmgEl^`Aw|&8yzy9U0m&@uSE5{
zfVT^q&m4IZ1O;^YdR_=;<o4A#%65wH)R}OV2i|U^x4pM#flu#N{)K*cfu|2K%wvQn
zeoHDPloC#U{ET@jP}SmwI!I0LYL5+i7rvi%)rsS&hzX{5ZSp{-3LTS@KgsR|*@(P2
z;yXVl(?;$D@{@UO2au)xcN6T>#0~&kgE^Ac<-52RKYDhOo2knp($XOh&U2%3Vt$=5
z*<=D>ryz(udY|DWtAv1mmo-t#m3-c;*LGS;=kA|5b7Ia@TpwAC?QW4WIe(4wVMHt^
z?MuNYfDpX+O>+}#Wa_PEdvBGeIe4rJl>e3Hd=6AS4Y1nquxi;*C&}bW9H@1WzL!2@
zp_^hgj1Ua0MJ8{%(f(z2*9s%5#R!u%VuZSM=fUJja1)ev$Ge$t67OW=o{x6DO$Yx8
zGmqIPsu8>WxzR-iO8&8Y;r=-F-yN(+!|L(w^7W;ELgLjg5)PPkQpOW;b2)h0nvO7g
zS*U!EFmeSjc)S9)psmU;xPZIJr4!{kLC8GL1M`6klG7DdOTX|1AR5M)IZ=BXl9GkR
z%;i$ZiUc8bM53~j7!Ce8=Bft+c<uRI3(<*r@C0(;AOMjfx$7+7|8(T#12o5|9yTU>
zd^DMp^yO*qDG^o=|9p%O4m7*-qGzuU#R%1!<@IteF3+d6IEy|&emq48`-wnr%7W)~
zGl1Z~GA&$X<|EiLJEYFQr#;RvU%yeK!<b*YpMn?Q`^0Qx=L;q891Eg45wQjGqz2c=
z_0{O02zJFLDj!0&AwUY<RR*%Y3vJ(7@2+Ha7}$@U^}ih6l{jKvL@&S+vxXUjAoZ<Y
z`dE|Mk<B0U3wgTyHy?^4j_aayZCL-sYKl8?j~7(gm8!xWZKSqZLI9sWL94{I3YS6S
zThnH)ijG|T4+3`E7Gc18DFEKKP_u=mH3-?Ih5%A)lgH5R%W@`qVObzdBRjw)IJ9r(
zk~}E^qMNtIIvwVx1mIUVHM4YuUj6OWCY`f*WE*_-x^?Sb^_VkS|0EiQyLqm=Lv%ru
z{hLOkjRU%1S;Q7R7pKDN!zG*@JeLgQF#U{25Ahh>^_jZ$&3}*#*iOiwB$J)LK=L45
z!CBQ$m#*s67i|Q=4P>n9$!fJbyBt?$u|R#aoVxpDp}!ifgSU<hA*$`D38lWe;1gQA
zZT0pkfz1vM1R^NRok4{EUV+)2uFmWM<{+NEqeHf-3sKdYmk0q`FiH-y5YIigg^X!w
zxh77Z0l_+I;Q;%q>mU4dIdwQhrx{cOxVm`zq-_h2)#+;tbj(diGIxBmc9NHHH9)+&
zsO*POfy5$Kv?B+cUiS)_?4cCZ(h5}hA=)~Qa_f%JgzT*Lw`U6FzS2~Un5(RAnvwdn
z$nY8Dd(gu(<2Ph^I23y2&2^ZIw5r-bG_187!80|sK%<3b%9NYbI>%MJa$4mEAg8Qx
z>4l99Kg*H{zSu}-24}GBF$&*4GC!N%-L*`>ZnsgnS<JC;2+tje_}@pw!{cE1HOG(h
zB_u(8yy=E%9Yj?cdP91aF2<Iq<z}@&s6_*E<S}ST>M-^M$l-b>8}k;pOG|7-Tt`=q
zNgMgyq`=%Mr<P%c#daO?GM|nG5q0K0O~C476~%wA_+ktYc9HhWJG2|>!M>G}ioT7#
z@N(pstuc|if=GRMEyYWjL<q8RNhNuIRGhR!`?W{Daj^Jyr^(u1Ys-DVoVi^hx-vJI
z_|B{}+Eqsi0G+nOUMfqiQ-iTtL2$qw)M=g&a=~QCf3dBz1WCeeFr#k+eOukW+5iAF
zj{kQ@!0(ag+iH3>kmg9W@s#yhFbG&7A+BoqMUSPhUls3jgxc9BKYX4bB5^U+Skk7X
z#0-zNj9TwrKk<(rXMe!4q*Oh*OBE)epVZQ=q<|N3w~SP=<<o9TDzb<XSGEe)d?z>C
zM$i7lU)asS3H#W1#)l>QI$OQq`}jss)lpE0e;B}ci}XK^HNx-4ILZFI*KeDA`CXU}
zlelaPt|T-axkTXY^kr^xpRSQYSVkkqVp*={{~hfWev4{Twk(hb3e~FaWs0R{$U*RS
zwr5S6xJ6oz=hGM4lbX571_|huU1^-9Dm@`V2`*n^v^Ro=1mSRhz;OxBof?R0HSl2l
zQ=gtL)HSZ<-i;5)LB$p|VO!{;x=^kv&Pe0R@J_fuOHA76ysJkD<dco(z07Z-N&a_@
zW>o4{c5{f-vv{>8fq$$@<ywpm3p+q#LxU+c54V;p)h2Ec7GXZH3HE3ol(HCa4h){C
z3f2&u5AI0a6rtZeV&ml~AwSXtn-o##+Zn?V`ma}%k6`MFX+-j`BTFCfOiNB;Mv`Uc
zM#aw3Af8_?SX=^rSr`+8zby#u?VKUq<2Wjf7Tn;*T+ivq(vInFx|hX#NceUe!;h=#
zJT=Kni9a^y74Khaqd|2h0b)hQ_D`jhrlcIT^)P6Z$qRG&CZsy$((MK^=0ddt{ji7M
zBQMm@q)OiZ=Ny9T1^HilcP_c^D*Gvm`Q^a%V`p)}kDB;l)z}}CL})k7r)g`9^-u)=
z+V&R|-QZO2gNJ|gEW%U&K53`#>CHBUufe0BHqn?uWeyXY;c=b1<!}>oQIYi$f54XM
z84np9L#vUdbaXttE7L(Gs_Ps(KPZf_L+7G^deBHo++S!;J@v>UE7ajG7R)r8QZ4Cy
z5+=A`bA<)E#a0np^x-89Q~5?bWM*#ftff}C68D@5B7a5%;%&4fBa|;&8+5Co>TFK+
zu78`k`KoJ5*O(jEN+vjTvO1_n5aUEXoy{lI5VMz8ZgkL?SL4(|7ETFO>Xl1mL^^6H
zA@^3p>lUIQfI>5(rP5!6JLy0xNm{-Ui5>^|t2KraS;H*nQMZ;*pIK;mmj)x#gEFS<
zQX9=?n)4J(!6tG!C=x2Ed~q+Nh1j$YDu)(={Wc8vDck-wL=FIfR7Ii3#Vep>?j@Yh
zPy{Q0u5w72--{A*GtvwsMVA<sCgE%XF*Bpx5xnVD6Uwrj3~d61ma^4KWcq+qgfy2}
zQV7$fBu*H3M_^1b1cR@TlWzE=V>#P#IY8h9g71c){&vH{LmQVg8J~sru}4bTMOino
z-cepG`f<Sr%b31g51cmNmHu5YJjsuyL$fM9y{kvW`-B-4rPZ1jU&i7NLzZ*`l#bNM
z6OT>Fu1V3PTddlMy1LyiuUVVOs;$|S%?tc8!d@zsc`8|{RKdYk0|O`AE4A?a{#8`8
zNrh@S@$l!V^Q<uN12&{vSAN4LJ;o^f`PxIH&z|`(zX6Myz6+F8Imth2zX&c7K$_CO
zzyN?Ah&-UxE9%MgdRhWio?NE>+VvwSPId9`_D7`@8ByrxRV9kAA?)MACB-8@V|4Ca
znudFgsu|4qyDLyVPolL}KEF<bhm6&<re@{b@6-*Hju<ip4MfJ3xrfQqc8s9L8`7=<
zlk_;%r^Nu2C;!u!KSC9cQ3hgkAO)@)zAjliN^<WnL^-wF(;^874T*E&(P|B|%<f0Z
z90cHy&oiM=HLiI8?dp1j94{&;zn?W^cSE4?$=MMLx??!Xn5}<*K~<6Wd~>5HLdNro
z>hkt)Z(VK-J!<g+(W}(~f9wVy6&f}G=6+HkUFT4n^|m|0-&EUQ86P*MV{y`H5${j0
z7uAnf@r;StL*X~fH&9>FSiF2<bYU0j&E8N*K$L6*qSdC%R2dNL#gn|BidW~7t@bQf
zJPH<!VaxsdPLP)*PoV;Vc-+9*u+d2@ho=p-NLW(VgdK-r8_N^e`x6COs7~Dr)i8)&
z*ZmZn%W1^;RGuF19bja{D{bS?UfDP&uH<-j{oOuI48DvJQS#`ymK)n{sz0L>e3$#}
zB7rM%JsF(ubtP-I#~T|Y0ugc06uiDq7@p2oYPd!I@q45uEjs4io__`x3GZK;YLL=W
zR8!po1y-jGjMVA9gfE7~T<yOb{uC4nN$%UkIHHxdgfG|XYh|BGeR+n7(f;$lxN?=H
zJFGimoGc;)&CRO(6;38Sh}`Wp1frwWs*4gSlGXO}wopyarJkI>u(1MTM6|oPdkyov
zes5}w5}70_d?^7p+M=u051%Hw{;LdsM`33Ft2j(#lAwX~d=?E?heu_i=-OgevhW{1
zLp@HVKmT0;z8aFxdm`?t2(bIX91E`-B=IjnuL_qPduDE_&i#<P7i>vNzHbc=YOv3l
z)|Rctw~8k-Mk)pN+p^93R<Ts)YUo4hxL%y#%%?K2#VZs)gy#Lci2jDo&J9R(zNu^$
zA;un;N}=+}^7;0!AFqwD&9;i0K0F(+A38PuY<0T2*Hkw`AQPg|Q(U*${IscJJ)A4A
zrCs$f+#cR*^oO4JEP|Ef!D(q$%Rs8xTQ;7oa`?^JY_ikq@;a;L{C+oqX6tFIFf;4>
z*CZ=KTUC8op^Obs<6dDL+*$E3T7*3+jXfJDP+lrrB(=dQvuH^3aOmaK*qdUaJa4Y&
z`k&Ckb`b=%<F;*PW?|k+t@@8|3?K^D_jsnOZ(BfvUgZ@%8kbuTsHRI=s)CkX-AQ?v
zw*?ZFs*KN5<#>>__YL&I=k?4QJ$tO7wQ8$|H;~h~iWJA^u0T~d8vpc3-Puc6W<(Zj
zcLju()J&Zm&VQETN)oXzOW1dn<jyp>He-zGd#O<&<@*m-3~&PjWR^rk>Ng_P>j^>6
zI~9(<yD9r2U-yDH9g?ZhUO#D4`Tycs_4C|oYGVhiiKf?8c?u_FSErpZ9r&nm3kiY9
zTTogx_)5@Xgb>oDvLi@x6@GK4m4E|aR&-C&Fmg=I=8MxY#N6<dkd$r>Uhuk2#uh3X
zC!DV$q*K~E9Yw`xs%4~@{Jlh9R?H8U(w}BiOx09TWWNN-t~W$h*i*V<4K?&j$(bgE
z!{e$nvtvK5=d8C2!K!d6ct1n%M=|sN9pog{m`{M9Z8oc@iY|y>y6rT~m1I^`o58KS
zD}LFj$B*4;yeZ_uMmrL3f)g6vlWy5*=-_Y=k)?w(G_Mp4oHK+6+qOAA9*=v)nEM{7
z*s7Q5<ki)qo%qhOnY0vIO_KM_Dr#4qm^^B-`PB2)chV?P2f}Up1>4)5<yQEKizA~I
zYd2Z(vA@u)0OkAc4-Z`IrvD11;ws20987$}pN`JSbevmfwZ|GpW3)5$g@S-RIhf@X
zN&LqK`tkBUHD7mCMc=Gt=J&`iJwcNh2Z`WH8a69%6b(G@`*whvOgqij*&MBNi#^-Y
zSZXoEmoFb}u7Pjk*1>Gn`t>nMT;^Lisnse<)Q0f>s4~><N9X?)KI2R)HLVKsX%&@M
z>9=)u*o#ieBDbW|*BeLL_yBO@As50!v%?7^L$^gh?jJ?i<jlLYojw4u2|=2n%Tai7
zbNNrA{CK#X$##+LJvH{C<IySCAIM~ud%0l1l1&!fZXe`*<mkX{ppZIbXC%o#uv>WU
zIf^Nr>nf~MKk1(LE+CJ4@|TG1H%g*t*G+r&M^6?t3;gd24}DLrg>4eD%#=gvFk+hQ
zQ8~{uHN-MTZz7aLuSTb(U%$j${$y`mk05S&SMl0te8@VSOZ8w;fJ42o*kK<}z@x@?
zV@&;L!E7CKjOp#RP@MklKE(aR==8^2<YEOGEqG)r?#X5mdTeFja5QIahuOA(-tEAP
zmXHWEt4;BT=L(C|zjjK*SEQ}PmzYqbu68ltxTBy|SLwG1&z3pta4a(=GV~rDO1&fY
zQ`sEB5(@PX5?F0yXc@fWp2R$Na^0!okHtHF{?^K@f^j>YQ+i?tqIa0V;}tSnSQvqV
zu(vz4(--zvn#)M%$lrtMN&Ndm1>=em)U6wbyI}s!Zr6fq_Q00?$Fj0UlOEgoiI5&K
zS*o#!F56`;2w4%*z-P$)0n3?Ao}zqnfDaayl0jueT<l^iDgSuBF;lz-!Nzy0J~2^~
zHmk7v-sfoHzi^QBGb+u-G#CzRM;eZ7{2tf9?AFStcf{MGs21IGwZVxa==8vfZ2OZU
z2wmq|KQbN_wkbBYy0x{2F#2?lTJ~(Uyzg|cmgTrwUEhFG8Pz<n4@sW0U`e@bCL8;9
z+Cn3?;Pt&pE$L5AuMA*E?ls@pvdCAqKXu7Hpms~L!|hjp`^Dld-e!H)SpZG_JdHUn
zX*-EU{zP$u=*uWuJtEYLK$Y@!yVipY&L7J&^HDh8-?d<)a&sz8?)6?Y?1<GoJ3*dm
z`+O#K=KHZ#o-45>o-+JdhzaQjadprLI7Y5eKG_`M)nl&>Qb_L9p_TPkIbhfRDfNA|
zrq8yFJ|$i=Q~hV=1oVE1nKJSE_JyC|ZZGhycJ(7Gi$0?Y%4CN}%Em*mZuQ18(wv!-
zmJC;twVw`GPhM>Flyhh&MKpcBM24S~t@dSq!24|rYvA|R)teS7$=Wt&Bo>%5RX23?
zsaxUzS*)h>a_63R3X%~KbD-CS!G+td!oqq_-F7sQbST%`bvm^Tj03U@Wz=`KM8w4r
zQOYVUuN3va7HYvVWPiX#%Hi>kTYFVKYTaq^h2DGf?C;ecb9xq$3+L&cG>CX`f-Fp3
z4k5Odh5(33%`WW=7JATzAxVZ9gXT~R{Y8P~_=^*x;Pw+DwXBPeD5Bwvgc<3u#i1}H
zJi_e~3?m}WOkpY)XNh|KUR8u3H0%x&Li|-EO0=L9+|_dPf#cG40zP3@R(At59d&7W
ze)WX8;x=<}t;`sl`ZMbbdfh?8=Ht$m$@GU!I9X3bs<rM!lwg#(ZixTB!kd_hNg~-E
z&Rpz!zzP}))KLQ@{w5|}^Lbu#al5LM^jct!EkwZ93bZS=TQKB(M#}?dH()!wpZ=|l
z##v0cX3@;%{n};Mj>qWrt2GDCN00H~dW}CvgnU6((3@IV+v4*JyW5TNQ}-|qLh@~$
z+v@T%@DCLXz=AE;s|6L|jmECj+ipnLZ|iSzsI@FZ-uM>H_W{M5Gx)#$fY1@L$`BGO
zJLhx5Sl_^FGNz9<igt80S_SJvhGw_xv>XQtRMgTCy}p9AZG+lvP+`mS3%Q{GW2&0&
z^BDPOce30>i?M9K&^i5&)Rq#|!9ywurt$LzUDiC{myDX8-8%EkbbJ<DS>6VCk_)Nr
zH`U%IRE5d&POZb&pAEAI?n3q$T^`+!moqy|1ug~w3X(0)QN3S_c~@(c4p{eJv;%tD
zZ?;QUn`QHp(q_q=`Q|Q`RnfUmrPK={n+@_kNj}1D6vGk)?x&ww+&_?G*+lLI=g-&2
zVxBnd{Q;6o*eDbC>;aN0b4hXd`(>r8RjI!|i|V#h@QV5rG9M>P@2ypgjd-hF;-H=_
zQ0B3(zL!*o^z<vX%YI?>V~GaL{pvxXbVP3vkK@cmgQ)I{Kq1Ue&-Dk9>mnd7zdUpx
zDPHfkMt(cSI5lB;QN5MZ5NXlyy5%eQXb`=Q8F*g(n$B6Sy`y^mYEv`s!V5PrlwtVz
z`%HKF!n`7?{dkUxA{F>w#Py8c(|n_Stv6X<VETpEwA$||N=-%$chlwcPJ`0xQ$Lj3
z8xGgJmz{s3)dUtaI?~O@n^&zq3f}Qk#?13-d667S*i8uOo_Y=Kp2hJcy-ub2Qo3QD
zKbsu|!ONW)a*&zKZ$9wZSO?$tkBa7W{p(_6@2Rf%?P{5fw^Bc|Eo)w*It$;S?zL+w
z7LbzM5(^350R*?JpH4RGQ{I+M4?G%;a2p8dmqHI7)|#=3Mphend3JC2#`BdbFFzha
z?jV@HVl6m%@`p*|ru)yY!}G;G|7)@*(q{AdieBc`4O>&w*Vi;w>yq@3PZf0Z_tnKL
zHVqSPb@{Y<Xmq^dR_qW$K7=msSo<|;y7$sjQwxnso+HL@ZEhFiC1&=U0udQ8+46fz
zm$oqwH1fG7Hk!0XUydv7iXZFgimP(3r-)cJ27H-OPy}qs$;u%qYimlo5_>)4ePlw}
zlAMCxm1wI<R;wb2zl+KIIM_#wj-XfE3E4yIYL{|@lK~RCyf84<5%bECk!o?%%1-ws
z_*fLA<jiio;fM{EAatAQ_!ef$*DbzEu<0)+_XC`GwjZgb7hjE~xR3~@{bm`mxLm{C
zZy7Kn!O}(t<ODj)Tx0++c+NhDFmS^h81~&F$Y20GBXs{y5R|e1r@INBv7hkg;eUsA
z2Scr|z;O%%8bSYmqWv4(@P}@L{GW#Q!hleD>T)G^QYeW(H*W%@#N<WmgbjoK2j__~
ArT_o{

literal 0
HcmV?d00001

diff --git a/lib/ulib/templates/apacheconfig.d8/workers.properties b/lib/ulib/templates/apacheconfig.d8/workers.properties
new file mode 100644
index 0000000..6c18ed2
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/workers.properties
@@ -0,0 +1,17 @@
+worker.list=prod,dev
+
+worker.prod.port=8009
+worker.prod.host=@@prod_host@@
+worker.prod.type=ajp13
+worker.prod.lbfactor=1
+worker.prod.connection_pool_timeout=600
+worker.prod.socket_keepalive=1
+worker.prod.socket_timeout=60
+
+worker.dev.port=8009
+worker.dev.host=@@dev_host@@
+worker.dev.type=ajp13
+worker.dev.lbfactor=1
+worker.dev.connection_pool_timeout=600
+worker.dev.socket_keepalive=1
+worker.dev.socket_timeout=60
diff --git a/lib/ulib/templates/apacheconfig.d8/www/.udir b/lib/ulib/templates/apacheconfig.d8/www/.udir
new file mode 100644
index 0000000..e10ec1c
--- /dev/null
+++ b/lib/ulib/templates/apacheconfig.d8/www/.udir
@@ -0,0 +1,24 @@
+# -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# Utiliser 'udir --help-vars' pour une description de la signification des
+# variables suivantes:
+udir_desc="Fichiers à déployer sur @@host@@ dans le répertoire des documents web"
+udir_note="Il est possible de déployer les modifications dans ce répertoire avec 'uinst -y'"
+udir_types=(uinst:rsync)
+uinc=release
+uinc_options=()
+uinc_args=()
+configure_variables=(dest)
+configure_dest_for=()
+config_scripts=()
+install_profiles=false
+workdir_rsync_options=()
+workdir_excludes=()
+workdir_includes=()
+copy_files=true
+rsync_options=()
+destdir=root@@@host@@:HTDOCSDIR
+srcdir=.
+files=()
+owner=www-data:
+modes=(u=rwX,g=rX,o=rX)
+root_scripts=()
diff --git a/lib/ulib/templates/apacheconfig.d8/www/favicon.ico b/lib/ulib/templates/apacheconfig.d8/www/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a1a0be8884a24d60bda51751dcbfffcb3a99b76d
GIT binary patch
literal 1150
zcmb7^eN5DK9LIldEw{2p|G3dwYtE*%Y32H(Qfi3DjnIu$lJeOUSZlMC4zQ4mL(Gem
z2v;a+Jm`2jl62w2qKtc}<8I;I!65=7ryx>rcif?F-M#w$zV7(LR$IT{KEKbyckj>l
z{dw3=QD%uZE>02Or<Cjm6lJcWC<}#%kcixi3#BOH?EdG{=?_Rx_p)S}pVYMh5>x!V
zn(SxE(n*q11FRIW7Zdzw(*mTdzUOOJ1xV0LU~A4t#b;+-Mqd)fa3D<H-VnNvLu}k0
zB=fx~@(V+xt_ff~G)>{YFs0?w6c|Em$@0(OHOW29Upy(Lc=HzOa*}8+euon}EsgrO
zX)<i4@skb0UN7zXf^<&mlCgX?U*2DHu$-?-Dy3Y|&%;@<7<bL<bRBtx;fwp}Yt3Y!
zZ5N}?Z@7A44<nsNxKx#Z*)T`q)f!^bS@9gMW6S9}x{S`Ur}5OSqPJx$p4yeTzSZEa
zO%?eU;X0m#y==h@E{1oXNW<4*#Ao@O!Si|anl>>k{K2z2hT8R#OIPJfg2zWV4!<yi
z@3&Sk;j{B+-&w9(%W#xGgQe(Uto!1y7#@+ft>iHrUo6C|pDki@u<f5K@uS`|M59q0
z=bN}43Nken<*z$axCP&i0_9&tt-s&$B{!~k=<l+UlNgVwvW^bRU2cs>=y(3ic(;kc
zb2`E2*?;6w@e@7=IZ2PBPg}&{ci*7BwS)GHcNza9g1xPtTdoGYjTu~S*(UR-y^V2F
z@wbCx<fqJ|bW<YVmltuZ`**_OD3M5nZu2=NuKvov5AWkMmx>wgmUHWAd`tF3#ZL#u
zsLI`drTI9vmKug!zj1T04|CHoYV}!!#s?U&f6dU3g>ru0hIRDRuf<)h#daW`;Fy=z
zioKNW&~jSbZ#7k8GUj32_!=K-o?!SFqvUJWKPdL;W%^F-5P6dEHe}#AxteRv8hY(N
zQMBfHSwrQ{bsXHff}G{?9L>#;yBMoCrqvmG#2$H@){FV=V)D9!wyIC5F5FJ8=1F!g
zjpI<ZmhR@vnO?=PF>Nh=RPvB}cV;&up6|F59A&tt6K89wsPRp)GY|czsQZ2Y|KR`n
Fe**|-!I}U7

literal 0
HcmV?d00001

diff --git a/lib/ulib/templates/apacheconfig.d8/www/icon.png b/lib/ulib/templates/apacheconfig.d8/www/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..581bad1b4f515184b0d5af4f1c66474d0d283961
GIT binary patch
literal 29641
zcmV*&KsUdMP)<h;3K|Lk000e1NJLTq00961009690ssI2(-1!~00001b5ch_0Itp)
z=>Px#32;bRa{vG*UjP6nUjZG4x@rIb00(qQO+^RZ0uv1}4)w9c2mk;e07*naRCwC#
zU1yjSRn~sby;a>knHh4<S)za_7*J6O;s;_}b6m5lYfh-U#$9t(3@9oXKm}Y76cJG*
zgXEm^FbosB>fZDHxK$lydWIPoFma!L>Z$4Js;;g&;XRp{8GnJr3?dv^M^=et{Y8E!
z5w_)F&Nj^3hS^)OGariKYG}q0zW8e{#rSwI=&z{(!V38g^23<91z)YexK$t^AdfJ^
zUyA|0x$rN;0Q+5wc3{>POkRsA>!2Ayc?2^3*%?4%(h&woxIS5ecNbzsHuA!dbc7R*
zFu-4CMUWCR7#Oo0cTGW&dxQs$Fu-4!8J6zCt8?(dA|%-mM>yfnvRsXc7aU=L3Uk8d
zT)Z#~pDsh811XN&l|S~<jGp!J+0Z`)128iY#qL!6W91)`P;Xv40pG4eu{xp+{=gC~
zBZNiQfbhp>07Jq5{qM9bTXO&V-+>7~uz7Rt&Yk&Py3~u1`^b^=cJ9nS<&+j3I@CD;
zHYjv((?oo^0)ZpWqCeou3uETxXjL8f6EJ||sAkQcYSX6Xgb9~hmWa^t!w*mS<dcO;
z>8r2q(Wg(du3ew$-@n7)!R<c!Xu-GNE(Hi6K!rldO`B$&dTNXQ{o9;zM(av}qJ=wf
z*A&d&ijZ}LsQyUM|EBJ^x0m-2|L_bjc<}qHS7$F=cuTAl4~JDS_zxfzK>PN!e*N`U
zqB{T!P=GWv981pt18!Pc>MghQ9y+u`r%rV%t`=UIgXd==&pCpK{utn=V{J@0Kl;ue
z-kR&(yUC(O8^8a4Z7i|=``_OI$wtgCUc9qiyXU4(y&gbJ>WA=uI{^Y9Ah2&=_+S5;
z+`03!M7O^G{@e<JqU*Y1(Y0uq1!f#^DE!W;-<B9PB>I?`|M(ifb@k_;FCI5;`S9U`
zi;CQ|w4izarI&ub>85cJqrZ0T^sm0UC@IN)<&~MedNmp|X31xtEr{0!9HS5bsI;`?
zi!bi-^2>uOcqQMi!v$jykVh!(ce*6umn%>!#ryNUh3H)SH(~&TE=G-7@ci>X-gVbW
zXPwpV;9Wofh;9Oc{(mgMjt5KaKL7jzqFVra%9QIr`e@->Z_Na>&ju*P3=HT{C~)`P
zeg65+6H-zF<$xjsDA(oSig8%J`v@HR-K~5F?+wD4ExjkTJrAAU#N>;9BM6j}Q&g?m
zgSX!L)tE6C9~kwA!zw4I$eilQC#Sb={XEefL|H(J{|fpz$3r_!np6XD+;JU%q#;8-
zdg6)GjytZ|n{S>|t5%wif+DZTpR%Y(4I4HoHT9mCUYenlF6(*>Uo_6Zw-@20#?VKw
z(C^IfefR{N*)sZ0|4|?U4l@LbNYGnu`SOAbI(P5hKvq7a#LSyF?`zobskF4DlTK<n
zZrq9r`~-gR!9K~!wrz_~KKb?MpEm)JQYfYFy6gCN-<`L8`@S+X0LL53m^A6?zI|Kn
zFW`WW7URZ=NU@L5-fzD&<Ek!r_yiC76XBt07(Nf04|^)ah7Eg8J@u`nOK&%HUs>-v
zGb_dCoHKgt*u^pMz4RF<o|?@&DrTQz{^ho4QESzzU8N4;Qp{ks;S)}1{oQxh2qDU0
z03yuZf&rsoiz9)8-*Pz$r!>XL|BEKJe6R?&Pewo<_FSO1-umVG>&Nu(-zF<7dCZu_
zd-e>g$Whz3=Y8|d>QKlYGNkRUT?LIAJyTq);)%Y3^u_UXk3{?BY)kCqzW3f$mt1mm
z`Cqv$4}C`>yXc5X@Y^h<(XAf7JU2@H>-XZs5m4;?_b@R)Zf;S(es9m1u_h}kb@%RJ
zrHxmVoz5_D;K=dgSB64XcJ^IeyS}k(*{(9EpDM-!D1!$gJ359>BKw?3C+OO>(^js$
zGc`2;pd3}!`AzI9IHCs*zoP}Ms^i;>qSU{)2yI@2C8F#x>B7Te1ZQO2*P};6pkT_B
zYa;v>A@|6ipMJXd<Bu1W;EKl{I|T@b!`!mvOUst+^a-8f4O|(sQ~D(my<$z?SpE?)
ze~K8$gi;@-?c4WNuRiSUw`Z5*8Uir;O4Lg`LXd|W_czPLHy3)K-#myjM?;o+P=`YU
z%$c)!z<{^!y|>TJH}^L0+<NP{;lpRQXi;PC+#7DZaomUz^Yij@eXphQwD8cO-Tv{9
zp3|nSzvrHbfL)4SOOj(LGl0t${~Yrw2kxWn55&F`KKbOfQ>I)~jws4^aPkM(yzdAW
zI!r#FPPOsB3*t<&E5~8Ns;KxstPrTE$o=%wMHgMv1;G0Cdzv<VnwfnuTm*zl%i2Id
zPMvz$amT$5*#3V-Jn5IFeyT9|DM7(H(VG>d{>V$OUVU$~W?AK!#Xa6W!UKl`_jjs|
zuj8rzpHnbm0fJV^PaY-+6be~}`tQAWVv{CMGsCBT0Lk&F!)%M^&;R>z$Gr{&d<<jx
z2*-*6HdaZfLjoj05<-G3kbn??09i2rNyMY0(mSQOE5d;#kP>3z2BLZM$G`r1Svdmb
zmn)DNIzpm{7WW_9z@z?%)AQYh_~_S?)PGnZkg;pKb$e;foQ-}qP8^sC1mut*?fUd-
z+O}=Ydi7G9H_z(W@r^}`c9sI`F)tzr00aVv{PR&sHNd{))&LmVFLq>(m)~)+yaE_0
zp&kIBKltE+zx}OiX%DXvMH_Q*^jk-gs1M01c5!ZdymWe82ar)qaP!2(`6*$ADSta$
zZqUY!pWLuv4<HkPcpQCn{RbaBanPXFbLMQl<BloceYZA77{~K~FfT*&ksW^<bqEo_
z@kHy>Jp<a`npXk_(52qoFZD<MEWYWcJ}<m*R#{PwB|FjQgCi+JRlM>Y+}Z;V9`8}V
z*^XL*>n0#2kQgal)B#VOa_AXg)vDbsTRsG&mutlmz{eloq*=49_ugAniu47DAS2Z8
z)4iam?2jsecw->)>kQEwC1B`2mItDopcAoyF2f|?viRZNdr$fIzfUiV2SzT!9aE0f
zRaP17A;RN*a8ZZ2cP6gEC0`^KG@8-2hVLUfbPQk~fBpK8Z`qRP$Dt^Z6&vw6#?rmN
z6+Y?5F#v%O-HC-jC>;o9pDcYPpnWW)8Oo=A<!=-4fG&sD%U}k+^2%f0dTVG|Sm?U1
z@x}5ZJWvITfbT9w^UOHpGj0{Gn^0yy%vvd!bEUU`Xlt2z_I!2AmfRTPPUyxdLHGWS
zNB5#61IQS<k7Iy%6vQzU7hwQIq<$g>P#O|Y<g<afNbPTRrJl?1;WHdZz4OkwC7yv%
z(69Exs%$LVeT0Ay%GuvA9iI<Hy|g&wGhz{L|0Z#3GiDSke0Fw}Hx8i&SiXE`n>J6!
zxbP7Q1&WH?Qan&1J|#c`7D4*dZ(c%p;K#J8iZcdcsK3OIHoq>4{^8ZF=m-|lPz((y
z4dwHLtGykM?sbep&=tl)S_m<D^3{F%G*76wH}AtS?|9dKWL0)K3MVwe=(FQmIT7LY
zxw!jVqz1|i5sW<t$J9T>ULa=9%L}KcKM+g(&6`*M{`)H$G<dp{fh*#6ECETd4D}00
zKnPgz;$K8~Acg@%JOnDC0X#FnP=Aab&@psxlz{SgT!vz>jv@WhJb+SmLL`mC+xh03
zYfe42Wx^XZbv-T`dxQZh4f+{)<V0NAxg^NB|2w?BpiE%tYP>ZN16oA6<xoK&BD(+n
zZ(>j0q)FC?AD+{o!P7BrP($=F%pe4$FZ(?<h`~S7*aHUo3kVoCAcEOaR0;S9$fr-k
z<jl+(@#3GM$!7pV`s9(mAP5at!zJhvUVp^Eq1c4eSm$em3q{|)ujJ=HnUrLgHU>^=
zjIMPsXWNnJSS40U0AHVvW|<{r|7Bld(wZ`<ztF)0$74VXzZRaLG}i7t1R8*ur%YMX
zx9`h9a)fA@AE{RDiM@M^<10>L(s&HHTV^X_@Q*M4Wt<%>1Q8Jg$WXr^&juzUj?r(%
z|F6O3cWTxe%nZ%U90fm~`1dt{fk3X=(cVsCJ&@2c*75sPuU`7*&G(h%6l(J-@|`1u
zT>($O!vD3#v!|ByY!<utzfUl48|*Ti%Z|nso$y$nI9%N8J-pVxsx^Rl#t%I3jbD=v
z0NuLP@6zS9y?cvFVIH6QZC~~q>bC?WV2K#&_lyA|5|T)e5Cj21Bm|jWC?rVu`o}Yp
zz{Elu+0S5R?K6PZ%$ixU)(k}+?w1UgAT)>|G=v5T2!J$5AOVdgG>c7^2gmMj*^<+}
z`wO#X-JDRN-_r|sPB{`8*pIy%l6dlDTzFJ`NjqUvE>0MMuqu=KnQ=xlJk}@9P<~<t
z*5-KG1XT=v7A@NT^UrJj%r>f4Eos`cE7H@Sh|L-R-0QDD_LWx_fP9L#D25Hlqkf+a
zNP>hAl1P#ul9GfFf=CERL7o!u0a2_M$aDQ027qAzR+_bj(poDP46U?Q3;`&BGz1_S
z4nYv0{b+**5ghU%55@2R$9rC>)D{5Ep1o=9+UzDxGD|CgOFQDzWthM12%VQn!EI|`
z+<6FDKs@aEaTCt@)O$o_aZab&c>Bz#|IGx*Uiig(W>w4pTJxYm@B6kd0O#}1FE1=~
zV@dz1r_Pu*ZOc3FEb*w{_IbcCfKAb@BuF772}vY{lw?VgLI^=p7}*aYhzP>x0Z#!i
z;3vU);vdkOnOSQnX02H%p)|WnD?viAmZTL!0xm&m5W_V-Dh*GyXh6UPw5cx>@f2Tz
zF-n)JakFNREA>=quPA_LPQ?i$;&K&_EJNik<JEo`+&b<C8#*2~4R6dXFP5S-PHBqw
z&x*U-zih!jzJU}l1>RN604rAPTE9Lg;^pk!yG5TqP516Ca$OfdixxE=c;NU;FP#7g
zkc2H@Nl*5BO2C)>HbDxqgpec!2}@X#q!hOB-jM<Z{0L(J5C}v9<!AuS%o<v=X4V?6
zWUaMQ<S153D@9spC5XvLeeF4#9D=bb2p|mzI4IQsNS8uE338GEal;K`Uwt(}pOuzb
z7}yfyR~`wCMM=NNMc-z4tv@n?CA~cb4z3!9Z`YTH8#SX(6TE*`+_Bs9alx3ls(>ms
zf?KtEcIC?5kqpY`pYMP3&BvI3O_;EH%9QobJTn`RzU-GC#T)S-Q3aA<3n58bLP)YK
zVM}3Tza>csk_HGFB_Kc`A&fheV$<Q+cL90vUqkvv2`JXgO0lb1DRz~16+5ohN^7N+
zv3gzK{B`_&N5R!_7>))j-xO9cVY1Q|FyhVS0_K+zK5rtldIg2<5#k3kQUe$<2tDd2
zh~{q0MXz_k`?DE3*232p#2ubnjE-->)!sW*To1s^qeuUG{`nurr?2tCh1YlJP}>;C
zL=ONNfQ*uR?2fl3vV@RASi-i*lEU`Izhz{<*%Ao}K|~QfK%V(aF&w~A3mBSNGg!0o
zUs|)PJT`D$?JDiM>?o~VtzBl12Yd!_d>$}6VHHpPs_gXAIM+~z4s{nSxV5w;z>K@U
z#fU|Jbs&@%#(lkULpLN@apY_EAN(HgEZEP?Pe)-uOT0NC>RdLT@A4*g#?+=d3R5qx
zA_&CHQ>U&u|NK#<N?Y*DFIzfvsBQMY{PMCvgT_W(J$9+BMPx~7laRu;ML-J67M2i}
zB+D}Z3<C&b{(1&L#1TX#i*qC5-=KfZz8%c0G;0MZv@2L@mY!{`$t8!NNNW<hWXYrk
z3$VZAAil^(CyE152~%OwqOI%K=QL@OS;~KaCr`nrOA*$8QK?_7FsKzCIRW+4quKnC
zm0g4@zrxHdu*z+;QRL#9F8Ft!lJ~anhuBdNWeLqVs}<VRs3HweROBWlJy^QERQ2k~
zyLSB(z_Mk#Uwm=iM;|TUv(NF7kFN(}lz^~=u!Lm^+alYRzW9f22`R|a1A>GgDPVw5
z6mAol&rqxlz+N28(*T;4273&kT?K7qzh>8ES82!9j$+r<j;kG4Ye(yd5{SGae}*+w
ztR7JDL1G;r6^_1Iw5YLi<(&!d<dZY-;;g?`Y?v9YM(gT$^dy|nD6w>(x*q3!zJE`#
z()jz)(WK}Itq=Sd^S8&@S0M{4uB!?o*kGHKlwqZFJc%%K<`vAGon6$S!@I5vkVGI7
z-V!n9Zw&R@B47#I61FWYNdb#28KVKDkiH8@N+Muzp9bxlRXe#`Z2;fS-uCo}rBaHx
zasbv^6Tn(SYppbECZ$;^lB5-rBoazX!Q_Gj30Dh0sO&I6@fI!_XeGc5CO|+%5P!s3
zq+_&3oHNwytXj2e!-kxO4Kqpup{u&!$r(tt{}Mc4WUnnT>TL9CP*Um}A}&_w{}Gn$
z-VgPgsOEqB;==YNRmbTcV(G3p>MwTjSf46Ng&?9)qZVn+e#)d3b4}E|c@|(il>&f)
z_%T*5MR32cgs_EeiGVF^OWMW&uqYsfC52@f1`tsjKvF0mKm6BmX~|yuwdo6XPMNhm
zDP$qe24H6CyMS10shC-_t5^$mB`Kv{A|c=^CXgV5dNh$V2DR&WMFdd^ZZWim7Jfd3
zh^a4&#5y>h=u0pI{rA7qo_~H&>HAqd30HQ;M~nab)bDB}+jzDw`Zb3w69|6euz%=#
z><jNdRis#9{Q2lnuVjA2|Bc3yT_q3i*#H-J@IFulHo(Ofk2V)PcyRkMV-^7c^O!HW
zq@(%3k|nzxM?+dMvEE3sr+`Id`^d)@wk>TbY>RA51T0}$WJ|IvVM!qcEGY~FSW>+B
z&!Y|X=j;ogfA5b;AuC{0Fd#|@hDZp^_&^Q%mx7gMso51Igm#4>ViKBM;YC%9#}iRa
zq7f_m{U|Rpw1z7Z)lZgX1`xonz4miL24KeRJuzwt{>05i3thCx#O0lEZP$|VkO<*!
z*@t_+!?=}5-rrzC%}5Vo>cwcD8FwBc4Ee;f8Dej5SmBwzRhkUvIC(%S;C%l11w;!Y
zV(-28&H}J<<(}TX-+@St%W#hPe{6y!q?DEs|CX?&2v}s>!j{6eg)PbQd_kTYR7zn9
zG_IS{q+Y7IfaH+XxL#^Okt4j6paeF6v3)%ssAeVD)mkVB(t;p}iC8EQG(m9GyDv=B
zf0vnAux3~qETXB@Qov$pf{qA&v!hE<zwk>703aML`tr*qg9f!LZ3@>;MfGIt%>T2Y
zAd`hyErh2|!3FJ6mM_@V_;4})F$u{wlK0nKRWll;W5#7A-w(Su_C0LNOW;y_wLe<K
zI3TLT<wgJx8+N)+Gz92dZaEIX=FR(BwR!_ciNXCo3i1;Dg|vjUg>8wTEp1EM7TLB4
zcvy&R4-t_;M*&*|EDG3Sdv@_{&(1YpAF#zMcXhk(^7hReq}q~#0THx?zonop{Fe;c
z(mO-Id<6w;5%Ax%jqPDkz&1O^2$8lWEK5i${`zBn0<02Uw@@lDOr@e@*2Ia+6M7&B
z7<K}jKbJ4aQK*rEDHmbkHMpRCf=MEV`d4P7>u}un9Z~}O=YLmYaBKW{S==X$&hPd%
zw&#^p9h%W13um{9qzF_+AZ+&R&E2~{SGR7hS+lOq$thaAc;|WNeblR0i|NxZ``5o_
zJn+ExKmbA_Xu@6+0fH?N5C}-vLfBH;6fmS25CKaDYyxm<_d0!#sq^&vOKnS776mL}
z86YG``o@3|s8=(&TidK5eHum*Emv>Kdtvl))-i5S-v_EVnhWGAv(>JO`hQ%d9hV)&
zj-wox9ak5-+HrKTqr;94J4!i9dHx@Tu)pIl!U|yp6>$W)rOF0$sepj)(4p?ah5sl^
z5dJw*M3qK?gY(+s?_JTQPW0E6UR(2U`(#XBQ_+?g1rA<51LwCddBU6`oH`QQ@)DdR
z#m2&GqQ-QQiw%1Z8UnR$U88^hj^oE)eAH1d_w3o=t+&qV)$6VrHIgp5<g54JH}-(=
z>bW9iF249A=?8j^&qolzwv@+qtnupI-TU1#RZ0rj!jfcL#uSDng)M}%JUcjNUwGNN
zT*P?)S8v`IkRtN4q8ShzNrPjhSqN523lf5upvhn-5BeL$s2PI&5*lWhFtXNQ4M>J%
zW@|8%^7Me>m>M^ZFU%>OAxDcAtwEv|+2*gF^)Y$v9~A`|s9iq|r!~X9y^s-#iu@AN
znh5z}ygC<8{D_cMX7`>FOqChJSLdR0osuT+irqNvL#RYNR^;Nfey~MU_MiFzUhRL-
z5GXAzIDY)a%)EH<7TdOz(lu))pLW_u@4vs;ONkSaT9%kf7eC8QT4YOMTOv6mk7{1+
z(Z6?03W*=*?*uUZ*%SL5T`L$6p`Z)}q-{~ak^xKD0THkwkVb6WUVxY$qt!El!JrHV
zWH2Dj2Mp{9+S1cAmIy?)QNNRKb4z1(3uA~|marvRlFYuegtSaqrilI=%dgatrTe%b
zVG}#cl0*aqo_lV3S$#!^wnee}<Iz1c1fhB|J{p2~SL4Z3kP#|L_pxi-N;G>J&&@<q
z1w6mz{GDoJ@!!#@cJ#D{`e$vy@qXv$(g)skEC#gn>wpPgufggZP*o+vO_{P5z^GA+
z$BkRLX;ZG>!p*O3m+)kNq^Q@=@wBDTjGNDG_0NmihJq5nCH<T3*%vm>(?|c_sjyf%
zt_E=TOY;khlr&DEn6!vsK)x|%)ir}#7#=vfP1c;H+1qv(`M1Uk0JCPLp)@H8rC5@1
z6cYi^CWnroqwt+Iv(OBd-i~G{$w~{YSXiuCLlY!H0fJx&Xogf!v378o*s@>0*7w|V
z(s9Q<7A#xh4Q%O&t3S#LD+s~^$75(4Zw^=a2@9Vr!M}gR_WVi|LO2>PoQ`wbCP<NZ
zVHTd6k@!^1=w1*1JT_VnuzC-!_{w|OR#oslpL%MuZrz&9p1ozyo}#$+%M_ylL|mOa
zNs^YZEYY%I+Wl7^6>ExQrbP>WmaorUwl3GUsAgtx%Z@^05?Df5maqg&Tx{#E!uKbv
zy|{l<bI2*(>x`bfUI<}am|C-D7^kPwtTZX1UBM*SFD>>+pP`wB@#!-&GixSGlai!0
zDNAT(rATX`6+;S0f2+tZ)MV(A{f^?TVF2{iSBo#bw97Z&+&*g5f^u%`kT&>Y#UCJl
zA=Sp2tuVL^`ZSIL3?%ALVBQ(G5--fc{A~zY6-|6{HR`5f_&{{2lYsi~oPu{3B3K6X
zrw8$AY#Ru|RpVh-VLCJs?cQB5d-ggYShDkvL|k_h|0M(o>E(E)r`YBsh6lFnEG!Bu
zB63{)%4aLrZ^=(dwruISfGp2B11~Nn$r2<aZQETmcIrlEEL*=X7!b)JE1C+*Fo~a@
z`K#F_BGN<=+3$Hgy(Aw9&9GQ$CYyz3wwSaMO0rgDNue|gNm^0tFN!uS(y@WC(z9v|
zGsvMs-}?63o8NqMXgOnY&TNIT%YTn%fC;-+3!!lauI+-sZOWtj2$?c4ZyT;0hb{XM
zkQIXaz9Sn0TjI?DaiL;!&O#UGe1`ek6H~wW@bpW)Ft9n~?_Xp2?kM9`jsXe^!l95I
z$-6Y-KO9zd>ij2C0v6xNP(=Heh)AOcL6W5R62}}>J;F#Ie7)|iv8ycO@w9|(QF4+M
zhy(;oa6po=n5}4n5DB79I|_uLj8rSWGa`98aDo-Ht5_&4DUv=Nk^NEeuUXrgn1$BR
zT3JG932iB*g_3MZb`@zUv}6wjiI|dQNl>P0EIu9)=L`jaCQa&_b}8k|7HC@?t}e6E
z@3$g-N27BcJa!T~*N!X2Du+>tFmp35`4R;Vm@8NOX-j;40oqhA`4vRiuor#aN3kk1
zQda0-<X~haMGN64t-%+|<J3;&7+~GHJwu0%T(ac0sBvB7wru%=>#9->lj9q?$!J3>
z;bpT4leku|Mv^(~wrA)5FmFd%ifu`<1o`$Td3g|)XP8DzRm(R9Oo5n@=Ej-h`B_X3
zoL~lN$x5*l>=L<tk(aRnjO=Fyvo_H#Ey>cPC21|R)=HbNU@1&iHY=rtB<%_iN7-BW
z&FWNaLIjoa2$?&%b>+%kEnC(ohiDpQK#Kh!>BF!zqtHRM5dL-)2DU_->YiO&!3%qH
z9^PGmmD!$uvx2|H3{|+KBOW~w>A?iB=Z$%I^oR1U!BKd<KTdBJ<(yS}aM_n7L09D%
zVAZPKOP6krcwLC-zWXL`-n`czSx1Q)*~TISudS7kWJ#Dgb46kG*|!_s8^3nj?xN%*
z%Sd!-k@RtnCCT!lRAhU(qR|MkR~|_u1VAKWgX$4CC_@tq!9p<+lj}u%$<weA*$+!A
z&B9`6%~A^~SV)qZEG3j=sYz-Ql7tZCk$w#NkNl}h`+vApL@adMZR5ZC>eBLW_~6zU
zvmA$?{*{KKk!+(&Z5&+}XSPJ=Itf^`oVBw6W0&K<KVwf(B>+!^b{l8liBr(0aRS&A
zR=95}-d|K+#6W4>+5=~|jT*lD!Wi&zf`Yrs1;U7K0Mc)`;n<g68U$eO+^t6+{Tz_w
zKic>qMYbRR3Q7co*-}8tfUpBrC?G=t8MH+pAVRhbc;PS+uw~FDFFG3u344)R8L&J!
zWZNPV4)aUHC{h<6o$_V;_h6-=m5BprN3r8-*VT^8VONJ8?YKJZYRA!GR~Ls>*x|6N
z!j29*91g2uSBD){9OfcN6+61PSQUj;IINVTIIIy?DAowODE0$nVG|2eG37D|Q=<!*
zpDX`{&)kB+qYp=&WTb;$P$J1fw|cm`3wk%K+!+k1?JmR<GcaP|fpmdqh9nGbgXd05
zeEvN}IO%<47w(69`?tVb1LO3=DIZ`(cFB)Ty0DTO;Q#*bn6YD*y!`TvZQJrb{q({s
zt{4+DnLXb59ow+YZ(;>OrhLm70;Z(h%WW3qCHhMU>8E@O&r~qxvdItiLc*T;3n_$@
z-l<|r<0EckW<i=kU=1RI^7;lD*rT;4`=x^3Jpce807*naRN2y`rI4B}X<(0#f`woq
zNoaE=kcv#*jFcn<X(EnvX^-vNOD0pAkhocC1Pj^kzB~J}%es|w!;h)~TOPu(+s2#?
zD^yRy(6+d!1L~(DCE($NN}(?ze7^zreuvGuaP)ytzpK%-8a_Qc+Uv6f^$(wqe@%y@
z$~!YN{;xG&>E~UNIdH(oShhQ{sbE$3PB9UU8uhpI^kK!t>a)-0O`X~^C#Nvccp@K$
zi};4-!nANBA~N8ouvjIBEJ=QayYOlqC6N@QnGLB~!pj4-gs>&q7TFeA!fO)Yl?eMN
z$ZL@jTMn<GH50MYOv($>l9wtC&01^NQm}^7N(vwLC^Gwo4_!e-94*H8IXRZM<6f#n
z|I-q|V3QbU-G2M{@)^LENVSn0u1ahZ)^HW-r=v$b^r(lnHPE3Jswb6nR-(d9OSk6X
z?fLj(1=i+xEonvNNxym$o;n5nTa^52b3H{at{RU?YY?)^yDH5X(grV{9@hfsj>(w6
zz06CpDo*`fyFNd6?k)b;i(h};v1d<F2`LbL<XXWo9zXJ05t>GBemj$1ooc-J&u%AP
zJ2@#RiM;Z5DTo23xIwMtfydYTc;b4?h+dNgZ5bO>NI^nIB(bmrgcO1hu!Yuf_fDH6
zPEDklpjC_nmP|sEP!K{0p$#KR%|dw`7zI}ZQ-g0>&<R9%03?VFtAn65VE94A_lcmg
zf?|%N3k#j3q%xBpErFE40Wtu`v_DM?A}a|slhL*Y`ZPxGhNu=wK=G(dr`|#b3wGeu
z+4yP|k}L>9sPayA%?L_d)B%t8@dCZ21^+KwaNcKd^nT9oYMj)#B=x^E3m^PiUbMlg
zn0BN0-kY<0`OZCi3d3OqATu+)MT_dWxkd4P&m-Gn=6lSs?|i&$<Mskb@zJF9%Qx*K
zf)o^X`O*Q+8rDuWr7{sB18~{EW@jE>KVS<0W2SB*hKGd&S$;K)@ZS-FED7UKYEn0)
zQ>)Br^LOMIC?UWa8Vn|-S(6F+3Xo=o1eg&BSv}fkxQdy1;i|nGx8*A>1aYL<M5N=8
z_a{a43<*TE4Y42)0wH<N&7EHxzIgk_eIQOWfHi?NoRShKhx!dSHApLOv|b4dE-Ji%
zY9aJ$gcBR$wC0Hge5EKpHtVL)#jt7k@K^8f6#GD!(}<yC8(`F6&&Vl#B}BM(0>-c0
zzx#+8r#6i?LGh@6HXfb6AFpdgdG_tMXB8CW7Zy5Nb8>QU%9Ja*c6}ZQl+pkIC=f_F
zW8m1!FK>6=*{v==zm56dyj3~NH|H6m35WIIlNtb+J>v8&y9!5sy)G0Gr}eDYp+!b=
z$TB)-UxBMN2P`3cOTcslB7ul`U<r~!*cNqdoh2l>N}tfVR&JiNetW*5HLX#<R#IV+
znzdxNW)1~pp;k)s@tte7YMd7F!FO(zxqELoBgJ~|;}u(X6^cmHAt8tq8N4IdZ$kvb
z10LAQ4L|kZF}GaOE?~=U9cr9;<`*%|i4s1v2pg#DuRnIbcfM;~%-94WqastsG_lqi
z4KmOw3ms~qRTkRUL`D!9L8JxZ951nP&;t#3LTNnt6UME?hFoY}UO%>q<V~E^7*Cyo
zCe;$KrTO#w4Y=ul*j2E9K;>#&7heiYgpZft@gMgebEpslD5V!H*m~4ajq24)2YBYp
z>rOlE-I&N%sh<~C6DMt$IC1^??zofBZ5?LrcS<A8Ou{pd8`n)SpRAS^$Vj#SeSN3W
zI_I937X&Qd$4_1(ASp=tO%VloKu8E$uxgJKA|uu6(kd%G)$Wj5El$s-b6QI6joS-4
zG_ST|eJ%s78>h#9AUR|uhpaivvbXIn6atRR{#U?jJwyb*`HCPi)-MRU(4G4EnI|6Y
zwY@m~ltz?nagheG9}c6KoCpTOKmcIC1^9*=dhYk;pVSyLHX$>Fv;eY_P$LO7Q&1}z
z_0v%&1vQc@O1=jmq|H&=^D$*DzF2{YYY>vKB?t%Tm|{kOgX0_F)?>W9iG-I|=;EPi
zcy|Fp*8ac9)wt~#+;MCi7k#k;H%}}xJX~o8(3<z|-8*;g%@<zy(X-E<Iby`zty?3$
z|7gHJ6te2otCpP|&e`jF;4Urj?exte$(p?)=Z6pbeLH7Ikz!_?e_EqhS}$#KY}!!}
zc2qFnMV&oYyHAC}w?u_+K-*GC3CH2tOS4-wO3O?S5W$kdoUO1(En1b6v(H(xDX)9`
z>UFCp9#(pEo2(xf?A*A$;Lc0h-S^4@5Ru<+%QNgEt%m>-#7y(X4C>q}T3=*a;*IC~
zTz&22gy-+uxB2klXZ7s)Mkpk%yY84?y&7d^CheDEdN;&`^AphJp<X#fn7<v5&%m6m
z2w4z>w7|i-SsSF|jRELbtIUEJ0Mj?(+|M9Ig)9nY3_AhWc8x<mW0vEJugaW}aUgL3
zrSyswyV|y`RaE4xT$$am<1;byt0QA{^;chAG;m<c;$l@?tjuXcA?t*p<96qT7f&1#
z3`ke$FQ;vuv1r$SZthY}4h(>CKWxs*2!8hMhM+BjK`-;!WG`D%*f!ZxSboQpNZSb0
zJWCLS5X@XHEs&aIt=hEDakb;JtJrll5eD?CFC`_k^#Lf&mK6UTxpel@?BcL04s+O1
z#f~a=xG1cO!>TB(io?7;yKv5kGrF|SjQt^A|1bMFD1en83h<%<qeh)`?z!#p`(Ccb
z>vQqi9OOB0)PXCI5}wv3)$rl}p>YNTmC3_JE>8altFtTgjm8uiGZZH@j-&pM7ULh^
zR49?Q5^(@2MccNu0E9wz$Bs_}Ok~G1j(+jQfddD&1P~0$U{FS=Vg8cc+vff)7?1#@
zpdo!4#ujjuShJSwp7`^&u%kBZC}>hQwSKMSoqLMC*%#!yIEf=7+4DyFT~aLHHXtHq
z<m?OY+EeVim{@2CK}vI3H`iQ}C5f54wXHt$*WG|1Qi!oEP4mU=*@Zv6acT+bkDTG^
zYdXI9N`f@c^UfQ&XU~vpukH3br2840@cA;#*@|Vm!R$4kI!IMxXmoIE+}O<vB$sY?
z6=8;dPsbbc;OYvwP&Fgj#t)aGX|*_i|EqKG=ns`kBd>Hx<i?GAt5pl7r{4=094`Po
z^iZE+!%hS+XwYY$d~#MK&Hd45<_sOwylsnW`#tTJodw^`+40`^wbj!D$9AZ(HM?l<
zKBqygB-^H<VjZw$FhD_DT2gp5VqPg(Bu6MxI7XHw1Q9d4D$?bOP3uo)KD9?3yJ9)G
z=iD=0D=v0)v7?H^y4cahVO3D<Hm;L0>BT<fsIMi<vIh<vJ9tpDXP*5DpqL6t0D0Nj
zkM0-w9MXty<igkQ#nN5)as|dNN3rs7PL(W2AuWhLjd5>pG|AY{ho^184PRqtK}FO4
z!U{d=;j8mX{-~E{<KbzQ$hkPE-k?Oc0j4Q~vvK3y4H{$sSg>G6w{9c$?!6^B*<QOo
zw^{oUU3%7?JNfLgVhgU~W$SWZ`eem|6*<XCGAU?<Y!M8|U_jK$3N@{la>lXsYE}zA
z{r=MAkQEG2!0Q!9w&g(}!vKMpecLbTQrau<bsg;}?YO!)to!z;V_8HMlWhO{Y3rL~
zSA`v29QJsi$WgYWS?`@uK7Nb2OOFC}JOel*Mx1l;#hpusSq=mBYlfq-DHpHK!N-fC
z*c&)lwfPi53paGbZO4>pu|(d?F2vu)V&RU8GM+i`oVIa&P0YG=5=JelTwB!xNri~4
z-o4vSpS}@5T3T9z1{vlNwrP{~>#tXYLKcAfbyIe4yeca*RO0EHKbNh~{qM-73s>&V
zFLaYaG8B*|2oM=(x@TXwXq`$=4qSLf<NL2{zi?&F_w#mA6lNqs@cxz=O0&|?(b)iC
z#)(~P*%j7~%zSj4%s1n`mjp;DP<9S;S%eqsb$I*jxe*4)&kw)*?wlKLIQCEr`zh-%
zW*KH}L3R=H!d}Kk6?WleMuCfC>fzrfp<T_W{hIJTnK!Q*hskRzig_aT$)`inyJ5*v
z;Il?!_SOUZIacL=Dg(53?H=>zHP>{D5JVs#Ter^Iv!_^Vos|{J$_$mJm8o-gJp19Y
zDYJJ}PY)yoWhf{qQBa2%T4VOI-2k6|TH~&5vYOUQ{c8H=a9C-rSqKJslYhN|cdVJT
zW)1B!X+bf)fZ)2iLyL@*B&#wij%sFxPCB~w*FSFIm^kjXU4=Wci)v+sDlTYlxS_|(
zFaP8-t$X_EEn|Q2jW>Q$RSXbI@vHV=))vg&ih0|yXa|%=Kzg40s-^oPg&N7Y_$Zv)
z4lT11#O6w0-ZL}t;w%)qkfNgc$JJ<=h4%)bX|<@y3n1UYd7qb;=}`3y;JUhX>t{D_
z&IN>R%m4i6v<PD`W7x1CA9>{a-p9B2VcNN+j~y|7&7}|joS7C#OSU|b&oOf>d;#uH
zb7TT7UbFX=Pgh<)v}I;`;BTil`QYod%A0m)K1m*x6SUF_0&IqQF$1jGb=kJ4XV=;X
z;J0Sxo6c=DYw_;QI}6!c0AX*QQ(*>RfFFCT&&x0W9Jzm&U*6>)A3;J`yr&4+g_yYo
z<5yzJIsgbtkJbaycUe~*-77|ljh0!su^R@ojHCOqFppw<yB61shoimXsEU8rS*`F|
z|ELXZPPii<r;J2S(LtFmR;36+DbC7zG%qh~(z#xLeQ>PEY}Dw*O`8gVKytjSji4aY
zok4S?VVmEy$H?zU3xAKFykwqTImQ3^VChZgwh9I1r30IdpT2olPO%`?niR1R(3&-o
zA~teC_!5GdTQ^RxnHfCL*e3xP@$j)j?wq!Bk1`k2qCr~AMrjp9?QPrEU%GVb_U-w*
zcHMQx86V7^z2TT+TGXzc8gn=&CkNho>z6C9?0x`d!0auUuo_>l#+H3v>7XHzWa|*d
z3N$0d#)HS>{PuAsMEMnAlh@*^aZrBSh>9;;VA2I>SEFQ>-pXwB9T}Z=aX1*@r=K?T
z?)@rr6oQ|4V&llOY~K8(O`CGf2@TY~<Ng`LM=jrz8$P376PJL1*ts`s$UO#|N5@zD
zz5M<5J6>5jG_&LKE1#~sbYQdU8G!-4>#y0A_sf#qO0y79+6+eZI?@UDG872t-YzRC
zXdR@9$;==9yVqH_|4>+5l${%X<*x1(Kj8@{G+4THD-l(%o-}LL)um0|)YKp|)~v}c
z=Y;0LZ_LH~ZJ56uzwX4&0_-Zlu0km7l^azyfAau{zQ94_4BXlSCpPw+j}=^Fm*d%)
zShgE>C0(n9E{3+j6DOlus3hor{uews<Dhae4uk>Td1rPkyt6EsmKG$U#fx{GcG}1-
zTlPiHHh%mnqNfl_Lb8RR{NL0~2nqxw1*8>_vE8OLa}+@N9UQc2XX_7i(HdH_tNDYk
z*IqK9Syp<WS%cJCS;2ABw<yI#tYV&%6d+=yxLvc1P(W7RU`?P00+#sS3nxAC?vmbJ
zYWD6_v*O2QWrYA5IdaiM51mj#u|(GD)pypdn_do65#gi}n7_m8Bp)GnNsx!KT-cQV
zGNW@HoY)9M+MsQX@*sX`tpC5&cwz<???g~mt`1mfB-{AUsW`7)g3!S=<MH`2B-vH-
zGb?2mmWYm#ZOaWC_8xWAe}I(u;kXuT+nYsZB)s+=G@b_Vr}lcLD!lGJJ|a>+-79~f
zi&m@ze>8F38OPRb-XJX{$r^e}!_U9l=qkU3Et6o<nm}mZG^0VS<f<YCLz;JA)~-@|
zgNUxZw)5kUPaihy+x-0SQ%{|m@RN1xrtg<aU42k#2$l6?GLU4US_qeR#0}j_B9@A@
z?EGa5E*uL-RWzfa1oIr%5TBkM_jTs|T?IIC1ojqJ8TF&$&2gEzY16D&f1^@dty<{B
z6W{hrA~|jwp?E||Khk4RX;yy2l9<_b5z_ampG_wptrWXjyNVr0e?4Q%^!Yo9ND6Uw
zpN7nET~-RF%V*ftCw8gTuy%5c&+0c=M0EAl69F85d_#b~`f7Q(UbX#PXP$F7NI$H+
zAw}cQ!@R38>k8b|-OF64Am;#hWi~pzfpb5H(v?n_Gv>knF7T*7_Irsieigb8$KK*9
zhIv-SpJ>~*wEzW3fNIuE*|_n}e*H$QTbCW<Vu)#w&%WT-QMhA_T%}_hwn4|tZ&aGK
zVkMz9E5%B&7Ep?nWTi+6?I<Ea^H=Oywm!FAvy2YSGx{D==c^w!2W_boAJrnGL-T4v
z(9(5#7q8jdv3X{z#%cJCR?V78&6~gGx_5Qz^!mbu8@F!VSGR6jEZr|(zH|5Pf?mCv
z)U5gN<jL1`>QuKJG<+zQt5M`4BZ!k4qfZlbuZMOu5_nWALU4PE@SmSCW;wD8J%4MZ
z*-zu{<8W(_=&`Zi`;STZ;Me_>gB@}RRKI?@=?4phw{82^0}o98-~X1E$_eGDLsN4U
z|LCZTlR4U?R%_OZwPdYW3uwVgu<1nN!yfGlAzUp8B!m#!RUnA4qZh5*vtaq2quXY+
zZj@e7<aTbInVA;YxV_+q`8#YW6mv?_Z`o33*sxxYKmJ4Ay3Z|NeqBb!!y`s4xa+Ro
zu>$3+v)<pjH8(f+;l_<KSFYTZkO3m?V-Nnp8?S@XAVR$~)JsLr`cY(GKHMz_=r7rY
z*XLryLT{2qKvw#yT#e%z;I;m!l@cfQBMs9Be}e4711UGFavQ*_<d{ACmb>qs^z_p|
z#3Lw<o01Z7%W0nzJPly%TJ~hTWpIuM_myd5s8|WD1i7S59-9*EDi(qrVnlkMTf!*W
zo*imv&CAy3emQNkEeQliv8#0bsxt!)VA-}<z54p*&0l)#vFShmeElPjd~X=Qm<N6O
zytQJ*&dkgt$59VIeA=Ep1!dV?u1217AT~g(W1av@;`oL*r!5Aw^rY+oWL8JLF~E--
zaoq%%s@T*6x;!FegfQWJG|ouS{)7l`%*6xWBOni9UyMpHK(}rU1`qD?_~U0h{qzsR
zhtCA;QjMPwHx4mE_i+$NvxZW_)!JfV#J|$4%-}lBuF^tCp;!u5g3KHj@@i1L-sNV8
z8Cnv6k0z}zDpp!+A%vsY^jS<zvhbTOB5KwwQ%dpVlhc$^qeq_;q5jpYv!_m737~!Z
zTDC0*3}{o%c^2=2q{<0YGq<31bsXOar!+y^8psSGGjxE(kR=Yu597h_F?k(!<R5q{
zks*q=2jbMGutb8o<YI+Eqp)yCrB%wI4TOFE`Nf}px@h?DA7i?qAdwP?FaV%U>0b0t
zR?t#wCA8MACaG8otrRK2%BTgQl@PAdruJ446KUZU!+1QPS!)T4X~x1`0h@#=mSIg^
zn^DxSaJcG_uF<21oPG9(W5+Ig`svdQR}3CJa_rdofCUtf9{sodo?+qk1Pox}qoy#@
z(WsY-hUsWp4b3vqG7D{MMA1ABx`rmw*>l`Ve7qQw)<g$AAHZ@HGD5iSXx!Q(s-{Zx
zfOu~q?wWGoUvWqw5MFrUNB<}t-~A8q4FEY7`FItqilL#INwcf9<3b9dBr6T2v=ZbB
z7Q{lbRO|{CO1orkzK(RG@J2SWU{=gRN-B1|0(mlRB8iF}-L*~DZ%+NpJY-1Q%*@nP
ztF}f1Lu2Ro;=}6O_pM)kxiLApJOD9oo6&l(1%eVm3jvADB($rJ&UMhSme(o2;{NLj
zUp+uz#`b)?yAaRL^!mUbFc#O0v;c;5z+-*la84}g=M>?BF<7wU@O4D3^skvacT0T7
zKT4zowD(`lP>AOQ4FwjY6e|f=YpF;IErbwK3k4-ex!Un6Ax#@+5D6mf$IOI@C78yY
zQhCMlLU@DXiMVOql)&$xyT0MT<BxCj<(K(GhkpF&r>3;g1wsJ#>({nTn;N@!7nIKc
zH+RP)CzfnGB+BSKUR5qplX3gzJUsmqiWQXh;<yKV!eWJcd*S+{qxt%!%VOS`hsS?}
zqYj7QKX3+!@pV$1tSI3IH7}(h37TT4pP-;6lhTe$mLw(FHEnBM7Q}+IAVGo!X|I<F
zG|Ucbc&0UJCQCw@o^9Ie-eXF}wC3YF*7!Z(AG5yr;sPm$eeuPz+}xt{^w6qR!&<cX
zHz1EWrs3IVA2oLD;+t;jRSxMisa6qAtI7-ha4|kvin&`+tUL&Qz~^@qguvr{Ft|0+
zgJm+?!kxHzB9`qsC^kE63=pCCav+fZGR{zs?in%yU5O>M)~@ngoPM3V7DObNh{>aS
z)A81jzVLdzX<=!hy+&>%bfh*C40LN#y=G<zzni5sZ`yQwn>H^vjt0=YdDf;)51x7E
zd*`3usZO1={BlR(9cpTbsE(W>%-M>u%kjxlX!aT#9<TvwM1HF*TzC|2=oaUaD)H3?
z4xXQdXJ;a09ddg&@g1&IthA`e$;=#9ROH6g!i)IkALdPyfGYqAArXj<h4dQb+7h;q
z0b$uP7!V=b@+OvA!Ztl|rLg=axY2>ZrYpMe#zhK$I)>LBnm|MWTRd>(QLz&Yeh<s2
zqrAK@5mHhDv2WrqR)m#wWirAFi+AC{@A2~{1P{6-(vXrM)J(=}1JJ#0c@<$wW6~O2
z^5vm&@b7mWNJUsdfuod;*8`<n;FE6#2;U4a8bCvmR{|t71Xz(0+I7hxMM4s3&)o^_
zm!HS<7-XSYGn1Ca1w>Ml7D6cY8V3n-l{%|OgEFZ<@-$Yhz?e_)({!v~hrE5L-vI49
z;I#fYb8yuI>KJ3-yz@SuFkxAT4z(99yd{?C4>PZtZ+mkdM*fOzdB`n>peo3&F=GTS
z?}XcXqHbz5Yd_&b*p!Q*pJ8L}Z$|wG2!Vv@zg*Jx<x+z|V@+Wn{}}Ki2ui~x2-dEK
ziFTQun<R|M3lhG|-_*Bg!$&rQwXig6EtEFhq`gjtrsHDcx+y1jtIcJp+ZD_3)W0z4
zYjo;@<NM&E%aNIhU<mv6VasMrnt(fRL3#$Rx(-)ge<+l|`0<y#@y0LDJTpBQysx0(
zQ7I3%j+(a(|67ge8!>Y;gg`)m=wM?^rq@;58n~<z&TWT`V43*MBmI5&*K~Zc#ETsN
z=BsiHuyyOcaM(>W`A5fOgHlNzh$sP<LB0l11fjJ{3J4QOknhCNKvecK0}#yGVrCXv
zvSyYVQj_wVg!(<RaM{47CE<kUUCY5gZ^Xn2c<^5sJ~HuRy!>haShog$zZ`e}1D}n@
zNvBq!Ht;&8T;2VeYkG_vIj^9=NlObJqK6uL)!Xv0DjT0H!|26ce_5&ud2b?a86kA2
zg?o;}(RKHKJ-NkrZ7!bv2_Xw90sKyubpTH>5&jWn`+_t;aLu$lKpG8T0`vkVe_4>@
zD3AUlqz}QYy%R}dCe!F#YaxY_T6hx%q&F7e%0bO*R0}1z@zcJ;X(!|LH>0FqR)<(-
zG--yfr=qX`y}F`dLwq^8Y7vpSfq(m3mqSYWL|C&2ug}BiB~aQ+Ns$6pl~|b!4WtI}
zY+v+m5!aNe9MJXJTs$((>mdER8v9o{1{ghhK`CDlC(;1$N#9opMq&^_Xb^!I!eav_
zt%ywPW`Aa*5B*sHY-z<TGz+b@)TA{_DWq0HkR%e?OnFD2ZnfjYzj-E4KZbW+$Lfu!
z-(de8Vk7S-r(oW4Jogk@)yKkB2!^Wmp{-q;9ST{d5}*p#4;%5>QY_kmP5Y2j<j-U~
zxSqJNtX1fuQ3h`Ajy{b`HnlD1{QvnG?=Ql(yx+#jQ^gFhapT??*i%{$pwv!`5>Qd1
z_nk%r(ja0Y<ypPnZS|vF&|uA`#RIe?$)q$%&1RH_5F`}2u738mt|hHWB8+?&@4bcD
zOOTXY2`Y$agIn)JR&{i5k6#ueR0TX>CTiyAhnqEfbmGM84xRxv=3?nCEZC0k*W;(n
z01))^#;S_iOv-fon&{O47arwBoy)0zk8p)%e7pot&cOCO*z$Ku{W!Rm1Z7cwd|tFi
z>>6xr02mh#1i@9lBUKwNas37nY(`kH(ps=3wAMDW)<XJ`FEi@Y3`lKQJEd*YQvJtf
z&cH3#Vas0F_5r4SG2@aev3?!SJriF|t`bk^S!a!yJb48WP^!|EI!dF+MS+8#x8UQ&
z_;wv!4O@6(KDp|Oq)Z~OC6H?4wC1?K7pf;$B03S)n6egEjrWEG*}qrPKX?Wx!3ikE
z3>4!FB0xa{E_rcw(%vK$KZKyo=pv3(NkJReC!jTH7E&ln3orCbBm_wf$92y?y-@;J
z`k=m8ycU6ju(r$zA9xfO490U$;nq7368(Sj$-;>fmzYq=9e0fH*ROR&tk|u2n7A5W
zuE2_HgcXWhDE21rSXJ#q)Qn<<25GpxCkD1es_l_)#qFR+r{lc^D0Ct4dmQn7unge3
zD&F~1dirMx{6jIufb?9V<iY)tV9Hc%7`G1;n=&yim{|#7nl>w~q##QPFLJCXztHX5
zqm&Qgy329#6{uaO%tx1SBtu!m`0`t5Tmv`V1|bjlsVb$fzy6Cz_1xmc8^@1d+P{CB
zgh2ozJo*EsZot|-*jw!7MUqcaRqH)8ASW|~vs&ZiCg@fdbyLeUj>=j&MR@8bj9P;H
zFl_m|@NXUx2I$_s;k)n7F2w^0-Jl7rVFHX95HSEEUepLuFy+F+E19>THCdMN{j;S=
zNK%3$^8tz-?YO#RzuV77V@JMubcr3KTQ+0H5195H_U52vYYZ5KuHDPj16kGa)N^?J
z5#0aC0o>xPTXVx<y>4Chu3dX$%0~lt-Z^2wfVO2x;^Fg+ET~Fs6S)DVNob8^G|51>
zy13w|xb*2td0H3m#GCUlVj+_3KLFrK@OUdZC-^2HVVPBlREXG}$SaZ`ApnyNL0+#9
zTf*}9Edh%lg|r1pvOH3bKmY(B07*naRHTrm<*h#pOo+%3RWD=ogs!z-yE~>`&+9KC
zcQ5X^FM_;x?aHrFBPDvVcin>LU%+j*<D$!unTel%#1oHT(+130hPw3<KkeMTsGEts
zVc3<medBXxPqg(D+nHoy+qP}nc7CyK+qRvF?TIt7ZQIFn^L~5pA8<dOUDaK6PVGLu
z*6zJlmq`?Dd|Gikf(%bhm0VsL!63ce%zC_+Q<IcwW~(75+2t(3a=3{E2Qv=-GTCO=
z<pJ5a|CYS(4UtnjQ;i@J@%m{mE@BopNKHjUd25K%=mAKf9X-hzy&?pIXZ*_e6A(17
zEwd+WB&DA91MuDsq$5N64-HytH?nqy3A#d{ZbtuTiHoEB`=Nk7z^{&rWlxb0#$8iZ
z%a9!5kk5jF1ZSp0U0Uq`#A&7@375+xLg@r0gsb)a6M}yq!_tKX7<AtU3d#$2FLFB`
z2aYgEj_BJt8f;Vpb>f;J{V=gi4P^4R5!mBqGvPJ6PU!eqVUacst_DHFmjatrA&`d0
zIXOi&HQ}gCfb@wdn!BjiP|$!QDiG!%0rgL`k^nlwX?`JCqeSGv{AlWu2>3B_RC8lY
z>_zFkJ9PtM#b<lgx=39JA^<vOS7qgk`<1r;@l-ZoH#YtDY%GHn4}c40A~3Secj}1C
z?FJdZ)y((`Z@ZeC!OD*vxKvFY8Z>Cc!Se7gC}@A)MEPP#W~X5fKa&#4=*>Qd`yL>c
zRT(aeRHS0}r!tP-b*{s0zv%@`kVj>C|A6e(n5(2>zxUi99zjqvGgC@K_uto5n?Kc(
zVnvNoJGP**G9`Kw@cYI7Bxm7!UZzj?k7b)XG!3WtEnL1(3`>L&)1Lsbxtf-_q)_tO
z5SkWr;v`UXB~Y8z!xjPm!TEn+4HP(Aog&a+evt4U8?L$Ja!tGekGEf|IbZ;s<zinn
z&Hw;xV0PUAT>Zi6HRlOv_d94^7uSFS*9j>6xeisIg;3x@C-o=+^4Ez)z8>uaa^8zi
zoBtZF6<5FDU*W3QMZ&nM$OD}Hl2OYPM@8n|;YJ=fMk|DCAbuz!XcH<L<#&iUW5C|f
ztmnrSRw-mjnp+s?ZYbP;KWuTKDFoScgPDP$+wz||0rE$~Sftxb5Jp3{(DfWV##~u~
zprw>{lVS-(vOqN-_e8qoNZ4kMPx<<@9cN*@(Tdrmo6pA;wV?fWcX|Y)33ey`mG8sa
z*T8pZ3Fv>lfs=K@E7$F(PC1^|ppb@PW+n%t(&N$L_*uA!Jdx+es<U~qsPmgidap(z
z`*&ee|MXeTh#srrle2aYM=Nso*>o^eliZME-bvoj(bV^PZxZytlR<D3ULR_yO;0q*
z`U6;Omg(@ghnK4TfL~raTIks-cA$o!HAZi?hU-4mVPu5R7$PX7RzeA)qS_w6l0^du
zi8YgEy4**Hzqu?o(ff0_vO8V9w{<n;<%s}O*}=u1|7ai53EBUX1jKK~H=_M3p@O|v
z(v2}>3?yl&XkdPo=(!!_5LAXa#|%oN@9ClqU$Ai&5-hwpnpu_-YnJ^}9f*->se-2^
zRgoBzHSVZ248{A=S;OW_qMsYgwb4*MR~_?KT%1d75#S^mnCP~r-=pnzp)Qcfqc!4_
z)Uyka?diTHOn|VwS4=RM3?kM9ov02slcEK@4(=qov06=p$>E8D0s7fid@u^TeLtdl
z>dQHMX;2O#9x_tI3V-QGW7tKX;iB~j@OiV_uQkc4Zd2mbKZ*pqEGmc$MR{5w_8tU-
z3^%v!Uo3g}qc}w+m<FEChPk2Ef!(n^UaZh_t;I>XMd-BBjmGy`zdzc@0IU6hX+vST
z#AI)|`z}-HN)XEqthf*o19x2;AuT}Ve;SR#jW3Adsr2gHHL98eY6x*wqZcax&aX%H
z#O}qK8dJdOJVNxRX>VNZL7g5L5-;pe(i4%jl)T0>iYqIJ!bJDInL`++f(l%R6X<Ko
zLrmd~8C&W+))*+A3;aE@w4EKZ+bNiF{{0EFofY07-1KFE@di~5lHoZRLIVqzyHxG&
zetP@oX7@#1Tiao!4hk%ASnn<KtuS1^`}^G<jl8BC_+6RJeii*F3r<?l|D!1c!4QFw
z3^F}{V@9SdV+gugCO7zF<F{9sCz-~200oKfU9$tnAUivY1h&@(?CW_zOm33Ieyyjl
z)lbWD))aI?6+=b_2Nw%r**|kXuKBUYh{`)#?0SHw@XCXE8V3I@h)hb!_2VCt)-ZY8
z-{eX0_%ik=J3BQqML$VfbGytk%X{<qxY1bES=HJ3zJODjvVTAD*(t?lwms`&8H)vu
zKBSk7#R<K8G5fYt4%)1x<GHIBL<rkor6xgBrjY66n$7Mydl2Z0G-;4D+|`$qQZC#j
zmc>9^QeTGkhZr3r?d#oUg6F0tm&JlbQ~Qsl$LU=1KQ(?kCZE^GUo>%NwM=%BY=JV5
zm>IgJyQAK-!IKLUu0DW3!_5eFXMxW3oNT!d@*Fo%VO|*2O9DTSN#7R)a1S8fvCm}E
z62Po<DqF-6h0klDO`yNkpu^8ak>zwH-}x{>o09qfMHrgsd$y-PO&C1l)Y8WBZfAyM
zKA+ZbfJhzJLJu~Sop`#>ljfU?Em%FIz5S<GcmoM%8RR;H&-+D9!!@Gn9!r7h=>EvP
z)t--yi))3B#+w~&(^#qlCVAL)5Wa2>#T;q73loG0d3Z#pyw9&xN^nSgc-X<g-+pM>
z5R4|`^HW*vI5__902jYE+`mW06rE$c3g?dnrb$?ngP7vRUf<4POIx+E7P_!(&MTLs
z1FNm(Nq->bj{(EUYGXH-^EL0-Z=}Oiho%5ADW9I~;_`@AO8+xUILMFz*uzL0Mn~fp
z7GEW4&(GHb9yim+vj=?5Zp;43#F<|ze~B0arOs9G>BFtTg_VzKC3_Swzb+@IzWC4Y
zEO@D<OWN397MSzAf<i3we3HBgi1`DjFFen*5DAPgK(znB$0)wNU2cx|3#p-_kH(z+
zNZedLu6%#AM#@CPjV4r$jZfn7@-<d_V<rQ%?u>Rgz%3#1M0F$MTFlBE6%}H|c0!u!
z3cC&WsA#)hL@{#Umf7C%7d|L5sL&W9Ot{<U_896CX<SUvQg!@KEoJt{QpWozm5B*I
zpBXc*q_oKz%SJshb%2a7gE2CXD4xpim3~d@^Qc};cav9>zErp8{dBGn*tlW9u_72_
z@}GGhLpaxmmTOQ9@jP50oKatEnOK3g5J0e4yxzj1OE~0146EwY{Dd5m43uc9Y+(&)
zc*N@rA8DKHVi5(Hqm4oWMu?c&A#!pwU&q8{mNBcTmZHr6ys8^6^5ap0U^MocgZgaI
zOp@$6UL$|(f|Yo@lP6Fn1OVW1cju<0oQOLHaiYI@W^}T^1*Rx}*DFLmk#OdSe?b~q
zZeH~jYY?P+Td@_WRrgU)2sl5VBBH0N7+YvyJRsc<3CX8YV^RlC=M#`|#@w!&fc+e?
z_3EG@_o7IKuDmht$q)qyf*Q}}UD|JTvu9w`70A#eJw!xs(xeBZ=acYMudgEcylh=9
zje2YJA0CZqd1O3MrEpWa8@lI{!+t1%h`{jw=dk4(sldAj-84q~#kBn&gkV6kr}Iv*
zEEv??@`vtn@)J))OwF+#<-+zs7nbd+mR%b&)lq+7ZS~ASbJSYy__M5=X@XN0+S_4T
zMf+hMG7@?4j)4dGT(7V1OIiaomP;al1`t=NGWMfkBBGo-<dNc+-<kPriaVyOiW<h3
zna}|q2KzT3%&mop!B{>xE+uG4yD@Q%;7*t*U}UST<%(6}RbK=o=orPZuYQgQ0tAC0
zVYs-+etGoWw!~(2BWms&0m;aYekmbQW#01!LoW1^8O#{YPs4sdW6g;`PfWBIaUftj
z5|)|^hcerf>&$O@dtL97OktLdnb|?A&{>72FtfQvrAH?|ruy@47jN5_a9=0fSos=Y
zx8GCGJ7;oaW5D=4I~tydBdL{?GnrGyns{8{VboW_TteY%4Y#_~n6LCaL!#y>RM4pt
zZjMf5+h^Tfwej?%fGF){M@h`jF90`7q;$!Yr>}EmeRD_PPM5+5M5Hc-n~ybX4o@5}
zDRtNzjj0^(Hi6JDyqeBipL+l#x|#tSBm_<p8bvx{01`qB0dOQ<;2KF308Sc=Lb49L
zpUhRG+QJ(*#N3%RUhqm%AS6>#dc2;jX#BiR>(8?C=nO-)l|QOtsKhZV$QJ?-?JX#@
zZTh~@GPoPZlPmtnu@UjSszk!Q_8gfiurkLWDCC{r{1I^EuZRP*J5hIBHTr6G@&lY0
z{H@YKcORoTsD;SM*>6^vd@zNVe?R9_o4sQG{`(*0fLbWOZ&rC}&s^Jo&J7TvzAH>w
z{y=ZtE8XGlJr909{-P=Sif%}d92izR>^`%}A9>e@W^yEK#SM7*xG6SURdGeF<q`2z
zjWPYlf3bD+kh%rnyUNk|eqOJEVE)fN?qCk^So7=xz_;~H4<b&j{(@OXoQnUD1zjB_
z0eC#@nqALA?yoK|5cPe2S5;~+V<TdV$D<59qx}k0jac1%7$llkm<4<?1BoOZZClT-
zswqeR`QxydN_J^)?`C>;_zUfB6e3h0C{|Aw^jRe&Nnk#Fecukhuoj5J^mAfin=djr
zJ50kP9{yehZUBM-gJJK&4SS^SQ^mvP9^Ajd9TE$Bx5jB~JYH6!X{u6$0FZ>><K-Ra
zGSarAD0IO9dj8jgS)b;WvD%%V(eyr<P?|}@TMv$sCi#<u0nzYJ3OVNU?j^qnLju1b
zL3CwT^Y#DIIdkSzm-vIhgSKlLF2V4xP85-d2MGNPC#R&e(BYn~H8fyP#ISCANCbfd
z2~k+5YP~yD_TvpvAwCjw)Qb`Vgau7D`tWZKW|_tvf><l8BzXSJWypm8m)cwc@<RFb
zjxgLQveB3w>l)q&$0B@j;LAEYdT~S&kQe>e&6E+yD1b{?uc|kLFpPsZWduR=>g#Sy
z3oYb_#qzR9KjXBA7BDov$Ez&we2BiWu$CrY80!R8>V{{=K9K-!19>TbeK}sO0aAkL
zbac`}PZ@R;gmwCzpP(Te0uc>Uu6oh{JCSgj{WR5E2ptPe#)g1*L3O#4JJO!XnbRVl
z-RYp2ud*Ma+!g<bWur+qOQZ3=?-j6>8Iv8VvMjDM7~1#jo$v7=E7(6wU8Zr6T7|B5
zHr`!z2p?<o%K#pOq#b+u!Swmi=fZlO)Zr4{#A44yy(N+89QMw5N#bUo7?2%2zSYPD
zl7>gpCyTJ0T5I(iEJ1B5>R_GqA8Fb^Z3429`MZ2Aj^=dCMa5wS0#yn6Dah4!20em<
zbPaj$daXTW6IaHfn3cDbr|t9{y$F-~sEZ=#>Hw~rdDZV;JG9dsT#JH8Rv5&SMm{|?
zY&$bssC@5Uxu6nW^*q8+?8PZ#=Q+YGfyXjAya~J-f$^6QCXN0WC#b#~p$;$*?<TH<
zVpRVXwv?6RrQw$kN6CO?7<kLDkR=LDPh6smgbHW!qeiwKR6fp$!IoT~utD0@#DQbh
zb5TfST|9YmR|IUAsbj+dqr;I7(3Dlr2kR$ZH^{E0l!nLh$<q~h!vm=_Qmc})<%l+k
z3-=Q|7n9mh_pyqTaEv6~f^ctTi|ecEJb|@6asWj<e1VNfKrR;i2kI<>Io-bJnBGXO
z^Pf-lieL4y(Cdj<U2A!Dd1%D0BwxD+cHQmNfVSog4{vm|uG5rpJ`ZQo+1kTNJ^oWo
z+k@D|bI)^eF#s9+H%r!><JB?Vpb=DicPRct)a?j8dnpPxw2u#|iUdSjWtqL{IXMt<
zJ?GQgWo};jidK5?8vgSJ!u|q7U#4UsoyKEy#+wmO`NY4ZPhXQPW$o*sLMsuZDw?&K
zTZ`|-GG?gKQ>|#F)=U6z+4;;N?2nn65NKkO_dDZ<IIw5}uiGDi!{s?0jd-e?Jt(^i
zLJTpNev$f|?mzHk?(Q+h0;M`wJ{a8~t=p4HPdo6VH~_X`1GZgUv<_4S`4Keg1<hUw
zc2%}i0~x}5MbY}okSj#l*0|w|+%S|gSeFKR+QY0XKWG5*<t$7>^X32?P2yZJQ*tM=
znUFNS-OTQCjm+{i{*pY5o^q1L1ZJ0Ia{p7Lwz5ICthQ0bwWyAVeJN_7aV;;4X3Kdq
z9`1x1anUrEAv~~s7?`rzi%Yu?Z@$;%Yb#got9N}GxfGJJxtvRY*u+of@ZH8<RroBJ
zNrJwF1&)k9MV^N@6<s}JIM{7rtdRE2Re%K-UjcD4!48XwbY#c|fw95AaW<O@0di;_
zo~+Pn!oHWn+Y{r9L@jhtS_lsmX48?rzNp5m)+bQ9799K(k;N&WN4wAv2GGa;g+M6&
z1p<&s()819K8ecN|Ehi6(j^<tv<s=_AK>_Kkk;3k9SB$5-|F$D+{EeKsrS+ROp7zr
zom#y{B2(JjX?q{@c`>^<nbfvaUnd{H6DDRm6%WxeWP0-nB8t7(fo5@|aDJ{fZ>u|K
zZdqYf=bKtn_yGc$&@3#^me@9_iXEo=TfhIq-;;umFiMNU;}WsoU+;-zOxBn<N2>~+
z4&Dh>c03g}AhAIfq@<@O+rn1rnKL3ENFrr3ibP0}be0maOVaTso~q?btcQCUWkI?_
zPq9&rU~OiL_0_tZB(6Vf+q*hhKSUwUK@<yvR)taLV~J>FsYctIvo?PA6K|1#&KliM
z$pBAhoyTf5M<(d?<)&&W9G8hz6>hMZKHCD%7TFrYG%*`&qt2e}_I3<v1O*?VSa~s{
zJ5#OQIG!eNEuk9SA;u3^simOT^yE!p+)eq;uVVGk)UjKqc7BC6savWsVEJZ`;Z8)~
zNKl4jWDEaVI{mvQk87b`{4?3n*M)L>H$*>y*ZuSHIl8i99jE=D)OV)C)VVb|ndqbl
zcw_i@R%ba0g07SCh07`UfHL7ZMsY6ACoA#z(WnKWd)KVq14GRs4*==;WZ=7ocP1NW
zHDAQYa~jg6qqq5497WOE;_P466J$?QOMD^Lc+gOxD0wg-Xix_Sixq~dgFex}uAUqu
zWi_?dSr)47hOn{s-Nr&(u~&y832E%T#HTrZ48w#OiZJ!+#rn~y@$FGqU+;wF$g@<J
zC;E-!BBju-y@^fucFKu=M=QAcGzP~<c^>wZs}>SQP+A}BxC@-i>QS8%lu@*xpn*rm
zaSr1y##U$g?e(m|3x5r=z_UBM5;F&6=hr|wReW)E^`9%On9RVXOO<wHTe;#3C|NCW
zqYmqgXzg$QoN`ErRgEgDz>gdoZ1O->(E{rY+@BmxP6z8|t;yOjGPv1my#@qpTbWp9
z=Ef8i*jBENQvA4ot!!xpDvj-#KEdE78QG!h<Tl0RB=y5e8FA&`90u3M*pK1${9aK~
z8Y~8THTB+Yo6(Q?JmDq?wiVKv&Vxn^nsraoI3EhG`T1^D7KAK!&*XXS=+%+tj!QZ5
z2vkv9qnaJ9$<q1moGDf<e@C-%K79#5qY#b|?X!Zn#y4@WHeq+`^m#iuPv3l-BVVDH
zb4}%7f9xroi==N<^K+8fn8O(A%k=*ME0!sJnsQ52_^D9LhhSYW;3_6Vlzpk0tKS&2
zSwW^Y@z}Xmi6a_shd@FEq3y5By6>pZFll*<I0osDH5nj5RLfLrxpctgCRC8>_zb&}
z<tq15!a@xby~hyR+uHmwuTKYheB0}hVvRRx;`>P{DOG-c=Xr2oW}ISpKd%-#1A=d6
z*52|8O#xT&%%?2eK&8gl-rF2K<ge%EMN}<M+2baR=`T=3rE&X-oQEUa)!Er6UoR=)
zS=tvH%ec}+Wd<1I`N^&Q{OC3qp$#wU;ZzkbEfaYS<`-AuH`5O-DIo!Zr?*T!VYLb=
zX`ljhMAPjt<kIxETtkM>J!X1!J{q@)d)0i_uoXx7XH%A*SoL-ya;T=P?vnZwQ}gST
zHN4UpL>;)!^yPG!j!4Mv*1t#lsrO`F_5gMm>Y=s|YLu){!)L!d0%f^A%Q+}5-G*05
zGO-b@w+{#4gQAT}N&$ha23JP(bRlk^KK=yD<dghE;{t1>h_v5M@GJB&UWq4fJfdPd
zF*ua7we{x?)>VCQor2MGAd6xs&*H&-+Mk${y6w(^g;q$sC;`1uD+4e3#)pZl0_JT9
zc|fAMzTRXyS^{eGZlE9UoI<>bIm*U7jloy4Li6Kql67_eJ^k#dU$vX$1;MF@@vYR8
zl^mR;0=Upm>V8xoO=oN1R2>~S47KV`LCCz_3DfSC`U<C0Av0Mjumk>nWL+hwDpD<;
zK)oI?m&1)OH8CD4Pg6iV{H@jPxhVz(g!*QwsZWu=u@RTQ0Zz&fOvT$xFW&46Q0@Y5
z&+YMg$v*6W!AipY!}xCEwZvC~ApSh6Q0Hnb)36|eX^()b*TYZVT}!2AS{I(=eouWA
z9`zS73jOE|{XwtajqFpa4BZp;#uCD`eSX8ud!)%H;Qf9m-J^5wU!i?ShHTBdj56_#
zHXQa>@;#EzrVsCs&t^uoyO7ChQ-edCMC(O*hk7fZQ`-t95YdFSb5Lh5=FO+jh*BwJ
zw-ffLHQWOV;fV<;n6CkW$R+3vw~})rcU|3aD=F)0R!4~W&;Q9Eb@__wfIznF8pb7E
zhZyQ`^9dMx;9Q@Jb$K14KiFUs*psyka{aE3{53|^M5I{W^I0%8FkhU)9l@BWhE6CV
z9cZmDxSFi?mZWp6C~_`zeYj8~XJp6xgAG7Sq#AY|6kGT2KjEZJFh|AK+$eknp4UKY
z{(9glXG(<hV-G{jpUsdE4IZMQ51V-2I_Ll4*@F71&F&misUxc%IdF>LeX@CS4R~{m
zj&w)cMd@DIms_e3mV1Vyb)mrw<`NOkr>s2{21R}RQdYhe4IsT`RPP}nBA-;>6U?DH
zRBD>r#$6WV>uIN-z!1)ruNtN#2b~1_5kjL?70qUf9vO$Ng>+2#-lZH5rjoV&W5$n;
zBtW`5oLA%-P+JRt!-Lk3C~)yB!>g2rs)k-l+lSYP*x~)z?1j6h1cp<NM)@EuAV=kI
z|NEVjGz>X$eYeGr{|Zx$a<%xwU!br>n=jo0UfLXfmgEl^`Aw|&8yzy9U0m&@uSE5{
zfVT^q&m4IZ1O;^YdR_=;<o4A#%65wH)R}OV2i|U^x4pM#flu#N{)K*cfu|2K%wvQn
zeoHDPloC#U{ET@jP}SmwI!I0LYL5+i7rvi%)rsS&hzX{5ZSp{-3LTS@KgsR|*@(P2
z;yXVl(?;$D@{@UO2au)xcN6T>#0~&kgE^Ac<-52RKYDhOo2knp($XOh&U2%3Vt$=5
z*<=D>ryz(udY|DWtAv1mmo-t#m3-c;*LGS;=kA|5b7Ia@TpwAC?QW4WIe(4wVMHt^
z?MuNYfDpX+O>+}#Wa_PEdvBGeIe4rJl>e3Hd=6AS4Y1nquxi;*C&}bW9H@1WzL!2@
zp_^hgj1Ua0MJ8{%(f(z2*9s%5#R!u%VuZSM=fUJja1)ev$Ge$t67OW=o{x6DO$Yx8
zGmqIPsu8>WxzR-iO8&8Y;r=-F-yN(+!|L(w^7W;ELgLjg5)PPkQpOW;b2)h0nvO7g
zS*U!EFmeSjc)S9)psmU;xPZIJr4!{kLC8GL1M`6klG7DdOTX|1AR5M)IZ=BXl9GkR
z%;i$ZiUc8bM53~j7!Ce8=Bft+c<uRI3(<*r@C0(;AOMjfx$7+7|8(T#12o5|9yTU>
zd^DMp^yO*qDG^o=|9p%O4m7*-qGzuU#R%1!<@IteF3+d6IEy|&emq48`-wnr%7W)~
zGl1Z~GA&$X<|EiLJEYFQr#;RvU%yeK!<b*YpMn?Q`^0Qx=L;q891Eg45wQjGqz2c=
z_0{O02zJFLDj!0&AwUY<RR*%Y3vJ(7@2+Ha7}$@U^}ih6l{jKvL@&S+vxXUjAoZ<Y
z`dE|Mk<B0U3wgTyHy?^4j_aayZCL-sYKl8?j~7(gm8!xWZKSqZLI9sWL94{I3YS6S
zThnH)ijG|T4+3`E7Gc18DFEKKP_u=mH3-?Ih5%A)lgH5R%W@`qVObzdBRjw)IJ9r(
zk~}E^qMNtIIvwVx1mIUVHM4YuUj6OWCY`f*WE*_-x^?Sb^_VkS|0EiQyLqm=Lv%ru
z{hLOkjRU%1S;Q7R7pKDN!zG*@JeLgQF#U{25Ahh>^_jZ$&3}*#*iOiwB$J)LK=L45
z!CBQ$m#*s67i|Q=4P>n9$!fJbyBt?$u|R#aoVxpDp}!ifgSU<hA*$`D38lWe;1gQA
zZT0pkfz1vM1R^NRok4{EUV+)2uFmWM<{+NEqeHf-3sKdYmk0q`FiH-y5YIigg^X!w
zxh77Z0l_+I;Q;%q>mU4dIdwQhrx{cOxVm`zq-_h2)#+;tbj(diGIxBmc9NHHH9)+&
zsO*POfy5$Kv?B+cUiS)_?4cCZ(h5}hA=)~Qa_f%JgzT*Lw`U6FzS2~Un5(RAnvwdn
z$nY8Dd(gu(<2Ph^I23y2&2^ZIw5r-bG_187!80|sK%<3b%9NYbI>%MJa$4mEAg8Qx
z>4l99Kg*H{zSu}-24}GBF$&*4GC!N%-L*`>ZnsgnS<JC;2+tje_}@pw!{cE1HOG(h
zB_u(8yy=E%9Yj?cdP91aF2<Iq<z}@&s6_*E<S}ST>M-^M$l-b>8}k;pOG|7-Tt`=q
zNgMgyq`=%Mr<P%c#daO?GM|nG5q0K0O~C476~%wA_+ktYc9HhWJG2|>!M>G}ioT7#
z@N(pstuc|if=GRMEyYWjL<q8RNhNuIRGhR!`?W{Daj^Jyr^(u1Ys-DVoVi^hx-vJI
z_|B{}+Eqsi0G+nOUMfqiQ-iTtL2$qw)M=g&a=~QCf3dBz1WCeeFr#k+eOukW+5iAF
zj{kQ@!0(ag+iH3>kmg9W@s#yhFbG&7A+BoqMUSPhUls3jgxc9BKYX4bB5^U+Skk7X
z#0-zNj9TwrKk<(rXMe!4q*Oh*OBE)epVZQ=q<|N3w~SP=<<o9TDzb<XSGEe)d?z>C
zM$i7lU)asS3H#W1#)l>QI$OQq`}jss)lpE0e;B}ci}XK^HNx-4ILZFI*KeDA`CXU}
zlelaPt|T-axkTXY^kr^xpRSQYSVkkqVp*={{~hfWev4{Twk(hb3e~FaWs0R{$U*RS
zwr5S6xJ6oz=hGM4lbX571_|huU1^-9Dm@`V2`*n^v^Ro=1mSRhz;OxBof?R0HSl2l
zQ=gtL)HSZ<-i;5)LB$p|VO!{;x=^kv&Pe0R@J_fuOHA76ysJkD<dco(z07Z-N&a_@
zW>o4{c5{f-vv{>8fq$$@<ywpm3p+q#LxU+c54V;p)h2Ec7GXZH3HE3ol(HCa4h){C
z3f2&u5AI0a6rtZeV&ml~AwSXtn-o##+Zn?V`ma}%k6`MFX+-j`BTFCfOiNB;Mv`Uc
zM#aw3Af8_?SX=^rSr`+8zby#u?VKUq<2Wjf7Tn;*T+ivq(vInFx|hX#NceUe!;h=#
zJT=Kni9a^y74Khaqd|2h0b)hQ_D`jhrlcIT^)P6Z$qRG&CZsy$((MK^=0ddt{ji7M
zBQMm@q)OiZ=Ny9T1^HilcP_c^D*Gvm`Q^a%V`p)}kDB;l)z}}CL})k7r)g`9^-u)=
z+V&R|-QZO2gNJ|gEW%U&K53`#>CHBUufe0BHqn?uWeyXY;c=b1<!}>oQIYi$f54XM
z84np9L#vUdbaXttE7L(Gs_Ps(KPZf_L+7G^deBHo++S!;J@v>UE7ajG7R)r8QZ4Cy
z5+=A`bA<)E#a0np^x-89Q~5?bWM*#ftff}C68D@5B7a5%;%&4fBa|;&8+5Co>TFK+
zu78`k`KoJ5*O(jEN+vjTvO1_n5aUEXoy{lI5VMz8ZgkL?SL4(|7ETFO>Xl1mL^^6H
zA@^3p>lUIQfI>5(rP5!6JLy0xNm{-Ui5>^|t2KraS;H*nQMZ;*pIK;mmj)x#gEFS<
zQX9=?n)4J(!6tG!C=x2Ed~q+Nh1j$YDu)(={Wc8vDck-wL=FIfR7Ii3#Vep>?j@Yh
zPy{Q0u5w72--{A*GtvwsMVA<sCgE%XF*Bpx5xnVD6Uwrj3~d61ma^4KWcq+qgfy2}
zQV7$fBu*H3M_^1b1cR@TlWzE=V>#P#IY8h9g71c){&vH{LmQVg8J~sru}4bTMOino
z-cepG`f<Sr%b31g51cmNmHu5YJjsuyL$fM9y{kvW`-B-4rPZ1jU&i7NLzZ*`l#bNM
z6OT>Fu1V3PTddlMy1LyiuUVVOs;$|S%?tc8!d@zsc`8|{RKdYk0|O`AE4A?a{#8`8
zNrh@S@$l!V^Q<uN12&{vSAN4LJ;o^f`PxIH&z|`(zX6Myz6+F8Imth2zX&c7K$_CO
zzyN?Ah&-UxE9%MgdRhWio?NE>+VvwSPId9`_D7`@8ByrxRV9kAA?)MACB-8@V|4Ca
znudFgsu|4qyDLyVPolL}KEF<bhm6&<re@{b@6-*Hju<ip4MfJ3xrfQqc8s9L8`7=<
zlk_;%r^Nu2C;!u!KSC9cQ3hgkAO)@)zAjliN^<WnL^-wF(;^874T*E&(P|B|%<f0Z
z90cHy&oiM=HLiI8?dp1j94{&;zn?W^cSE4?$=MMLx??!Xn5}<*K~<6Wd~>5HLdNro
z>hkt)Z(VK-J!<g+(W}(~f9wVy6&f}G=6+HkUFT4n^|m|0-&EUQ86P*MV{y`H5${j0
z7uAnf@r;StL*X~fH&9>FSiF2<bYU0j&E8N*K$L6*qSdC%R2dNL#gn|BidW~7t@bQf
zJPH<!VaxsdPLP)*PoV;Vc-+9*u+d2@ho=p-NLW(VgdK-r8_N^e`x6COs7~Dr)i8)&
z*ZmZn%W1^;RGuF19bja{D{bS?UfDP&uH<-j{oOuI48DvJQS#`ymK)n{sz0L>e3$#}
zB7rM%JsF(ubtP-I#~T|Y0ugc06uiDq7@p2oYPd!I@q45uEjs4io__`x3GZK;YLL=W
zR8!po1y-jGjMVA9gfE7~T<yOb{uC4nN$%UkIHHxdgfG|XYh|BGeR+n7(f;$lxN?=H
zJFGimoGc;)&CRO(6;38Sh}`Wp1frwWs*4gSlGXO}wopyarJkI>u(1MTM6|oPdkyov
zes5}w5}70_d?^7p+M=u051%Hw{;LdsM`33Ft2j(#lAwX~d=?E?heu_i=-OgevhW{1
zLp@HVKmT0;z8aFxdm`?t2(bIX91E`-B=IjnuL_qPduDE_&i#<P7i>vNzHbc=YOv3l
z)|Rctw~8k-Mk)pN+p^93R<Ts)YUo4hxL%y#%%?K2#VZs)gy#Lci2jDo&J9R(zNu^$
zA;un;N}=+}^7;0!AFqwD&9;i0K0F(+A38PuY<0T2*Hkw`AQPg|Q(U*${IscJJ)A4A
zrCs$f+#cR*^oO4JEP|Ef!D(q$%Rs8xTQ;7oa`?^JY_ikq@;a;L{C+oqX6tFIFf;4>
z*CZ=KTUC8op^Obs<6dDL+*$E3T7*3+jXfJDP+lrrB(=dQvuH^3aOmaK*qdUaJa4Y&
z`k&Ckb`b=%<F;*PW?|k+t@@8|3?K^D_jsnOZ(BfvUgZ@%8kbuTsHRI=s)CkX-AQ?v
zw*?ZFs*KN5<#>>__YL&I=k?4QJ$tO7wQ8$|H;~h~iWJA^u0T~d8vpc3-Puc6W<(Zj
zcLju()J&Zm&VQETN)oXzOW1dn<jyp>He-zGd#O<&<@*m-3~&PjWR^rk>Ng_P>j^>6
zI~9(<yD9r2U-yDH9g?ZhUO#D4`Tycs_4C|oYGVhiiKf?8c?u_FSErpZ9r&nm3kiY9
zTTogx_)5@Xgb>oDvLi@x6@GK4m4E|aR&-C&Fmg=I=8MxY#N6<dkd$r>Uhuk2#uh3X
zC!DV$q*K~E9Yw`xs%4~@{Jlh9R?H8U(w}BiOx09TWWNN-t~W$h*i*V<4K?&j$(bgE
z!{e$nvtvK5=d8C2!K!d6ct1n%M=|sN9pog{m`{M9Z8oc@iY|y>y6rT~m1I^`o58KS
zD}LFj$B*4;yeZ_uMmrL3f)g6vlWy5*=-_Y=k)?w(G_Mp4oHK+6+qOAA9*=v)nEM{7
z*s7Q5<ki)qo%qhOnY0vIO_KM_Dr#4qm^^B-`PB2)chV?P2f}Up1>4)5<yQEKizA~I
zYd2Z(vA@u)0OkAc4-Z`IrvD11;ws20987$}pN`JSbevmfwZ|GpW3)5$g@S-RIhf@X
zN&LqK`tkBUHD7mCMc=Gt=J&`iJwcNh2Z`WH8a69%6b(G@`*whvOgqij*&MBNi#^-Y
zSZXoEmoFb}u7Pjk*1>Gn`t>nMT;^Lisnse<)Q0f>s4~><N9X?)KI2R)HLVKsX%&@M
z>9=)u*o#ieBDbW|*BeLL_yBO@As50!v%?7^L$^gh?jJ?i<jlLYojw4u2|=2n%Tai7
zbNNrA{CK#X$##+LJvH{C<IySCAIM~ud%0l1l1&!fZXe`*<mkX{ppZIbXC%o#uv>WU
zIf^Nr>nf~MKk1(LE+CJ4@|TG1H%g*t*G+r&M^6?t3;gd24}DLrg>4eD%#=gvFk+hQ
zQ8~{uHN-MTZz7aLuSTb(U%$j${$y`mk05S&SMl0te8@VSOZ8w;fJ42o*kK<}z@x@?
zV@&;L!E7CKjOp#RP@MklKE(aR==8^2<YEOGEqG)r?#X5mdTeFja5QIahuOA(-tEAP
zmXHWEt4;BT=L(C|zjjK*SEQ}PmzYqbu68ltxTBy|SLwG1&z3pta4a(=GV~rDO1&fY
zQ`sEB5(@PX5?F0yXc@fWp2R$Na^0!okHtHF{?^K@f^j>YQ+i?tqIa0V;}tSnSQvqV
zu(vz4(--zvn#)M%$lrtMN&Ndm1>=em)U6wbyI}s!Zr6fq_Q00?$Fj0UlOEgoiI5&K
zS*o#!F56`;2w4%*z-P$)0n3?Ao}zqnfDaayl0jueT<l^iDgSuBF;lz-!Nzy0J~2^~
zHmk7v-sfoHzi^QBGb+u-G#CzRM;eZ7{2tf9?AFStcf{MGs21IGwZVxa==8vfZ2OZU
z2wmq|KQbN_wkbBYy0x{2F#2?lTJ~(Uyzg|cmgTrwUEhFG8Pz<n4@sW0U`e@bCL8;9
z+Cn3?;Pt&pE$L5AuMA*E?ls@pvdCAqKXu7Hpms~L!|hjp`^Dld-e!H)SpZG_JdHUn
zX*-EU{zP$u=*uWuJtEYLK$Y@!yVipY&L7J&^HDh8-?d<)a&sz8?)6?Y?1<GoJ3*dm
z`+O#K=KHZ#o-45>o-+JdhzaQjadprLI7Y5eKG_`M)nl&>Qb_L9p_TPkIbhfRDfNA|
zrq8yFJ|$i=Q~hV=1oVE1nKJSE_JyC|ZZGhycJ(7Gi$0?Y%4CN}%Em*mZuQ18(wv!-
zmJC;twVw`GPhM>Flyhh&MKpcBM24S~t@dSq!24|rYvA|R)teS7$=Wt&Bo>%5RX23?
zsaxUzS*)h>a_63R3X%~KbD-CS!G+td!oqq_-F7sQbST%`bvm^Tj03U@Wz=`KM8w4r
zQOYVUuN3va7HYvVWPiX#%Hi>kTYFVKYTaq^h2DGf?C;ecb9xq$3+L&cG>CX`f-Fp3
z4k5Odh5(33%`WW=7JATzAxVZ9gXT~R{Y8P~_=^*x;Pw+DwXBPeD5Bwvgc<3u#i1}H
zJi_e~3?m}WOkpY)XNh|KUR8u3H0%x&Li|-EO0=L9+|_dPf#cG40zP3@R(At59d&7W
ze)WX8;x=<}t;`sl`ZMbbdfh?8=Ht$m$@GU!I9X3bs<rM!lwg#(ZixTB!kd_hNg~-E
z&Rpz!zzP}))KLQ@{w5|}^Lbu#al5LM^jct!EkwZ93bZS=TQKB(M#}?dH()!wpZ=|l
z##v0cX3@;%{n};Mj>qWrt2GDCN00H~dW}CvgnU6((3@IV+v4*JyW5TNQ}-|qLh@~$
z+v@T%@DCLXz=AE;s|6L|jmECj+ipnLZ|iSzsI@FZ-uM>H_W{M5Gx)#$fY1@L$`BGO
zJLhx5Sl_^FGNz9<igt80S_SJvhGw_xv>XQtRMgTCy}p9AZG+lvP+`mS3%Q{GW2&0&
z^BDPOce30>i?M9K&^i5&)Rq#|!9ywurt$LzUDiC{myDX8-8%EkbbJ<DS>6VCk_)Nr
zH`U%IRE5d&POZb&pAEAI?n3q$T^`+!moqy|1ug~w3X(0)QN3S_c~@(c4p{eJv;%tD
zZ?;QUn`QHp(q_q=`Q|Q`RnfUmrPK={n+@_kNj}1D6vGk)?x&ww+&_?G*+lLI=g-&2
zVxBnd{Q;6o*eDbC>;aN0b4hXd`(>r8RjI!|i|V#h@QV5rG9M>P@2ypgjd-hF;-H=_
zQ0B3(zL!*o^z<vX%YI?>V~GaL{pvxXbVP3vkK@cmgQ)I{Kq1Ue&-Dk9>mnd7zdUpx
zDPHfkMt(cSI5lB;QN5MZ5NXlyy5%eQXb`=Q8F*g(n$B6Sy`y^mYEv`s!V5PrlwtVz
z`%HKF!n`7?{dkUxA{F>w#Py8c(|n_Stv6X<VETpEwA$||N=-%$chlwcPJ`0xQ$Lj3
z8xGgJmz{s3)dUtaI?~O@n^&zq3f}Qk#?13-d667S*i8uOo_Y=Kp2hJcy-ub2Qo3QD
zKbsu|!ONW)a*&zKZ$9wZSO?$tkBa7W{p(_6@2Rf%?P{5fw^Bc|Eo)w*It$;S?zL+w
z7LbzM5(^350R*?JpH4RGQ{I+M4?G%;a2p8dmqHI7)|#=3Mphend3JC2#`BdbFFzha
z?jV@HVl6m%@`p*|ru)yY!}G;G|7)@*(q{AdieBc`4O>&w*Vi;w>yq@3PZf0Z_tnKL
zHVqSPb@{Y<Xmq^dR_qW$K7=msSo<|;y7$sjQwxnso+HL@ZEhFiC1&=U0udQ8+46fz
zm$oqwH1fG7Hk!0XUydv7iXZFgimP(3r-)cJ27H-OPy}qs$;u%qYimlo5_>)4ePlw}
zlAMCxm1wI<R;wb2zl+KIIM_#wj-XfE3E4yIYL{|@lK~RCyf84<5%bECk!o?%%1-ws
z_*fLA<jiio;fM{EAatAQ_!ef$*DbzEu<0)+_XC`GwjZgb7hjE~xR3~@{bm`mxLm{C
zZy7Kn!O}(t<ODj)Tx0++c+NhDFmS^h81~&F$Y20GBXs{y5R|e1r@INBv7hkg;eUsA
z2Scr|z;O%%8bSYmqWv4(@P}@L{GW#Q!hleD>T)G^QYeW(H*W%@#N<WmgbjoK2j__~
ArT_o{

literal 0
HcmV?d00001

diff --git a/lib/ulib/templates/apacheconfig/RewriteRules/update.sh b/lib/ulib/templates/apacheconfig/RewriteRules/update.sh
index 03f8c10..30f374e 100755
--- a/lib/ulib/templates/apacheconfig/RewriteRules/update.sh
+++ b/lib/ulib/templates/apacheconfig/RewriteRules/update.sh
@@ -1,10 +1,6 @@
 #!/bin/bash
 # -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
-
-source /etc/ulib &&
-urequire DEFAULTS ||
-exit 1
-OENC="$UTF8"
+source /etc/ulibauto || exit 1
 
 PRIHOST=
 PUBHOST=
diff --git a/lib/ulib/templates/apacheconfig/confs.conf b/lib/ulib/templates/apacheconfig/confs.conf
deleted file mode 100644
index e69de29..0000000
diff --git a/lib/ulib/templates/apacheconfig/modules/ssl.conf b/lib/ulib/templates/apacheconfig/modules/ssl.conf
index e69de29..f96fe64 100644
--- a/lib/ulib/templates/apacheconfig/modules/ssl.conf
+++ b/lib/ulib/templates/apacheconfig/modules/ssl.conf
@@ -0,0 +1,103 @@
+<IfModule mod_ssl.c>
+    # cf https://wiki.mozilla.org/Security/Server_Side_TLS
+    <IfDefine SSL_CONFIG_MODERN>
+        # modern configuration not supported. same as SSL_CONFIG_INTERMEDIATE below
+        SSLProtocol all -SSLv2 -SSLv3
+        SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+        SSLHonorCipherOrder on
+    </IfDefine>
+    <IfDefine !SSL_CONFIG_MODERN>
+        <IfDefine SSL_CONFIG_INTERMEDIATE>
+            # intermediate configuration, tweak to your needs
+            SSLProtocol all -SSLv2 -SSLv3
+            SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
+            SSLHonorCipherOrder on
+            SSLCompression off
+            SSLSessionTickets off
+        </IfDefine>
+        <IfDefine !SSL_CONFIG_INTERMEDIATE>
+            <IfDefine SSL_CONFIG_OLD>
+                # old configuration, tweak to your needs
+                SSLProtocol all -SSLv2
+                SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:SEED:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!RSAPSK:!aDH:!aECDH:!EDH-DSS-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!SRP
+                SSLHonorCipherOrder on
+                SSLCompression off
+                SSLSessionTickets off
+            </IfDefine>
+            <IfDefine !SSL_CONFIG_OLD>
+                # default debian configuration
+
+                #   SSL Cipher Suite:
+                #   List the ciphers that the client is permitted to negotiate.
+                #   See the mod_ssl documentation for a complete list.
+                #   enable only secure ciphers:
+                SSLCipherSuite HIGH:MEDIUM:!ADH
+                #   Use this instead if you want to allow cipher upgrades via SGC facility.
+                #   In this case you also have to use something like
+                #        SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128
+                #   see http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html.en#upgradeenc
+                #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
+
+                # enable only secure protocols: SSLv3 and TLSv1, but not SSLv2
+                SSLProtocol all -SSLv2
+            </IfDefine>
+        </IfDefine>
+    </IfDefine>
+
+#
+# Pseudo Random Number Generator (PRNG):
+# Configure one or more sources to seed the PRNG of the SSL library.
+# The seed data should be of good random quality.
+# WARNING! On some platforms /dev/random blocks if not enough entropy
+# is available. This means you then cannot use the /dev/random device
+# because it would lead to very long connection times (as long as
+# it requires to make more entropy available). But usually those
+# platforms additionally provide a /dev/urandom device which doesn't
+# block. So, if available, use this one instead. Read the mod_ssl User
+# Manual for more details.
+#
+SSLRandomSeed startup builtin
+SSLRandomSeed startup file:/dev/urandom 512
+SSLRandomSeed connect builtin
+SSLRandomSeed connect file:/dev/urandom 512
+
+##
+##  SSL Global Context
+##
+##  All SSL configuration in this context applies both to
+##  the main server and all SSL-enabled virtual hosts.
+##
+
+#
+#   Some MIME-types for downloading Certificates and CRLs
+#
+AddType application/x-x509-ca-cert .crt
+AddType application/x-pkcs7-crl    .crl
+
+#   Pass Phrase Dialog:
+#   Configure the pass phrase gathering process.
+#   The filtering dialog program (`builtin' is a internal
+#   terminal dialog) has to provide the pass phrase on stdout.
+SSLPassPhraseDialog  builtin
+
+#   Inter-Process Session Cache:
+#   Configure the SSL Session Cache: First the mechanism
+#   to use and second the expiring timeout (in seconds).
+#   (The mechanism dbm has known memory leaks and should not be used).
+#SSLSessionCache         dbm:${APACHE_RUN_DIR}/ssl_scache
+SSLSessionCache        shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
+SSLSessionCacheTimeout  300
+
+#   Semaphore:
+#   Configure the path to the mutual exclusion semaphore the
+#   SSL engine uses internally for inter-process synchronization.
+SSLMutex  file:${APACHE_RUN_DIR}/ssl_mutex
+
+# Allow insecure renegotiation with clients which do not yet support the
+# secure renegotiation protocol. Default: Off
+#SSLInsecureRenegotiation on
+
+# Whether to forbid non-SNI clients to access name based virtual hosts.
+# Default: Off
+#SSLStrictSNIVHostCheck On
+</IfModule>
diff --git a/lib/ulib/templates/apacheconfig/modules/ssl.conf..d b/lib/ulib/templates/apacheconfig/modules/ssl.conf..d
deleted file mode 100644
index 9994776..0000000
--- a/lib/ulib/templates/apacheconfig/modules/ssl.conf..d
+++ /dev/null
@@ -1,103 +0,0 @@
-<IfModule mod_ssl.c>
-    # cf https://wiki.mozilla.org/Security/Server_Side_TLS
-    <IfDefine SSL_CONFIG_MODERN>
-        # modern configuration not supported. same as SSL_CONFIG_INTERMEDIATE below
-        SSLProtocol all -SSLv2 -SSLv3
-        SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
-        SSLHonorCipherOrder on
-    </IfDefine>
-    <IfDefine !SSL_CONFIG_MODERN>
-        <IfDefine SSL_CONFIG_INTERMEDIATE>
-            # intermediate configuration, tweak to your needs
-            SSLProtocol all -SSLv2 -SSLv3
-            SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
-            SSLHonorCipherOrder on
-            SSLCompression off
-            SSLSessionTickets off
-        </IfDefine>
-        <IfDefine !SSL_CONFIG_INTERMEDIATE>
-            <IfDefine SSL_CONFIG_OLD>
-                # old configuration, tweak to your needs
-                SSLProtocol all -SSLv2
-                SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:SEED:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!RSAPSK:!aDH:!aECDH:!EDH-DSS-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!SRP
-                SSLHonorCipherOrder on
-                SSLCompression off
-                SSLSessionTickets off
-            </IfDefine>
-            <IfDefine !SSL_CONFIG_OLD>
-                # default debian configuration
-
-                #   SSL Cipher Suite:
-                #   List the ciphers that the client is permitted to negotiate.
-                #   See the mod_ssl documentation for a complete list.
-                #   enable only secure ciphers:
-                SSLCipherSuite HIGH:MEDIUM:!ADH
-                #   Use this instead if you want to allow cipher upgrades via SGC facility.
-                #   In this case you also have to use something like 
-                #        SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128
-                #   see http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html.en#upgradeenc
-                #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
-
-                # enable only secure protocols: SSLv3 and TLSv1, but not SSLv2
-                SSLProtocol all -SSLv2
-            </IfDefine>
-        </IfDefine>
-    </IfDefine>
-
-#
-# Pseudo Random Number Generator (PRNG):
-# Configure one or more sources to seed the PRNG of the SSL library.
-# The seed data should be of good random quality.
-# WARNING! On some platforms /dev/random blocks if not enough entropy
-# is available. This means you then cannot use the /dev/random device
-# because it would lead to very long connection times (as long as
-# it requires to make more entropy available). But usually those
-# platforms additionally provide a /dev/urandom device which doesn't
-# block. So, if available, use this one instead. Read the mod_ssl User
-# Manual for more details.
-#
-SSLRandomSeed startup builtin
-SSLRandomSeed startup file:/dev/urandom 512
-SSLRandomSeed connect builtin
-SSLRandomSeed connect file:/dev/urandom 512
-
-##
-##  SSL Global Context
-##
-##  All SSL configuration in this context applies both to
-##  the main server and all SSL-enabled virtual hosts.
-##
-
-#
-#   Some MIME-types for downloading Certificates and CRLs
-#
-AddType application/x-x509-ca-cert .crt
-AddType application/x-pkcs7-crl    .crl
-
-#   Pass Phrase Dialog:
-#   Configure the pass phrase gathering process.
-#   The filtering dialog program (`builtin' is a internal
-#   terminal dialog) has to provide the pass phrase on stdout.
-SSLPassPhraseDialog  builtin
-
-#   Inter-Process Session Cache:
-#   Configure the SSL Session Cache: First the mechanism 
-#   to use and second the expiring timeout (in seconds).
-#   (The mechanism dbm has known memory leaks and should not be used).
-#SSLSessionCache         dbm:${APACHE_RUN_DIR}/ssl_scache
-SSLSessionCache        shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
-SSLSessionCacheTimeout  300
-
-#   Semaphore:
-#   Configure the path to the mutual exclusion semaphore the
-#   SSL engine uses internally for inter-process synchronization. 
-SSLMutex  file:${APACHE_RUN_DIR}/ssl_mutex
-
-# Allow insecure renegotiation with clients which do not yet support the
-# secure renegotiation protocol. Default: Off
-#SSLInsecureRenegotiation on
-
-# Whether to forbid non-SNI clients to access name based virtual hosts.
-# Default: Off
-#SSLStrictSNIVHostCheck On
-</IfModule>
diff --git a/lib/ulib/templates/apacheconfig/ports.conf b/lib/ulib/templates/apacheconfig/ports.conf
index e69de29..a6bceab 100644
--- a/lib/ulib/templates/apacheconfig/ports.conf
+++ b/lib/ulib/templates/apacheconfig/ports.conf
@@ -0,0 +1,29 @@
+# -*- coding: utf-8 mode: conf -*- vim:syntax=apache:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+# If you just change the port or add more ports here, you will likely also
+# have to change the VirtualHost statement in
+# /etc/apache2/sites-enabled/000-default
+# This is also true if you have upgraded from before 2.2.9-3 (i.e. from
+# Debian etch). See /usr/share/doc/apache2.2-common/NEWS.Debian.gz and
+# README.Debian.gz
+
+NameVirtualHost *:80
+Listen *:80
+
+<IfModule mod_ssl.c>
+    # If you add NameVirtualHost *:443 here, you will also have to change
+    # the VirtualHost statement in /etc/apache2/sites-available/default-ssl
+    # to <VirtualHost *:443>
+    # Server Name Indication for SSL named virtual hosts is currently not
+    # supported by MSIE on Windows XP.
+    #NameVirtualHost IP:443
+    #Listen IP:443
+    #@@ips_namevirtualhosts@@
+    #@@ips_listens@@
+</IfModule>
+
+<IfModule mod_gnutls.c>
+    #NameVirtualHost IP:443
+    #Listen IP:443
+    #@@ips_namevirtualhosts@@
+    #@@ips_listens@@
+</IfModule>
diff --git a/lib/ulib/templates/apacheconfig/ports.conf..d b/lib/ulib/templates/apacheconfig/ports.conf..d
deleted file mode 100644
index a6bceab..0000000
--- a/lib/ulib/templates/apacheconfig/ports.conf..d
+++ /dev/null
@@ -1,29 +0,0 @@
-# -*- coding: utf-8 mode: conf -*- vim:syntax=apache:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
-# If you just change the port or add more ports here, you will likely also
-# have to change the VirtualHost statement in
-# /etc/apache2/sites-enabled/000-default
-# This is also true if you have upgraded from before 2.2.9-3 (i.e. from
-# Debian etch). See /usr/share/doc/apache2.2-common/NEWS.Debian.gz and
-# README.Debian.gz
-
-NameVirtualHost *:80
-Listen *:80
-
-<IfModule mod_ssl.c>
-    # If you add NameVirtualHost *:443 here, you will also have to change
-    # the VirtualHost statement in /etc/apache2/sites-available/default-ssl
-    # to <VirtualHost *:443>
-    # Server Name Indication for SSL named virtual hosts is currently not
-    # supported by MSIE on Windows XP.
-    #NameVirtualHost IP:443
-    #Listen IP:443
-    #@@ips_namevirtualhosts@@
-    #@@ips_listens@@
-</IfModule>
-
-<IfModule mod_gnutls.c>
-    #NameVirtualHost IP:443
-    #Listen IP:443
-    #@@ips_namevirtualhosts@@
-    #@@ips_listens@@
-</IfModule>
diff --git a/lib/ulib/templates/apacheconfig/sites/default.conf b/lib/ulib/templates/apacheconfig/sites/default.conf
index e69de29..0fc5304 100644
--- a/lib/ulib/templates/apacheconfig/sites/default.conf
+++ b/lib/ulib/templates/apacheconfig/sites/default.conf
@@ -0,0 +1,51 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+<VirtualHost *:80>
+    ServerName @@host@@
+    ServerAlias @@aliases@@
+    ServerAdmin @@admin@@
+
+    DocumentRoot /var/www
+    <Directory />
+        Options FollowSymLinks
+        AllowOverride None
+    </Directory>
+    <Directory /var/www/>
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride None
+        Order allow,deny
+        allow from all
+    </Directory>
+
+    # Pour les serveurs qui ont le module mod_WebObjects:
+    # mod_WebObjects et ScriptAlias ne peuvent pas gérer le même préfixe. Pour
+    # utiliser des cgi-bin avec WebObjects, il faut soit changer le préfixe de
+    # ScriptAlias, soit changer le préfixe de WebObjectsAlias dans le fichier
+    # mod-webobjects.conf
+    # Sinon, il suffit de commenter les lignes suivantes:
+    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
+    <Directory "/usr/lib/cgi-bin">
+        AllowOverride None
+        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
+        Order allow,deny
+        Allow from all
+    </Directory>
+
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+
+    # Possible values include: debug, info, notice, warn, error, crit,
+    # alert, emerg.
+    LogLevel warn
+
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+    # Pour les serveurs qui ont le module mod_WebObjects:
+    <LocationMatch "/cgi-bin/WebObjects/.*">
+        Order allow,deny
+        Allow from all
+    </LocationMatch>
+    <Location /WebObjects>
+        Order allow,deny
+        Allow from all
+    </Location>
+</VirtualHost>
diff --git a/lib/ulib/templates/apacheconfig/sites/default.conf..d b/lib/ulib/templates/apacheconfig/sites/default.conf..d
deleted file mode 100644
index 0fc5304..0000000
--- a/lib/ulib/templates/apacheconfig/sites/default.conf..d
+++ /dev/null
@@ -1,51 +0,0 @@
-# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
-
-<VirtualHost *:80>
-    ServerName @@host@@
-    ServerAlias @@aliases@@
-    ServerAdmin @@admin@@
-
-    DocumentRoot /var/www
-    <Directory />
-        Options FollowSymLinks
-        AllowOverride None
-    </Directory>
-    <Directory /var/www/>
-        Options Indexes FollowSymLinks MultiViews
-        AllowOverride None
-        Order allow,deny
-        allow from all
-    </Directory>
-
-    # Pour les serveurs qui ont le module mod_WebObjects:
-    # mod_WebObjects et ScriptAlias ne peuvent pas gérer le même préfixe. Pour
-    # utiliser des cgi-bin avec WebObjects, il faut soit changer le préfixe de
-    # ScriptAlias, soit changer le préfixe de WebObjectsAlias dans le fichier
-    # mod-webobjects.conf
-    # Sinon, il suffit de commenter les lignes suivantes:
-    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
-    <Directory "/usr/lib/cgi-bin">
-        AllowOverride None
-        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
-        Order allow,deny
-        Allow from all
-    </Directory>
-
-    ErrorLog ${APACHE_LOG_DIR}/error.log
-
-    # Possible values include: debug, info, notice, warn, error, crit,
-    # alert, emerg.
-    LogLevel warn
-
-    CustomLog ${APACHE_LOG_DIR}/access.log combined
-
-    # Pour les serveurs qui ont le module mod_WebObjects:
-    <LocationMatch "/cgi-bin/WebObjects/.*">
-        Order allow,deny
-        Allow from all
-    </LocationMatch>
-    <Location /WebObjects>
-        Order allow,deny
-        Allow from all
-    </Location>
-</VirtualHost>
diff --git a/lib/ulib/templates/apacheconfig/sites/default.ssl.conf b/lib/ulib/templates/apacheconfig/sites/default.ssl.conf
index e69de29..52f4a83 100644
--- a/lib/ulib/templates/apacheconfig/sites/default.ssl.conf
+++ b/lib/ulib/templates/apacheconfig/sites/default.ssl.conf
@@ -0,0 +1,190 @@
+# -*- coding: utf-8 mode: conf -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
+
+<IfModule mod_ssl.c>
+<VirtualHost _default_:443>
+    ServerName @@host@@
+    ServerAlias @@aliases@@
+    ServerAdmin @@admin@@
+
+    DocumentRoot /var/www
+    <Directory />
+        Options FollowSymLinks
+        AllowOverride None
+    </Directory>
+    <Directory /var/www/>
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride None
+        Order allow,deny
+        allow from all
+    </Directory>
+
+    # Pour les serveurs qui ont le module mod_WebObjects:
+    # mod_WebObjects et ScriptAlias ne peuvent pas gérer le même préfixe. Pour
+    # utiliser des cgi-bin avec WebObjects, il faut soit changer le préfixe de
+    # ScriptAlias, soit changer le préfixe de WebObjectsAlias dans le fichier
+    # mod-webobjects.conf
+    # Sinon, il suffit de commenter les lignes suivantes:
+    ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
+    <Directory "/usr/lib/cgi-bin">
+        AllowOverride None
+        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
+        Order allow,deny
+        Allow from all
+    </Directory>
+
+    ErrorLog ${APACHE_LOG_DIR}/ssl_error.log
+
+    # Possible values include: debug, info, notice, warn, error, crit,
+    # alert, emerg.
+    LogLevel warn
+
+    CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
+
+    <LocationMatch "/cgi-bin/WebObjects/.*">
+        Order allow,deny
+        Allow from all
+    </LocationMatch>
+
+    <Location /WebObjects>
+        Order allow,deny
+        Allow from all
+    </Location>
+
+    #   SSL Engine Switch:
+    #   Enable/Disable SSL for this virtual host.
+    SSLEngine on
+
+    #   A self-signed (snakeoil) certificate can be created by installing
+    #   the ssl-cert package. See
+    #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
+    #   If both key and certificate are stored in the same file, only the
+    #   SSLCertificateFile directive is needed.
+    SSLCertificateFile    @@cert@@
+    SSLCertificateKeyFile @@key@@
+
+    #   Server Certificate Chain:
+    #   Point SSLCertificateChainFile at a file containing the
+    #   concatenation of PEM encoded CA certificates which form the
+    #   certificate chain for the server certificate. Alternatively
+    #   the referenced file can be the same as SSLCertificateFile
+    #   when the CA certificates are directly appended to the server
+    #   certificate for convinience.
+    SSLCertificateChainFile @@ca@@
+
+    #   Certificate Authority (CA):
+    #   Set the CA certificate verification path where to find CA
+    #   certificates for client authentication or alternatively one
+    #   huge file containing all of them (file must be PEM encoded)
+    #   Note: Inside SSLCACertificatePath you need hash symlinks
+    #         to point to the certificate files. Use the provided
+    #         Makefile to update the hash symlinks after changes.
+    #SSLCACertificatePath /etc/ssl/certs/
+    #SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
+
+    #   Certificate Revocation Lists (CRL):
+    #   Set the CA revocation path where to find CA CRLs for client
+    #   authentication or alternatively one huge file containing all
+    #   of them (file must be PEM encoded)
+    #   Note: Inside SSLCARevocationPath you need hash symlinks
+    #         to point to the certificate files. Use the provided
+    #         Makefile to update the hash symlinks after changes.
+    #SSLCARevocationPath /etc/apache2/ssl.crl/
+    #SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
+
+    #   Client Authentication (Type):
+    #   Client certificate verification type and depth.  Types are
+    #   none, optional, require and optional_no_ca.  Depth is a
+    #   number which specifies how deeply to verify the certificate
+    #   issuer chain before deciding the certificate is not valid.
+    #SSLVerifyClient require
+    #SSLVerifyDepth  10
+
+    #   Access Control:
+    #   With SSLRequire you can do per-directory access control based
+    #   on arbitrary complex boolean expressions containing server
+    #   variable checks and other lookup directives.  The syntax is a
+    #   mixture between C and Perl.  See the mod_ssl documentation
+    #   for more details.
+    #<Location />
+    #SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
+    #            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
+    #            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
+    #            and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
+    #            and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20       ) \
+    #           or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
+    #</Location>
+
+    #   SSL Engine Options:
+    #   Set various options for the SSL engine.
+    #   o FakeBasicAuth:
+    #     Translate the client X.509 into a Basic Authorisation.  This means that
+    #     the standard Auth/DBMAuth methods can be used for access control.  The
+    #     user name is the `one line' version of the client's X.509 certificate.
+    #     Note that no password is obtained from the user. Every entry in the user
+    #     file needs this password: `xxj31ZMTZzkVA'.
+    #   o ExportCertData:
+    #     This exports two additional environment variables: SSL_CLIENT_CERT and
+    #     SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
+    #     server (always existing) and the client (only existing when client
+    #     authentication is used). This can be used to import the certificates
+    #     into CGI scripts.
+    #   o StdEnvVars:
+    #     This exports the standard SSL/TLS related `SSL_*' environment variables.
+    #     Per default this exportation is switched off for performance reasons,
+    #     because the extraction step is an expensive operation and is usually
+    #     useless for serving static content. So one usually enables the
+    #     exportation for CGI and SSI requests only.
+    #   o StrictRequire:
+    #     This denies access when "SSLRequireSSL" or "SSLRequire" applied even
+    #     under a "Satisfy any" situation, i.e. when it applies access is denied
+    #     and no other module can change it.
+    #   o OptRenegotiate:
+    #     This enables optimized SSL connection renegotiation handling when SSL
+    #     directives are used in per-directory context.
+    #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
+    <FilesMatch "\.(cgi|shtml|phtml|php)$">
+        SSLOptions +StdEnvVars
+    </FilesMatch>
+    <Directory /usr/lib/cgi-bin>
+        SSLOptions +StdEnvVars
+    </Directory>
+
+    #   SSL Protocol Adjustments:
+    #   The safe and default but still SSL/TLS standard compliant shutdown
+    #   approach is that mod_ssl sends the close notify alert but doesn't wait for
+    #   the close notify alert from client. When you need a different shutdown
+    #   approach you can use one of the following variables:
+    #   o ssl-unclean-shutdown:
+    #     This forces an unclean shutdown when the connection is closed, i.e. no
+    #     SSL close notify alert is send or allowed to received.  This violates
+    #     the SSL/TLS standard but is needed for some brain-dead browsers. Use
+    #     this when you receive I/O errors because of the standard approach where
+    #     mod_ssl sends the close notify alert.
+    #   o ssl-accurate-shutdown:
+    #     This forces an accurate shutdown when the connection is closed, i.e. a
+    #     SSL close notify alert is send and mod_ssl waits for the close notify
+    #     alert of the client. This is 100% SSL/TLS standard compliant, but in
+    #     practice often causes hanging connections with brain-dead browsers. Use
+    #     this only for browsers where you know that their SSL implementation
+    #     works correctly.
+    #   Notice: Most problems of broken clients are also related to the HTTP
+    #   keep-alive facility, so you usually additionally want to disable
+    #   keep-alive for those clients, too. Use variable "nokeepalive" for this.
+    #   Similarly, one has to force some clients to use HTTP/1.0 to workaround
+    #   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
+    #   "force-response-1.0" for this.
+    BrowserMatch "MSIE [2-6]" \
+        nokeepalive ssl-unclean-shutdown \
+        downgrade-1.0 force-response-1.0
+    # MSIE 7 and newer should be able to use keepalive
+    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
+
+    # cf https://wiki.mozilla.org/Security/Server_Side_TLS
+    <IfDefine SSL_CONFIG_HSTS>
+        <IfModule mod_headers.c>
+            # HSTS (15768000 seconds = 6 months)
+            Header always set Strict-Transport-Security "max-age=15768000"
+        </IfModule>
+    </IfDefine>
+</VirtualHost>
+</IfModule>
diff --git a/lib/ulib/templates/apacheconfig/www/favicon.ico b/lib/ulib/templates/apacheconfig/www/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a1a0be8884a24d60bda51751dcbfffcb3a99b76d
GIT binary patch
literal 1150
zcmb7^eN5DK9LIldEw{2p|G3dwYtE*%Y32H(Qfi3DjnIu$lJeOUSZlMC4zQ4mL(Gem
z2v;a+Jm`2jl62w2qKtc}<8I;I!65=7ryx>rcif?F-M#w$zV7(LR$IT{KEKbyckj>l
z{dw3=QD%uZE>02Or<Cjm6lJcWC<}#%kcixi3#BOH?EdG{=?_Rx_p)S}pVYMh5>x!V
zn(SxE(n*q11FRIW7Zdzw(*mTdzUOOJ1xV0LU~A4t#b;+-Mqd)fa3D<H-VnNvLu}k0
zB=fx~@(V+xt_ff~G)>{YFs0?w6c|Em$@0(OHOW29Upy(Lc=HzOa*}8+euon}EsgrO
zX)<i4@skb0UN7zXf^<&mlCgX?U*2DHu$-?-Dy3Y|&%;@<7<bL<bRBtx;fwp}Yt3Y!
zZ5N}?Z@7A44<nsNxKx#Z*)T`q)f!^bS@9gMW6S9}x{S`Ur}5OSqPJx$p4yeTzSZEa
zO%?eU;X0m#y==h@E{1oXNW<4*#Ao@O!Si|anl>>k{K2z2hT8R#OIPJfg2zWV4!<yi
z@3&Sk;j{B+-&w9(%W#xGgQe(Uto!1y7#@+ft>iHrUo6C|pDki@u<f5K@uS`|M59q0
z=bN}43Nken<*z$axCP&i0_9&tt-s&$B{!~k=<l+UlNgVwvW^bRU2cs>=y(3ic(;kc
zb2`E2*?;6w@e@7=IZ2PBPg}&{ci*7BwS)GHcNza9g1xPtTdoGYjTu~S*(UR-y^V2F
z@wbCx<fqJ|bW<YVmltuZ`**_OD3M5nZu2=NuKvov5AWkMmx>wgmUHWAd`tF3#ZL#u
zsLI`drTI9vmKug!zj1T04|CHoYV}!!#s?U&f6dU3g>ru0hIRDRuf<)h#daW`;Fy=z
zioKNW&~jSbZ#7k8GUj32_!=K-o?!SFqvUJWKPdL;W%^F-5P6dEHe}#AxteRv8hY(N
zQMBfHSwrQ{bsXHff}G{?9L>#;yBMoCrqvmG#2$H@){FV=V)D9!wyIC5F5FJ8=1F!g
zjpI<ZmhR@vnO?=PF>Nh=RPvB}cV;&up6|F59A&tt6K89wsPRp)GY|czsQZ2Y|KR`n
Fe**|-!I}U7

literal 0
HcmV?d00001

diff --git a/lib/ulib/templates/apacheconfig/www/icon.png b/lib/ulib/templates/apacheconfig/www/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..581bad1b4f515184b0d5af4f1c66474d0d283961
GIT binary patch
literal 29641
zcmV*&KsUdMP)<h;3K|Lk000e1NJLTq00961009690ssI2(-1!~00001b5ch_0Itp)
z=>Px#32;bRa{vG*UjP6nUjZG4x@rIb00(qQO+^RZ0uv1}4)w9c2mk;e07*naRCwC#
zU1yjSRn~sby;a>knHh4<S)za_7*J6O;s;_}b6m5lYfh-U#$9t(3@9oXKm}Y76cJG*
zgXEm^FbosB>fZDHxK$lydWIPoFma!L>Z$4Js;;g&;XRp{8GnJr3?dv^M^=et{Y8E!
z5w_)F&Nj^3hS^)OGariKYG}q0zW8e{#rSwI=&z{(!V38g^23<91z)YexK$t^AdfJ^
zUyA|0x$rN;0Q+5wc3{>POkRsA>!2Ayc?2^3*%?4%(h&woxIS5ecNbzsHuA!dbc7R*
zFu-4CMUWCR7#Oo0cTGW&dxQs$Fu-4!8J6zCt8?(dA|%-mM>yfnvRsXc7aU=L3Uk8d
zT)Z#~pDsh811XN&l|S~<jGp!J+0Z`)128iY#qL!6W91)`P;Xv40pG4eu{xp+{=gC~
zBZNiQfbhp>07Jq5{qM9bTXO&V-+>7~uz7Rt&Yk&Py3~u1`^b^=cJ9nS<&+j3I@CD;
zHYjv((?oo^0)ZpWqCeou3uETxXjL8f6EJ||sAkQcYSX6Xgb9~hmWa^t!w*mS<dcO;
z>8r2q(Wg(du3ew$-@n7)!R<c!Xu-GNE(Hi6K!rldO`B$&dTNXQ{o9;zM(av}qJ=wf
z*A&d&ijZ}LsQyUM|EBJ^x0m-2|L_bjc<}qHS7$F=cuTAl4~JDS_zxfzK>PN!e*N`U
zqB{T!P=GWv981pt18!Pc>MghQ9y+u`r%rV%t`=UIgXd==&pCpK{utn=V{J@0Kl;ue
z-kR&(yUC(O8^8a4Z7i|=``_OI$wtgCUc9qiyXU4(y&gbJ>WA=uI{^Y9Ah2&=_+S5;
z+`03!M7O^G{@e<JqU*Y1(Y0uq1!f#^DE!W;-<B9PB>I?`|M(ifb@k_;FCI5;`S9U`
zi;CQ|w4izarI&ub>85cJqrZ0T^sm0UC@IN)<&~MedNmp|X31xtEr{0!9HS5bsI;`?
zi!bi-^2>uOcqQMi!v$jykVh!(ce*6umn%>!#ryNUh3H)SH(~&TE=G-7@ci>X-gVbW
zXPwpV;9Wofh;9Oc{(mgMjt5KaKL7jzqFVra%9QIr`e@->Z_Na>&ju*P3=HT{C~)`P
zeg65+6H-zF<$xjsDA(oSig8%J`v@HR-K~5F?+wD4ExjkTJrAAU#N>;9BM6j}Q&g?m
zgSX!L)tE6C9~kwA!zw4I$eilQC#Sb={XEefL|H(J{|fpz$3r_!np6XD+;JU%q#;8-
zdg6)GjytZ|n{S>|t5%wif+DZTpR%Y(4I4HoHT9mCUYenlF6(*>Uo_6Zw-@20#?VKw
z(C^IfefR{N*)sZ0|4|?U4l@LbNYGnu`SOAbI(P5hKvq7a#LSyF?`zobskF4DlTK<n
zZrq9r`~-gR!9K~!wrz_~KKb?MpEm)JQYfYFy6gCN-<`L8`@S+X0LL53m^A6?zI|Kn
zFW`WW7URZ=NU@L5-fzD&<Ek!r_yiC76XBt07(Nf04|^)ah7Eg8J@u`nOK&%HUs>-v
zGb_dCoHKgt*u^pMz4RF<o|?@&DrTQz{^ho4QESzzU8N4;Qp{ks;S)}1{oQxh2qDU0
z03yuZf&rsoiz9)8-*Pz$r!>XL|BEKJe6R?&Pewo<_FSO1-umVG>&Nu(-zF<7dCZu_
zd-e>g$Whz3=Y8|d>QKlYGNkRUT?LIAJyTq);)%Y3^u_UXk3{?BY)kCqzW3f$mt1mm
z`Cqv$4}C`>yXc5X@Y^h<(XAf7JU2@H>-XZs5m4;?_b@R)Zf;S(es9m1u_h}kb@%RJ
zrHxmVoz5_D;K=dgSB64XcJ^IeyS}k(*{(9EpDM-!D1!$gJ359>BKw?3C+OO>(^js$
zGc`2;pd3}!`AzI9IHCs*zoP}Ms^i;>qSU{)2yI@2C8F#x>B7Te1ZQO2*P};6pkT_B
zYa;v>A@|6ipMJXd<Bu1W;EKl{I|T@b!`!mvOUst+^a-8f4O|(sQ~D(my<$z?SpE?)
ze~K8$gi;@-?c4WNuRiSUw`Z5*8Uir;O4Lg`LXd|W_czPLHy3)K-#myjM?;o+P=`YU
z%$c)!z<{^!y|>TJH}^L0+<NP{;lpRQXi;PC+#7DZaomUz^Yij@eXphQwD8cO-Tv{9
zp3|nSzvrHbfL)4SOOj(LGl0t${~Yrw2kxWn55&F`KKbOfQ>I)~jws4^aPkM(yzdAW
zI!r#FPPOsB3*t<&E5~8Ns;KxstPrTE$o=%wMHgMv1;G0Cdzv<VnwfnuTm*zl%i2Id
zPMvz$amT$5*#3V-Jn5IFeyT9|DM7(H(VG>d{>V$OUVU$~W?AK!#Xa6W!UKl`_jjs|
zuj8rzpHnbm0fJV^PaY-+6be~}`tQAWVv{CMGsCBT0Lk&F!)%M^&;R>z$Gr{&d<<jx
z2*-*6HdaZfLjoj05<-G3kbn??09i2rNyMY0(mSQOE5d;#kP>3z2BLZM$G`r1Svdmb
zmn)DNIzpm{7WW_9z@z?%)AQYh_~_S?)PGnZkg;pKb$e;foQ-}qP8^sC1mut*?fUd-
z+O}=Ydi7G9H_z(W@r^}`c9sI`F)tzr00aVv{PR&sHNd{))&LmVFLq>(m)~)+yaE_0
zp&kIBKltE+zx}OiX%DXvMH_Q*^jk-gs1M01c5!ZdymWe82ar)qaP!2(`6*$ADSta$
zZqUY!pWLuv4<HkPcpQCn{RbaBanPXFbLMQl<BloceYZA77{~K~FfT*&ksW^<bqEo_
z@kHy>Jp<a`npXk_(52qoFZD<MEWYWcJ}<m*R#{PwB|FjQgCi+JRlM>Y+}Z;V9`8}V
z*^XL*>n0#2kQgal)B#VOa_AXg)vDbsTRsG&mutlmz{eloq*=49_ugAniu47DAS2Z8
z)4iam?2jsecw->)>kQEwC1B`2mItDopcAoyF2f|?viRZNdr$fIzfUiV2SzT!9aE0f
zRaP17A;RN*a8ZZ2cP6gEC0`^KG@8-2hVLUfbPQk~fBpK8Z`qRP$Dt^Z6&vw6#?rmN
z6+Y?5F#v%O-HC-jC>;o9pDcYPpnWW)8Oo=A<!=-4fG&sD%U}k+^2%f0dTVG|Sm?U1
z@x}5ZJWvITfbT9w^UOHpGj0{Gn^0yy%vvd!bEUU`Xlt2z_I!2AmfRTPPUyxdLHGWS
zNB5#61IQS<k7Iy%6vQzU7hwQIq<$g>P#O|Y<g<afNbPTRrJl?1;WHdZz4OkwC7yv%
z(69Exs%$LVeT0Ay%GuvA9iI<Hy|g&wGhz{L|0Z#3GiDSke0Fw}Hx8i&SiXE`n>J6!
zxbP7Q1&WH?Qan&1J|#c`7D4*dZ(c%p;K#J8iZcdcsK3OIHoq>4{^8ZF=m-|lPz((y
z4dwHLtGykM?sbep&=tl)S_m<D^3{F%G*76wH}AtS?|9dKWL0)K3MVwe=(FQmIT7LY
zxw!jVqz1|i5sW<t$J9T>ULa=9%L}KcKM+g(&6`*M{`)H$G<dp{fh*#6ECETd4D}00
zKnPgz;$K8~Acg@%JOnDC0X#FnP=Aab&@psxlz{SgT!vz>jv@WhJb+SmLL`mC+xh03
zYfe42Wx^XZbv-T`dxQZh4f+{)<V0NAxg^NB|2w?BpiE%tYP>ZN16oA6<xoK&BD(+n
zZ(>j0q)FC?AD+{o!P7BrP($=F%pe4$FZ(?<h`~S7*aHUo3kVoCAcEOaR0;S9$fr-k
z<jl+(@#3GM$!7pV`s9(mAP5at!zJhvUVp^Eq1c4eSm$em3q{|)ujJ=HnUrLgHU>^=
zjIMPsXWNnJSS40U0AHVvW|<{r|7Bld(wZ`<ztF)0$74VXzZRaLG}i7t1R8*ur%YMX
zx9`h9a)fA@AE{RDiM@M^<10>L(s&HHTV^X_@Q*M4Wt<%>1Q8Jg$WXr^&juzUj?r(%
z|F6O3cWTxe%nZ%U90fm~`1dt{fk3X=(cVsCJ&@2c*75sPuU`7*&G(h%6l(J-@|`1u
zT>($O!vD3#v!|ByY!<utzfUl48|*Ti%Z|nso$y$nI9%N8J-pVxsx^Rl#t%I3jbD=v
z0NuLP@6zS9y?cvFVIH6QZC~~q>bC?WV2K#&_lyA|5|T)e5Cj21Bm|jWC?rVu`o}Yp
zz{Elu+0S5R?K6PZ%$ixU)(k}+?w1UgAT)>|G=v5T2!J$5AOVdgG>c7^2gmMj*^<+}
z`wO#X-JDRN-_r|sPB{`8*pIy%l6dlDTzFJ`NjqUvE>0MMuqu=KnQ=xlJk}@9P<~<t
z*5-KG1XT=v7A@NT^UrJj%r>f4Eos`cE7H@Sh|L-R-0QDD_LWx_fP9L#D25Hlqkf+a
zNP>hAl1P#ul9GfFf=CERL7o!u0a2_M$aDQ027qAzR+_bj(poDP46U?Q3;`&BGz1_S
z4nYv0{b+**5ghU%55@2R$9rC>)D{5Ep1o=9+UzDxGD|CgOFQDzWthM12%VQn!EI|`
z+<6FDKs@aEaTCt@)O$o_aZab&c>Bz#|IGx*Uiig(W>w4pTJxYm@B6kd0O#}1FE1=~
zV@dz1r_Pu*ZOc3FEb*w{_IbcCfKAb@BuF772}vY{lw?VgLI^=p7}*aYhzP>x0Z#!i
z;3vU);vdkOnOSQnX02H%p)|WnD?viAmZTL!0xm&m5W_V-Dh*GyXh6UPw5cx>@f2Tz
zF-n)JakFNREA>=quPA_LPQ?i$;&K&_EJNik<JEo`+&b<C8#*2~4R6dXFP5S-PHBqw
z&x*U-zih!jzJU}l1>RN604rAPTE9Lg;^pk!yG5TqP516Ca$OfdixxE=c;NU;FP#7g
zkc2H@Nl*5BO2C)>HbDxqgpec!2}@X#q!hOB-jM<Z{0L(J5C}v9<!AuS%o<v=X4V?6
zWUaMQ<S153D@9spC5XvLeeF4#9D=bb2p|mzI4IQsNS8uE338GEal;K`Uwt(}pOuzb
z7}yfyR~`wCMM=NNMc-z4tv@n?CA~cb4z3!9Z`YTH8#SX(6TE*`+_Bs9alx3ls(>ms
zf?KtEcIC?5kqpY`pYMP3&BvI3O_;EH%9QobJTn`RzU-GC#T)S-Q3aA<3n58bLP)YK
zVM}3Tza>csk_HGFB_Kc`A&fheV$<Q+cL90vUqkvv2`JXgO0lb1DRz~16+5ohN^7N+
zv3gzK{B`_&N5R!_7>))j-xO9cVY1Q|FyhVS0_K+zK5rtldIg2<5#k3kQUe$<2tDd2
zh~{q0MXz_k`?DE3*232p#2ubnjE-->)!sW*To1s^qeuUG{`nurr?2tCh1YlJP}>;C
zL=ONNfQ*uR?2fl3vV@RASi-i*lEU`Izhz{<*%Ao}K|~QfK%V(aF&w~A3mBSNGg!0o
zUs|)PJT`D$?JDiM>?o~VtzBl12Yd!_d>$}6VHHpPs_gXAIM+~z4s{nSxV5w;z>K@U
z#fU|Jbs&@%#(lkULpLN@apY_EAN(HgEZEP?Pe)-uOT0NC>RdLT@A4*g#?+=d3R5qx
zA_&CHQ>U&u|NK#<N?Y*DFIzfvsBQMY{PMCvgT_W(J$9+BMPx~7laRu;ML-J67M2i}
zB+D}Z3<C&b{(1&L#1TX#i*qC5-=KfZz8%c0G;0MZv@2L@mY!{`$t8!NNNW<hWXYrk
z3$VZAAil^(CyE152~%OwqOI%K=QL@OS;~KaCr`nrOA*$8QK?_7FsKzCIRW+4quKnC
zm0g4@zrxHdu*z+;QRL#9F8Ft!lJ~anhuBdNWeLqVs}<VRs3HweROBWlJy^QERQ2k~
zyLSB(z_Mk#Uwm=iM;|TUv(NF7kFN(}lz^~=u!Lm^+alYRzW9f22`R|a1A>GgDPVw5
z6mAol&rqxlz+N28(*T;4273&kT?K7qzh>8ES82!9j$+r<j;kG4Ye(yd5{SGae}*+w
ztR7JDL1G;r6^_1Iw5YLi<(&!d<dZY-;;g?`Y?v9YM(gT$^dy|nD6w>(x*q3!zJE`#
z()jz)(WK}Itq=Sd^S8&@S0M{4uB!?o*kGHKlwqZFJc%%K<`vAGon6$S!@I5vkVGI7
z-V!n9Zw&R@B47#I61FWYNdb#28KVKDkiH8@N+Muzp9bxlRXe#`Z2;fS-uCo}rBaHx
zasbv^6Tn(SYppbECZ$;^lB5-rBoazX!Q_Gj30Dh0sO&I6@fI!_XeGc5CO|+%5P!s3
zq+_&3oHNwytXj2e!-kxO4Kqpup{u&!$r(tt{}Mc4WUnnT>TL9CP*Um}A}&_w{}Gn$
z-VgPgsOEqB;==YNRmbTcV(G3p>MwTjSf46Ng&?9)qZVn+e#)d3b4}E|c@|(il>&f)
z_%T*5MR32cgs_EeiGVF^OWMW&uqYsfC52@f1`tsjKvF0mKm6BmX~|yuwdo6XPMNhm
zDP$qe24H6CyMS10shC-_t5^$mB`Kv{A|c=^CXgV5dNh$V2DR&WMFdd^ZZWim7Jfd3
zh^a4&#5y>h=u0pI{rA7qo_~H&>HAqd30HQ;M~nab)bDB}+jzDw`Zb3w69|6euz%=#
z><jNdRis#9{Q2lnuVjA2|Bc3yT_q3i*#H-J@IFulHo(Ofk2V)PcyRkMV-^7c^O!HW
zq@(%3k|nzxM?+dMvEE3sr+`Id`^d)@wk>TbY>RA51T0}$WJ|IvVM!qcEGY~FSW>+B
z&!Y|X=j;ogfA5b;AuC{0Fd#|@hDZp^_&^Q%mx7gMso51Igm#4>ViKBM;YC%9#}iRa
zq7f_m{U|Rpw1z7Z)lZgX1`xonz4miL24KeRJuzwt{>05i3thCx#O0lEZP$|VkO<*!
z*@t_+!?=}5-rrzC%}5Vo>cwcD8FwBc4Ee;f8Dej5SmBwzRhkUvIC(%S;C%l11w;!Y
zV(-28&H}J<<(}TX-+@St%W#hPe{6y!q?DEs|CX?&2v}s>!j{6eg)PbQd_kTYR7zn9
zG_IS{q+Y7IfaH+XxL#^Okt4j6paeF6v3)%ssAeVD)mkVB(t;p}iC8EQG(m9GyDv=B
zf0vnAux3~qETXB@Qov$pf{qA&v!hE<zwk>703aML`tr*qg9f!LZ3@>;MfGIt%>T2Y
zAd`hyErh2|!3FJ6mM_@V_;4})F$u{wlK0nKRWll;W5#7A-w(Su_C0LNOW;y_wLe<K
zI3TLT<wgJx8+N)+Gz92dZaEIX=FR(BwR!_ciNXCo3i1;Dg|vjUg>8wTEp1EM7TLB4
zcvy&R4-t_;M*&*|EDG3Sdv@_{&(1YpAF#zMcXhk(^7hReq}q~#0THx?zonop{Fe;c
z(mO-Id<6w;5%Ax%jqPDkz&1O^2$8lWEK5i${`zBn0<02Uw@@lDOr@e@*2Ia+6M7&B
z7<K}jKbJ4aQK*rEDHmbkHMpRCf=MEV`d4P7>u}un9Z~}O=YLmYaBKW{S==X$&hPd%
zw&#^p9h%W13um{9qzF_+AZ+&R&E2~{SGR7hS+lOq$thaAc;|WNeblR0i|NxZ``5o_
zJn+ExKmbA_Xu@6+0fH?N5C}-vLfBH;6fmS25CKaDYyxm<_d0!#sq^&vOKnS776mL}
z86YG``o@3|s8=(&TidK5eHum*Emv>Kdtvl))-i5S-v_EVnhWGAv(>JO`hQ%d9hV)&
zj-wox9ak5-+HrKTqr;94J4!i9dHx@Tu)pIl!U|yp6>$W)rOF0$sepj)(4p?ah5sl^
z5dJw*M3qK?gY(+s?_JTQPW0E6UR(2U`(#XBQ_+?g1rA<51LwCddBU6`oH`QQ@)DdR
z#m2&GqQ-QQiw%1Z8UnR$U88^hj^oE)eAH1d_w3o=t+&qV)$6VrHIgp5<g54JH}-(=
z>bW9iF249A=?8j^&qolzwv@+qtnupI-TU1#RZ0rj!jfcL#uSDng)M}%JUcjNUwGNN
zT*P?)S8v`IkRtN4q8ShzNrPjhSqN523lf5upvhn-5BeL$s2PI&5*lWhFtXNQ4M>J%
zW@|8%^7Me>m>M^ZFU%>OAxDcAtwEv|+2*gF^)Y$v9~A`|s9iq|r!~X9y^s-#iu@AN
znh5z}ygC<8{D_cMX7`>FOqChJSLdR0osuT+irqNvL#RYNR^;Nfey~MU_MiFzUhRL-
z5GXAzIDY)a%)EH<7TdOz(lu))pLW_u@4vs;ONkSaT9%kf7eC8QT4YOMTOv6mk7{1+
z(Z6?03W*=*?*uUZ*%SL5T`L$6p`Z)}q-{~ak^xKD0THkwkVb6WUVxY$qt!El!JrHV
zWH2Dj2Mp{9+S1cAmIy?)QNNRKb4z1(3uA~|marvRlFYuegtSaqrilI=%dgatrTe%b
zVG}#cl0*aqo_lV3S$#!^wnee}<Iz1c1fhB|J{p2~SL4Z3kP#|L_pxi-N;G>J&&@<q
z1w6mz{GDoJ@!!#@cJ#D{`e$vy@qXv$(g)skEC#gn>wpPgufggZP*o+vO_{P5z^GA+
z$BkRLX;ZG>!p*O3m+)kNq^Q@=@wBDTjGNDG_0NmihJq5nCH<T3*%vm>(?|c_sjyf%
zt_E=TOY;khlr&DEn6!vsK)x|%)ir}#7#=vfP1c;H+1qv(`M1Uk0JCPLp)@H8rC5@1
z6cYi^CWnroqwt+Iv(OBd-i~G{$w~{YSXiuCLlY!H0fJx&Xogf!v378o*s@>0*7w|V
z(s9Q<7A#xh4Q%O&t3S#LD+s~^$75(4Zw^=a2@9Vr!M}gR_WVi|LO2>PoQ`wbCP<NZ
zVHTd6k@!^1=w1*1JT_VnuzC-!_{w|OR#oslpL%MuZrz&9p1ozyo}#$+%M_ylL|mOa
zNs^YZEYY%I+Wl7^6>ExQrbP>WmaorUwl3GUsAgtx%Z@^05?Df5maqg&Tx{#E!uKbv
zy|{l<bI2*(>x`bfUI<}am|C-D7^kPwtTZX1UBM*SFD>>+pP`wB@#!-&GixSGlai!0
zDNAT(rATX`6+;S0f2+tZ)MV(A{f^?TVF2{iSBo#bw97Z&+&*g5f^u%`kT&>Y#UCJl
zA=Sp2tuVL^`ZSIL3?%ALVBQ(G5--fc{A~zY6-|6{HR`5f_&{{2lYsi~oPu{3B3K6X
zrw8$AY#Ru|RpVh-VLCJs?cQB5d-ggYShDkvL|k_h|0M(o>E(E)r`YBsh6lFnEG!Bu
zB63{)%4aLrZ^=(dwruISfGp2B11~Nn$r2<aZQETmcIrlEEL*=X7!b)JE1C+*Fo~a@
z`K#F_BGN<=+3$Hgy(Aw9&9GQ$CYyz3wwSaMO0rgDNue|gNm^0tFN!uS(y@WC(z9v|
zGsvMs-}?63o8NqMXgOnY&TNIT%YTn%fC;-+3!!lauI+-sZOWtj2$?c4ZyT;0hb{XM
zkQIXaz9Sn0TjI?DaiL;!&O#UGe1`ek6H~wW@bpW)Ft9n~?_Xp2?kM9`jsXe^!l95I
z$-6Y-KO9zd>ij2C0v6xNP(=Heh)AOcL6W5R62}}>J;F#Ie7)|iv8ycO@w9|(QF4+M
zhy(;oa6po=n5}4n5DB79I|_uLj8rSWGa`98aDo-Ht5_&4DUv=Nk^NEeuUXrgn1$BR
zT3JG932iB*g_3MZb`@zUv}6wjiI|dQNl>P0EIu9)=L`jaCQa&_b}8k|7HC@?t}e6E
z@3$g-N27BcJa!T~*N!X2Du+>tFmp35`4R;Vm@8NOX-j;40oqhA`4vRiuor#aN3kk1
zQda0-<X~haMGN64t-%+|<J3;&7+~GHJwu0%T(ac0sBvB7wru%=>#9->lj9q?$!J3>
z;bpT4leku|Mv^(~wrA)5FmFd%ifu`<1o`$Td3g|)XP8DzRm(R9Oo5n@=Ej-h`B_X3
zoL~lN$x5*l>=L<tk(aRnjO=Fyvo_H#Ey>cPC21|R)=HbNU@1&iHY=rtB<%_iN7-BW
z&FWNaLIjoa2$?&%b>+%kEnC(ohiDpQK#Kh!>BF!zqtHRM5dL-)2DU_->YiO&!3%qH
z9^PGmmD!$uvx2|H3{|+KBOW~w>A?iB=Z$%I^oR1U!BKd<KTdBJ<(yS}aM_n7L09D%
zVAZPKOP6krcwLC-zWXL`-n`czSx1Q)*~TISudS7kWJ#Dgb46kG*|!_s8^3nj?xN%*
z%Sd!-k@RtnCCT!lRAhU(qR|MkR~|_u1VAKWgX$4CC_@tq!9p<+lj}u%$<weA*$+!A
z&B9`6%~A^~SV)qZEG3j=sYz-Ql7tZCk$w#NkNl}h`+vApL@adMZR5ZC>eBLW_~6zU
zvmA$?{*{KKk!+(&Z5&+}XSPJ=Itf^`oVBw6W0&K<KVwf(B>+!^b{l8liBr(0aRS&A
zR=95}-d|K+#6W4>+5=~|jT*lD!Wi&zf`Yrs1;U7K0Mc)`;n<g68U$eO+^t6+{Tz_w
zKic>qMYbRR3Q7co*-}8tfUpBrC?G=t8MH+pAVRhbc;PS+uw~FDFFG3u344)R8L&J!
zWZNPV4)aUHC{h<6o$_V;_h6-=m5BprN3r8-*VT^8VONJ8?YKJZYRA!GR~Ls>*x|6N
z!j29*91g2uSBD){9OfcN6+61PSQUj;IINVTIIIy?DAowODE0$nVG|2eG37D|Q=<!*
zpDX`{&)kB+qYp=&WTb;$P$J1fw|cm`3wk%K+!+k1?JmR<GcaP|fpmdqh9nGbgXd05
zeEvN}IO%<47w(69`?tVb1LO3=DIZ`(cFB)Ty0DTO;Q#*bn6YD*y!`TvZQJrb{q({s
zt{4+DnLXb59ow+YZ(;>OrhLm70;Z(h%WW3qCHhMU>8E@O&r~qxvdItiLc*T;3n_$@
z-l<|r<0EckW<i=kU=1RI^7;lD*rT;4`=x^3Jpce807*naRN2y`rI4B}X<(0#f`woq
zNoaE=kcv#*jFcn<X(EnvX^-vNOD0pAkhocC1Pj^kzB~J}%es|w!;h)~TOPu(+s2#?
zD^yRy(6+d!1L~(DCE($NN}(?ze7^zreuvGuaP)ytzpK%-8a_Qc+Uv6f^$(wqe@%y@
z$~!YN{;xG&>E~UNIdH(oShhQ{sbE$3PB9UU8uhpI^kK!t>a)-0O`X~^C#Nvccp@K$
zi};4-!nANBA~N8ouvjIBEJ=QayYOlqC6N@QnGLB~!pj4-gs>&q7TFeA!fO)Yl?eMN
z$ZL@jTMn<GH50MYOv($>l9wtC&01^NQm}^7N(vwLC^Gwo4_!e-94*H8IXRZM<6f#n
z|I-q|V3QbU-G2M{@)^LENVSn0u1ahZ)^HW-r=v$b^r(lnHPE3Jswb6nR-(d9OSk6X
z?fLj(1=i+xEonvNNxym$o;n5nTa^52b3H{at{RU?YY?)^yDH5X(grV{9@hfsj>(w6
zz06CpDo*`fyFNd6?k)b;i(h};v1d<F2`LbL<XXWo9zXJ05t>GBemj$1ooc-J&u%AP
zJ2@#RiM;Z5DTo23xIwMtfydYTc;b4?h+dNgZ5bO>NI^nIB(bmrgcO1hu!Yuf_fDH6
zPEDklpjC_nmP|sEP!K{0p$#KR%|dw`7zI}ZQ-g0>&<R9%03?VFtAn65VE94A_lcmg
zf?|%N3k#j3q%xBpErFE40Wtu`v_DM?A}a|slhL*Y`ZPxGhNu=wK=G(dr`|#b3wGeu
z+4yP|k}L>9sPayA%?L_d)B%t8@dCZ21^+KwaNcKd^nT9oYMj)#B=x^E3m^PiUbMlg
zn0BN0-kY<0`OZCi3d3OqATu+)MT_dWxkd4P&m-Gn=6lSs?|i&$<Mskb@zJF9%Qx*K
zf)o^X`O*Q+8rDuWr7{sB18~{EW@jE>KVS<0W2SB*hKGd&S$;K)@ZS-FED7UKYEn0)
zQ>)Br^LOMIC?UWa8Vn|-S(6F+3Xo=o1eg&BSv}fkxQdy1;i|nGx8*A>1aYL<M5N=8
z_a{a43<*TE4Y42)0wH<N&7EHxzIgk_eIQOWfHi?NoRShKhx!dSHApLOv|b4dE-Ji%
zY9aJ$gcBR$wC0Hge5EKpHtVL)#jt7k@K^8f6#GD!(}<yC8(`F6&&Vl#B}BM(0>-c0
zzx#+8r#6i?LGh@6HXfb6AFpdgdG_tMXB8CW7Zy5Nb8>QU%9Ja*c6}ZQl+pkIC=f_F
zW8m1!FK>6=*{v==zm56dyj3~NH|H6m35WIIlNtb+J>v8&y9!5sy)G0Gr}eDYp+!b=
z$TB)-UxBMN2P`3cOTcslB7ul`U<r~!*cNqdoh2l>N}tfVR&JiNetW*5HLX#<R#IV+
znzdxNW)1~pp;k)s@tte7YMd7F!FO(zxqELoBgJ~|;}u(X6^cmHAt8tq8N4IdZ$kvb
z10LAQ4L|kZF}GaOE?~=U9cr9;<`*%|i4s1v2pg#DuRnIbcfM;~%-94WqastsG_lqi
z4KmOw3ms~qRTkRUL`D!9L8JxZ951nP&;t#3LTNnt6UME?hFoY}UO%>q<V~E^7*Cyo
zCe;$KrTO#w4Y=ul*j2E9K;>#&7heiYgpZft@gMgebEpslD5V!H*m~4ajq24)2YBYp
z>rOlE-I&N%sh<~C6DMt$IC1^??zofBZ5?LrcS<A8Ou{pd8`n)SpRAS^$Vj#SeSN3W
zI_I937X&Qd$4_1(ASp=tO%VloKu8E$uxgJKA|uu6(kd%G)$Wj5El$s-b6QI6joS-4
zG_ST|eJ%s78>h#9AUR|uhpaivvbXIn6atRR{#U?jJwyb*`HCPi)-MRU(4G4EnI|6Y
zwY@m~ltz?nagheG9}c6KoCpTOKmcIC1^9*=dhYk;pVSyLHX$>Fv;eY_P$LO7Q&1}z
z_0v%&1vQc@O1=jmq|H&=^D$*DzF2{YYY>vKB?t%Tm|{kOgX0_F)?>W9iG-I|=;EPi
zcy|Fp*8ac9)wt~#+;MCi7k#k;H%}}xJX~o8(3<z|-8*;g%@<zy(X-E<Iby`zty?3$
z|7gHJ6te2otCpP|&e`jF;4Urj?exte$(p?)=Z6pbeLH7Ikz!_?e_EqhS}$#KY}!!}
zc2qFnMV&oYyHAC}w?u_+K-*GC3CH2tOS4-wO3O?S5W$kdoUO1(En1b6v(H(xDX)9`
z>UFCp9#(pEo2(xf?A*A$;Lc0h-S^4@5Ru<+%QNgEt%m>-#7y(X4C>q}T3=*a;*IC~
zTz&22gy-+uxB2klXZ7s)Mkpk%yY84?y&7d^CheDEdN;&`^AphJp<X#fn7<v5&%m6m
z2w4z>w7|i-SsSF|jRELbtIUEJ0Mj?(+|M9Ig)9nY3_AhWc8x<mW0vEJugaW}aUgL3
zrSyswyV|y`RaE4xT$$am<1;byt0QA{^;chAG;m<c;$l@?tjuXcA?t*p<96qT7f&1#
z3`ke$FQ;vuv1r$SZthY}4h(>CKWxs*2!8hMhM+BjK`-;!WG`D%*f!ZxSboQpNZSb0
zJWCLS5X@XHEs&aIt=hEDakb;JtJrll5eD?CFC`_k^#Lf&mK6UTxpel@?BcL04s+O1
z#f~a=xG1cO!>TB(io?7;yKv5kGrF|SjQt^A|1bMFD1en83h<%<qeh)`?z!#p`(Ccb
z>vQqi9OOB0)PXCI5}wv3)$rl}p>YNTmC3_JE>8altFtTgjm8uiGZZH@j-&pM7ULh^
zR49?Q5^(@2MccNu0E9wz$Bs_}Ok~G1j(+jQfddD&1P~0$U{FS=Vg8cc+vff)7?1#@
zpdo!4#ujjuShJSwp7`^&u%kBZC}>hQwSKMSoqLMC*%#!yIEf=7+4DyFT~aLHHXtHq
z<m?OY+EeVim{@2CK}vI3H`iQ}C5f54wXHt$*WG|1Qi!oEP4mU=*@Zv6acT+bkDTG^
zYdXI9N`f@c^UfQ&XU~vpukH3br2840@cA;#*@|Vm!R$4kI!IMxXmoIE+}O<vB$sY?
z6=8;dPsbbc;OYvwP&Fgj#t)aGX|*_i|EqKG=ns`kBd>Hx<i?GAt5pl7r{4=094`Po
z^iZE+!%hS+XwYY$d~#MK&Hd45<_sOwylsnW`#tTJodw^`+40`^wbj!D$9AZ(HM?l<
zKBqygB-^H<VjZw$FhD_DT2gp5VqPg(Bu6MxI7XHw1Q9d4D$?bOP3uo)KD9?3yJ9)G
z=iD=0D=v0)v7?H^y4cahVO3D<Hm;L0>BT<fsIMi<vIh<vJ9tpDXP*5DpqL6t0D0Nj
zkM0-w9MXty<igkQ#nN5)as|dNN3rs7PL(W2AuWhLjd5>pG|AY{ho^184PRqtK}FO4
z!U{d=;j8mX{-~E{<KbzQ$hkPE-k?Oc0j4Q~vvK3y4H{$sSg>G6w{9c$?!6^B*<QOo
zw^{oUU3%7?JNfLgVhgU~W$SWZ`eem|6*<XCGAU?<Y!M8|U_jK$3N@{la>lXsYE}zA
z{r=MAkQEG2!0Q!9w&g(}!vKMpecLbTQrau<bsg;}?YO!)to!z;V_8HMlWhO{Y3rL~
zSA`v29QJsi$WgYWS?`@uK7Nb2OOFC}JOel*Mx1l;#hpusSq=mBYlfq-DHpHK!N-fC
z*c&)lwfPi53paGbZO4>pu|(d?F2vu)V&RU8GM+i`oVIa&P0YG=5=JelTwB!xNri~4
z-o4vSpS}@5T3T9z1{vlNwrP{~>#tXYLKcAfbyIe4yeca*RO0EHKbNh~{qM-73s>&V
zFLaYaG8B*|2oM=(x@TXwXq`$=4qSLf<NL2{zi?&F_w#mA6lNqs@cxz=O0&|?(b)iC
z#)(~P*%j7~%zSj4%s1n`mjp;DP<9S;S%eqsb$I*jxe*4)&kw)*?wlKLIQCEr`zh-%
zW*KH}L3R=H!d}Kk6?WleMuCfC>fzrfp<T_W{hIJTnK!Q*hskRzig_aT$)`inyJ5*v
z;Il?!_SOUZIacL=Dg(53?H=>zHP>{D5JVs#Ter^Iv!_^Vos|{J$_$mJm8o-gJp19Y
zDYJJ}PY)yoWhf{qQBa2%T4VOI-2k6|TH~&5vYOUQ{c8H=a9C-rSqKJslYhN|cdVJT
zW)1B!X+bf)fZ)2iLyL@*B&#wij%sFxPCB~w*FSFIm^kjXU4=Wci)v+sDlTYlxS_|(
zFaP8-t$X_EEn|Q2jW>Q$RSXbI@vHV=))vg&ih0|yXa|%=Kzg40s-^oPg&N7Y_$Zv)
z4lT11#O6w0-ZL}t;w%)qkfNgc$JJ<=h4%)bX|<@y3n1UYd7qb;=}`3y;JUhX>t{D_
z&IN>R%m4i6v<PD`W7x1CA9>{a-p9B2VcNN+j~y|7&7}|joS7C#OSU|b&oOf>d;#uH
zb7TT7UbFX=Pgh<)v}I;`;BTil`QYod%A0m)K1m*x6SUF_0&IqQF$1jGb=kJ4XV=;X
z;J0Sxo6c=DYw_;QI}6!c0AX*QQ(*>RfFFCT&&x0W9Jzm&U*6>)A3;J`yr&4+g_yYo
z<5yzJIsgbtkJbaycUe~*-77|ljh0!su^R@ojHCOqFppw<yB61shoimXsEU8rS*`F|
z|ELXZPPii<r;J2S(LtFmR;36+DbC7zG%qh~(z#xLeQ>PEY}Dw*O`8gVKytjSji4aY
zok4S?VVmEy$H?zU3xAKFykwqTImQ3^VChZgwh9I1r30IdpT2olPO%`?niR1R(3&-o
zA~teC_!5GdTQ^RxnHfCL*e3xP@$j)j?wq!Bk1`k2qCr~AMrjp9?QPrEU%GVb_U-w*
zcHMQx86V7^z2TT+TGXzc8gn=&CkNho>z6C9?0x`d!0auUuo_>l#+H3v>7XHzWa|*d
z3N$0d#)HS>{PuAsMEMnAlh@*^aZrBSh>9;;VA2I>SEFQ>-pXwB9T}Z=aX1*@r=K?T
z?)@rr6oQ|4V&llOY~K8(O`CGf2@TY~<Ng`LM=jrz8$P376PJL1*ts`s$UO#|N5@zD
zz5M<5J6>5jG_&LKE1#~sbYQdU8G!-4>#y0A_sf#qO0y79+6+eZI?@UDG872t-YzRC
zXdR@9$;==9yVqH_|4>+5l${%X<*x1(Kj8@{G+4THD-l(%o-}LL)um0|)YKp|)~v}c
z=Y;0LZ_LH~ZJ56uzwX4&0_-Zlu0km7l^azyfAau{zQ94_4BXlSCpPw+j}=^Fm*d%)
zShgE>C0(n9E{3+j6DOlus3hor{uews<Dhae4uk>Td1rPkyt6EsmKG$U#fx{GcG}1-
zTlPiHHh%mnqNfl_Lb8RR{NL0~2nqxw1*8>_vE8OLa}+@N9UQc2XX_7i(HdH_tNDYk
z*IqK9Syp<WS%cJCS;2ABw<yI#tYV&%6d+=yxLvc1P(W7RU`?P00+#sS3nxAC?vmbJ
zYWD6_v*O2QWrYA5IdaiM51mj#u|(GD)pypdn_do65#gi}n7_m8Bp)GnNsx!KT-cQV
zGNW@HoY)9M+MsQX@*sX`tpC5&cwz<???g~mt`1mfB-{AUsW`7)g3!S=<MH`2B-vH-
zGb?2mmWYm#ZOaWC_8xWAe}I(u;kXuT+nYsZB)s+=G@b_Vr}lcLD!lGJJ|a>+-79~f
zi&m@ze>8F38OPRb-XJX{$r^e}!_U9l=qkU3Et6o<nm}mZG^0VS<f<YCLz;JA)~-@|
zgNUxZw)5kUPaihy+x-0SQ%{|m@RN1xrtg<aU42k#2$l6?GLU4US_qeR#0}j_B9@A@
z?EGa5E*uL-RWzfa1oIr%5TBkM_jTs|T?IIC1ojqJ8TF&$&2gEzY16D&f1^@dty<{B
z6W{hrA~|jwp?E||Khk4RX;yy2l9<_b5z_ampG_wptrWXjyNVr0e?4Q%^!Yo9ND6Uw
zpN7nET~-RF%V*ftCw8gTuy%5c&+0c=M0EAl69F85d_#b~`f7Q(UbX#PXP$F7NI$H+
zAw}cQ!@R38>k8b|-OF64Am;#hWi~pzfpb5H(v?n_Gv>knF7T*7_Irsieigb8$KK*9
zhIv-SpJ>~*wEzW3fNIuE*|_n}e*H$QTbCW<Vu)#w&%WT-QMhA_T%}_hwn4|tZ&aGK
zVkMz9E5%B&7Ep?nWTi+6?I<Ea^H=Oywm!FAvy2YSGx{D==c^w!2W_boAJrnGL-T4v
z(9(5#7q8jdv3X{z#%cJCR?V78&6~gGx_5Qz^!mbu8@F!VSGR6jEZr|(zH|5Pf?mCv
z)U5gN<jL1`>QuKJG<+zQt5M`4BZ!k4qfZlbuZMOu5_nWALU4PE@SmSCW;wD8J%4MZ
z*-zu{<8W(_=&`Zi`;STZ;Me_>gB@}RRKI?@=?4phw{82^0}o98-~X1E$_eGDLsN4U
z|LCZTlR4U?R%_OZwPdYW3uwVgu<1nN!yfGlAzUp8B!m#!RUnA4qZh5*vtaq2quXY+
zZj@e7<aTbInVA;YxV_+q`8#YW6mv?_Z`o33*sxxYKmJ4Ay3Z|NeqBb!!y`s4xa+Ro
zu>$3+v)<pjH8(f+;l_<KSFYTZkO3m?V-Nnp8?S@XAVR$~)JsLr`cY(GKHMz_=r7rY
z*XLryLT{2qKvw#yT#e%z;I;m!l@cfQBMs9Be}e4711UGFavQ*_<d{ACmb>qs^z_p|
z#3Lw<o01Z7%W0nzJPly%TJ~hTWpIuM_myd5s8|WD1i7S59-9*EDi(qrVnlkMTf!*W
zo*imv&CAy3emQNkEeQliv8#0bsxt!)VA-}<z54p*&0l)#vFShmeElPjd~X=Qm<N6O
zytQJ*&dkgt$59VIeA=Ep1!dV?u1217AT~g(W1av@;`oL*r!5Aw^rY+oWL8JLF~E--
zaoq%%s@T*6x;!FegfQWJG|ouS{)7l`%*6xWBOni9UyMpHK(}rU1`qD?_~U0h{qzsR
zhtCA;QjMPwHx4mE_i+$NvxZW_)!JfV#J|$4%-}lBuF^tCp;!u5g3KHj@@i1L-sNV8
z8Cnv6k0z}zDpp!+A%vsY^jS<zvhbTOB5KwwQ%dpVlhc$^qeq_;q5jpYv!_m737~!Z
zTDC0*3}{o%c^2=2q{<0YGq<31bsXOar!+y^8psSGGjxE(kR=Yu597h_F?k(!<R5q{
zks*q=2jbMGutb8o<YI+Eqp)yCrB%wI4TOFE`Nf}px@h?DA7i?qAdwP?FaV%U>0b0t
zR?t#wCA8MACaG8otrRK2%BTgQl@PAdruJ446KUZU!+1QPS!)T4X~x1`0h@#=mSIg^
zn^DxSaJcG_uF<21oPG9(W5+Ig`svdQR}3CJa_rdofCUtf9{sodo?+qk1Pox}qoy#@
z(WsY-hUsWp4b3vqG7D{MMA1ABx`rmw*>l`Ve7qQw)<g$AAHZ@HGD5iSXx!Q(s-{Zx
zfOu~q?wWGoUvWqw5MFrUNB<}t-~A8q4FEY7`FItqilL#INwcf9<3b9dBr6T2v=ZbB
z7Q{lbRO|{CO1orkzK(RG@J2SWU{=gRN-B1|0(mlRB8iF}-L*~DZ%+NpJY-1Q%*@nP
ztF}f1Lu2Ro;=}6O_pM)kxiLApJOD9oo6&l(1%eVm3jvADB($rJ&UMhSme(o2;{NLj
zUp+uz#`b)?yAaRL^!mUbFc#O0v;c;5z+-*la84}g=M>?BF<7wU@O4D3^skvacT0T7
zKT4zowD(`lP>AOQ4FwjY6e|f=YpF;IErbwK3k4-ex!Un6Ax#@+5D6mf$IOI@C78yY
zQhCMlLU@DXiMVOql)&$xyT0MT<BxCj<(K(GhkpF&r>3;g1wsJ#>({nTn;N@!7nIKc
zH+RP)CzfnGB+BSKUR5qplX3gzJUsmqiWQXh;<yKV!eWJcd*S+{qxt%!%VOS`hsS?}
zqYj7QKX3+!@pV$1tSI3IH7}(h37TT4pP-;6lhTe$mLw(FHEnBM7Q}+IAVGo!X|I<F
zG|Ucbc&0UJCQCw@o^9Ie-eXF}wC3YF*7!Z(AG5yr;sPm$eeuPz+}xt{^w6qR!&<cX
zHz1EWrs3IVA2oLD;+t;jRSxMisa6qAtI7-ha4|kvin&`+tUL&Qz~^@qguvr{Ft|0+
zgJm+?!kxHzB9`qsC^kE63=pCCav+fZGR{zs?in%yU5O>M)~@ngoPM3V7DObNh{>aS
z)A81jzVLdzX<=!hy+&>%bfh*C40LN#y=G<zzni5sZ`yQwn>H^vjt0=YdDf;)51x7E
zd*`3usZO1={BlR(9cpTbsE(W>%-M>u%kjxlX!aT#9<TvwM1HF*TzC|2=oaUaD)H3?
z4xXQdXJ;a09ddg&@g1&IthA`e$;=#9ROH6g!i)IkALdPyfGYqAArXj<h4dQb+7h;q
z0b$uP7!V=b@+OvA!Ztl|rLg=axY2>ZrYpMe#zhK$I)>LBnm|MWTRd>(QLz&Yeh<s2
zqrAK@5mHhDv2WrqR)m#wWirAFi+AC{@A2~{1P{6-(vXrM)J(=}1JJ#0c@<$wW6~O2
z^5vm&@b7mWNJUsdfuod;*8`<n;FE6#2;U4a8bCvmR{|t71Xz(0+I7hxMM4s3&)o^_
zm!HS<7-XSYGn1Ca1w>Ml7D6cY8V3n-l{%|OgEFZ<@-$Yhz?e_)({!v~hrE5L-vI49
z;I#fYb8yuI>KJ3-yz@SuFkxAT4z(99yd{?C4>PZtZ+mkdM*fOzdB`n>peo3&F=GTS
z?}XcXqHbz5Yd_&b*p!Q*pJ8L}Z$|wG2!Vv@zg*Jx<x+z|V@+Wn{}}Ki2ui~x2-dEK
ziFTQun<R|M3lhG|-_*Bg!$&rQwXig6EtEFhq`gjtrsHDcx+y1jtIcJp+ZD_3)W0z4
zYjo;@<NM&E%aNIhU<mv6VasMrnt(fRL3#$Rx(-)ge<+l|`0<y#@y0LDJTpBQysx0(
zQ7I3%j+(a(|67ge8!>Y;gg`)m=wM?^rq@;58n~<z&TWT`V43*MBmI5&*K~Zc#ETsN
z=BsiHuyyOcaM(>W`A5fOgHlNzh$sP<LB0l11fjJ{3J4QOknhCNKvecK0}#yGVrCXv
zvSyYVQj_wVg!(<RaM{47CE<kUUCY5gZ^Xn2c<^5sJ~HuRy!>haShog$zZ`e}1D}n@
zNvBq!Ht;&8T;2VeYkG_vIj^9=NlObJqK6uL)!Xv0DjT0H!|26ce_5&ud2b?a86kA2
zg?o;}(RKHKJ-NkrZ7!bv2_Xw90sKyubpTH>5&jWn`+_t;aLu$lKpG8T0`vkVe_4>@
zD3AUlqz}QYy%R}dCe!F#YaxY_T6hx%q&F7e%0bO*R0}1z@zcJ;X(!|LH>0FqR)<(-
zG--yfr=qX`y}F`dLwq^8Y7vpSfq(m3mqSYWL|C&2ug}BiB~aQ+Ns$6pl~|b!4WtI}
zY+v+m5!aNe9MJXJTs$((>mdER8v9o{1{ghhK`CDlC(;1$N#9opMq&^_Xb^!I!eav_
zt%ywPW`Aa*5B*sHY-z<TGz+b@)TA{_DWq0HkR%e?OnFD2ZnfjYzj-E4KZbW+$Lfu!
z-(de8Vk7S-r(oW4Jogk@)yKkB2!^Wmp{-q;9ST{d5}*p#4;%5>QY_kmP5Y2j<j-U~
zxSqJNtX1fuQ3h`Ajy{b`HnlD1{QvnG?=Ql(yx+#jQ^gFhapT??*i%{$pwv!`5>Qd1
z_nk%r(ja0Y<ypPnZS|vF&|uA`#RIe?$)q$%&1RH_5F`}2u738mt|hHWB8+?&@4bcD
zOOTXY2`Y$agIn)JR&{i5k6#ueR0TX>CTiyAhnqEfbmGM84xRxv=3?nCEZC0k*W;(n
z01))^#;S_iOv-fon&{O47arwBoy)0zk8p)%e7pot&cOCO*z$Ku{W!Rm1Z7cwd|tFi
z>>6xr02mh#1i@9lBUKwNas37nY(`kH(ps=3wAMDW)<XJ`FEi@Y3`lKQJEd*YQvJtf
z&cH3#Vas0F_5r4SG2@aev3?!SJriF|t`bk^S!a!yJb48WP^!|EI!dF+MS+8#x8UQ&
z_;wv!4O@6(KDp|Oq)Z~OC6H?4wC1?K7pf;$B03S)n6egEjrWEG*}qrPKX?Wx!3ikE
z3>4!FB0xa{E_rcw(%vK$KZKyo=pv3(NkJReC!jTH7E&ln3orCbBm_wf$92y?y-@;J
z`k=m8ycU6ju(r$zA9xfO490U$;nq7368(Sj$-;>fmzYq=9e0fH*ROR&tk|u2n7A5W
zuE2_HgcXWhDE21rSXJ#q)Qn<<25GpxCkD1es_l_)#qFR+r{lc^D0Ct4dmQn7unge3
zD&F~1dirMx{6jIufb?9V<iY)tV9Hc%7`G1;n=&yim{|#7nl>w~q##QPFLJCXztHX5
zqm&Qgy329#6{uaO%tx1SBtu!m`0`t5Tmv`V1|bjlsVb$fzy6Cz_1xmc8^@1d+P{CB
zgh2ozJo*EsZot|-*jw!7MUqcaRqH)8ASW|~vs&ZiCg@fdbyLeUj>=j&MR@8bj9P;H
zFl_m|@NXUx2I$_s;k)n7F2w^0-Jl7rVFHX95HSEEUepLuFy+F+E19>THCdMN{j;S=
zNK%3$^8tz-?YO#RzuV77V@JMubcr3KTQ+0H5195H_U52vYYZ5KuHDPj16kGa)N^?J
z5#0aC0o>xPTXVx<y>4Chu3dX$%0~lt-Z^2wfVO2x;^Fg+ET~Fs6S)DVNob8^G|51>
zy13w|xb*2td0H3m#GCUlVj+_3KLFrK@OUdZC-^2HVVPBlREXG}$SaZ`ApnyNL0+#9
zTf*}9Edh%lg|r1pvOH3bKmY(B07*naRHTrm<*h#pOo+%3RWD=ogs!z-yE~>`&+9KC
zcQ5X^FM_;x?aHrFBPDvVcin>LU%+j*<D$!unTel%#1oHT(+130hPw3<KkeMTsGEts
zVc3<medBXxPqg(D+nHoy+qP}nc7CyK+qRvF?TIt7ZQIFn^L~5pA8<dOUDaK6PVGLu
z*6zJlmq`?Dd|Gikf(%bhm0VsL!63ce%zC_+Q<IcwW~(75+2t(3a=3{E2Qv=-GTCO=
z<pJ5a|CYS(4UtnjQ;i@J@%m{mE@BopNKHjUd25K%=mAKf9X-hzy&?pIXZ*_e6A(17
zEwd+WB&DA91MuDsq$5N64-HytH?nqy3A#d{ZbtuTiHoEB`=Nk7z^{&rWlxb0#$8iZ
z%a9!5kk5jF1ZSp0U0Uq`#A&7@375+xLg@r0gsb)a6M}yq!_tKX7<AtU3d#$2FLFB`
z2aYgEj_BJt8f;Vpb>f;J{V=gi4P^4R5!mBqGvPJ6PU!eqVUacst_DHFmjatrA&`d0
zIXOi&HQ}gCfb@wdn!BjiP|$!QDiG!%0rgL`k^nlwX?`JCqeSGv{AlWu2>3B_RC8lY
z>_zFkJ9PtM#b<lgx=39JA^<vOS7qgk`<1r;@l-ZoH#YtDY%GHn4}c40A~3Secj}1C
z?FJdZ)y((`Z@ZeC!OD*vxKvFY8Z>Cc!Se7gC}@A)MEPP#W~X5fKa&#4=*>Qd`yL>c
zRT(aeRHS0}r!tP-b*{s0zv%@`kVj>C|A6e(n5(2>zxUi99zjqvGgC@K_uto5n?Kc(
zVnvNoJGP**G9`Kw@cYI7Bxm7!UZzj?k7b)XG!3WtEnL1(3`>L&)1Lsbxtf-_q)_tO
z5SkWr;v`UXB~Y8z!xjPm!TEn+4HP(Aog&a+evt4U8?L$Ja!tGekGEf|IbZ;s<zinn
z&Hw;xV0PUAT>Zi6HRlOv_d94^7uSFS*9j>6xeisIg;3x@C-o=+^4Ez)z8>uaa^8zi
zoBtZF6<5FDU*W3QMZ&nM$OD}Hl2OYPM@8n|;YJ=fMk|DCAbuz!XcH<L<#&iUW5C|f
ztmnrSRw-mjnp+s?ZYbP;KWuTKDFoScgPDP$+wz||0rE$~Sftxb5Jp3{(DfWV##~u~
zprw>{lVS-(vOqN-_e8qoNZ4kMPx<<@9cN*@(Tdrmo6pA;wV?fWcX|Y)33ey`mG8sa
z*T8pZ3Fv>lfs=K@E7$F(PC1^|ppb@PW+n%t(&N$L_*uA!Jdx+es<U~qsPmgidap(z
z`*&ee|MXeTh#srrle2aYM=Nso*>o^eliZME-bvoj(bV^PZxZytlR<D3ULR_yO;0q*
z`U6;Omg(@ghnK4TfL~raTIks-cA$o!HAZi?hU-4mVPu5R7$PX7RzeA)qS_w6l0^du
zi8YgEy4**Hzqu?o(ff0_vO8V9w{<n;<%s}O*}=u1|7ai53EBUX1jKK~H=_M3p@O|v
z(v2}>3?yl&XkdPo=(!!_5LAXa#|%oN@9ClqU$Ai&5-hwpnpu_-YnJ^}9f*->se-2^
zRgoBzHSVZ248{A=S;OW_qMsYgwb4*MR~_?KT%1d75#S^mnCP~r-=pnzp)Qcfqc!4_
z)Uyka?diTHOn|VwS4=RM3?kM9ov02slcEK@4(=qov06=p$>E8D0s7fid@u^TeLtdl
z>dQHMX;2O#9x_tI3V-QGW7tKX;iB~j@OiV_uQkc4Zd2mbKZ*pqEGmc$MR{5w_8tU-
z3^%v!Uo3g}qc}w+m<FEChPk2Ef!(n^UaZh_t;I>XMd-BBjmGy`zdzc@0IU6hX+vST
z#AI)|`z}-HN)XEqthf*o19x2;AuT}Ve;SR#jW3Adsr2gHHL98eY6x*wqZcax&aX%H
z#O}qK8dJdOJVNxRX>VNZL7g5L5-;pe(i4%jl)T0>iYqIJ!bJDInL`++f(l%R6X<Ko
zLrmd~8C&W+))*+A3;aE@w4EKZ+bNiF{{0EFofY07-1KFE@di~5lHoZRLIVqzyHxG&
zetP@oX7@#1Tiao!4hk%ASnn<KtuS1^`}^G<jl8BC_+6RJeii*F3r<?l|D!1c!4QFw
z3^F}{V@9SdV+gugCO7zF<F{9sCz-~200oKfU9$tnAUivY1h&@(?CW_zOm33Ieyyjl
z)lbWD))aI?6+=b_2Nw%r**|kXuKBUYh{`)#?0SHw@XCXE8V3I@h)hb!_2VCt)-ZY8
z-{eX0_%ik=J3BQqML$VfbGytk%X{<qxY1bES=HJ3zJODjvVTAD*(t?lwms`&8H)vu
zKBSk7#R<K8G5fYt4%)1x<GHIBL<rkor6xgBrjY66n$7Mydl2Z0G-;4D+|`$qQZC#j
zmc>9^QeTGkhZr3r?d#oUg6F0tm&JlbQ~Qsl$LU=1KQ(?kCZE^GUo>%NwM=%BY=JV5
zm>IgJyQAK-!IKLUu0DW3!_5eFXMxW3oNT!d@*Fo%VO|*2O9DTSN#7R)a1S8fvCm}E
z62Po<DqF-6h0klDO`yNkpu^8ak>zwH-}x{>o09qfMHrgsd$y-PO&C1l)Y8WBZfAyM
zKA+ZbfJhzJLJu~Sop`#>ljfU?Em%FIz5S<GcmoM%8RR;H&-+D9!!@Gn9!r7h=>EvP
z)t--yi))3B#+w~&(^#qlCVAL)5Wa2>#T;q73loG0d3Z#pyw9&xN^nSgc-X<g-+pM>
z5R4|`^HW*vI5__902jYE+`mW06rE$c3g?dnrb$?ngP7vRUf<4POIx+E7P_!(&MTLs
z1FNm(Nq->bj{(EUYGXH-^EL0-Z=}Oiho%5ADW9I~;_`@AO8+xUILMFz*uzL0Mn~fp
z7GEW4&(GHb9yim+vj=?5Zp;43#F<|ze~B0arOs9G>BFtTg_VzKC3_Swzb+@IzWC4Y
zEO@D<OWN397MSzAf<i3we3HBgi1`DjFFen*5DAPgK(znB$0)wNU2cx|3#p-_kH(z+
zNZedLu6%#AM#@CPjV4r$jZfn7@-<d_V<rQ%?u>Rgz%3#1M0F$MTFlBE6%}H|c0!u!
z3cC&WsA#)hL@{#Umf7C%7d|L5sL&W9Ot{<U_896CX<SUvQg!@KEoJt{QpWozm5B*I
zpBXc*q_oKz%SJshb%2a7gE2CXD4xpim3~d@^Qc};cav9>zErp8{dBGn*tlW9u_72_
z@}GGhLpaxmmTOQ9@jP50oKatEnOK3g5J0e4yxzj1OE~0146EwY{Dd5m43uc9Y+(&)
zc*N@rA8DKHVi5(Hqm4oWMu?c&A#!pwU&q8{mNBcTmZHr6ys8^6^5ap0U^MocgZgaI
zOp@$6UL$|(f|Yo@lP6Fn1OVW1cju<0oQOLHaiYI@W^}T^1*Rx}*DFLmk#OdSe?b~q
zZeH~jYY?P+Td@_WRrgU)2sl5VBBH0N7+YvyJRsc<3CX8YV^RlC=M#`|#@w!&fc+e?
z_3EG@_o7IKuDmht$q)qyf*Q}}UD|JTvu9w`70A#eJw!xs(xeBZ=acYMudgEcylh=9
zje2YJA0CZqd1O3MrEpWa8@lI{!+t1%h`{jw=dk4(sldAj-84q~#kBn&gkV6kr}Iv*
zEEv??@`vtn@)J))OwF+#<-+zs7nbd+mR%b&)lq+7ZS~ASbJSYy__M5=X@XN0+S_4T
zMf+hMG7@?4j)4dGT(7V1OIiaomP;al1`t=NGWMfkBBGo-<dNc+-<kPriaVyOiW<h3
zna}|q2KzT3%&mop!B{>xE+uG4yD@Q%;7*t*U}UST<%(6}RbK=o=orPZuYQgQ0tAC0
zVYs-+etGoWw!~(2BWms&0m;aYekmbQW#01!LoW1^8O#{YPs4sdW6g;`PfWBIaUftj
z5|)|^hcerf>&$O@dtL97OktLdnb|?A&{>72FtfQvrAH?|ruy@47jN5_a9=0fSos=Y
zx8GCGJ7;oaW5D=4I~tydBdL{?GnrGyns{8{VboW_TteY%4Y#_~n6LCaL!#y>RM4pt
zZjMf5+h^Tfwej?%fGF){M@h`jF90`7q;$!Yr>}EmeRD_PPM5+5M5Hc-n~ybX4o@5}
zDRtNzjj0^(Hi6JDyqeBipL+l#x|#tSBm_<p8bvx{01`qB0dOQ<;2KF308Sc=Lb49L
zpUhRG+QJ(*#N3%RUhqm%AS6>#dc2;jX#BiR>(8?C=nO-)l|QOtsKhZV$QJ?-?JX#@
zZTh~@GPoPZlPmtnu@UjSszk!Q_8gfiurkLWDCC{r{1I^EuZRP*J5hIBHTr6G@&lY0
z{H@YKcORoTsD;SM*>6^vd@zNVe?R9_o4sQG{`(*0fLbWOZ&rC}&s^Jo&J7TvzAH>w
z{y=ZtE8XGlJr909{-P=Sif%}d92izR>^`%}A9>e@W^yEK#SM7*xG6SURdGeF<q`2z
zjWPYlf3bD+kh%rnyUNk|eqOJEVE)fN?qCk^So7=xz_;~H4<b&j{(@OXoQnUD1zjB_
z0eC#@nqALA?yoK|5cPe2S5;~+V<TdV$D<59qx}k0jac1%7$llkm<4<?1BoOZZClT-
zswqeR`QxydN_J^)?`C>;_zUfB6e3h0C{|Aw^jRe&Nnk#Fecukhuoj5J^mAfin=djr
zJ50kP9{yehZUBM-gJJK&4SS^SQ^mvP9^Ajd9TE$Bx5jB~JYH6!X{u6$0FZ>><K-Ra
zGSarAD0IO9dj8jgS)b;WvD%%V(eyr<P?|}@TMv$sCi#<u0nzYJ3OVNU?j^qnLju1b
zL3CwT^Y#DIIdkSzm-vIhgSKlLF2V4xP85-d2MGNPC#R&e(BYn~H8fyP#ISCANCbfd
z2~k+5YP~yD_TvpvAwCjw)Qb`Vgau7D`tWZKW|_tvf><l8BzXSJWypm8m)cwc@<RFb
zjxgLQveB3w>l)q&$0B@j;LAEYdT~S&kQe>e&6E+yD1b{?uc|kLFpPsZWduR=>g#Sy
z3oYb_#qzR9KjXBA7BDov$Ez&we2BiWu$CrY80!R8>V{{=K9K-!19>TbeK}sO0aAkL
zbac`}PZ@R;gmwCzpP(Te0uc>Uu6oh{JCSgj{WR5E2ptPe#)g1*L3O#4JJO!XnbRVl
z-RYp2ud*Ma+!g<bWur+qOQZ3=?-j6>8Iv8VvMjDM7~1#jo$v7=E7(6wU8Zr6T7|B5
zHr`!z2p?<o%K#pOq#b+u!Swmi=fZlO)Zr4{#A44yy(N+89QMw5N#bUo7?2%2zSYPD
zl7>gpCyTJ0T5I(iEJ1B5>R_GqA8Fb^Z3429`MZ2Aj^=dCMa5wS0#yn6Dah4!20em<
zbPaj$daXTW6IaHfn3cDbr|t9{y$F-~sEZ=#>Hw~rdDZV;JG9dsT#JH8Rv5&SMm{|?
zY&$bssC@5Uxu6nW^*q8+?8PZ#=Q+YGfyXjAya~J-f$^6QCXN0WC#b#~p$;$*?<TH<
zVpRVXwv?6RrQw$kN6CO?7<kLDkR=LDPh6smgbHW!qeiwKR6fp$!IoT~utD0@#DQbh
zb5TfST|9YmR|IUAsbj+dqr;I7(3Dlr2kR$ZH^{E0l!nLh$<q~h!vm=_Qmc})<%l+k
z3-=Q|7n9mh_pyqTaEv6~f^ctTi|ecEJb|@6asWj<e1VNfKrR;i2kI<>Io-bJnBGXO
z^Pf-lieL4y(Cdj<U2A!Dd1%D0BwxD+cHQmNfVSog4{vm|uG5rpJ`ZQo+1kTNJ^oWo
z+k@D|bI)^eF#s9+H%r!><JB?Vpb=DicPRct)a?j8dnpPxw2u#|iUdSjWtqL{IXMt<
zJ?GQgWo};jidK5?8vgSJ!u|q7U#4UsoyKEy#+wmO`NY4ZPhXQPW$o*sLMsuZDw?&K
zTZ`|-GG?gKQ>|#F)=U6z+4;;N?2nn65NKkO_dDZ<IIw5}uiGDi!{s?0jd-e?Jt(^i
zLJTpNev$f|?mzHk?(Q+h0;M`wJ{a8~t=p4HPdo6VH~_X`1GZgUv<_4S`4Keg1<hUw
zc2%}i0~x}5MbY}okSj#l*0|w|+%S|gSeFKR+QY0XKWG5*<t$7>^X32?P2yZJQ*tM=
znUFNS-OTQCjm+{i{*pY5o^q1L1ZJ0Ia{p7Lwz5ICthQ0bwWyAVeJN_7aV;;4X3Kdq
z9`1x1anUrEAv~~s7?`rzi%Yu?Z@$;%Yb#got9N}GxfGJJxtvRY*u+of@ZH8<RroBJ
zNrJwF1&)k9MV^N@6<s}JIM{7rtdRE2Re%K-UjcD4!48XwbY#c|fw95AaW<O@0di;_
zo~+Pn!oHWn+Y{r9L@jhtS_lsmX48?rzNp5m)+bQ9799K(k;N&WN4wAv2GGa;g+M6&
z1p<&s()819K8ecN|Ehi6(j^<tv<s=_AK>_Kkk;3k9SB$5-|F$D+{EeKsrS+ROp7zr
zom#y{B2(JjX?q{@c`>^<nbfvaUnd{H6DDRm6%WxeWP0-nB8t7(fo5@|aDJ{fZ>u|K
zZdqYf=bKtn_yGc$&@3#^me@9_iXEo=TfhIq-;;umFiMNU;}WsoU+;-zOxBn<N2>~+
z4&Dh>c03g}AhAIfq@<@O+rn1rnKL3ENFrr3ibP0}be0maOVaTso~q?btcQCUWkI?_
zPq9&rU~OiL_0_tZB(6Vf+q*hhKSUwUK@<yvR)taLV~J>FsYctIvo?PA6K|1#&KliM
z$pBAhoyTf5M<(d?<)&&W9G8hz6>hMZKHCD%7TFrYG%*`&qt2e}_I3<v1O*?VSa~s{
zJ5#OQIG!eNEuk9SA;u3^simOT^yE!p+)eq;uVVGk)UjKqc7BC6savWsVEJZ`;Z8)~
zNKl4jWDEaVI{mvQk87b`{4?3n*M)L>H$*>y*ZuSHIl8i99jE=D)OV)C)VVb|ndqbl
zcw_i@R%ba0g07SCh07`UfHL7ZMsY6ACoA#z(WnKWd)KVq14GRs4*==;WZ=7ocP1NW
zHDAQYa~jg6qqq5497WOE;_P466J$?QOMD^Lc+gOxD0wg-Xix_Sixq~dgFex}uAUqu
zWi_?dSr)47hOn{s-Nr&(u~&y832E%T#HTrZ48w#OiZJ!+#rn~y@$FGqU+;wF$g@<J
zC;E-!BBju-y@^fucFKu=M=QAcGzP~<c^>wZs}>SQP+A}BxC@-i>QS8%lu@*xpn*rm
zaSr1y##U$g?e(m|3x5r=z_UBM5;F&6=hr|wReW)E^`9%On9RVXOO<wHTe;#3C|NCW
zqYmqgXzg$QoN`ErRgEgDz>gdoZ1O->(E{rY+@BmxP6z8|t;yOjGPv1my#@qpTbWp9
z=Ef8i*jBENQvA4ot!!xpDvj-#KEdE78QG!h<Tl0RB=y5e8FA&`90u3M*pK1${9aK~
z8Y~8THTB+Yo6(Q?JmDq?wiVKv&Vxn^nsraoI3EhG`T1^D7KAK!&*XXS=+%+tj!QZ5
z2vkv9qnaJ9$<q1moGDf<e@C-%K79#5qY#b|?X!Zn#y4@WHeq+`^m#iuPv3l-BVVDH
zb4}%7f9xroi==N<^K+8fn8O(A%k=*ME0!sJnsQ52_^D9LhhSYW;3_6Vlzpk0tKS&2
zSwW^Y@z}Xmi6a_shd@FEq3y5By6>pZFll*<I0osDH5nj5RLfLrxpctgCRC8>_zb&}
z<tq15!a@xby~hyR+uHmwuTKYheB0}hVvRRx;`>P{DOG-c=Xr2oW}ISpKd%-#1A=d6
z*52|8O#xT&%%?2eK&8gl-rF2K<ge%EMN}<M+2baR=`T=3rE&X-oQEUa)!Er6UoR=)
zS=tvH%ec}+Wd<1I`N^&Q{OC3qp$#wU;ZzkbEfaYS<`-AuH`5O-DIo!Zr?*T!VYLb=
zX`ljhMAPjt<kIxETtkM>J!X1!J{q@)d)0i_uoXx7XH%A*SoL-ya;T=P?vnZwQ}gST
zHN4UpL>;)!^yPG!j!4Mv*1t#lsrO`F_5gMm>Y=s|YLu){!)L!d0%f^A%Q+}5-G*05
zGO-b@w+{#4gQAT}N&$ha23JP(bRlk^KK=yD<dghE;{t1>h_v5M@GJB&UWq4fJfdPd
zF*ua7we{x?)>VCQor2MGAd6xs&*H&-+Mk${y6w(^g;q$sC;`1uD+4e3#)pZl0_JT9
zc|fAMzTRXyS^{eGZlE9UoI<>bIm*U7jloy4Li6Kql67_eJ^k#dU$vX$1;MF@@vYR8
zl^mR;0=Upm>V8xoO=oN1R2>~S47KV`LCCz_3DfSC`U<C0Av0Mjumk>nWL+hwDpD<;
zK)oI?m&1)OH8CD4Pg6iV{H@jPxhVz(g!*QwsZWu=u@RTQ0Zz&fOvT$xFW&46Q0@Y5
z&+YMg$v*6W!AipY!}xCEwZvC~ApSh6Q0Hnb)36|eX^()b*TYZVT}!2AS{I(=eouWA
z9`zS73jOE|{XwtajqFpa4BZp;#uCD`eSX8ud!)%H;Qf9m-J^5wU!i?ShHTBdj56_#
zHXQa>@;#EzrVsCs&t^uoyO7ChQ-edCMC(O*hk7fZQ`-t95YdFSb5Lh5=FO+jh*BwJ
zw-ffLHQWOV;fV<;n6CkW$R+3vw~})rcU|3aD=F)0R!4~W&;Q9Eb@__wfIznF8pb7E
zhZyQ`^9dMx;9Q@Jb$K14KiFUs*psyka{aE3{53|^M5I{W^I0%8FkhU)9l@BWhE6CV
z9cZmDxSFi?mZWp6C~_`zeYj8~XJp6xgAG7Sq#AY|6kGT2KjEZJFh|AK+$eknp4UKY
z{(9glXG(<hV-G{jpUsdE4IZMQ51V-2I_Ll4*@F71&F&misUxc%IdF>LeX@CS4R~{m
zj&w)cMd@DIms_e3mV1Vyb)mrw<`NOkr>s2{21R}RQdYhe4IsT`RPP}nBA-;>6U?DH
zRBD>r#$6WV>uIN-z!1)ruNtN#2b~1_5kjL?70qUf9vO$Ng>+2#-lZH5rjoV&W5$n;
zBtW`5oLA%-P+JRt!-Lk3C~)yB!>g2rs)k-l+lSYP*x~)z?1j6h1cp<NM)@EuAV=kI
z|NEVjGz>X$eYeGr{|Zx$a<%xwU!br>n=jo0UfLXfmgEl^`Aw|&8yzy9U0m&@uSE5{
zfVT^q&m4IZ1O;^YdR_=;<o4A#%65wH)R}OV2i|U^x4pM#flu#N{)K*cfu|2K%wvQn
zeoHDPloC#U{ET@jP}SmwI!I0LYL5+i7rvi%)rsS&hzX{5ZSp{-3LTS@KgsR|*@(P2
z;yXVl(?;$D@{@UO2au)xcN6T>#0~&kgE^Ac<-52RKYDhOo2knp($XOh&U2%3Vt$=5
z*<=D>ryz(udY|DWtAv1mmo-t#m3-c;*LGS;=kA|5b7Ia@TpwAC?QW4WIe(4wVMHt^
z?MuNYfDpX+O>+}#Wa_PEdvBGeIe4rJl>e3Hd=6AS4Y1nquxi;*C&}bW9H@1WzL!2@
zp_^hgj1Ua0MJ8{%(f(z2*9s%5#R!u%VuZSM=fUJja1)ev$Ge$t67OW=o{x6DO$Yx8
zGmqIPsu8>WxzR-iO8&8Y;r=-F-yN(+!|L(w^7W;ELgLjg5)PPkQpOW;b2)h0nvO7g
zS*U!EFmeSjc)S9)psmU;xPZIJr4!{kLC8GL1M`6klG7DdOTX|1AR5M)IZ=BXl9GkR
z%;i$ZiUc8bM53~j7!Ce8=Bft+c<uRI3(<*r@C0(;AOMjfx$7+7|8(T#12o5|9yTU>
zd^DMp^yO*qDG^o=|9p%O4m7*-qGzuU#R%1!<@IteF3+d6IEy|&emq48`-wnr%7W)~
zGl1Z~GA&$X<|EiLJEYFQr#;RvU%yeK!<b*YpMn?Q`^0Qx=L;q891Eg45wQjGqz2c=
z_0{O02zJFLDj!0&AwUY<RR*%Y3vJ(7@2+Ha7}$@U^}ih6l{jKvL@&S+vxXUjAoZ<Y
z`dE|Mk<B0U3wgTyHy?^4j_aayZCL-sYKl8?j~7(gm8!xWZKSqZLI9sWL94{I3YS6S
zThnH)ijG|T4+3`E7Gc18DFEKKP_u=mH3-?Ih5%A)lgH5R%W@`qVObzdBRjw)IJ9r(
zk~}E^qMNtIIvwVx1mIUVHM4YuUj6OWCY`f*WE*_-x^?Sb^_VkS|0EiQyLqm=Lv%ru
z{hLOkjRU%1S;Q7R7pKDN!zG*@JeLgQF#U{25Ahh>^_jZ$&3}*#*iOiwB$J)LK=L45
z!CBQ$m#*s67i|Q=4P>n9$!fJbyBt?$u|R#aoVxpDp}!ifgSU<hA*$`D38lWe;1gQA
zZT0pkfz1vM1R^NRok4{EUV+)2uFmWM<{+NEqeHf-3sKdYmk0q`FiH-y5YIigg^X!w
zxh77Z0l_+I;Q;%q>mU4dIdwQhrx{cOxVm`zq-_h2)#+;tbj(diGIxBmc9NHHH9)+&
zsO*POfy5$Kv?B+cUiS)_?4cCZ(h5}hA=)~Qa_f%JgzT*Lw`U6FzS2~Un5(RAnvwdn
z$nY8Dd(gu(<2Ph^I23y2&2^ZIw5r-bG_187!80|sK%<3b%9NYbI>%MJa$4mEAg8Qx
z>4l99Kg*H{zSu}-24}GBF$&*4GC!N%-L*`>ZnsgnS<JC;2+tje_}@pw!{cE1HOG(h
zB_u(8yy=E%9Yj?cdP91aF2<Iq<z}@&s6_*E<S}ST>M-^M$l-b>8}k;pOG|7-Tt`=q
zNgMgyq`=%Mr<P%c#daO?GM|nG5q0K0O~C476~%wA_+ktYc9HhWJG2|>!M>G}ioT7#
z@N(pstuc|if=GRMEyYWjL<q8RNhNuIRGhR!`?W{Daj^Jyr^(u1Ys-DVoVi^hx-vJI
z_|B{}+Eqsi0G+nOUMfqiQ-iTtL2$qw)M=g&a=~QCf3dBz1WCeeFr#k+eOukW+5iAF
zj{kQ@!0(ag+iH3>kmg9W@s#yhFbG&7A+BoqMUSPhUls3jgxc9BKYX4bB5^U+Skk7X
z#0-zNj9TwrKk<(rXMe!4q*Oh*OBE)epVZQ=q<|N3w~SP=<<o9TDzb<XSGEe)d?z>C
zM$i7lU)asS3H#W1#)l>QI$OQq`}jss)lpE0e;B}ci}XK^HNx-4ILZFI*KeDA`CXU}
zlelaPt|T-axkTXY^kr^xpRSQYSVkkqVp*={{~hfWev4{Twk(hb3e~FaWs0R{$U*RS
zwr5S6xJ6oz=hGM4lbX571_|huU1^-9Dm@`V2`*n^v^Ro=1mSRhz;OxBof?R0HSl2l
zQ=gtL)HSZ<-i;5)LB$p|VO!{;x=^kv&Pe0R@J_fuOHA76ysJkD<dco(z07Z-N&a_@
zW>o4{c5{f-vv{>8fq$$@<ywpm3p+q#LxU+c54V;p)h2Ec7GXZH3HE3ol(HCa4h){C
z3f2&u5AI0a6rtZeV&ml~AwSXtn-o##+Zn?V`ma}%k6`MFX+-j`BTFCfOiNB;Mv`Uc
zM#aw3Af8_?SX=^rSr`+8zby#u?VKUq<2Wjf7Tn;*T+ivq(vInFx|hX#NceUe!;h=#
zJT=Kni9a^y74Khaqd|2h0b)hQ_D`jhrlcIT^)P6Z$qRG&CZsy$((MK^=0ddt{ji7M
zBQMm@q)OiZ=Ny9T1^HilcP_c^D*Gvm`Q^a%V`p)}kDB;l)z}}CL})k7r)g`9^-u)=
z+V&R|-QZO2gNJ|gEW%U&K53`#>CHBUufe0BHqn?uWeyXY;c=b1<!}>oQIYi$f54XM
z84np9L#vUdbaXttE7L(Gs_Ps(KPZf_L+7G^deBHo++S!;J@v>UE7ajG7R)r8QZ4Cy
z5+=A`bA<)E#a0np^x-89Q~5?bWM*#ftff}C68D@5B7a5%;%&4fBa|;&8+5Co>TFK+
zu78`k`KoJ5*O(jEN+vjTvO1_n5aUEXoy{lI5VMz8ZgkL?SL4(|7ETFO>Xl1mL^^6H
zA@^3p>lUIQfI>5(rP5!6JLy0xNm{-Ui5>^|t2KraS;H*nQMZ;*pIK;mmj)x#gEFS<
zQX9=?n)4J(!6tG!C=x2Ed~q+Nh1j$YDu)(={Wc8vDck-wL=FIfR7Ii3#Vep>?j@Yh
zPy{Q0u5w72--{A*GtvwsMVA<sCgE%XF*Bpx5xnVD6Uwrj3~d61ma^4KWcq+qgfy2}
zQV7$fBu*H3M_^1b1cR@TlWzE=V>#P#IY8h9g71c){&vH{LmQVg8J~sru}4bTMOino
z-cepG`f<Sr%b31g51cmNmHu5YJjsuyL$fM9y{kvW`-B-4rPZ1jU&i7NLzZ*`l#bNM
z6OT>Fu1V3PTddlMy1LyiuUVVOs;$|S%?tc8!d@zsc`8|{RKdYk0|O`AE4A?a{#8`8
zNrh@S@$l!V^Q<uN12&{vSAN4LJ;o^f`PxIH&z|`(zX6Myz6+F8Imth2zX&c7K$_CO
zzyN?Ah&-UxE9%MgdRhWio?NE>+VvwSPId9`_D7`@8ByrxRV9kAA?)MACB-8@V|4Ca
znudFgsu|4qyDLyVPolL}KEF<bhm6&<re@{b@6-*Hju<ip4MfJ3xrfQqc8s9L8`7=<
zlk_;%r^Nu2C;!u!KSC9cQ3hgkAO)@)zAjliN^<WnL^-wF(;^874T*E&(P|B|%<f0Z
z90cHy&oiM=HLiI8?dp1j94{&;zn?W^cSE4?$=MMLx??!Xn5}<*K~<6Wd~>5HLdNro
z>hkt)Z(VK-J!<g+(W}(~f9wVy6&f}G=6+HkUFT4n^|m|0-&EUQ86P*MV{y`H5${j0
z7uAnf@r;StL*X~fH&9>FSiF2<bYU0j&E8N*K$L6*qSdC%R2dNL#gn|BidW~7t@bQf
zJPH<!VaxsdPLP)*PoV;Vc-+9*u+d2@ho=p-NLW(VgdK-r8_N^e`x6COs7~Dr)i8)&
z*ZmZn%W1^;RGuF19bja{D{bS?UfDP&uH<-j{oOuI48DvJQS#`ymK)n{sz0L>e3$#}
zB7rM%JsF(ubtP-I#~T|Y0ugc06uiDq7@p2oYPd!I@q45uEjs4io__`x3GZK;YLL=W
zR8!po1y-jGjMVA9gfE7~T<yOb{uC4nN$%UkIHHxdgfG|XYh|BGeR+n7(f;$lxN?=H
zJFGimoGc;)&CRO(6;38Sh}`Wp1frwWs*4gSlGXO}wopyarJkI>u(1MTM6|oPdkyov
zes5}w5}70_d?^7p+M=u051%Hw{;LdsM`33Ft2j(#lAwX~d=?E?heu_i=-OgevhW{1
zLp@HVKmT0;z8aFxdm`?t2(bIX91E`-B=IjnuL_qPduDE_&i#<P7i>vNzHbc=YOv3l
z)|Rctw~8k-Mk)pN+p^93R<Ts)YUo4hxL%y#%%?K2#VZs)gy#Lci2jDo&J9R(zNu^$
zA;un;N}=+}^7;0!AFqwD&9;i0K0F(+A38PuY<0T2*Hkw`AQPg|Q(U*${IscJJ)A4A
zrCs$f+#cR*^oO4JEP|Ef!D(q$%Rs8xTQ;7oa`?^JY_ikq@;a;L{C+oqX6tFIFf;4>
z*CZ=KTUC8op^Obs<6dDL+*$E3T7*3+jXfJDP+lrrB(=dQvuH^3aOmaK*qdUaJa4Y&
z`k&Ckb`b=%<F;*PW?|k+t@@8|3?K^D_jsnOZ(BfvUgZ@%8kbuTsHRI=s)CkX-AQ?v
zw*?ZFs*KN5<#>>__YL&I=k?4QJ$tO7wQ8$|H;~h~iWJA^u0T~d8vpc3-Puc6W<(Zj
zcLju()J&Zm&VQETN)oXzOW1dn<jyp>He-zGd#O<&<@*m-3~&PjWR^rk>Ng_P>j^>6
zI~9(<yD9r2U-yDH9g?ZhUO#D4`Tycs_4C|oYGVhiiKf?8c?u_FSErpZ9r&nm3kiY9
zTTogx_)5@Xgb>oDvLi@x6@GK4m4E|aR&-C&Fmg=I=8MxY#N6<dkd$r>Uhuk2#uh3X
zC!DV$q*K~E9Yw`xs%4~@{Jlh9R?H8U(w}BiOx09TWWNN-t~W$h*i*V<4K?&j$(bgE
z!{e$nvtvK5=d8C2!K!d6ct1n%M=|sN9pog{m`{M9Z8oc@iY|y>y6rT~m1I^`o58KS
zD}LFj$B*4;yeZ_uMmrL3f)g6vlWy5*=-_Y=k)?w(G_Mp4oHK+6+qOAA9*=v)nEM{7
z*s7Q5<ki)qo%qhOnY0vIO_KM_Dr#4qm^^B-`PB2)chV?P2f}Up1>4)5<yQEKizA~I
zYd2Z(vA@u)0OkAc4-Z`IrvD11;ws20987$}pN`JSbevmfwZ|GpW3)5$g@S-RIhf@X
zN&LqK`tkBUHD7mCMc=Gt=J&`iJwcNh2Z`WH8a69%6b(G@`*whvOgqij*&MBNi#^-Y
zSZXoEmoFb}u7Pjk*1>Gn`t>nMT;^Lisnse<)Q0f>s4~><N9X?)KI2R)HLVKsX%&@M
z>9=)u*o#ieBDbW|*BeLL_yBO@As50!v%?7^L$^gh?jJ?i<jlLYojw4u2|=2n%Tai7
zbNNrA{CK#X$##+LJvH{C<IySCAIM~ud%0l1l1&!fZXe`*<mkX{ppZIbXC%o#uv>WU
zIf^Nr>nf~MKk1(LE+CJ4@|TG1H%g*t*G+r&M^6?t3;gd24}DLrg>4eD%#=gvFk+hQ
zQ8~{uHN-MTZz7aLuSTb(U%$j${$y`mk05S&SMl0te8@VSOZ8w;fJ42o*kK<}z@x@?
zV@&;L!E7CKjOp#RP@MklKE(aR==8^2<YEOGEqG)r?#X5mdTeFja5QIahuOA(-tEAP
zmXHWEt4;BT=L(C|zjjK*SEQ}PmzYqbu68ltxTBy|SLwG1&z3pta4a(=GV~rDO1&fY
zQ`sEB5(@PX5?F0yXc@fWp2R$Na^0!okHtHF{?^K@f^j>YQ+i?tqIa0V;}tSnSQvqV
zu(vz4(--zvn#)M%$lrtMN&Ndm1>=em)U6wbyI}s!Zr6fq_Q00?$Fj0UlOEgoiI5&K
zS*o#!F56`;2w4%*z-P$)0n3?Ao}zqnfDaayl0jueT<l^iDgSuBF;lz-!Nzy0J~2^~
zHmk7v-sfoHzi^QBGb+u-G#CzRM;eZ7{2tf9?AFStcf{MGs21IGwZVxa==8vfZ2OZU
z2wmq|KQbN_wkbBYy0x{2F#2?lTJ~(Uyzg|cmgTrwUEhFG8Pz<n4@sW0U`e@bCL8;9
z+Cn3?;Pt&pE$L5AuMA*E?ls@pvdCAqKXu7Hpms~L!|hjp`^Dld-e!H)SpZG_JdHUn
zX*-EU{zP$u=*uWuJtEYLK$Y@!yVipY&L7J&^HDh8-?d<)a&sz8?)6?Y?1<GoJ3*dm
z`+O#K=KHZ#o-45>o-+JdhzaQjadprLI7Y5eKG_`M)nl&>Qb_L9p_TPkIbhfRDfNA|
zrq8yFJ|$i=Q~hV=1oVE1nKJSE_JyC|ZZGhycJ(7Gi$0?Y%4CN}%Em*mZuQ18(wv!-
zmJC;twVw`GPhM>Flyhh&MKpcBM24S~t@dSq!24|rYvA|R)teS7$=Wt&Bo>%5RX23?
zsaxUzS*)h>a_63R3X%~KbD-CS!G+td!oqq_-F7sQbST%`bvm^Tj03U@Wz=`KM8w4r
zQOYVUuN3va7HYvVWPiX#%Hi>kTYFVKYTaq^h2DGf?C;ecb9xq$3+L&cG>CX`f-Fp3
z4k5Odh5(33%`WW=7JATzAxVZ9gXT~R{Y8P~_=^*x;Pw+DwXBPeD5Bwvgc<3u#i1}H
zJi_e~3?m}WOkpY)XNh|KUR8u3H0%x&Li|-EO0=L9+|_dPf#cG40zP3@R(At59d&7W
ze)WX8;x=<}t;`sl`ZMbbdfh?8=Ht$m$@GU!I9X3bs<rM!lwg#(ZixTB!kd_hNg~-E
z&Rpz!zzP}))KLQ@{w5|}^Lbu#al5LM^jct!EkwZ93bZS=TQKB(M#}?dH()!wpZ=|l
z##v0cX3@;%{n};Mj>qWrt2GDCN00H~dW}CvgnU6((3@IV+v4*JyW5TNQ}-|qLh@~$
z+v@T%@DCLXz=AE;s|6L|jmECj+ipnLZ|iSzsI@FZ-uM>H_W{M5Gx)#$fY1@L$`BGO
zJLhx5Sl_^FGNz9<igt80S_SJvhGw_xv>XQtRMgTCy}p9AZG+lvP+`mS3%Q{GW2&0&
z^BDPOce30>i?M9K&^i5&)Rq#|!9ywurt$LzUDiC{myDX8-8%EkbbJ<DS>6VCk_)Nr
zH`U%IRE5d&POZb&pAEAI?n3q$T^`+!moqy|1ug~w3X(0)QN3S_c~@(c4p{eJv;%tD
zZ?;QUn`QHp(q_q=`Q|Q`RnfUmrPK={n+@_kNj}1D6vGk)?x&ww+&_?G*+lLI=g-&2
zVxBnd{Q;6o*eDbC>;aN0b4hXd`(>r8RjI!|i|V#h@QV5rG9M>P@2ypgjd-hF;-H=_
zQ0B3(zL!*o^z<vX%YI?>V~GaL{pvxXbVP3vkK@cmgQ)I{Kq1Ue&-Dk9>mnd7zdUpx
zDPHfkMt(cSI5lB;QN5MZ5NXlyy5%eQXb`=Q8F*g(n$B6Sy`y^mYEv`s!V5PrlwtVz
z`%HKF!n`7?{dkUxA{F>w#Py8c(|n_Stv6X<VETpEwA$||N=-%$chlwcPJ`0xQ$Lj3
z8xGgJmz{s3)dUtaI?~O@n^&zq3f}Qk#?13-d667S*i8uOo_Y=Kp2hJcy-ub2Qo3QD
zKbsu|!ONW)a*&zKZ$9wZSO?$tkBa7W{p(_6@2Rf%?P{5fw^Bc|Eo)w*It$;S?zL+w
z7LbzM5(^350R*?JpH4RGQ{I+M4?G%;a2p8dmqHI7)|#=3Mphend3JC2#`BdbFFzha
z?jV@HVl6m%@`p*|ru)yY!}G;G|7)@*(q{AdieBc`4O>&w*Vi;w>yq@3PZf0Z_tnKL
zHVqSPb@{Y<Xmq^dR_qW$K7=msSo<|;y7$sjQwxnso+HL@ZEhFiC1&=U0udQ8+46fz
zm$oqwH1fG7Hk!0XUydv7iXZFgimP(3r-)cJ27H-OPy}qs$;u%qYimlo5_>)4ePlw}
zlAMCxm1wI<R;wb2zl+KIIM_#wj-XfE3E4yIYL{|@lK~RCyf84<5%bECk!o?%%1-ws
z_*fLA<jiio;fM{EAatAQ_!ef$*DbzEu<0)+_XC`GwjZgb7hjE~xR3~@{bm`mxLm{C
zZy7Kn!O}(t<ODj)Tx0++c+NhDFmS^h81~&F$Y20GBXs{y5R|e1r@INBv7hkg;eUsA
z2Scr|z;O%%8bSYmqWv4(@P}@L{GW#Q!hleD>T)G^QYeW(H*W%@#N<WmgbjoK2j__~
ArT_o{

literal 0
HcmV?d00001

diff --git a/mkRewriteRules b/mkRewriteRules
index b356bb4..9fcceae 100755
--- a/mkRewriteRules
+++ b/mkRewriteRules
@@ -1,7 +1,7 @@
 #!/bin/bash
 # -*- coding: utf-8 mode: sh -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
 source "$(dirname "$0")/lib/ulib/ulib" || exit 1
-urequire DEFAULTS
+urequire DEFAULTS apache.tools
 
 function display_help() {
     uecho "$scriptname: Créer un fichier de redirections pour Apache à partir d'un certain
@@ -82,23 +82,9 @@ Dans les exemples donnés ci-dessus, $URL est l'\''url générée par la réécr
 et $proxy_acls la valeur du champ proxy_acls spécifiée ci-dessus.'
 }
 
-function joinurl() {
-    # joindre chaque élément de $1..@ par /, en évitant les slashes en double
-    local i url
-    for i in "$@"; do
-        [ -n "$i" ] || continue
-        if [ -n "$url" ]; then
-            url="${url%/}/${i#/}"
-        else
-            url="$i"
-        fi
-    done
-    [ -n "$url" ] && echo "$url"
-}
-
 proxy_enabled=
 infile=
-outfile="RewriteRules.conf"
+outfile=
 htmlfile=
 host=
 parse_opts "${PRETTYOPTS[@]}" \
@@ -109,187 +95,20 @@ parse_opts "${PRETTYOPTS[@]}" \
     -w: htmlfile= \
     @ args -- "$@" && set -- "${args[@]}" || die "$args"
 
-[ -n "$infile" ] || die "Il faut spécifier le fichier de règles"
-[ -f "$infile" ] || die "Fichier de règles non trouvé: $(ppath "$infile")"
-
 thishost="$1"
-[ -n "$thishost" ] || die "Il faut spécifier l'hôte pour lequel créer le fichier de configuration"
-
-function has_proxy() {
-    # vérifier que les options $1 contiennent 'P'
-    local options
-    array_split options "$1" ","
-    array_contains options P
-}
-
-if [ -n "$htmlfile" ]; then
-    echo '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
-<!-- -*- coding: utf-8 mode: html -*- vim:sw=4:sts=4:et:ai:si:sta:fenc=utf-8
--->
-<html>
-<head>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<title>'"$thishost</title>
-</head>
-<body>
-<h2>$thishost</h2>
-<ul>" >"$htmlfile"
+if [ -n "$infile" ]; then infiles=("$infile")
+else array_lsfiles infiles . "*rewrite*.rules"
 fi
 
->"$outfile"
-array_from_lines rules "$(<"$infile" filter_comment)"
-prefix=
-for rule in "${rules[@]}"; do
-    if beginswith "$rule" ^; then
-        # Collecter les préfixe pour la règle suivante
-        prefix="${prefix:+$prefix
-}${rule#^}"
-        continue
-    elif beginswith "$rule" =; then
-        # ligne litérale
-        echo "${rule#=}" >>"$outfile"
-        continue
-    fi
-
-    IFS=:; set -- $rule; unset IFS
-    index=1
-    done=
-    while [ -z "$done" ]; do
-        current="$1"; shift
-        while endswith "$current" "\\"; do
-            current="${current%\\}:$1"; shift
-        done
-        case $index in
-        1) src="$current";;
-        2) dest="$current";;
-        3) host="$current";;
-        4) suffix="$current";;
-        5) options="$current";;
-        6) prot="${current:-http}";;
-        7) proxy_acls="$current";;
-        *) done=1;;
-        esac
-        index=$(($index + 1))
-    done
-
-    # mettre en forme prefix s'il est défini
-    [ -n "$prefix" ] && prefix="$prefix
-"
-
-    if [ "$thishost" == "$host" ]; then
-        host=
-    fi
-
-    usrc="$src"
-
-    trail=1
-    if endswith "$src" '$'; then
-        trail=
-        usrc="${src%$}"
-    fi
-
-    noslash=
-    if endswith "$suffix" '$'; then
-        noslash=1
-        suffix="${suffix%$}"
-    fi
-    if endswith "$dest" '$'; then
-        noslash=1
-        dest="${dest%$}"
-    fi
-
-    proxy_url=
-    proxy_use=
-
-    if endswith "$dest" .woa; then
-        # lien vers une application
-        if [ -n "$host" ]; then
-            # sur un autre hôte
-            if [ -n "$noslash" ]; then
-                echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix")${trail:+\$1} [L${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc"
-                setx proxy_url joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix"
-            else
-                echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$outfile"
-                echo "${prefix}RewriteRule ^/$src/(.*) $(joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix" "\$1") [L${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc/"
-                setx proxy_url joinurl "$prot://$host/cgi-bin/WebObjects" "$dest" "$suffix/"
-            fi
-        else
-            # sur le même hôte
-            if [ -n "$noslash" ]; then
-                echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(joinurl /cgi-bin/WebObjects "$dest" "$suffix")${trail:+\$1} [L,P${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc"
-                setx proxy_url joinurl "$prot://$thishost/cgi-bin/WebObjects" "$dest" "$suffix"
-                proxy_use=1
-            else
-                echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$outfile"
-                echo "${prefix}RewriteRule ^/$src/(.*) $(joinurl /cgi-bin/WebObjects "$dest" "$suffix" "\$1") [L,P${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc/"
-                setx proxy_url joinurl "$prot://$thishost/cgi-bin/WebObjects" "$dest" "$suffix/"
-                proxy_use=1
-            fi
-        fi
+[ ${#infiles[*]} -gt 0 ] || die "Il faut spécifier le fichier de règles avec -f"
+for infile in "${infiles[@]}"; do
+    if [ -f "$infile" ]; then
+        estep "$(ppath "$infile")"
+        legacy_mkRewriteRules "$infile" "$thishost" "$outfile" "$htmlfile" "$proxy_enabled"
     else
-        # lien vers une url
-        if [ -n "$host" ]; then
-            # sur un autre hôte
-            if [ -n "$noslash" ]; then
-                echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(joinurl "$prot://$host" "$dest" "$suffix")${trail:+\$1} [L${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc"
-                setx proxy_url joinurl "$prot://$host" "$dest" "$suffix"
-            else
-                echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$outfile"
-                echo "${prefix}RewriteRule ^/$src/(.*) $(joinurl "$prot://$host" "$dest" "$suffix" "\$1") [L${options:+,$options}]" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc/"
-                setx proxy_url joinurl "$prot://$host" "$dest" "$suffix/"
-            fi
-        else
-            # sur le même hôte
-            if [ -n "$noslash" ]; then
-                echo "${prefix}RewriteRule ^/$src${trail:+(.*)} $(joinurl / "$dest" "$suffix")${trail:+\$1}${options:+ [$options]}" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc"
-                setx proxy_url joinurl "http://$thishost" "$dest" "$suffix"
-            else
-                echo "${prefix}RewriteRule ^/$src\$ /$src/" >>"$outfile"
-                echo "${prefix}RewriteRule ^/$src/(.*) $(joinurl / "$dest" "$suffix" "\$1")${options:+ [$options]}" >>"$outfile"
-                setx url joinurl "http://$thishost" "$usrc/"
-                setx proxy_url joinurl "http://$thishost" "$dest" "$suffix/"
-            fi
-        fi
+        eerror "$(ppath "$infile"): fichier introuvable"
     fi
-    has_proxy "$options" && proxy_use=1
-    if [ -n "$proxy_enabled" -a -n "$proxy_use" ]; then
-        if [ "$proxy_acls" == "None" ]; then
-            :
-        elif [ -z "$proxy_acls" ]; then
-            echo "\
-<Proxy $proxy_url*>
-    AddDefaultCharset off
-    Order Deny,Allow
-    Allow from all
-</Proxy>" >>"$outfile"
-        else
-            echo "\
-<Proxy $proxy_url*>
-    AddDefaultCharset off
-    Order Allow,Deny
-    Allow from $proxy_acls
-</Proxy>" >>"$outfile"
-        fi
-    fi
-
-    echo "" >>"$outfile"
-    if [ -n "$htmlfile" ]; then
-        echo "<li><a href=\"$url\">$url</a></li>" >>"$htmlfile"
-    fi
-
-    # Réinitialiser les préfixes pour chaque règle
-    prefix=
+    # réinitialiser pour ne pas écraser un fichier existant
+    outfile=
+    htmlfile=
 done
-
-if [ -n "$htmlfile" ]; then
-    echo '</ul>
-</body>
-</html>' >>"$htmlfile"
-fi