From 4a72b43fa9609bbe788d0497fc98885148be748c Mon Sep 17 00:00:00 2001 From: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Date: Wed, 9 Mar 2022 22:02:54 +0200 Subject: [PATCH] feat(matomo): Add matomo (#2115) * feat(matomo): Add matomo * add vol mount in cron * mimic nextcloud * mimic * root * add envs * drop cap * update cron * test cron tpl * update default * no tpl in cron * test bitnami * adjust storage * update questions and run with debug logs on tests * probes * other probe * probe * delay probes for testing * increase * default probe times * Update charts/incubator/matomo/values.yaml * Update charts/incubator/matomo/values.yaml --- charts/incubator/matomo/Chart.yaml | 31 ++ charts/incubator/matomo/questions.yaml | 477 ++++++++++++++++++ charts/incubator/matomo/templates/common.yaml | 1 + charts/incubator/matomo/values.yaml | 96 ++++ docs/_static/img/appicons/matomo.png | Bin 0 -> 5352 bytes docs/manual/default-ports.md | 2 + 6 files changed, 607 insertions(+) create mode 100644 charts/incubator/matomo/Chart.yaml create mode 100644 charts/incubator/matomo/questions.yaml create mode 100644 charts/incubator/matomo/templates/common.yaml create mode 100644 charts/incubator/matomo/values.yaml create mode 100644 docs/_static/img/appicons/matomo.png diff --git a/charts/incubator/matomo/Chart.yaml b/charts/incubator/matomo/Chart.yaml new file mode 100644 index 00000000000..3a783eafe65 --- /dev/null +++ b/charts/incubator/matomo/Chart.yaml @@ -0,0 +1,31 @@ +apiVersion: v2 +appVersion: "4.7.1" +dependencies: +- name: common + repository: https://truecharts.org + version: 9.1.2 +- condition: mariadb.enabled + name: mariadb + repository: https://truecharts.org/ + version: 2.0.1 +description: Matomo is the leading Free/Libre open analytics platform +home: https://github.com/truecharts/apps/tree/master/charts/stable/matomo +icon: https://truecharts.org/_static/img/appicons/matomo.png +keywords: +- analytics +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: matomo +sources: +- https://hub.docker.com/_/matomo +- https://github.com/matomo-org/docker +- https://github.com/matomo-org/matomo +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - productivity + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/matomo/questions.yaml b/charts/incubator/matomo/questions.yaml new file mode 100644 index 00000000000..cbb6be94fa6 --- /dev/null +++ b/charts/incubator/matomo/questions.yaml @@ -0,0 +1,477 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: BITNAMI_DEBUG + label: "BITNAMI_DEBUG" + description: "Increase verbosity on initialization logs." + schema: + type: boolean + default: false + - variable: MATOMO_USERNAME + label: "MATOMO_USERNAME (First Install Only)" + description: "Matomo application username" + schema: + type: string + required: true + default: "admin" + - variable: MATOMO_PASSWORD + label: "MATOMO_PASSWORD (First Install Only)" + description: "Matomo application password" + schema: + type: string + required: true + private: true + default: "" + - variable: MATOMO_HOST + label: "MATOMO_HOST (First Install Only)" + description: "Matomo application host" + schema: + type: string + required: true + default: "127.0.0.1" + - variable: MATOMO_EMAIL + label: "MATOMO_EMAIL (First Install Only)" + description: "Matomo application email" + schema: + type: string + required: true + default: "email@example.com" + - variable: MATOMO_WEBSITE_NAME + label: "MATOMO_WEBSITE_NAME (First Install Only)" + description: "Name of a website to track in Matomo" + schema: + type: string + required: true + default: "My Website" + - variable: MATOMO_WEBSITE_HOST + label: "MATOMO_WEBSITE_HOST (First Install Only)" + description: "Website's host or domain to track in Matomo" + schema: + type: string + required: true + default: "https://web.example.com" + - variable: MATOMO_SMTP_HOST + label: "MATOMO_SMTP_HOST (First Install Only)" + description: "Matomo SMTP host" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_PORT + label: "MATOMO_SMTP_PORT (First Install Only)" + description: "Matomo SMTP port" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_USER + label: "MATOMO_SMTP_USER (First Install Only)" + description: "Matomo SMTP user" + schema: + type: string + default: "" + - variable: MATOMO_SMTP_PASSWORD + label: "MATOMO_SMTP_PASSWORD (First Install Only)" + description: "Matomo SMTP password" + schema: + type: string + private: true + default: "" + - variable: MATOMO_SMTP_PROTOCOL + label: "MATOMO_SMTP_PROTOCOL (First Install Only)" + description: "Matomo SMTP protocol" + schema: + type: string + private: true + default: "none" + enum: + - value: ssl + description: "ssl" + - value: "tls" + description: "tls" + - value: none + description: "none" + - variable: MATOMO_SMTP_AUTH + label: "MATOMO_SMTP_AUTH (First Install Only)" + description: "Matomo SMTP authentication mechanism to use" + schema: + type: string + private: true + default: "Plain" + enum: + - value: Crammd5 + description: "Crammd5" + - value: "Login" + description: "Login" + - value: Plain + description: "Plain" + - variable: phpconfig + label: "PHP Config (Advanced)" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: PHP_MEMORY_LIMIT + label: "PHP_MEMORY_LIMIT" + description: "Memory limit for PHP scripts" + schema: + type: string + default: "2048M" + - variable: PHP_ENABLE_OPCACHE + label: "PHP_ENABLE_OPCACHE" + description: "Enable OPcache for PHP scripts" + schema: + type: boolean + default: true + - variable: PHP_EXPOSE_PHP + label: "PHP_EXPOSE_PHP" + description: "Enables HTTP header with PHP version" + schema: + type: boolean + default: true + - variable: PHP_MAX_EXECUTION_TIME + label: "PHP_MAX_EXECUTION_TIME" + description: "Maximum execution time for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_MAX_INPUT_TIME + label: "PHP_MAX_INPUT_TIME" + description: "Maximum input time for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_MAX_INPUT_VARS + label: "PHP_MAX_INPUT_VARS" + description: "Maximum amount of input variables for PHP scripts" + schema: + type: string + default: "" + - variable: PHP_POST_MAX_SIZE + label: "PHP_POST_MAX_SIZE" + description: "Maximum size for PHP POST requests" + schema: + type: string + default: "" + - variable: PHP_UPLOAD_MAX_FILESIZE + label: "PHP_UPLOAD_MAX_FILESIZE" + description: "Maximum file size for PHP uploads" + schema: + type: string + default: "" +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10172 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: enabled + label: "Enable the port" + schema: + type: boolean + default: true + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 80 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: "App Config Storage" + description: "Stores the Application Configuration." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/matomo/templates/common.yaml b/charts/incubator/matomo/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/charts/incubator/matomo/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/charts/incubator/matomo/values.yaml b/charts/incubator/matomo/values.yaml new file mode 100644 index 00000000000..5730496eaa0 --- /dev/null +++ b/charts/incubator/matomo/values.yaml @@ -0,0 +1,96 @@ +image: + repository: tccr.io/truecharts/matomo + tag: v4.7.1@sha256:dbfe95441f661fa5093c43b4cfca8a357a0e963dd79917e0f09cc4b2e4379013 + pullPolicy: IfNotPresent + +securityContext: + runAsNonRoot: false + readOnlyRootFilesystem: false + +# Run as root for the cron to work +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +env: + BITNAMI_DEBUG: true + APACHE_HTTP_PORT_NUMBER: "{{ .Values.service.main.ports.main.port }}" + APACHE_HTTPS_PORT_NUMBER: "{{ .Values.service.https.ports.https.port }}" + MATOMO_DATABASE_PORT_NUMBER: 3306 + MATOMO_DATABASE_NAME: "{{ .Values.mariadb.mariadbDatabase }}" + MATOMO_DATABASE_USER: "{{ .Values.mariadb.mariadbUsername }}" + PHP_DATE_TIMEZONE: "{{ .Values.TZ }}" + # User / Site Config + MATOMO_USERNAME: "admin" + MATOMO_PASSWORD: "password" + MATOMO_EMAIL: "myemail@example.com" + MATOMO_WEBSITE_NAME: "My Website" + MATOMO_WEBSITE_HOST: "https://web.example.com" + MATOMO_HOST: "127.0.0.1" + # Reverse Proxy Config + MATOMO_ENABLE_PROXY_URI_HEADER: false + MATOMO_ENABLE_ASSUME_SECURE_PROTOCOL: false + MATOMO_ENABLE_FORCE_SSL: false + # No defaults, but usually this header is used + # MATOMO_PROXY_CLIENT_HEADER: "HTTP_X_FORWARDED_FOR" + # SMTP Config + MATOMO_SMTP_HOST: "" + MATOMO_SMTP_PORT: "" + MATOMO_SMTP_USER: "" + MATOMO_SMTP_PASSWORD: "" + # Available protocols are: "ssl", "tls", "none" + MATOMO_SMTP_PROTOCOL: "" + # Available mechanisms are: "Plain", "Login", "Crammd5" + MATOMO_SMTP_AUTH: "Plain" + # PHP Config + PHP_MEMORY_LIMIT: "2048M" + PHP_ENABLE_OPCACHE: true + # PHP_EXPOSE_PHP: + # PHP_MAX_EXECUTION_TIME: + # PHP_MAX_INPUT_TIME: + # PHP_MAX_INPUT_VARS: + # PHP_POST_MAX_SIZE: + # PHP_UPLOAD_MAX_FILESIZE: + +probes: + liveness: + path: "/index.php" + readiness: + path: "/index.php" + startup: + path: "/index.php" + +service: + main: + ports: + main: + protocol: HTTP + port: 10172 + targetPort: 10172 + https: + ports: + https: + protocol: HTTPS + port: 10173 + targetPort: 10173 + +persistence: + data: + enabled: true + mountPath: "/bitnami/matomo" + +envValueFrom: + MATOMO_DATABASE_HOST: + secretKeyRef: + name: mariadbcreds + key: plainhost + MATOMO_DATABASE_PASSWORD: + secretKeyRef: + name: mariadbcreds + key: mariadb-password + +mariadb: + enabled: true + mariadbUsername: matomo + mariadbDatabase: matomo + existingSecret: "mariadbcreds" diff --git a/docs/_static/img/appicons/matomo.png b/docs/_static/img/appicons/matomo.png new file mode 100644 index 0000000000000000000000000000000000000000..e3e2bdbc569fbdc2fc716e38a483adfacb0dd579 GIT binary patch literal 5352 zcmeHLXjY1*gbl;gwS$fk*-vrc?t?0ns`j z<^)6pqzoEkf{{t05h&yY1SA85Fh~H2h=E{$$UCvU?|1L}_TJa`KIQDS_L~0xz1QB^ z7Y_J&t@>j97X}6ftGxH^2{15N3K|$JIl6o)ENONu{~G?;ePI8gy*HYDr?Nent-+K# z`!d0w{y-m%B6WFdN?rlGO2N7Rt7jWCQz9BZ(>16yFZd%~A zrk~!^kQdOdQLr}?a)4i8OU$8|kCtx@<_7j{&64SywbOSD4Ay#j@7ZM$LRf^hs7)me6VovRK?-kXN;{lO8EHz4H6hy0W|9yrCF>hu++{rE$v& zzZHJo#GlRto(Wt7t^t2nT>HHA^HNy(Pc^Lkry5rNoBD5Cz4~w4|5E?I>%YMKcR--k zkHklG_*s*S$(ch_j~n6~#{5?=hEQEJR1CUC6(4hw7p#lr1;5QQ8;FmKchI6^XLG*H zWIx;P|Jdc5TNb0ICf^UGrWB^~B|GzSe@2_na@XIR{vwR{5i40Nd=A?_2InyQ9lM76!%GkU#X%i(rvY z^u!XZO+<5H;e?3JcNuKoZdhrNKXi+*9@cSi)zHa4$E1!Gz=P|W6i&$6Sdz2LSO)Tr z5SyT3u)J--U4&OjxO+PoWWGgLWC+&s(bye3y|9RV@GqH_5;{we;s;hnt0~N(62i+B zz?GeGY8-O~9{xPQ5RL5*@9bPoyiwg{e^n9e`f-&AyD_1mqOwjUaaf_9=O zkKswHph`cw9XNGEnnE5~4|>{yJ94EmbJt%Pa_ebtQC|ayZi()3BNe4?XNTN^{v6;$QyryK$?bE3gCDq%GWe z3lM(^rood#i6&n%=JUGsWDN$S90zb{FIO1AO-9Nx0e3lgb!K*S8b@P$GhVNTOtEx6 zMhfWx{wh}*NGC*H)u#v-^V~#o1BI!^rkz!+#Gn_qaRt866$TRypp9YKtyJ1OeOe|T zJ8))@Khw=i4^M-cjBmYLtcOSPT!E(vix8panQEWE%bXN&_kcy4U?0KJ)U>H5+rTg! z9^O3YoJ-7QX$7QdSBxHJjy8g&%1zic>Qh?!K>;IaJvNbhYGgxQ5R5ApP2I*FT0*Q^ z^wTFjvop3^vEYQIYx|@{#=B)5`l^Qm<~@MV(2KF0AjV{U{t|sTO)#h!GE9U4(|dkdnCfi+Af`Up4kKkxxD4@Y zc?ea~TgibLdA1r73AkZ$f%GpfAD~RI$Vtv3S6cLDmr*`EBf_3jKvz8ulV@LZ6*B$c zWMZf)q53*@oGgcf{UA#wv-vgm^iBj#D7;oaW4)NADRCMW6=k*A}-cE z5RWW$s)78zltn1qSV_y4xuKKjgco%hLfTxj_L&~(n?9;tKtpY#HX?C7llUSy+N9q< zZ@8g_=VlFlTAW!}baj!s!TX>SCdWu`@fdZqJa_Sn^`MuLKBFtS(vZcveO!M!Ss0?o;D?Tr?s zGT%ydTla0YUMUwprqPgN;qzQf8eRRn-XZM%?rdPXbYUkN@ow5Dk7yVYZEDYLFagaA z`q*NA6tSd}hjB)WSbDPiBG)q+TWRW4xOKpmd(1OYENY^AB zD%OnH%Hbl{gTB@-PDby6s7tZMdiHCD$ImHc8yVF5hJA(l<=9)y9U0(h7iPP^ zJpG;~T~GCWJ5JLNId3*}2(8@uQH*XJqbRU{ZB3BAEH+JjrnO*q%?K&JwXJtS7v?(K zE02hPvsYFN$G^&BPV<(|CCXoW-=rEU)js+T+v%fHIn<1ijLBQ4RRjl2TZf9;r)x#p zBV5yo^F8Rki465zzXw`kU#5W8h&ns^&h4UH`#{ zvlI2(RbOnu2ZulJl{H$NVy(JJVx_{qONup!QY{O?r{Gbz%RykaJ?Esk?DAi;YXgGZMW2B?Zi!wFq>e2F$R@5! z+v$WKL3#$Nrc5o(J$UQ;!Ennjl?ywg`l@+;+c6&Y+$kaiM4hZBrfDpOcW2*V?E^3aDIR96`4iwvalNR2E;Rxkc|hv%0rUs>H_2-`-HYI?ZA z%Iof1ZnP;4{DKI&6hgVVEEg21mgz>0fs6Mj)lyxkERw0UPRgn2dC{1cRPH*#QH9_| z{e$~cN3tIE@blvD6DCJ%7iu#BFZyOA)AxjeM-SrPTm<)=d)JX%#CD~t;&)h?CD2X%(54E!AUw#obV$x?c%Fwq58&4VmSp>+ln)C2 z_2V&ipjD$bIfK0*NTi^@H4*vx!J-fWt`-`9=KxUP%YdWv_b# zuNzx7p4x~Z@g;pNIF0VwFEcvqxnDv|;FMn20us8)olzq|DJNBpD*!`q8G_ro(SQGh znJlZ}kTKA-RkfmUFyV;TebT8x%IsGlG0_5G(FqBuyU5jIGj?|}*9@|0xc+`JFzk9m zmvuI@1kYaqtN}Cax!nalm~BlqV8}Df*0sQu*}xlA^LHl^LvSR?*iUn-3I}tTws^l% z+C-S=l;!TX#dlxegoX;wyr02*h-L>(F)`{1;l67F!^387XH@M<_E3iiJYUXRSGi9{)H}>86 zE!~;9m{i2q)Pl}X#zgV~TodGjf)D?XXNmm0iDul(@RXm+biw$3E6l)zw2+QsOeef==K(e*c3S!9DH9I{mQ-GL}at6|sLvFS840Sv`%q?_1M- zgC#!VRGaM)WC!+1V}PEMBVqWsb)dvtwr`_&-y%-AIgYbzw6F{7(W2`N*u*$onkl zm@Py^v$G(Ht7SyKKvPwWVnB^+{mk*m)sPFeyr#eTG`uF}y_6I3vP0M1^;3VPA+4d| zoE5^6*?Ru)Y@qdnyn#1c1`L58!Ls`+gpbXZG6YQrr> zk$XUIbD3nJF!$K?IOJ5gWn5YI1?21S`J2MKbi&L#OUwyVNHY$)Vz0j(t1$CVP2R>K za%aR^MLsAB%OqfVM~T1Ev1oo z(02?JzDc>@8^W%PPW#sKNzob&)(-4E`!?xS6nhi1^^Xy!hhH%p37$=ukT&CL3}Mi_ z{`DP=)5Fi0GzIF}Pz9C4>|SiVKd->qtv|J~>DiMUMhAh9V?&bK3nuB6<*J9#qk&;> z-esk2Sq@RlRTbjvnwV|f)lz%&?7Ay6V~(hS3d$)I5*1^W-x}R9Y>6}Vk1&O9QBXTk zF}3zx+l0CnHh|~D|D6E}YCp-{C07*th(6Na44ebv&f9?0bIOXgY_1J#ePtv&^(-Lr zGzRKiI@?n(0uHxo`ZNdg>o(mYzT)*lFFR7NDIGQo{qyULpj*H4DN}5!@&hPTwuB8b z-Krgs8-@&Lvqkx>KN96AH(>8-VbK(?7B})u=RDfFH+hT;z&5!e$>E#oy)SYf->X^@ z5_wJgT0NKUV*}1kRy*HjciLBPS1zl4?%Mv^A~)zJeT}@?wOt-{qi*0S%2@eqw~1$i zOhMsojDq<%