From c455c75360a25dabefc6713f7fd28085f0c41edb Mon Sep 17 00:00:00 2001 From: JD Date: Wed, 12 Jun 2024 15:54:15 -0700 Subject: [PATCH] Article: defensivedepth ubuntu deployment guide (#19515) Article: From @defensivedepth ubuntu-deployment-guide > Would like to add something like: > Author: Josh Brower, @defensivedepth > Sponsored by: Internews > > I also have the Internews logo if that would be possible to use. --- .../deploy-fleet-on-ubuntu-with-elastic.md | 346 ++++++++++++++++++ ...eet-on-ubuntu-with-elastic-1600x900@2x.png | Bin 0 -> 40770 bytes ...with-elastic-internews_logo-256x237@2x.png | Bin 0 -> 33450 bytes 3 files changed, 346 insertions(+) create mode 100644 articles/deploy-fleet-on-ubuntu-with-elastic.md create mode 100644 website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-1600x900@2x.png create mode 100644 website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-internews_logo-256x237@2x.png diff --git a/articles/deploy-fleet-on-ubuntu-with-elastic.md b/articles/deploy-fleet-on-ubuntu-with-elastic.md new file mode 100644 index 0000000000..cf7c9cea60 --- /dev/null +++ b/articles/deploy-fleet-on-ubuntu-with-elastic.md @@ -0,0 +1,346 @@ +# Deploy Fleet on Ubuntu with Elastic + +![Deploy Fleet on Ubuntu with Elastic](../website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-1600x900@2x.png) + +[](https://internews.org/)_Today we wanted to feature [Josh](https://defensivedepth.com/), a member of our community. His work was sponsored by [Internews](https://internews.org/). If you are interested in contributing to the Fleet blog, feel free to [contact us](https://fleetdm.com/company/contact) or reach out to [@jdstrong](https://osquery.slack.com/team/U04MTPBAHQS) on the osquery slack._ + +This guide provides a detailed walkthrough for setting up a small production environment of Fleet alongside Elastic components (Elasticsearch, Kibana, Filebeat). The setup integrates Filebeat to collect scheduled query results from Fleet and feed them into Elasticsearch, while Kibana will be utilized for data visualization and the creation of detections. Additionally, Nginx will serve as a reverse proxy for the Kibana and Fleet web interfaces and will segregate the web administration and agent data+control planes of Fleet for more fine-grained access control. + +The installation and configuration will begin with the Elastic stack components, followed by Fleet and its dependencies. For this guide, they will all be installed on a single server; however, for larger deployments or requirements of higher availability and scalability, a more distributed approach across multiple servers and geographical regions is recommended. + +### Network, server & DNS setup + +This guide is based on Ubuntu 22.04 LTS, although the installation procedures for the components remain consistent across newer versions of the operating system. + +For this guide, subdomain `fleet.localhost.invalid` is pointed to the server's public IP. Replace this subdomain with a valid one configured as such. + +Ports needed, inbound to server: +- `TCP/80` (Only used for the initial Let's Encrypt setup) +- `TCP/443` (Used initially for the Let's Encrypt setup, and then longterm for Fleet distributed agents to checking for data and control) +- `TCP/8443` (Used for Kibana web interface) +- `TCP/9443` (Used for Fleet web interface) + +Set up access control where it makes sense - perimeter firewall or on the server itself. Set the ports for the Kibana (`TCP/8443`) and Fleet (`TCP/9443`) web interfaces to only be accessible from a known-trusted IP space. Also set rules for `TCP/443`, which is used for the deployed osquery agents to check in with Fleet. A common configuration is for the web interface ports to be accessible to a single IP or small set of IPs, and for the osquery check in port to be accessible anywhere. + +Be aware that if you are using a proxy like Cloudflare, you will need to confirm that the ports in this guide will work as expected. + +### Update OS + +Let's start by updating the system's packages and creating a workspace directory: + +```sh +sudo apt-get update && sudo apt-get dist-upgrade -y +mkdir workspace && cd workspace +``` + +### Install & configure Certbot + +Next up is to install Certbot to create and manage our free Let's Encrypt SSL certificate. This certificate will be used by for all components. + +```sh +sudo apt-get install certbot -y +sudo certbot certonly --standalone +``` + +Select option 1 to spin up a temporary web server. Enter the domain that you have pointed to your public IP. You will need TCP/80 & TCP/443 open to the server. + +By default, the certificate and key are saved at: + +- Certificate: `/etc/letsencrypt/live/fleet.localhost.invalid/fullchain.pem` +- Key: `/etc/letsencrypt/live/fleet.localhost.invalid/privkey.pem` + +### Install & configure Nginx + +Let's install Nginx and configure it as a reverse proxy for Fleet and Kibana. + +```sh +sudo apt-get install nginx +nano /etc/nginx/sites-available/fleet # use the below config, remember to update the path to the certificate files +sudo ln -s /etc/nginx/sites-available/fleet /etc/nginx/sites-enabled/ # symlink the config file to enable it +nginx -t # Test the config to make sure there are no syntax errors +sudo systemctl reload nginx # Reload nginx to make the config active +sudo systemctl status nginx # Check the reload to confirm that there are no errors +``` +Nginx Config file: +```sh +# Define SSL configuration +ssl_certificate /etc/letsencrypt/live/fleet.localhost.invalid/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/fleet.localhost.invalid/privkey.pem; + +# Common proxy settings +proxy_set_header Host $host; +proxy_set_header X-Real-IP $remote_addr; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +proxy_set_header X-Forwarded-Proto $scheme; + +# Server block for Kibana on port 8443 +server { + listen 8443 ssl default_server; + + location / { + proxy_pass http://localhost:5601; + } +} + +# Server block for Fleet on port 9443 with WebSocket support +server { + listen 9443 ssl; + add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: wss:; frame-ancestors 'self'"; + + location / { + proxy_pass https://localhost:4443/; + proxy_read_timeout 300; + proxy_connect_timeout 300; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; + } +} + +# Server block for specific Orbit osquery paths on port 443 +server { + listen 443 ssl; + + location ~* ^/api/(osquery|fleet/orbit/(config|ping)|v1/osquery) { + proxy_pass https://localhost:4443; + } +} +``` + + +### Install & configure Elasticsearch + + +In case the below does not work, consult Debian package installation instructions at https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html + +Let's download and install Elasticsearch via an Ubuntu package. + +One-time prep needed to add the Elastic APT repository: +```sh +wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - +echo "deb https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-8.x.list +sudo apt-get update +``` + +Install the Elasticsearch package (this will install the latest stable version): + +```sh +sudo apt-get install elasticsearch +``` +The post-install message will contain a password generated for the Elasticsearch built-in superuser (`elastic`). Make note of it as we will need it later. + +Enable and start the Elasticsearch service: + +```sh +sudo systemctl daemon-reload +sudo systemctl enable --now elasticsearch.service +``` + +## Install & configure Kibana + +Onto Kibana. Let's download, install and do the initial configuration. + +```sh +sudo apt-get install kibana +``` +Before we start Kibana, we need to edit the configuration file: + +```sh +nano /etc/kibana/kibana.yml +``` + +Set the server host and public base URL by uncommenting and editing the below lines: + +```yaml +server.host: "0.0.0.0" # Sets Kibana to listen on all interfaces +server.publicBaseUrl: "https://fleetmd.localhost.invalid:8443" # This should be set to your custom subdomain/port +``` + +Enable and start the Kibana service: + +```sh +sudo /bin/systemctl daemon-reload +sudo /bin/systemctl enable --now kibana.service +``` + +### Initial configuration + +Access Kibana at `https://fleet.localhost.invalid:8443`. If you get stuck at this step, you may not have opened ports 8443 and 9443, as needed in this walkthrough. Generate and enter the initial setup token and the verification code: + +```sh +/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana +/usr/share/kibana/bin/kibana-verification-code +``` + +From there, log in with the username `elastic` and the password that was generated previously, and choose `Explore on my own`. Navigate to `Management` -> `Stack Monitoring` and set up self-monitoring with `set up with self monitoring` and `Turn on monitoring`. This will give you a nice overview of Elasticsearch, Kibana and eventually Filebeat. + +## Install & configure Filebeat + +The final Elastic component to install is Filebeat. Let's download and configure it to pick up our osquery logs. + +```sh +sudo apt-get install filebeat +``` + +Edit the Filebeat configuration to set up where to send its logs (Elasticsearch). We disable ssl.verification because the connection from Filebeat to Elasticsearch is local (from Filebeat on the server to Elasticsearch on the same system). +Filebeat has built-in support for osquery logs. Let's configure and then enable that filebeat module and then start the Filebeat service: + + +```sh +sudo nano /etc/filebeat/modules.d/osquery.yml.disabled # Use the following config +``` + +```yaml +# Module: osquery + +- module: osquery + result: + enabled: true + + # Set custom paths for the log files. If left empty, + # Filebeat will choose the paths depending on your OS. + var.paths: ["/tmp/osquery_result"] + + # If true, all fields created by this module are prefixed with + # `osquery.result`. Set to false to copy the fields in the root + # of the document. The default is true. + #var.use_namespace: true +``` + + +```sh +sudo filebeat modules enable osquery # Enable the Filebeat osquery module +sudo /bin/systemctl daemon-reload +sudo /bin/systemctl enable --now filebeat.service +``` + +## Install & configure MySQL + +With the Elastic components installed, we can move on to Fleet. First up is installing MySQL and creating the Fleet user and database. + +```sh +sudo apt-get install mysql-server -y +mysql -uroot +create database fleet; # This is the database that will be used by Fleet +create user fleet@'localhost' identified by 'FleetDMPW!'; # Create the mysql user for the Fleet database and set a strong password. +grant all privileges on fleet.* to fleet@'localhost'; # Grant the new user the necessary privileges to the Fleet database. +exit +``` + +## Install & configure Redis + +Redis is used for the Live Query functionality. Let's get it installed. + +```sh +sudo apt-get install redis-server -y +``` + +## Install & configure Fleet + +Finally, the linchpin - Fleet. Let's download the latest version. You can find the latest version here: https://github.com/fleetdm/fleet/releases/latest - make sure you download the main Fleet package and not `fleetctl` at this time. + +```sh +wget https://github.com/fleetdm/fleet/releases/download/fleet-$VERSION/fleet_$VERSION_linux.tar.gz +tar -xf fleet_v*_linux.tar.gz # Extract the Fleet binary +sudo cp fleet_v*_linux/fleet /usr/bin/ # Copy the the Fleet binary to /usr/bin +fleet version # Sanity check to make sure it runs as expected +``` + +Next we will create the directory that will contain the config and installers, and create the config itself. + +```sh +mkdir /etc/fleet +nano /etc/fleet/fleet.config +``` + +Use the following as a baseline for your Fleet config: + +```yaml +mysql: + address: 127.0.0.1:3306 + database: fleet + username: fleet + password: FleetPW! +redis: + address: 127.0.0.1:6379 +server: + address: 0.0.0.0:4443 + cert: /etc/letsencrypt/live/fleet.localhost.invalid/fullchain.pem + key: /etc/letsencrypt/live/fleet.localhost.invalid/privkey.pem + websockets_allow_unsafe_origin: true # This is needed for Live Query functionality to work with the nginx reverse proxy we are using +``` + +Next, let's run the `prepare db` command to complete the necessary database prep. + +```sh +fleet prepare db --config /etc/fleet/fleet.config +``` + +### Setup systemd unit file + +Now that we are ready to run Fleet, let's create a `systemd` unit file to manage Fleet as a service, and then go ahead and start the service: + +```sh +sudo nano /etc/systemd/system/fleet.service # Use the example unit file below +sudo systemctl enable --now fleet.service +sudo systemctl status fleet.service +``` + +```sh +[Unit] +Description=fleet +After=network.target + +[Service] +ExecStart=/usr/bin/fleet serve -c /etc/fleet/fleet.config + +[Install] +WantedBy=multi-user.target +``` + + +Finally, complete the Fleet setup via the web interface at https://fleet.localhost.invalid:9443 + +## fleetctl + +fleetctl is a utility from Fleet that is used to manage Fleet from the command line. Let's download it and get it logged into our instance of Fleet. You can find the latest version here: https://github.com/fleetdm/fleet/releases/latest + +```sh +wget https://github.com/fleetdm/fleet/releases/download/fleet-$VERSION/fleetctl_$VERSION_linux.tar.gz +tar -xf fleetctl_*_linux.tar.gz# Extract the fleetct binary +sudo cp fleetctl_v*_linux/fleetctl /usr/bin/ # Copy the the fleetctl binary to /usr/bin +/usr/bin/fleetctl --version # Sanity check to make sure it runs as expected +``` + +Next, we need to configure it to work with our local instance of Fleet and login to it. + +```sh +fleetctl config set --address https://fleet.localhost.invalid::4443 +fleetctl login +``` + +## Generate agents + +Fleet ships with support for Orbit, a wrapper around osquery. Orbit makes configuration of osquery much simpler, offers auto-update functionality of osquery as well as additional tables developed by Fleet. In order to install an Orbit/osquery agent, you will need to generate an installer. + +You can start the process of generating Orbit agent packages from the Fleet interface - click on the `Add Hosts` button. You can generate the packages anywhere that you have `fleetctl`, including on the server itself. Be sure to install the Docker engine if you need to generate installers for Windows. + +## Load Fleet standard query library + +Fleet has a library of queries that are useful in many different situations - https://fleetdm.com/docs/using-fleet/standard-query-library + +Let's go ahead and load them - once this is complete, you can find them in the web interface under Queries. + +```sh +git clone https://github.com/fleetdm/fleet.git +cd fleet +fleetctl apply -f docs/01-Using-Fleet/standard-query-library/standard-query-library.yml +``` + + + + + + + + + diff --git a/website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-1600x900@2x.png b/website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..82a8c3dbc1598ee80c3bba0f41533456224ccbb3 GIT binary patch literal 40770 zcmeIbcT`i`w>G>fA{IatL25uOAR?j^=~1MK6tN)Elp?(&NKKR@N)1H;r79pt5s=%b>1wMn?dIAI zK@gLM`b9km+KYyuos5hO;4j46hSK0|m$SNo8w9Z*h5ylL=pC5@f248KQ@a3VH}gz@ z3wo>bTIV4s7qe&c&JGAl>eRS+{@Q(-sh*Ea&^`zfpQ=6``Myq}TS0cU)Ct`G=M_;1 z_w(mvL(BN*GXx7ymymU8s*z#6cC)Z?&MR#I_`;DnV5VDwzJ( z0jlBHmIPHLs44+bjpVixP>tm8-9S|ds!C9e4`X;732$KthLgA0e*^(C)JSsS+JO-^RAx3%~Y% zNfAIazgGghKRJN@#}&vJApdzeM9=@vOBY&@srd6kpQHINsR;T%{|7{no2`W*v zEe$~O(L?{J;O(YTYQOd5zkwVoZ~0qLRGa-r5)eeS*?)xb|NjQ6nCdeQHCj&mxs}`_ zc1YS?`mDJUhxwI*TE{XEHSpTh{T1&b*Z5*j#SfgBpk?8?3dKnE57rOe9(mpTdi}EM zp$ln3e{uK}s{aTbxtqAhCp9;bo1sO$;3$vQUDY>3^G5HU+m~^7|ELq|A(;msGQS)< zd2LzddNStP)xPPOR^xjFca6o3Bm^uFHW+9B^Gf;oZ=Bt6{9m4m(0|EYeEfIbWB0$Y zN7wn^_Uz%mlP3S~cD+bB;DNUt9v+@|tmHE{chVWCGn=ZvxmOGko`G7DrsQ*wGK@&_ z{8K`{UB%C@^jtv|C)M&jX66m`&RTiil6mdz_KjY@Z%hkMbKv7}SXQ6Sa3Bj2g4_|? zNu8&ysI|t}RFCIPd=#m=XH@-1ybzSq`aea$|7C6CIpAsP9(E(_G#d;yG+ww^XrHF>jBv>)qxKNS( z-A&#-j%Ajrre{4Ha8n-h;~D%T-wZc~K8u;`57>T4_XK4eiu$|72(O*o*!>7ZS3RS) zxhvDw3CS-)Z!C)%aCL_FvUUxVfRt1`1A5W zUyQ>f{x4O=Gt1p)+XpsQwgrJcydMpJbk8l&FozeQU(2+5pZ`f4r)w^+JtSV6loOu3 zLe&Vip~hdwF>QG&MyZI;R_Ap{0hhDBVQuX`4<~m>u3&rd#D;D9evE^cJlq<3jIzVa zE_bJhqq;iHiA#Ro<5MHR3+sZ+3+`e$B?*)x2<QY}~k7lT=HftyM3qpZl$XP<)X z^s_KKL~eNcwqw(q`IOiZGk(I^s*yt&23C-BHR}J>F%YV}lZEV8wtA5@2OTwGm?x3V zTPm2nrL(F!@alok!|0u!rX4Go$(eq=lC{*qXhw_07w4oUIl;j(i+CltQ*;+)xrBlW zM$Ov-weqW`hh4RaeUokPh)kHzuOwGhBhwj22s?{wKNrpZM%b^%$S8sQcu;0jU7OF^ ze?zU?3*$|9{YTNFYIh#s+M2Vr|X`dduugQFOMy; ze7?usn47yjCiKh^vfc?jVdGqK`oV@;*v#3D@RvxCe=qmqS&_}twolh5&HXi!$gP8Z z%33Pm?rwiK&NsVfM5@e4b!tOCZJ0>rEOmVPn!qE(mZxK|ql>?7 z-W#Svi{(N@^|9;Ke@3D~8A%bWhmQDHSqLVCWbT&W#OrB9L+{bPW#8?iin_iOg_SaJ zZWk4w3rL2Q6@Sl--5AklVUk|{kbS%FU>(Xx834|4clK2tZTvMgZ|?HiU!qw{tFCmS zxTSK{i9?atpQ}TxOL)5-_ZadMDJm)Pb|DZ_1(DzDrhv+^qA#Y=d0c>~bH?udiXf-6`f2cJ=Y9N?W4e z?9Bu@aZbMwhF9Da^?-+vK^ek}Z^afi@D4FAN{D|E%7U8L^DSAeotn-&xAnd1W{Iue zQ{&xE6z~F%x!*E{yFG0#OoX?&l|ytbEcF2=lLJ?C6t2Eq6Vw>+kzT`Fdv5Z;H-gvG z5GH>3UF*<&XTz_?6%w+dwR~X8m;*khp?R|R?xVoyWbEcIn`rahSAg#XuatIs@{W&t z2_x0Rc*h`ZIiJm&Ma!vQ=ha;OZO;H0n-R)iGIIZN>;UBvsF8w1r|CL@O@@_OTeA&2 zi+X>oxytio*~iB|rom_8y9DNGOsrj~HM$c>yjRzhYywnH0g^AYp zN$X86GoLNkjDwY4_?hU*7tC=_s_<`jHKIz<9L_!Zed2zGh{V>Ad9^72{&~`@;S~#; zs|{~zHeMNYhQGrA16K#k#a;2=ML`9&CU7Hj!Zx?7NzH1YH%X%PxvO$q(JfBl4`v-h zUTMr@zuEPq8gLY$dLt_pGEn>se7!LWSg7)ElN{`i9w+SQ&-Yh690)P}e2D5fV(qay zF<)P6YaxaVr-q+DZ?E{5U3YwEvHB&JMXm5w7`F&V|IV_j!#uz#$#YYd^)%X?PxEN- z8VT9!=c}zT9=GI?u2<=7!pX-B4-9=~9~yo)dX-!Gvd>!q49@Ger-x}8Rge4;d6N__guDPVO!|M+o}N8bH(f10YD&qGp18iCpO_NsZOEIjUPM+ zvsME&NeW#XHfT8}`vL!r?n9gg2cKO!TJrM~!=oVUN7%)D`E1jZTj8%;1y%UW)lO|T zn`rTTcbxE%b)UQKQGQc4BlI0l!-ccw)fKr6UzTaep)iJi@3?vj)+8_@@MLamPbRI2 z=WOKR2rtuH?C@?|jP1i+E14rM#@8ZZ)oIj&&0uq7Z>O4(KEAb;Y#-h(YX1uc46%)Q z_jg7dF3}@xui46^LbwNgrnr_d&!Yg~vh$@(_4xmg6 zhLVZvrl}`r*PkMkR_*Qk2o?oH-zLtsi7s^0UpvB~Ch+W%q+E`Df@02-^V$8i;}ec; z%>%GTeAYYSx0?QtQ|y-}JfEXITi1ZrbRoPLb#BO1Jkg>dM-bY?LCDdJgK_>d^H} z#AJ6@kLF^HD-kcg{g`o?Ykhf=@OP(e+ZVmP3m>*tYg=1&d#gMWKkS9afoG)HyXL$m z{+%A!h6%%94laTEu3_v@Kx`4i*=Rm&!??87$IHPYV`Ak;W5f7u=+wL&wGsUTu4|D? zS}2{)zQwgr#ZLBpDJS*Ta+lv6SL#Y?)55hB5PnMMLnDtkOeEejB@6CAq^A0q+1sD& zkE@zpndZ|MQ8*R$VJcS?gRKi2@Gv1eTHO?&YE>1MP&ZV<{UoW)RylE`3vcmxDr zN7=K>1jnw&S{8GXoOqPjGcZ-0R{iT6Q|t92A1H1*mm5dR$;-Jr=!ME0nUzjG^RI)I zqZWAk(~Vosk!)w|{cP=8oYqRXbR7I#3G+Ry7>BN?NBpoXATNqtJ2kM6*&n3+ZDul>nY`ZXHoIjA+gU4HwS4G^(?qpg!FtBoa3wB#8k*q0V?SXu zjeSRnY!8t+a_;zuwbUKU-lBXZq^c{XQkY3+i7SanTGpiNL4MJ@8S|&}rLPSio)BMeOePt?+X^Z;k$6?gzNAKG z2i!n?7{vp+E2M(3S;WH5`N0X46;Z30{)7D`{nt62wjZt19r)o*S|qR|<$4$e^pM*| z>@*$h-6@l@me*2W0xgD8N<3!nA9XaDkG+!9NtbecA|cPL)|BxJ+!;FN>mK<1j9cu< zroas`-Z`a>{#-bu0U{0PKMPDqHfbg1=33ZtWX2BZzWsjfq@IZ%v?+1FmT$cyVg^F{ z%1tq&H8nJ?!Gh-Ix!%jt<|LwN9Z+nzSxAE7G%mf9Kv&b=9+sxfR>y6rsHf_THDBzsBXMfB(w z@TmhBj@K;|2e66auPLOn`lUHA>!1CWTzj~^_)+F5`v72mR+pxi&uulwpZAmnu9Z&G zY(-PDBA+ru>z?cWXk&12@b7DHyBNY=e*8E!eW{SpFn;aCGoAkI&dIK=&ujNXQNEeg zh8XWGcD3-(T41GCa=YfhzO`IEywAG&*OH8xGr>2qSzsa|Qlj}_Ks!QnJSv2Vnc44d zs;aF1<;zCrOeLB{ClpnTCkAlq7DZFN^NmZZa))%3wkRZ1>t6DfZ#@9Et98xmDMcOO zz3RnmXaI7?jJQXyO?vu^pd-8(VcPY27drPKHlKG!GOmOE79ANw;m_Ab7IWtA**I^s zehhHIw>~mF{5{lPb^~gX+c=(jm)OT^^sDm=n$ zB~u^-+{CnM4zY^4MY2-8=p^qj;}bhL!TxgU8ODU9Yq6p>YbHoz4y*Ki!=L+OUm3Ie zrz-TQK;7xAx2Fb3U)C}PHZ?b=9wlP|04dn%yXge9PwXaCKPQ^tR=)*J^KeV`MmjJ9 zHerkJH4Ta6w>h9Bqmwq!?mi>rIu+4uKHAQPsz@C60;M#_BnFq5Zs^i30VHUQWy9O$&a=xPGF;fTd<3;=;3~vuP#o5(U(Q z8*s+}odS07bBfnxYy~1{GKb^PnO!Q~gT!?z?Rz>9WLn^~r(P0ODhmbMT38(Ec{l%k z5cM_tr)l7W8HtiahSsZp_aak64^pzDcJ6P$@pc!NnPC^;c0X`X#GD>md(e|zDZ9j@sWKN|w5eRc|xuXMG~dPidDj z-t-u$<9mreGp?`$25!HfW(>pVJ&F|aY3Sp2*r3;e2bHA4Ix%fB|04$LhC$+5SMW&+ zG)v*`{k?@7PN{lXswTkf!Hs5LBnKH!yI=Lpgq4PTIdCoQwk1%H^InOv6-wQAsvvs& z`%CFuPP{~HiQRB78+i`=V0iJ5JjM^T0hbDH%P5F!j)bxbG*W@{b43a^ z{$n}=LK%QSg5#VK(c1GxXehA&IO*I*GnQUz{KCYwdAAmZR>K$;7OXjD)bkW4Z=n`B zjwz8RBcAT9P6r{=&9+w4q1npLM8Ld3h4fY z)*2S8JH~t-Grf1>$y)DhKz52#p5j(8k21fj8FbO=IcBiTVm#i{(BJm3_aUf>%ggh4 zm6C`)ba(|r*KXRVAq=okWcfG?QwDKqPmG^JV>SsaqbuR>@2{EoLt+`AL}>{LwsH@W zgGcgXvR3$E4M_n7{PG z!+~aE@?puYl&>cD2Wt;;aRtjy{g}T5Ra$9k8zNQJR>{wPs3p6+$O$92#jG~bvI(mR zNh{mxa1VUov=n4{@p_|3k2?8e!zJ&(mC`$(btqt(=Jk_Tc2K^EYo)8a*i4`<%UY1 zjHTQM!bSJH*Lk(@B0DwbvE7A}udV}+*fy}_<@jC}7PZW}x;pZv|2;mp88E(Mz!ju} zgtB{_Ou4=8o4e~km7{gsB5iMjg67GRQr}i4_p7H}2q3P9go>UC3PwIwe#{IoAh0^7 zh9RQZfjn;L)b=vAYqk9~jTn^z4km>6S5{Uoy~zKVc{ehp^V*4yDIQ#~cO^Ty@oo4? z1o5C+@wq+~B~7sx`RWjDt4LsMvHwBR{QUgi9g{RmF_+T!XSvRhpV?1YZCS9L%FXt` z5mcFN{4U5nAC?XjwfXDk1ISymn-=%BVV*LD?NNPWia)C;dx9ubUPauLMyH)-L=PFr zMCm|hq@>uv3R=;ri;{bw%vjj({%ub<{;-rImmc5}$OK0cP zwQNRzvjx;f@&V^C02`o`6%hz5VRrlzLtEi8{9WJ(4QqxCZi z3%IQ_mqZ+Bgw56OY^Zr!V^=UE6%c*Od&i30{a)wJtaw0`=FZkaw~q3V6?9vIwjfU; z4kyB%)&e2glkoc&-%fWyuCG@np_I75>hA=Gh&0CtZtup{*4yMUj-02Mp8gF$O1T|x z%#|Drh%N3WwjCv~lWYoV)}wg706I$VjVj--!dq~s@0Tf~gtk|@lI@!B9PYbN*&E}Q z&%oV$IMZ6i#IHt&9(oIJ1VXtK8Y#xfWvc*r6`PQQ7l^#vtp`Ekj`wPLk=m8S9~)+u zD{u79V#b;_^uV?P0zW5hNymtc?7R8qVx~Rx06-EwMb*iASyuPWu7&Lkt%ghEPB9LY z@~*S7Ll}^nj4Z|gYEh`dHk~Vr3z5v2QcOk#2rW;Jo6x7C4o9ScAWP_B!8*uB_>En! z;&QmNu@gB6!T{Aw5G0YM0!e&ffbCYwWE!Kz0+}D2Vs6)&_Ez0&OV2J{|8D&lrY9jb zLqNO9fBUrzd8_fwAA+Anlc5%W={U<&_<&N`F*tjb7(?ERWXYSt^TdMdBO@O>^FMt4 z=|8KE)s{PXvUZ~5(#Rb%BeFVzKva$VVd-6nc|>3p@d4hj zLZaNsSKC8u<#zWc5YUt-yy@D$7y2+x!E~dM-ftsIP5g?np3^UUUhy_>uHcX7QZ^&- zjI_zTJY;GO=U?GCofjSvS$q)m^AZ^&pwo0Pvo-Ask{{dugWh&gKXBkdVuwBZ7Gl~N z*nx9f;Y|Fk%)`S6$UX`L^=;=aOkpbfl`)JOD$us;uBk z16|HeXcREEf-C{b%9N(I!%WENW1--r`OHu{&=(9Mq}d^@2zHOArVe4wfVla*jMn9m1L$ia&nOcEB#9XO z$+`>p*d-nvgq!cp?y;kfjB8gQfc7#sW+wJ1MS%>&Zf~qbx2nJq{NH6+A_eCwO+w`N zG6CTuH@YssMy}PEB07D69f-xuFCcxEgWZgGTt7l6xd{?aLrWl+1QG^9$pu@23Xi8< z$BNa4FHc+R`aZK&Y*WoL2?2b>`SDOpaTU$y2*ubJadA)N_ns?)#|EK~?LxwDN#Cmn zBjZr*o%!cC;fQ0V5>-Amz6{vmlLYl1e!y(i_8v8@IC$7^rm(p00DzU9qi%hHE47G* zAk!bjHoIf4Pgt$B`M8k`JDDaHZH8sGPU&lwu+|?Fgu8*_jJMSnc-&$=3(loXd|o#T z#`@RheondotC}JY-o|IfES@k^I1g~ z`LE^_uEq(Xyy*GW>iU^wfh(etc|w}&+j#o|W5|gP+oxCh_K730*EI>i?1N#g#F0aD zg_%^({;x&oG~HC=-$`lveEKF0!)s%wOt`?J<`s{hEF)ee`2)d!F$=@kstp5wY~&5= zgS`s#wqK3&Bo>^3ahyWMx*AmZmW;-wIMS)Bg@uKw@CDjKgNH%!&ZooBrSuz%Tx_7@ zlz0j*4}D^f@L=E<8v*ac;SQcbf7yxz`n1ed^Ic7^$>*`<489Vm0^So**6X zdpj+Oay_}xMZBWzbrG_0mhYqAk$9!$j=GY8qC8J)gnqpwH@wP*N~?@rpevB#_E?6o z5lXhFvB_XNYlK>j`MIEXq`msi)y)PG^RBuukUMlZK~%@Rj)2qm3{~Z#?A7uyedDYv z0RM*`4+O#8nLN9ss6VL`)qZ1l)sIL)83%}yZE9|(*CUmhFLDU>(Svz3tp))B0d2p1 zA$LmZ_yZOPCRq*wQ1R-pc-6+gS^YQXb^H&)r5j&j!U91&WF@XqCdnObbVB6%mM)M+<32T0i<0?R2&T;URD%3T%I@u$*!^ z^7x5eQF!LZkKa?HbBk5%A%oKjiW?=QD-+InLrhXzgO z+WkrH(=lSniO>;DlOPBs+)eldT)mlggHDm26t~i7Xlq;=*2|58w%&3f;WRTq;);_PlcJ^v7jJ`y^_Bcp-h_Yz#Cpm z$T}`eTiT6PdUWBec%kNIo2aTQSGVGQyl$(>P8Qx!`MoW;*9^fnE%>DR8v8&M>9Nxn zH?sxI(BWJ>_I`rTncT@;0qPXIJ98fQpEoNieR;rJfEJV|6gbbTDSL0`+&!Sa`w`B? z^(esmW=HqO+)nm>&az&D83L}SoIr2})@tO=`g`cFJ-F{7$~z5NLIN`|Z*CMj7reUl zMiqn~{md!Fz;j|qyb1`m>uL$*u)355Qq=KGvyN8Xh|b-jK>?ONo(E}b!-2ClzlKr z%Br@dGajiu(WL&eb=+Ys4j^aG{tK(>;z-HIBBzh17NHB8!g+Hp^2M;AL{sj#yGty* z_n0n=)AHKO+PRmN&i$GRz}y=R-h~)1CFX50lC3H-j%IitT;byHMs$YEG1UxCwyKvRM9|QRx|e z4SlT^!R|{nt#R7g7-# z`fj&6h;R3K#Z9jXHkhMJOmaB;8E&0XRAiN~I`SU|(e>2|G+EFP7jv^0la73$7ZtqB`MHUDPl)HUeDF zt#8>@ieB+EPZ=^YJ8VY;93Yp2TbqE)zXa;n>XligBz5;rtV&>pPbA8HA3GFLXjUp< zmZFjsXfd&j=|nb_&ewgfxz;ldi@hv>GJwE-6dBRho0ws`*6~M?bjXQDv$hutj;A!( zwUox1E=t=BV?q35{;P2M{OXs*6GSEdnJ#{WoX5OW5x<#)^c@`CUp2tlkq?^F+ZZBbZ#Cvtn7-?&XSC-WAE%~iU5Py#vb zVdPL@XUd=XW)*j$`6r51;kgytU{N6GEGbNxWv@6AJmzb!j6srSKj<}(o(Y#vEO5F#~ zVwHiYp-1enFWz_C|DM6pG7G&?v$2dx(*S$K_cVbeUOAJXir(ufT1;P)65FxYOnQ{~ zdh(72AIZtApRE_KplwXo1EC{8u-1e~9@?s<;-*RMe{^c}=uKx*5DSRXx(YyocrAJy zb+B`wGF?|dJ+e4j!W`!KrlXP{ZDtvlpIR{6qi(m*jf+V8xF(-$*l0I-b=`jB(#zWV z`nN(ahOHZpIcLLrCA*j_ES$pFErh%@;$fk{^|$VL)Nt=dza|UrH@|>Vc+*_ zkzHpmx3v7cEwEt{lOR8Etn4VHF{WR|AJ3l>YgECHL7ezXpbViUVZ{#psdJhF2VE z*poS;OiV0FOU|u5dQX z%lDOx&QGJsJ11p_FzxfTLC+yjxpsvOE}*>-@$$GyQ~yj_RV|7O6uhZGpT;+GJRQD{ zp7_dSv(L#LBXXwY+f^Ay8+DxOU-E$`go`^et2w<&0rS15bW0FG$(1Z%Z33UX^dv{^ z%-x5-6;#lU@B)?(p7AK964JU2PJn^ZqZ8NYqu@Fgd+vG!Y2?$5h$a8>bgd(O7R~qQ zXp)cDB3MQ%#E0NSg48}|OPinavrTlu_?N{Bgstjk$rC4jtzZIsoLa2*)PK)d=!v6! zigjjg8^QlQS7_i>Y0_0Xd@x4_2CGY#$i_Az;FT)BM(`Qjv4{fJG}Zv4{Gso7!zk1{ z@r>&7he3{eZq=KXeL^MGVX?!+jaeo|Q?45oqz4;^b!@ml)g>frHd;=8KkgP5tjBZX z+cbj7&aEuCLX^KX{ziD{#mw-~Fv}djxKcL$@%bOeC!7%E84HpvVZDYRtqdqIQt5bd zo&h!2PF89-|m^@KMMV zUy6#!Tw<-COQ{x>h;|Cfufk@p5Ut3;Zl(;|L>E4(!r7;dg<2jmPKbV z^>}?8dxktC+2L-auoJDv5ETWIuR)#OnMp&5)^Fp`s;Ldr2!eLf;{F@f*P#%#4Tx<42A8}&7q9gJE%3pf3_@qAlE z(~xkoMo|(&t*W4K@W60S)d846=WLolJgFi+SK|lOP_N>DSbw^lF7ONM%JbPyovy=1 zy)srX!lM?U(G|GdfCa8i!BOImywQ1kLESF6SB57Dzoi^HJkuADpV)P~onf~j@4H2OSQgY(&ZRw*0lYvx|e zIes{q^)|I?gv9X{bPimmPg>K0>$@T3E=qVP`*X?%J4D*Ntp%4cH{La|>Ur3W8@(<84HNnf4H zt?cSRK@DeXsQbYwQHQ;IaJtLCI{FmiVgr?&s@BEe1gCW@hsm0kRDq6@^{RN`^aSFW zfBfZs<}l_RdJb%5!tQdgBdBGOSYAf}y0-5ph#qP5CqZeF{bXQ}MBFM| z76oMPUVHnVxpK`_hkkb5H`nr!k7r^7ok=zNRlVQu^cGHjzt=JU6lk6|ez4xKSk>+W zVuUk-my`R;r`)`Y{9Q7Rgbl6Y@uX>AC@QTp(MuD9^3JjmfteHJJVh1mwgJZXGkhlF z0+s=;D=pQGXO>{S{bZR zUn$42ZpVPip94yp+LslpWnd~;#l6Wi+ws@pm-k&Gm-IeFC2?4*a0T|_UQR<@ts7VY zbd&IBpG<(%oPAbYW^uMb~ zcy3~C{v#?dmAiVwa)2=^u%g|i*b1b5A~zUbx>u<`P?3|Ck<6U;At4l*nXso0_=Gm& zWCV8jda0h{&}>oZ#>E`2n$;ooTJ|$WnVd~S6W~1wPr_1i98?gF!%&;DYnU|p<@^Th zHNauFO4P$A^T(??zIDR<4{Tk9QkU{QYS^RYnYJ*fUD?`P`=*xW%(!$>_FrN^jpg+? zyuc$qIC4ek07g8VIf>XdFrpZDi{1t*j8UG7FiS7A>#Uty7@V3uqmI>;db05?y2~#k z{7v1l=Z=^l*?aw$Fjlf-QvHRwtymK-4@LJmq|}r#IOLVsvLHY9nuNM{<%o@;rpNo1;Nu|fN18FcZoZ$n{`mqq|?54Z5m&&R9@va9)5Bvu3<5@*>b~b z!t2ubTec?mAty6}%+l(v_fl3qVa-(P3 z=g*$=GcBF}lpF2XwITC}HI{iOL&UR1bd1tbdO&afL8qe}2+y$L zta+Za^K&8^*p`fe9IMqr%xrtLw4zkJlKEk1f~j&J`bc6Zmg}P#yT~a-QrkdU-R#!q zrGckQ((Yzv@*6j&hdaf+E}G`^GRPM$H~f(Gi`Pm{D9>ow*)cJGSmC&GK!EtUbMCdB zi4(axEgH(h>z5EZcT5Pyds=!fuJAOE+0l^+s?&yKJBe(k=TFrCYv0I{oKqd}IBkE~ z;a2@>+I`4pYCeK^)C@$0AHk7^g)4tCj<|9uf7jsprb*|WES=yvF}GyTGT@iwh*65t zX5eqK-aBwCK>u6}*Qvce%|!n3aSi3p98mDH&rnx3i;-1bY#(|l&}0`9=QRwF`%3+y zS4Nr;e=SY^o4<2p$|+g7I8n-3luw%6!pD*a5^8sK_WIh9i;BS!JbYR~12_OS4M^XF z`OdUiIlmSV`Wy|Oxjg;%T0qf8*B+%7hM{DinJ%FyiL~{{FTXV#6_zK$JCcVO1({2+L^FPcn*i;Ph-qKrX)z!65Vgg`GBI7 zwm_KHLuXUGW1%{B~f#@HC@BL=6a_)5rgX}0= zTMO(6_utJ|()GfMnMvmFcsO@itL)~(OmWgbPqM*XDiQI|N2aYK+8{TX8n(=sRHkI8N6@JhG)JLK8T2=Jwok7`q z@@IaVv-N;?$ZHi41La+ygeWKzl${@_zAqm96ZpOcn{7c&!gF3Y1XB+e#&*XoJe?9lzPsJ=4@nhMkQDI_sK$#rN6=^Obg1ji0pi@33!@J z3FtH>r2;N*&dI?zXLUurn>p%X#EsO)aAgfR7&dGRXMx6S5&UqmQ^Vm#3Je2-ybh82Az0O8HGI!ci2B(?)LEQqIhM-69 zxh?W9&!HD61$#?R*yPft`Gpxl5q$6kJ^IL35li!IDrs4V&WcmcPq6FT{VKG|V>)_v zYj#w)_V~oO_Jh4_8s^;fd&D+-b(ar@hK5?ygiN^Py?Jm0c2*58F2y;p>mS{5*5+?H zg>a)v)Z2e36f7c$GUbM!-0%Lf#Gf=y(zOvYzHR+ zLE7)G4bE340xkmtuNNzC>^aPx=VSkcT|cX;{$;>U^YJBd*SXg7Sd9a?l{ksG_`ur@ zYO+=eFl34Q^$#`b&E@*8JHG=IML8FWRk;X+H#zC!XA*NL2GDl-m($(x>C9*0iGCX> zPRm%nfDJ@RjtI#yePEoe*3XG>BSu|P&eNxI{Sj`l>zq@DPmTaQn=VQS{o)uT;3Og`qBl1q~Ee>(3J+8Lkx zOv)G3%bxKwnUNPI%_?A01`gylz9)N6yXX2P({Y!KXMT| zQ;xgc4`gOGdDYP8?rAZmtNyb-EZFXQlMlzzhApS2i-*IcRek*B)Vm(LetD}e{ZN7- z@G4$>Vcw5(7qVL!S}?Fw)R*}5>E!-6f5)=(VpaW@PlYdYwPbX{8ygu(rsL4BcOmhA zu?2js2Ipd`rzYX^!ahoUrsRWp#LpJK*W|dY?5dj|V$QZZMT^m>yTB)sNn6#kPZZi$ z`;Ia7q@Uk%Pv3Ope0}nv>b|I=fTd4?5fXnTho?GnHHv1|ot_5-ahaotx~ysXgH3Ly zckX>3-a~01^Or1^DAIqZ??8*nD+!?lGmO3SeT(a$;2M8p!uPbeUsB1f3Hh1TIdER)?A3xf z{w*SWoF*y!YP;JR*|H3GRvSX1#`rJQkw~etedo5SI$ywI?D`|dlvPG#uqe|~#$d%6 z`}^w3o?#+lJ*~Pt;HZkt&lUBuoX-4nY1Ulv95G_m&OEywHwyDQO{`rSf7hkhk3+A5 z^G_bhhcS¥)HhOgC<=xL`THhEL7ne)Jfe`yO;Nmvyg1k+Qqb)IG^yw#e7xnez$h zP0AcIV)Tdr1PVTRm%{z8u{5R&)p%uB^zs524u1m*Y?&r9ijN;VmbV(clzXIQa7%<~ zgd0EQ7|Z9RG3*a}5ydUh&7uJT$%@qy;jt2XwRcnS-YlRhyWq7yE`pL4aZA2xzCu!5zco38PwU3?h)~>?$CZ?f>%{Z{0VdF>r zv^|nqnwN*<;bD6IYnWv<=>Z)R-w!p$H~h3vHb>`)`^GXX5a)_S#8%7da=)Dx4={i0 z+919IJPNA!D90#awT0zP{u=-;eM%|B_NA^h*_GYCg3$k;e!l~?YpTG>n)ly*jfnK0 zVDyioe#)a1PHz9wOFP3U4LEcx3P0yeWUa#Q8WpFwlC z|4ntq{hR6>`#04o^DmZ^`snZFpo(c*5>%C-ssx&f65C2Z1=DRoP*vhLEKpT~suENq l`Fl4|{ibb6{GX>1r;tpN2b45T$Ul&zp`v{;`@-#q{|kFUZTSEI literal 0 HcmV?d00001 diff --git a/website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-internews_logo-256x237@2x.png b/website/assets/images/articles/deploy-fleet-on-ubuntu-with-elastic-internews_logo-256x237@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..189dd8f6bf12b4cdfd7f69f94f66d741b6dfe02a GIT binary patch literal 33450 zcmZ^~1ymi~vMszf?rhv)L(pIwcbDK2Jb3WnuEE{iJ!o)ucZcBa65N8z%XiPY@1FmT z_xBjxtGcRY&8l8&jqV<+J4{L86DkrR5&!@|m6j6!3;+QCihwf&xW7lG&9dmf4UCzH zya)hL6NCI>2>bUOY$Wwr9suy51^|2m0f48!D&Hdjz!?Gn92)=tyr}>Ho?T|EGXGyg zpoylmsk}Vk<6jv801LzfK>wA1|F8fF0sln%hffAb^nc~gK-z!%Kmhl`0&=1MTLzr{1G5>W$NSqL+DU0S0sy#F|Lj2N&y<${ z0MxjJs-}~syd1BQtu>ROvF%qACO2!le^3B^H{QRZwTY7<*v;C?#*x=efa1SAc>l`( zsF^9i|K;LjDL|nquLKsebua;QGC`Oi6oN=#Fqq%L*p&CPxa7a#f6oLc%$=Od%|4Hy)i2nho*;qIUvi=+LztsO5rTIVh z|KRyg?f*t7I#`(ey_EmT?B68+srwKAf9m5^vT!r8(iFF_HnDO1ry5ocPJZV9r{#Ym z#cZu?9aQWLjZ6et{tfvL)&KVXFCMM`;9=wXPoDp<{2R&7{7--XNB{q8aQ&C|@8}Xl z;%EN9BUKQodnC6901yU9i;Jkb0Z%&+eRb8o3wcj=+%wiui%CI|3;P1%rJ?YXKdZtu zXwGQjQLAIf<)Zpid~VZ{(35F+vaR^5R)vWxWNpX?C;k#bv5}(u7>F1FgbD;<#*duZ zw%liL9y(5T*q)z0k9)G+kFU8-2|Pb$U)+0k9(r=peO37gij8vR{PG9+ekA!jvf6Ab zwQY&N$+?x>dBuurDAh~QXRQdveden|ZXKi+e0$uFRJc;I#2*v6VKy7wJ_cgXKd4vB z^0Nzk4o3?-3;r(DuJ`HXJEkpp#iEzusdDoD&$BQMuuFlcoazh0%DUU*HJ&#-+9BXe^NVFxaVv(Zm_s{h7Tq5I6gF1KJIR;|J~}zx4KguqL+} z!b~>mbVeBb#LsoOYk#vv;HgxCcjb*+DnOOwHd^ySlC1JLD%7>>)AodoPgWAr@O;T} z7mxK#wJ2{{ES-hz2)zLFk%>Y)EYVB>`@@Y=KwTT0xX+Yue%DT3@Ud}|<~jYlF=&kd zoWC;Tm*j-t zJ>Wt?~97Oz%6f#7k-X-NMO~?FMX9{x(D;^vvb;PLeBO1hT#~4uN^%dPTuA zyEB>E&|~;wZgQL<)h^*Uzi!KmH0Ov*dE@FkJ{d&Y#h|ut?muvKN!<*U)${1ewpPuFyK}LLG)(+0Z9!n>_uOY+i(Z6oYt! zvf`fOAQFr}`!p9k#lZR(a@y5*O5Fs_{_@(aBU*uZ=uvo*l7i}zg#bE@{KX)$J(_+7 zbGD>J_ia?Hd3evOkA=!^R*VFSaw+7s2(r_#OAbAWpUa8}nSxOPGRgtue zjSaOJEE#FVT>epxSHppBW1%2Yy0^yui?OKXgeU)9s244{0e{TqvgB>auiT=hN@9w= ztKSAk3452tCx9Zh#Ab~z3lp7kn^=_`nm#IGylEGgocg%vsBl5QDR~A_4Dx;1Wq9RB zHD34D(1nHWSZIeg6j+2p>;;OBYXPj=nf9~7igmxG8ycvJP{ihq*CSu@*t+>lGj zzO!_F<_uz^($HVmtg%cP=Hfu@fPBlB=T6xjLNTDIAR~XHzYsi3z-b7pVrlVek~Kb9 z%D%Sws_^FyrrSKy5C%p*yAE+W%D@d!6h@9|DohIM{B!YsmmT7bP3`P#WHg|Wk&ZCC zBuDYjR0A47+4DeG3A((KG0EUyPEnU-x*z>njWebqWn0P;escWyb513jNu5T$;D9Ip z&_G1(w7jM4dUEBY>iff82tvg8)1Tjc3DOs}6B)Y%0n(z;slZ6Q*qM#@Y)7W5^qd#T z`yMYod{IV;)ul*iD9MlAwG`XSI1~c5wpmK(1sjE*0) zwSL`xLr=Xd8u!)5qhS?F!K z^c@FaH6YHILWO>|)@#G1e=7t))xbdXwqP;4hkUM!u&hjMhYS{QQ?GxO{Ta+KC7u!n zM8K&2!cx%qRkgw@M03A9GDjYLX4IqFb8~)^_}--7z74Mkfg}a$zkVwx!e>72$LxLp zYv}wqq&=CKelRMn93JQw5;Q;y9k2qx1^Tc* zhoU7*jYl;`&n6F$M*{1>aZa5M6GKE7Z>K|>KI|bdZLSxMyW~BozzUj@K~l@gA%uP( zt6S-di_fdoYOXCAL!xAbDL0eOM{@0N#)Yv^iMvMBxeJOyUrb76D$|3v38Adwd)?ti zoLI>{93C~i^!5G(*={^Sd#G^5wmh1i%SBGmf>wI$vnK}YReT(@V-GeVU;$(IH^||#=^@NeT%Zd{2Q97&Z$lhqh_k7 zd{MlQ;{;CB{p;>NS>>z;Pznmcsvy|Bd}#w7isjcGaHvGk*Je;kKlAG{Vc^v^?hmN- zCFngql3O>!a^xUmAOB9 z<8$>$zfdv3e#H=MYBd+0)~$3IL(r`hOR%Dg#n<${Q$Dfl{y;q}6udiqNtlCvCv%bp zAeKGVu%q_XhltgE;lsylMqI7*H^1DqWYWK{ksHhuTUr|49sW8?2F0>-7cwlh>4)HP z+ujJf)Y7QR25`JQkYX`XduJJ9Po$-7Y+JI zu-y=0=q4$JxjCOA>A@4?=VOY^>gUEijpz0^o1mdk{R~c6+9RG28oQ57oo>Se!{$6+ zN9}!qAcSJ5gzWxhY15B(iLsK9@RvE{l2NCf*`-f*(6hztAT~cesUehHJlr4kCQjV? zKl|LFm~7YZP5Nixjlz2Z;;Op|+7H53O7W1_i%$d|IYG<%YO=A>PGQUGc zL|P2&eUwwVDS9R$PpEAQMfzWe8AGo6QlU5H*dv!L7f0azoI4TxrMXGw?(G$U!Mp6K zKtxgb*D*z5D5>Y(JqP*NlmZ|E3k?+3l7WNsp?sBHYtPC-W1%2T~tN!gZ`pE zIGmt6wI^$arTW2G#Ay$mG61ofRh;e>(V<^kG|a?s8?ebsiCBV9Oy(r1v{@H)sNL-b z%BDH~+_=RR0(^MP*EG<_Yfi-;v%SCYcqmjqp;ZZ&hQm+!vvXj2n6rKmE+U zW2Yp1(2uzd^4XV>VnImgcYs?|c;HS~EL73_9^%O5rlN#)h+XDnLZ0-~Nuo9%{8^2s zd~B%RO9b6VGpUp#(W7}Ugs1}8n|oR-`w^BgCwoh25$6%sT%dSre4{f2&r&AZ z(}<)s1iQQ}pevo3W_u{0QP{eo^0OFA{G?ReEX2C0X*qio`FCrtcgF;#z*(}%ISiEi zJvacZI-7|hc3wc>SzHCpxHuv}@#$)lAq=&{+2Vr`O68BECc#PmoiR-*cvFmPZt;=< zSuf{Xdsv@=eC*Erq?^LE=_tsPS6rkSNk#EG0uyVpq_j@?0-DZNW z1F+9*Y41-+T%d`4tl&Z5C?dQ0?@zG&tZrX~Pelwfj{W=za`p6YQr=zfny`{eW!t{I zGI;bElOJyRqpwc6@~OL;^)lXSDy;eyXdK}#^r(MwA*pYlWQsFiH*#-|(Fj*34$WeW z&(V?=hGRv4RNc-in4m%As{Nf?2>F8`4VBa5dZZ_ZDDq5HpoAhRMKtHlV-p15N9fsTgmVc%~D5^T&wNm!HMQ?fnUKpXP-zK#+~AJxLz_ zaeyZRO!Gz1;`ffmP*OWhIJvuTLA6%fQTC+gp0SJ3FT^D&T9FUQJfrcvS+KAlpaP6xUJrs$4>ROJ8sV ziUsS~z$lx(cG&3QH??n;h0|?NVh@o*%w%HR0+~vk@5v`N4^=r6YSc>ob60(}ltyTu znK3;jXJ=!n1h3)=;~LS27&V4+oA^kVT%me*7^4TFU3th-Hbv%!s5F@U2=9K_>Y!j( z1T!ND0LjxAy$qI!L6xL%!rEjY4hLpTuKdI-5rJ<%laAfi;%Q#PPCEaHwb_vyY+UE! zXR^Wpz=lG;KUcK0rL0RE^HAo}zXRN2IZ3g^1%?`1%#XmTlx1C)QSV;vOla`bNc}7# zUg=OF&V;Qwnsqgwo0ki@Jv>^J7NqfIssO(`fl|&W)8A^U?HH>%t3#xLC+;*Z4+iGZ z=t)k2r~_#OKLBD-%t6^6GKO++N`>M>7mPJ8#8q}11I()a~ zi|*Hs+Ix4h?a2C~5#hBBQ<9v5q~{g0p)CVuiX@$^)#tqmsf#{(T&6io zm{?@iv{%zc2w;bTNG>diC|bOY)1ddr*eeT;=JwJ-+5WNukvMP?i`wgye85H}P{eCJ zByRdK5{+qA6i6$NNCH1vz+%)`WW+4?RjvK z&xF;M7L?msMKKRZoC}oJa z#nyCsBC1_=%pNIHTZT?Y0m(E;NJ+K?F4vV9lhS@7 za?T7f6)x~NSNlwPbkDnH4H_@%StUt-B!d-kDi9y_*=_nKb)%2hg)$#N5BBL_I%8|t2XXRb{EsHmKrZk{{kW%RkY zPvO;c+ht4!a6{MFAQ}RR*soSkB48N%hx0=L=^Qx{F+fm=D~ys6pW0yWIyCnQ&YEzj z&zm+eWRwq{n=mV19rAnsn)*Ss zF+mZ#$^jdesne`3n{ut;P5+ng>1rn$+xK5ULS0KYL#Di70P8+49Yc7%b!A#UrvdFX zB=YO@=d1DnK{!L60le1u%PT*no|piV$dy9H@{zYKOv5Q>f$T>&#B-vD9uqFB&I`2~ zT#e4DPNJ|eC8(|KXwYjzO_kV1Ox@R)k|UvI1dL)lKi?v=df#mAnF0%bvHX3$`q`n{ znyHZ<4|*#;PTQ4}#J92)B|N(HSQX<4uMq-ZHMUREu`2vt;EJ#{*^_SqoFqrw35 zXbetvXNm$<^|_MX5LO^Jc4|}|)IK#Z*E*e+`m4Yu6bnV5mT*u=5&|RO4WHo>k4{7XLEC{rDA2QoEQbZaI#Jl^1d$Y-XZ0gp)@|O4Y7sM zu;i;?H1Rg+x6>#1`x0TF3%a$}AS(By;dnD3ozT9vdXtZp~F0N2)e!;kwO!QfcamrvpALS=01u zrB!isu&l=h5G9> z)|Qpd)SXfr2~0$O;!>(vqG{8*!eJyE{!ms7TA6)}|A{`U**v}ZY86s`%)9V-tk3?( zfDmNK>wGvBZ7KH{BprPfg_WiQ4BCqKB7a{DeMX#_AHY-+orWba@}RS0rnscjcBCv~X7LG@; zg8{(GW)`~n*dg-uP=rSAiXQi!MnQX5x+gZLzZJPuLpPcxie-RD5aG-auULx)5=HFm zu7cD(Bf`yC57>^{*Ys(`_ur(EyQpfqAiRHY4F>y0&k&b! z?LU$oK{Oz~r=I=;BIC18NGjQUpGfiT4F*0`lAASJR<-N|6!*!`H#P)*K4MS&`mL7M z8E$&)xUdV@@$MD*TC+NpIm*TX4pU)NL(t?NbsQX}4hkRul6@8?xwI7+n-Q!M)Hwev zT*?OM)e4)(Gwk{MUR?2*Lt2wSFl4HP5GcS*3CNz|h%z;W|6YJIiLh0;anmv;XxF{~ z8=57F&KhNqI$kc5350pr=exji8BjiYZ8`EWoiSj|)6cfZ!&^A>j{sfIw!K4z+>KY; zJ8(-dB{?O_4A~fKp>1ZNpl7CS=SML=W10cB*J|4tH1Am)DYhQA_=t?``Q;M&d6#qV z$6zu&!prz>%E>5VMwbu3%lAGOM!Wpk1iojzCiJk05NL$P@Oga?IG4nB#2q1?v)emv zmB=akYoh?bxlsnGB%54KE_%HKHzuJc-hva=9v{AwNNxc!^_LNkq`zR?6wTwWenCqR zY=9ABuCcPkF|w%^XA?C1huG37+fZW6)adbDZxK?XOTFNkkkFm{8S>tgddE^$0Eib? zo1v>3ce)L%cc&fB9XPo(-()H8zJ0gYZtCHEj<)xbK@c#mY1X|Srh^Y-v89tqVb#cV zs)NhsJJJ^@*_Zk;;c&a8YC!X$k1;j)Sy7MLUS>BK@Ear1T=8ro_cdb3y6<(}bcZOD zMiq{uJ=^^G#)mEca8ilBvQrKD#t<#0V}$O<@|i> zEAe-zneiPMz8?(dxO+%>Lf@>c>ec{*)~xz=qz(~TpCnUAjF7GKy1 z{N}l^YFCH8@Jb*4UZ^pN+1*V*C#s5&GW#LE&8B$cIcGTRtmKAiV>JA$fmyCPoVYA| z7I=G9I7x;IttU?M5VDJ-tIJAUWdgzu03I-m6V|7A|j+yD}424U>7Cz_v(f5(ySSbQF-C|yw z(5Rz|r)ceoIv|XAr*lG+f0|!e`B~_D(m8Yc$CAmGGVhHe8kL_35vtyL)$h9!_>-=d zQ#MU5s$Ts`)z*Zq{FRqj^Nbm~?+6%$hlBtM^@Frdm?%sCewYZP*!HO(UIAPGy=RtQ zg*nBhcr^Zwt#AO~wj3gOA>_#$9W6i{!sb|6SPoc0@2tD{`^;59ji#G}5@Ym%WaiWC ztg31&Vh26fhTZF{GZ(w{q?L|m*`X?Fj&sL{a?w1rwLHSno{yPpDzI_waAvVP?JU1a zw=5_)U+gmRU9hxjzu;kOdnqfNvS4r@LfdB2Bf2hxJioXTDdFrCkXtXIRU-9PLq{k( z?Q_6ivY;Z62*=O*C7Uo_2@HHV&QaJ#1GbM1CgMULaRWg%gQ5BzYL;nK4Gb*Mw2W3e zNb*cG2grCXia*G&*o^kd-Q>7xz4_g!RgqY6x3cCJ8X<9`)W4EbN zQ~B%ymE`#6TA<@Q3hDjZ2PkVeXt@MT$QLn8p|tKIIZ1yz!>r~xkwJf_hgkDcG5n;* zYyGa`qK-O;x1Q)q9NOSj*#}gqGIv#raVKzhohnKTgz)PhiHN|Q2Z6nxUm!qEJH#aW z%<8X0p3)k9#>OMMr%fh=Ic(&1p8 zGR~W;e4U#KK9m0*Y*qLHSiT%p*6F9|y@PGY*U&rk(6vSd$OUpmPblsr6KR$Re7(m> z51luV+sf@Dj~%2uGvyyf`&|qjaIH%jjCxG16MF;>B{JorvyH4E2NL<;*vT|0V0T>Q zE;p6Oe%%y(5Fj3T&I}c(<`mC#5h5zW;jTp7(Ei{DbrO%I`W~&$v}Wcz0R9stW3^%o zWmb9SyvVezpt36vzUjSB$PRaNlrojOEi+i-gfHAU56}!}`}3eL+=i(mq{})@C@bO% z*U-#WMKsTSxvGwkn(4f=@(7A~>PmAvDmpv(ftdhqR+l}=wRcVyPG12{e3oK1A)-L} zaqECTXjWpLkAmZje74PZEYzIQ(ldmWY%3OJiZ;kj!M+%GYYv%)wIUcS<%oZ4NRC?xmP0YZ$cX$DS92@LMY?~b&0AJ328x=MaRV>0&lp)L7d5Mc3921p&5406IWos~P9eE8nS@+VK8 zy*$jaH{|!~blGN`$)c<)|EhOx<*&&ANzt>{9-SeaCgj%*P=tJd(#X>O%4 zF^=WIET~2lm*rsm;z4_^SgM1?W|)S9Qr&>DX_}4@wk!D;d~*W&+w%lflUG* z3Z)s%_0mb6MlYS)_+YRn&uZ-N+NXB8cJ>*za}wf&4!7aPQ0yAK5!;FY${HT*50o)+ z)K?5W=s`&1MvZE$0`23&+-{HjrryuP%irC|C`fjLSpoU*E)et}31L=vPqe&k$)X>_ zZmpN=urBjq)md9yStX7kjmXQIISjk?nFb>L)&Fz}MEfIJMDk4H9Vyh?G0mn@%u^#=I;e5M|$`!l2#;gs4 zbY6)PhWgcG^P(oOc8$c4OZ)=HB=baW_1H4%N^IC|;py|Xdy|Vu5kE-&ax>xpVykV@ zHAb++jz8AYXwNc!8E_O*+W8>ghH+q&)iiQOaTEK2^)UW1v7QbU?$V3I(*qrzIR^l1 zfYjj=3Ppw5E*K;hW(g4#S_(5lrnh!}Tiqx?E6uQNYHErQ|9VGk3&!f9)sf7i{3g5TMfJ8%!S*Thcmw3lkIL+P#aN$zL#PPoFy;x;!sD+z(* zF>jQc*+2W(uad4U-76O!;F@tVN&?Zf=E^on#Hj>bpLQ@aA)NiCYX=?NqhBR z4m~Ub-47rM71pbO2^hNklwo>?=bg0I#*W|J>+yp>?iio37NdOso05xwKH0~@(FW4K zq&8#Emu)10ByVxeV={JwXiOq9Hlt1~G-h`>CRjM|pW7UZoI)xFMYI@^*0Y(72aPY# zBq}49fDG$Sd>dNyU$Hu$6TXL;X(7#g!DI7{%izJMNrM)~OTIx7uBkjl6b)8#$|S*! ze2&PhkW=GOnFbM3;+`{6-RskS$6E~PnIq8-oX0lirIVg)hnb$X8dZwp#h!*fWN=T7 zLU8**WmbJ%HHMJH_(*CKc&%8(fNla7EZ=3a55PHFc;=%ngHrrLN(MGX`<6ZwOl7E4)Q3Rop;LURfPj6i#pinp zMrBXV#j2*F9}P7f0v0@{LkGX54%+=^26N)<*rouz-(-Q6BRh$Y_yDzGL+fEHU1$)e z#tSI`=wht%(4(+94i)>!lryP5k^Kgx`wW4~_ghDK{+fiTc6ej9KP@&AHZ+`p^eM!W zynAqv0emlYR0kIjuBZJAC)*uvYYv}B>*tp5$j*sDK#&BZpW-)94S{(xf1C8k1k_K&rMg3PfIhIed>zwdsHMJ21 zj6U@=AXT<-C$t?7ri=3gnyFl&d{5WX649-@dI1pfHx$ar(XjwR6-}TTFv8RB?Hx#C z#xkh>5d3VdYxfXS^E7sK^z9zrmH~?|+x^7!oiB;#R-xs_jhxU4^o0VAt>9ApmfuFM+Z{O-}f}JbM_iGe!s3Uw_Qp ziLc(Y(mEE3%o*J++gm4hw%gy$TV-UddnH80J`QNZ&EH(VWd=OBj2x{ z1Gsf}&^kE@-Ek)aZamV68EJoC<3z!QE2#Gjo7pNV{OVBQmobv}j&U?DTD&tMGFUk0ZI%rT1Suc?(aPgNFUj+|?KXstd_B8_F-vtT|IyQ( z+!O@gqo{Q>Za|nJtY5gE^LK7ZEfU1XEqFr!q^0?W8qq>)XiRogsYh4hOhXgG`&)52q7ckp6PH>t>%_5_rXo%r*i4L{_~TKoP+;clFF0>gR=ecaTVRQo7{+A-*b7}EOd$qY@^W$EMB5NzCquTpC>x4`7#0k zaJ$g$hbgtP8PBj_ff+Yo_}fqiTSZ6?Tk&&G&=G~J$~SZBb@~81Dt@2D00dG10^~)u zo8CbINhsQ>iu!cIP-IyBRvW{+HF!>OHvfs=9aRP}Vu7hDlbY|v&J>=78rDvLtJ3Zt z;=WJG1}gDh(m6<~lMnrVH7BxDe()yXw}jCDbKPrmg5@KWT6Xk1&SjSxJzugRx$Mw&}W2+IBrQ^EcCOlz%crJg{T* zja57`EW~B_M9@ST03;vP3MZhFyMdhwI`>4Ia}xJeipv54;9a2j$pVu_bCCGIt`VRr z5n>8+f9O zx|7*5??p7}u)GH}9P(>XIfzsb?b07kyicrgIFo3{ex$eP?_FYnioD?zkarlAC4-nl zG~ufzIU{#Vkz&HV@)+2)LKwP69uV4TcxZNIoZVeDtcov$V*4w7nmPWMaXawy$ARIa zKN9k4GNxn$j+Rsc67-e;bZ;QGcK4qkmpugZ9ZokAmSY3C8vRwzd6H!_$p|WYf#zQtf!a!F1cGq)Th-HcG$g$eiANIDIO?Da z2$3mS!zX_fOVnLRY^lGr8HBG7;-xQ?oE5Y;9NE7)lXUO%Fm||ydzJHQG!(q7+%`H?Z^S*ungRv z7Y3CKejfWWZNX@Vxmini6!z(|lodTSIF>(^C5mSLVw>tbHGdX~p`P?TAP$b>L0R?S z5FqwR9>Xt&j#J3X1}GUri^LQhkS#@p)l5d~2klRhCGuX^`{&NS$dD;{rVO#qD-E?| z>LEB9g-|+%;8SEY+2groQ~^eX85v(Z`s}9-kabP7@}^U78`|9Ddc_+$=`tPJ(!9yM z--7^l^j9tR{Z9AEJLX2T$TXna)7HcVn~Lu_aXVQI8{w%DIJ$GCoDl;F+Zg~NYDCxt<-D<#FL&SXgszlysf%nGFe;RSHqcQSDCJvbDz8}ZJ4GtqW zEF0gUV6iT)6Ib+m7`*X$qPx0w)W>;jB&N-XM?gVHHw*I3EG78~+oKMveavqc*jhmK zQR=e5ZjK2NP6@W@Ew`Exv2|Ce&~;eY0K$*{fdCPLz*}Ib2WxzOEEe_BuXk#>w2;;$ zj_Ym+Iw)XJj+oH|rls1i#!62hqWk(S`cbJ?1`w}9e4}Eh#1Gg%*2rumQb14B{47Or z0vxhyYUiBAS}Jt!lRx8rtRWc-u9^s>sr*wMfe7UZsU_fy5TP(1$akr-E3ox*`@Z?B zAJb{O;0xa=2fF_ey8o}OM+5j7@bA?-IaJ4bY#!MzOCpW4SA+r2V` z1N!fm)X10~2DF{`RP@ca9w9wX3z2Ua--sF9Z2M=H*|+@J#Yn|_i&d7u32{?LGAg5a z?6JOK_&bPK4?U}!@9|7$ait)+LLE2V#`v!Q@@>zGtc&Y&-m@>huE+>m?$a}l_%5A^ zQoL;v&fkPm#czNqw*{vEs3TFdrtXxrSkLth1cq$7Y_ zEL4hBeyj#=Q31ZMIYgk7zPz{^b4wNFn~e*rYk=9W4We50AI~T2n?AoKG7ld&%1yCHO#Ku) z)UBj?-@_p)2Hlq!hkSyW(Fqb>ZB2cXeQKHHAN0_!zu>D<%*Pu3gR0f4Pc;BoDoeO5 zSi3IwT(sz_PU2o2d!DPP$>dDbPwGwnB$D8Q4F@o@Tdm*>6;G;93Gxu4e>DHJS!xHGQ1uC0(5kdJduC5C%5 zh2vF@L_jTg(}85iGzWKHwY`vcn+_zRQ%5JJ*v2XBggKO}NV5P?yAR;xx;O$d_us?o zog0TArv)tGd>uK3J5^KgZvWPI-bxT@EHi+dCeDFC7{mRU4S_XGiRyo4s+^mfG4z`P+ zej9_i>=Rv))p(jj)WoSDU=_Q0#8j>8sCobO*?Io&TF$PYL#gR+7GDE=--cTujP_RaN@meJs~6saJH8YV4OLB<;$6y^K`9h6)cq!E}kdUX`z~UEG(0TIu}r&C4aKfG3B{Za_4B{YnRz z_JKggx7Crr(MIIoWzWu~Rqb4`S3Vzkf6~Fq{0$UY*r3U{`M#8}^pNBtus4GUV{O?MinK@YJCqUdgzfy4^>^vQT98~2B$%eTgkRJuLEVJRDDW&e zfjt`?9{2jYS&hvXqqU#kg1VWt;Br%L^AlZ|>{Axc&znfjn=>$Vg%KiHI-RR*2s=uH zRBa?t)8tp6^9>cu*G=pI-S{do0V&il!nd$-<*^?(m%lw9e-fd~Bl_jx_lw~cQut8| z4iL_&ZMrDn07%xBNXo9JJ$iFWMUqdzqq#F5Pu^cRgzt?@h!ioDpSJj@l{tYe3J{M@ zddIYU_XD8UuXoy%OP9okKXep9+Gj7dNWA&bw#QV)SpiX>v!{NE!TKRjthSD&EuZAayiH9iW1 zC_@mmW*T)lopJ5rq8RC&$`u&o)RE|el{8^YkZS0B5NMfRgC5<@Eaw&dj}x;FgjP_f zCIG_H9{Al*^rdf%OPUvQNFs5R(m#Wb+@au))Z8D~j3?;ySfQ^oVerNFYKTMqxu3>l zVD7uCz8wEfi;$Cilh-W^{{1CwNK5F~p^R@l9IGEu1_n96$=?1(@pFq7xUgM*&DC3> zyo*lPhW`CYLlwRJnJ;khp4g-({;FcXmi+DfXe}WpOBs_*~EG z;2ZphA>=?N6WGs+nw4_?F9~2H;&UMN)-X)8*H%1v^o2EybIQOvi;@KyddkkiI}+_;p~@AU`Jv= zc<5FLhIQLPUs)iz;Ydqf*Hn1nl?g11E?Yg+Qfz;Le)oyqq*XV#2Src&!#A-H#&VUpXK+L&4!`SVaH3dkbWyAj zb%Sfw{~I`>9;t?u>x(|4D;$1#qb>Xb&p*aHPM$zVXc`>M`N`v9X$ie;3bCvF5Yp+8 zchke$<+SoeT`lE-GL$U(@)Lzt71%B^+b8@*{v5&HzhlC+A1d!Os|4zh#YiO?bSa+S zi~Cr4mi+S}y0XVI;sd@)vh%MXCU>}8S%M^}z;_AIn)VjyF%-KazBSfSH)wZV19{YT zNMxe{|1^X~M-r2T{%Je61*i(5t0wZk6mr}5+TU+oBkr^g^u<&%w9763SOO1*sB&|I z@!`sXa(ku`C0Ii%On|_8qQN(O6#tqZ^bhK*XBRd&b1z(3LNh95viWa+KWy}mOk6Ui zrM=qNT)S|7ykEK@wpq)=&gI)w7D?dG;25M}nnx=|>uBM0qN$K1+x>xc2ok@)=7-N1 zhiXcp+b{@zHUJf3zR@+Cnc`w@UXWp40PKX#_c1qHcBay@dCh}k=mHR^pd>e|?66MoOI&A>L zjznk%lW(y)7Il2DJOh#@77vd5gk~+Fb=;1f3Oul$@&1LzZ3?=-tqLjfF~zFAt#*y$ zT{$!f6?!@dt-yEhnRM0PQVn14I6Dq zx(rFcJvxemnqpSRh_+g8O*e*+;``fPZCY3gvx1=;0w4v_ExV+76QiXQXK23uoO1QE ztLK}JI*PD{K|-nIKx+lFU$79fodgcbz#~FS8syc-8H6?68)U${qxxq8SAp2+)}=f3 z_PI%n!0V>jmiVc+C*#jqv^J3s-G;mExBG*JI?*e1^&#rw^h8Juk z5vxgDUHlDnKJ474BA@ZcG3<-I-o@1ZVA>?=JNwXM*q%X3gg1aoVlj805pSKV|X74)?6 zs(CbO!o~ViiE1qJ0Z)OY>r!Phy9EMiO0@RVn|?)hP7o@Qh6OPQat+4z;XcuK-@JIy z+w}<#4#`}M_Viu|dn0!mjR#g=9<_hhqmpb(a(x@IX5{}m&ztmcIw$5w4tKw%TdL9yxZT5-K(cf^j>>t{?q5{Tl9clQUhYId8OElw&tA zjDllzT+65pCmd^skb8lpb1xNByQhYaw09b)7PYW5x3yIVRUioytGP_~O9v}gWoL?# zD3h>a0QndYeu6~96T{si9S8^s)SMZ4&A7%QarJs|?%{dY`uG%LM{fz2OOK&L8Sgb! z=P8ld-`l`wM_ig55x^15GD-o{>X4K-M%gbORhwHXuW-a&=&xq;>ID6Q()Ou zMF2LUtG}p;-nv#@H2?8$t6t-xK zpi;H-at8SE#~buab$;6Ttz{h@Rp|HLh?u`FgVN=#>W^h)NG@$nABw1NGsX^lHTlx% z?5kzuvruV-T376Pe}T~;in{xB`B*lvTD^Gtv!b(^0P`8BG36z3Gkw!WjZe*7fQ`eP zo4-T8tZs3LAvbVG=>m1jH53(vO#~VUGjdSzZQFtbwxzp#r~t9o>gSITm?@X7M_pYv zw^BTm#()*Hq8DC<)z?^;ZG!hS$FaLqX5A3ww{ax6+>_SI!dx)o@cp|(6?3`Jp^G7( ziT$@~co`7^5V~Rh-@geYHH`rlcJ4NZS>kY@12$OcVCkU?axe&!cayxvan_rL6jJ~r z+mrp6<&KXeL-c2L09(k-W_)i~^I4nEQ|88@(Adx`KxAf|5Y87)V`sjCbm~C1{eH14 zaN`VV0kdBpqY|C=u9p}-cd^M50@H2fs|eS>L%<<^ONJ7|BT$1R!16gPRT_3__XVci%UcNJA=&UpeKb~ zu0^71H*>CxI^?N3UKnj(a-O35{t;H14F>dsH(GbddcsBPZ^bUxGofy=QL3u=81cG+ z!&A<>aA0-m?cA0TK2m05L#*3{QI4aJ)5^?Ud;h2QMp4rKD*Iq4-$4piUop()1Dx;h zHR0T>+Xpn)YQ9H&Y7N6!dEt=rn7PZ0o8T?9oY>($+ujItj&@4B?2^E&$ESQLC=M&h zwP_lc<3S_nZ=%J_@%95UX)0hB`*?G#p`VNM7&~f~er{B*#yf>hoX_I{I8EWQAWe3T z4T~_j$Mv(JTE%|sI7f=G#4kFSLP`D(y0ROSe{_x;!}_w^Cs*5DVm`HE#<U@4yyypr_r1r{SzL6J=PNx-_6`)k6Amg$(;Aw&rI7?RhnlOFnFrm8TK)KxK%GsFyrAuJ(3J-=QtOE#eOXqXy;Lvq^i9EGuJpl;K!{QY8 zA<93g6P{>#ZYpg!w)JZ~I=MUoA~=MaVz2aZA%j*X+Hg0qb=??YNBTfXSG%s}qFtAK zPn_HMA)Hu?u@>x!SBPn#?{ZRN^-eSi6a%O8zq?s~a!EK8VV8&RB_WQc$QCfiU}m== z+|v>lBZ2oaJxhjpBP5#igEn52X2|K)_zFq_)C;+DsRbs=q!& z8u3s0AaJ3ORHXS9f5ufuJIERFc+_|K!u{-n84T>`W|!Mi0~@BS&~H}gsSZ6=eCs?) zq&v)&Dw69R^5N#&X1>R=FC)ASDoqV=V`l$r}{S?W!ogPSUxo_YE2|7{1K%raY;$J zau2oY+e^|pqXP-H%O$!O^o3^3$gE$5_XI>&#U?A7c^yQFX1}zZwN(oSYk=7r&FjR< z=PuTRUifGG&V#XoAsyyv{&Kf7}4rV9n3f!i8%=+P3( zCNqzRu@{;{uI)38O`r^fMABp8bd@4=_^`(BAg$4p%JVu@RKdfi9K$nCts1H(H-@Hm z?kSSEX3O)0$NXIuTxeg4-7ZMb-W1R^h8#HLLb`YzX$%4n5w_s&4DU_-VLZz{ORH z0h%P^N+9Je5!+G3oJRiT!bw;u-5@3=o(}-PSM{F@K$QR6Or3kw<5vz`MItX!tE644 zl|h_9xK$D~W&yoqqP%%{9dSlut06S(S`qsLM^^X%$LAQ&skjjCPV^zaxAg&ce3qwC zLizp>JkMqFI_?AUJ`Q@$U7-*g*{XT>ptH=Uuznb^@NUn|zSQCm;}=mZBDJ20dZy!N zB#jiFFkU~I58~h{FBbb^yGZh{knJD~8FbT5U+440BD>u<7f{;ns*@w%&0^TNXU+@| z@HN&?Rpx1fxo*G3;NAVq;tM;oseMTcHW!xij3yya_B)yJw~hCXrxAQvIb|FQz0A7A zD~M*?_AJ($l@r&YA%5VFB0SD1xAZR|io9#y#+3^PKSM^T9_rTa%}L&1t6X|(7!xy$ z;R{XJFikCb8g^KAtc~WA&#RV$-s-pGY%jEuw?n*@zevj~LF1;vA=&KLzX6Z-dmrMP z4%=(mT^!G0<;B#vm7vUB*^wdrjgZd8y2$6!-5I~LFR5OTmeow{*~Nk{Tmxx0T(lKArv6uduEt{ z6ecJ+pYp(uiu!$uOLx5wpe<%ec{!|x@%W70>W7Q-!9A|Bt(Mga%csnz@sGM00~#tD z0s;5uFN8{H0)M~Ty&o!qO8+*9-# zt+UcvC#C_05L=)!MM85w>6t|Z*c;Vm(hY0SqL43X=uT{BJ>tlcUlfL~7`xUMG;(zm zcmGU8=SXL-JEjO;GlQM3N)V&wJ^XvAcPKpizw770nq2Tqld4yXf`$;&yn5kUrSUH;8HQxm%mCeL=y+G9OwhW>aKqvrL9%Ey< zfz8Euv4&u|t*L-M{R8t9k}veGm_%Hqw8*IBZ#Y45#bI5r_0nn1wJ^I+xPARX{jlt*qvQBUYGUWpsNYohf*s|FLtI zpb0WEjLmn4^noSZ2A?PXLRp$1a+GNGCgP#ZuxrX;R!OSm`JhX}0?`ZHB;2{>#lhDVG?#{h+A_IR#3!!g z11~i|{%09{6<9Z+g4R;%i8FuZ2d;OrQeutgR#-M%!X|*6V!x^sfH<40X)bgqls&jZ zFwiaGBnx3@-4Dw*bM=juRMCo_IDW(UF~j=S!Z6c?=lilBq5zr}l1H6R6Jn#n0zq>U z7=O#G8GcaWif)(8`;uVv1wG-96nOmIHjyB%ar#YtE~MUvZiD8~-WJ{gx{Xov+mVA< zC`2T#BQIw`Qn+w-CnvhDd+!EJ+PyFJ{JnScX`p*Q<1>}HN{i;$qoG_BDSHAN@kr@! zUH3$Bmx-cWH$gWcsrmO@!;hDiZVa+p2Ip`y!&xq*mtpKSJ~UmO&4JCKe9FE0mJUBQ zReG0DAc=y4T;y{Z+>kdpK5xwE4nYa&i4hhVLC}-#;|u@sy7vYcKl6TAeA<`Wn(t!n z1KwDIa1eWS?N7xBf6u^iUVF9{mp?wJ zQ!Pw*^{PRJbMG=wGEAxnJ0xZaa(R zF=|CC^sYvV{J~?7z3aC1>4wm^bREA8EgUWQjqQ405a8;Hp5U|Ed=THp8|Qs;qVF6K z5MP$TMIcCG8z{ODPJhW7TQjmixK?_%o#w?E?A>L2S%jPs$+D0`-*muZ^+Dt1Ruw0s zVVq0QZ?LimH5tq!f~Qjg4^x3)1g=F-w0I-!t!WsDr)$d%r1dJ76QdK|KpNI(f{JOg z8j(g$GhjSg%oB{_vPndy+cDsSq+7^OVLRtiE22CoIqPxY$EdWOu%gahjVK$ws0IFHGn@|4m2~r zjSf>!ut4EVuwL@G3G6G5v{vsRCypM1xYc2pU@KBg@E-Y>YLB@kHPdW?xOKWBG&udw zLX)(lbSGGc(ZWg8$-ewZT9s^9mwmRS~ZCIu9> zi6{gR$Nuv{DWmNS*xyTaR)#BjLBi<~@dQ7I>a0JMJWs~C5*c2Q9`+)j|KWgdoeA4; z(06D%n|q6OU<{>)|=yZ zPG~XX&>oQMF_dB1W8+ox&ZIV#EFwWg!2}6EKstT~aHEiqTvos-J7%w0#zAmi3tIPa zr@5$X4luORSM<@1Akh&YY|N)8Z6(sOO!K5EJ0*M>9Na7f3rqo|8h=F=FTm$3YHW&j zXM^V-RVr7QKzgdnUUsgoao5o%nyhu!4%?YyF!y6>SMbpP>%Jd!U6dgPlgw}LN1=3< zn9o?gYQuNYRO|&7-kXxUJDG{mK8T$skcVqWV(>g6IC@R;S&2d?bu^(!TdJTgSXnQy z0!WL|N1}I4Km*c1eoG3+6sKhf5)DuQ|2C6~Y=M7U^;2QNj{#9%pl>6)ji85s;lw~; zqEG?&04z{uaKr!af`TKkZzL(2l*<*Vm&E?Ul;8oa7KOI`I0_C;Sbu}4kCns__1`vq z)`9+{YIg3lY60p-l~8ha%i^67PmRCp?BD6PAO05p(R}Ry#;jRv3@ut4{qGHQ{{BIq zhHlW@%@Xln5I5C%MYA@5S|N96NL=YwS(p$JF zfm^&2ZQ{?t>wWkR@GUq_8zbcPyhk;P(iS z2z(46#?-ag0M7k2fVSfyF_kNMTxEe8%&qd3S7VlPObGPQ|PLowU5*LFDd{~wD-xy zI!dG%V_s)f_jn3I7LJFsO4fmyKw-6JmE<`W7?(jD1HiT<72PoWUD?}(kL*URz?4ok_6)nJkFS4rt& zi3!Vs8J8mJcrCvUWwqS=$HX#00BYqNp_(%;KE13zh`^7zwiz6i{1S8<*`+!0_+TwB zjNfn(&ifh@eIn)QQ88mcPy|1$q8G#kO=U9!*+9+TL$r0Ftcu@PcqBxA)goP}CV2Gu zXp?cALCMt`P`^!zxZt%k`WhX~BdRQz((+_F2!dUjWYT-E*&29+)AASa8>(4ksLDvI zQFXCKniOv8e1-SLAU#4jF+)whgt3=As6uL831x8%HiU~*WqSE*!tUOB2mhYm#NHrJ zqKzO-ZWGGMG=>KWLKH0p z!a(fdu69m>g(01V=z?e_76pGjdYf>cRW$sbC6j+GPRv`wlZB#*dL%ejSgP5PXN(@P z=*Bfr`v>M6D@Zx$AI-))g#_9U5Pg@7x}kdWzc?Zj2c788OI_ftlp)Tok)w7V*!u~PX=UEa5u-o4Idcn#b>Gqw99Gb{OCL)-Xc&G!@e%i*g{KOdH zzs;w~MNM|lHFq&wc(*}>;R+tT*x5J>+Slm<3sx&8FBG;^HCVcFUh%>j=m#?4DdP+c z%bPqwxW-07l6E6@cbaO`Hp;@$yEii?A*GDjrR}K+Ijn4KAo9&AVAJfO(fgXdA}tM$ zcETaFOZQOj3WFI@GzPk5$xwFLZwcueSKwPQ$In*@Lp!pgqXZl%^F_LSYLLeVdN5Z* zcp0sqe!pC~xnf>m*_`N(5?c>N_(mTWNylNpxUgX4E|caKCOi{|!@G|$EZHF4dt)$t zRi8fQqH){JK*BtSK!6V7yOFR_IQ&G}8_=G4!{#m*=@1x91*yNrtt;j*IkvYKRX?X-Ul}S`KZ71??i|)uyt?U|z+Y~o})uWt{ zo)4X)cAzUrmj6T7iKHQi4D}xI%AkgS>P=HP2RZP|&9O>`PrN@3KPZ#-j*?`|nQ8RG+&_!4Ud}B1)d1)0Mysg? zi4piQY2QRSA2aIzss{Fv{%5q!Ss(MB`t}rnpr^OB_4B)Z*eycA(Xk%uxGxi%9GLGr@zXf& zPQWJxp=jMhaIy~I1u@(JZ|*n4scr?VCNv`$Tq2uBjF4W#YdHH;R9hby>mt}9~45N-$;4C2Yl6P zG;a30=SHB~ibp+uK#=T$7z^I9zs&hoxM#Ys85Bj(Iu-w-tU|*A?+S+%*(2Lv-SjkO zw!axD(EY>zFrhWS_}VHkSIIn-w-nF@@kqo=CZ(KX2-uEZrwA@z*~$0*H>DfN&K$ z;zmN-J{Y5S%}%t0cXxfnoyC6948VE@XgfCly+sZ*2+-DsC`VFzdXE9%0aF<4jJdFzlrS{*R&fQWpCOc9uaDfrf zlQf&fdj_q!8bb?@bPAAFq?~tHLLHQ4##|-cxa*+ulVkmXo34;%6mG8-ey3mJ5nfb? z^(~`qj2einE1hR-N>GjB;3Djw!Nh0R2Gmx9)aqrpvdHLza~LMler>eTRIEA|{-Fw5 z1tBt1EXRYc#Dz{`&Dz+YR{L7Fd}KlbQB)5gcD}GT^(9CXpVy3!BpT*a(;WS?70!IYUkGjtJ*W%(U|7 zCz!me)=$lYwE}c|J1aFgRdYcGikp4=#d%>|;O%cs+i3$SwV>)C`|{=%VZbFpJUCz~ zk8K^!AyIHVDI-gfQLk&`)sRAIt_tR03`aJn|Aq@;JUJl&n1TI5#Rlh$ytpFwPO={% z1bw_=Z&qabnicVso>27IXM05Em^MvNw~Wv~!kn2e_YaOXWI7DP5ZlfdWc3%mLtmD0 zzO13Zl#6g}D2u9L0BNTMv1}3Nj9`igsLasVL%oIc4z%m1*b;g`Oks*Y5!hYKHj0PIT8|8N=X)Lr9v>D>O##7&9f+Xfb5h6Q zTo7Hcc4A?R6x~T+k(2yQj{u4g;ETagvjxO|>V(#EqQ#8f_(a$vjSRpV7bx_OM9kwr;kY+Wf_9D_l%lIkHv^9$xc(;L^ zBQoS(MY?Z6qmArZdv&p^B3ZC;ld{~8D^ zdZYDTAvJQ`gf-3qCn@Y34nsFHh|mebVr$atlN&mWFkF`QQ-kjdodXAfAlr3?1s674 z30H#0sDIhW-Jb$mBW4g~C`aA~|JBG{JzT52!Z`SHPdWAs1Q2%Dh;ef8L}SP+R+C)_ z^$j9oZAz9*@56y0ii8M_V6lt_o03Gp5-DAqUQPWIbAo}v|2ZrBfa$BC>IalWB3%37 zzD|ds38x|N`==8p7<$)^z6AGDXmmw|!rYQdsQYOUk#uB*v`plM1#Lqq2h{XAhRcXB z@QFC4B#V^erovzcIa*Rc6f6r16cxs#NNBY58AoUH_9nm4OvHIAdH+@c1%q-a4q!Ex z;1*rmz^MtYPHJe%TuHNSzoX57;|NS6vj_@yUqy^}(rFnc0?Cw5A1neId0CNWB ztD2Fm7dIhKJ{QYq!4=K1kiqI!VujqbJ(5IdMZEXq%|h;T2=j-CQA@bHHq-+M#GkF^ zJZz8o*@1*C@>+yKC&CapK$UQ*I}>_(ARpw2!SRq;9~9>e=3kJMxPw>nq7i!c8v&1d zbJh`J#k4M$?IZ6Od~lw9x?WI8wA;xSF0iyWQbd1SbZ)ra{l273kO>CJ!m=N z$M1>+!AViKS!L~M>H@{#&_3|A(GRd|9OuF>>s3DFfMi}y!u@CAuHpCqdg^b5wHa9Y z>%Ym6&~!}XH`Mzc{Nh}ff&e_K&<3bHP8I$|ivi@mQg?`W%~p_nj6hBag~N^jK_n3} zW25$0^@J6pmmQc{+o2q&-&`QJX2iA-ID!6VKG38b!C)e)=4sF7GrB4~15mJ=1_)jr z@|XxxMD=)0vi|Wz2+Z;Q<{Qu%K}Oz;W}b!lsEDAXqJO2p^Y5L^;T|z=@9*`!mnfwF zjtr$0Q+0y5aR$LWwxEMrNeRV8b7|k}^w)p3WVSw;A{ZLac3B?a0@`lQ*_;`X#vvm5 zZ%0?Bk|aIWF%IDdiXCNJ>1Qf{l!f^6D+b=FXklV=zA{07*t|~sgm>b?ZPH8G9b5G? zJJFs8eGmp3d$?G;EW%OklS`ve8OxEUu_Z_Zf4Z#MPiP6YXH*ELgIN9TBK~J@eQ{xP zs>^~X`=_z!MU}>M$5KiEaNp8(qA(-txn2y^uzdoz1%c)2Hl8mqf(iBmIwI-}vNeokzzU$8ysm}2z3E@NH5-d6x*Wk4GX%PF?g|Qtd z69t=!fUod?k4G7|5GEqXXq1`&!MhbmLYg>#Jjo9AVoLmly=7zMNrqI)4u8{u0QKfh zqgz;xK`EJaEfB;xZQr&AyW9*;uLwpTs+HZ}4OsfkMWq^`&#rWVF>(tQjn|zXzX}k~ z5SfgDlF8ajRnB(3He?F+6Tm+Ar#1F1>oNsRrm})639!oRe1YHMr_nl3fa-7{zXll$ zMug(DxTTU=@s_4yQNBL2_f}YHst;Y=yV()&q!wTw;|i4}dO9vL$K3r2l14s?3ixtHJ~zn;cM5p4tyre<5Le z&0Ve;&Nbc89el{eTIGv{{QOA+8LA*+|AuRnM)=`K*>6xwkb2bxL-J^nhP@^u;@{8t z6IShDOiu-ifUIlIT$ZPKxSxlux4mT_0ke=2+yP}qpF13zq%FaPN|E~6k}1&-Aqiza zpn`ptrvC|4erF4we7ke5pBGSm5~F2c?2JYyi6U|cM+sByU;wu8lC@T!N2Eq5!pKpu zKS#57D4;}}0Nzg}!R}V5fCO-r2QeVh{Hc#dV8)HuPX`#i&oh{ceTi>lLxj&j^3p^3 z)_u_pfBW1e%J)TT^~(GG#*9US?iNf7kTxY`??4XBVF+4IQ7B0Os)16t{;4MV5~yH_ ziA)3TGH(&xNjIzU++~XgE!9yN78)Gte9zq@oX7Wo6!}85-TMIHo@A`OSU|d%WP-l1 zUAi=?-WvUa(CU(7%O-1?aBu&?y3j8%i17S4OSlX97u^Vdp`r@BIB`X~#yZW23EizC zk{!&Q$?p&^YLFpk?9g-=>keA}3LyCxKAs0MePt>_o}xO>nQP~L!7vSf%nqUM?i4GR zn%A@;f*N=|p)a$40?U4ROkWMgi=-J>k`f5sG&>F^>tpo#V`9rov>8)jC;fTX`0AsYFG|%yjj1(c9SD{| z=VgM4C!y&pJS-KginDass+b2vHeJDzStZ4!H;k(?#?7!RE}=+ zD;~5Wc=eOG&1M-s7(W;^2n`se37bM~si7;KRhTWeeIVovC1qbue@l|e4U7Llov{~< z1ss777;iFf4P>H>sCaaEDY*_1i!{=9qJnXPn9`7;8ZA7movanSH^L9%{|hR?<{{yL zlVYIz2vdwvvg&`6Yan%FQZ2pkhhOf(vj0+0*eTN;r$^q$3JL2bhGew`L$5Y}n<{1j zjR|g+SeaIV^(Q(!fIO^4#fjUaa7O95BlDf!Cs5v}&;mHwjtcQX_a|SGo#WiRo8Lc( z5##(uy%I}2J=sAJx?s_s;=ERU$$}jHk8xctQBVz-7;JO|w4DSo8g`692i6J5s!wdY z{@Br`o5^qk4bV2&eN#z6UTDbV*Yk-Vsbv>bK)l`XE$QhKFg21a@=~YJ=E0KpkJSFIq^%H-?yVH#wX8DtZN;FA}w%JSl2f(`T4Ub zPisgN|A{HeKoO}=Euz`HuvZ)(6lSagH`pzinj%VpEi{iwkW%e?U1>g;K;yt76d`zH z{VD#B>hJEXFM5G61NiccXt+@KSmK6M zh@ijUt8M!~;35!ehHrG?_Nsr6`gyRgYLCvnxEwzn=`cE~|DC&9Tmz&DY(#1V z4Hf4x*kfMi@ZFaj(EgftnQ$i=QhFY#UhD$QtA~QXjf)aEYea8uPBQ8@rk6rUcIHBd za z6&Xb@qvWYpELuoIm0UGJ5Hw}C1hJmQAy>w(rnIbBR0b_Nh$Q-J!4>;8aS<&_dCT?} zNxUSaLV?Ez#{pM?{bh_8PdEHjb44gpN^fZK z_Scj1!V#AR8bZRLA6*PLWe|ZA+mCJDlVe?D$WhAHy!{Yw?FY1m)bXW#5_t>S>lr2H z727tLu5G&_gl^APz=ilJfY=Q)LYPxfJI8d_v7*CWrL8$T9WM;YfUm0-a>%kV(HY- z?krDUV3W4|ro=^Aa@%X%ze-`9P1-ku^Njz3UX;{Nxc^|-@gWwH1qFyDIViOJYgeYV z#%c7ypK&OJ;M4e$PCuCpPCC&Fh=fUt7gQUKEmQ&XHAs~j=I{X){r9(`3lAzn zDtfD6=duFDd7{n_(BvCbd6PVKPea+P`{Y4JoZd8%-n^5HvPjEC=4Z9!`RT3x2@Vb5 z8gh7Isi><=WW~gCHRR@s3q~V7chA=)mG3lHqG)mb%bY!3cLtsvPseIumu) z&j~WFK((%iwo(VX>Vwd6j!l_wrpekHpQRyAk05Rhsr(P==F>zs7^cp|SD^it>qPpH z5-`metQ@Z_Jlq7Omi;e}H?9_EClHaTmkZU{ef>d*oepBaXn(4ez(I$CHpbRbtzBy) zaUD(W|O_4_su(nr=rx)AH;9H{W{9yyae*B zrt_yi_yQ2JqDz8i9kJbrE-d|jVR*czt0lj`N+W+G7Jf_fhNRHfFafgo`*^xd7XZin zaf+D&gj;0?S=$ghIri86;`(J*Ol54p5b|({m-xLU!pst#Jt}P>P(renX60JKv2 zDv95zFzn=KGAtO#MGJjTD!rx-(W|J3N3zwemWX+|MfAOYHpJmPteA^WCAxRe3-TIG zZl!2DBNr@ZiD6xl%5*roZjHqhi>~u>0M|6+e9y~?piLKjFJVV0p@Tr7zQ`C}LaZ9V15+f>GZ#gO#x9gN+NFB4 zj%-aK^b29QwS~SPVbB0gzFLxZ*HUawf%oKxG75jv8Y#&w%O`M(!z&i$=Uwi22)vF| zPv#u3qU;0IpkCzhIpby&qA+h+VKWL|quGRHdyu{Z1_0}#gUW!kH`focETpWY6nQCl zJ_|wHmI86FmQ_}CR3c#=8gJ1LG4J!Wi>~vUqfq6+`dc`Lq}OO~l`Oi3Wawu3$q^}w z`A77J8hLTgKoV>n$ zUP1%LXfa90_gZKypm7KanMEK#aXXYB$IsxLCM6vNgc4k+qZB+XC_GmsNh(&chqceL zMdY$j6J#bOEY@=Or)}Eg1`{MWi0#o+UH(Q5IvWnuvecMg+VDyYte;M!^z|U(a)mvZ zxAV7WCu^Xin&h2G545z(<}l}1(T}5I!OV!48A#A z;9`B%*SpT-sxV$`Wz+9?fiB+=4)bLa1Kk=LHp|S~!0W;<(yE4I<^A|-DymxU`5rAM zVh;1kCA~tMZ#;tBuzh!D@{s1hqT*o_coyjK9?cc-<=jjI!K?gVYVBf3FrX+`bz^<& za1MxCxH}%x!=C-QTWF~*C_XQ23&F9~Dx4rOK5)y=q%u$^LIP-M1iPN=7<9L@9!i2B zWEA<4^6&XSJGYdo*X*=;sn8j+Dz-k4;%og8R4CgIjuUIGf zheOGRpqcDu4-aZihsSSewT}O}>|wBH%$5SW$YTolNhXvtWv~r^FpXzp~ zA|vz?SqD%bc1(bk&;iHcZJHke`LaQlYuF>uT@loaC_jh?EOyJGL6ehj;AWH?q45bd z2S#WRcFbU$2dg>lTEl!^YuDR;G`Vp^D*R-*7q=S{9rTz(6KiSeoVrkbx^RP=iqi8_ zrIkG)sbVNV1P60KTGn(&x##P-q^UZ^UxJ>Ig`N(5jms0&39suqr_=^CrMBd-7fI^> zn+4z+dE#^IvOL4@Yepc(g+1)`D;wVV#>p=(P#8Kl z4~?C-8Z!7Wb!53fmqWGN7sh5YO!e0yCUbL%dHwX@F@gn#a|#CSbm_c~hGS(HAxK{* z_MLtyvlnRQE*mE6mA&bsSA`n8!7OvJ$b%m_vjz2XLy8|99B2^*mhs}8A%8R$#!V-& z=0-hib-uIm2x$X)mbjdY^r_lPX|E3P!8HCo_Obv}Ln^^g zpyYW~p+xGOZ*gt>nkAvo8cH32nEht9d4Zo!eMl#Zb5Ubu^uo)Q2-=s9uA4-S6UB8#uA>cuz`L!^>6DU!{S9X5kjyNaI!bx z#V$zPAKi*pu4)2jBtI)8Xlf{-433q_oNzhp@@2R`?2SZ5${I3eBr8Ens%AT0)lI6Y zz2gDR)m#rZLIHX_OGzodZve z?t=C-KGOXMeW}$1u+?K1<102s$v4C8m+(smUi=c4U08JHPRlE0BS2x)vSvJB4V=93 zwugr_dPl(wrf$Gox%FqtvEd|Ck8t~g!0-4av6OP@!^81^V%31$TDxbQ?dF7o%Bc6j zm5u$p7(Az{E{k2zlt`0tsI#WwlO%wJ?sPBx{wb2E`9Gc7;?lw3(Ck;+4LswBi`%NJ z7$08Xnqg11l5irtjKvW>@cAb3`<2Pn+*YIeEl*UzNYVc`9uZ!!thEd^mAOQPpuu z{77)Z7778IkeqH@qz{25Uh@x?jT9(598$(7Gx}9J#vVXBR(741G7K;`g3Le*M}~FG z{`MgLO^GFerhIKsoc(a6YE{88I?=G%f8s*)%OLY8Cuw4&!)AAOv&Su{IkT+DpfI`M z8!fA-m;xUPnauYl#-PfBGPoXK1V7P9wS?jTu-;zclnS@(CR+G2GwxoOZDYkW(r3eT zxx44Y7#LHC!)dU_-l{9ay32eEWJY|(#bKMZ#dC&4vwhCVVZQg88oamiOJ~Wgcf@Iq zk*uQfDay7#cMHzf{$9OK{jQgVv@X2g4b=S3X$&j`zUFYYT=Eb9gtu}_ve}=1nrcO+ z(ss|qs_3#mVckzI7VhII^v@T@%v!<6Mm_o*Jr{V}CQ+ZuUio|7oYA%+^1k)~VdcA{ zzt^BjJ;8>RVNWfWsCSaiJ(xMeh4VIidO}2PY2(TJJt6d>Kr=mij6H(m4Z?Qrg;24e zPLlCNDUS#Oq@U>0O88Jk<=|t2G~T>)KHR-M`DU5=WRY0*JX2EnDqV-uXDvkJZmny6 zx(5*pn@}Yp{6ohG#S)eTkX`5{8@ivSf{x_y%IVPgwT)dVir%SzZ3h(p!X)yI&^A;Q zWZ6{KBMqKK2Fv8P{XCy6ks|QUS0)lwpd56tXJ2pwYD+&w8CVDZwCEU9Jz7b`awl&q zRx;_YbNGR5O9(d&)(ZK0GuqV1Iqw@z{Eo_HfMCDHEcG%q9VY0>x$-O=7E$$Hz^{n& znQY)>u2MIeSbBOArVyjPP`ZFPAuJvx>Q8w!ZzBLhTE0;6`B`_Os1sT|PF7M*r*{v$ z8FC(i4-KR=&FGbco5SeU)QhCg0{oK`b3p+HRr(jKreyu zi+%fEJ&Y)k=&G~;2J0bhCjP~0@@05=8x$(3-`3KBRq>eT&|fruxKIa({OcU2{COC- zHCukvCH3y|<{SOfKr1<@AJW{v1x! zu9W|#Xdx$?N0&EVBBXzzOJ~qx?eoX!xUZFDjUep}48$>aP^?qt9k9xH*}Q^a;YlLf z&`4)Kco~VWW$%2G(Mw%j{yOD6P7&7ytDLA#<))?P$W$=J$mzo>GE6+)K7#uz9D;&X z9_=xbQB5G@1HO8y|4^dsmUsLO68s{6TMcA@!F4c33RF-jpYZ0|587IsO=6OT0SP>CXG+J(*VA%JhcXGN^AJ_;QUGI%hC4KF0o>2 zw(-{b1-kK)0ADIfJ>R2!GW-FNR4y>%s?XYtzcy$<_gaN+2> z{UhVEDa&|=?GNW$;O~(8O}Mrlid{9Lo0 z6Oy)Yz_lI+J+PMSlasMCqC+$&kh(){L5Dy@U?>?|ortq`PiI$PP55UCs7MnBRyd6+ zc(M6BxQ-+d2;ZoY{m7;AT*}HrdvBQZkM7XB@8!AgIJ8P^b-k|nWoYn_mO~|}q<4cF z!a10!bYlhF=Wv$3@R&bBT#CO2D$6P)HXOumLsxw9DSD8>!NhO}(rZ2F$h{>C6#$S% zT=#_s;sW7=DnIRl#h6`sa2;Nl!1#75Mma9S^-H-b#zzxlpI(j1wcW+x6mYb7{2@O0 zr!K?fC03(#z^eBvO zaB+DLU;i7hzK^h66T$O?2{abf@)^~H6x@%snNdf}!iI?^MeImc^`2OM zDMx)a$!xL%1?#Y#&=rjnH&DDLmNp^(CAPZuGGgqDvi7TU4+87rz_DPo>Pgpqy-CWJ z64-jg>QC*Zj@`!6X4z&pe=fmWDf>$;k2}npgb+H62lX{7p*Xe?zChOb>AxRDlk7^Q z+==Z6u(3+Pm~o)UHy#mZU#TYso!=8oK;t86kS*R{WxpHEo)|%?V-Nh5L~dYpUGTUr zFtMw9VI8cfRb(jGcd-{w>(g3dMg!htUQ~G-GNVZ(*6Q7ykyPxdAI>Se5a09YS}7$A zjpd(T09I2+&buW)%g2{Q8lR|Hii0NENQT@@K94b4c4_oY)`dr$8Q6;0T?eCl@U#7> z?#nso`t8WONhI~O{*75Hdj0Y;E-wKKoOTL@q5{>i%48NL$=EwQ-90oE*5;cwL=(hHGgfQf;7V*(=arsvf$khLn@PH1ujNd>I$AIG zF8d;GOo#cvD1zIwLOFD(!96?NNt73uq!RjIpO^#6A4PyYc7+VE4gP1e#7{=$A zALl-lixpY>$6wrSr%qh^I&}qvL`_BVSOPlmnWei8RPfdYwu5|?&lZ%2xqXjTXK@d; zyx2>~a|Nql`^RnlDBR`Z`F!%Cm~idF_s!p+utOA_NpE`O^+2cb_F=XV3iQ2v_`zpf%W37P zR7{8yt&g#8ynX&W2*Thu=FW$BOEMpVkk;?AD5e58M(d)a)A?{U_XPNEjV-p}My0^< zVAp6lYYZfxDuhb%MQ-B#ii3Q!h0L!UoLk)|HQzjoe+`Y+E39IaOJU$~FG^F7(9ju} zC^!9mmHM`BNM#Ek#)1XM-p&mbwJs^sk3XZp9@O2o6ZV-E_ioiF7epm@V0(rgulV~k z?ZK*N?SZOkw?`1l-{Q9r3j>qOAioAK{NCq!Be)B)Erxz$d~{JMsM!$7rKYf~8Z+IupJS$!iy9&f(>af0{hI UP2p_s0PydU6qOUH5z-I*A4aUI{r~^~ literal 0 HcmV?d00001