From 00e77466507afb23d0a05f74eb0b5cc4c51df697 Mon Sep 17 00:00:00 2001
From: Christian Henke <maitai@users.noreply.github.com>
Date: Thu, 17 Aug 2023 14:59:54 +0200
Subject: [PATCH 1/5] Tutorial: Secure hosting of a public Web Server

---
 config.yml                                    |   1 +
 .../PublicWebServer/images/basic-auth.png     | Bin 0 -> 21865 bytes
 .../images/connection-secure.png              | Bin 0 -> 32214 bytes
 wiki/Tutorials/PublicWebServer/index.md       | 113 ++++++++++++++++++
 wiki/includes/glossary.md                     |   1 +
 wiki/security.md                              |   2 +
 6 files changed, 117 insertions(+)
 create mode 100644 wiki/Tutorials/PublicWebServer/images/basic-auth.png
 create mode 100644 wiki/Tutorials/PublicWebServer/images/connection-secure.png
 create mode 100644 wiki/Tutorials/PublicWebServer/index.md

diff --git a/config.yml b/config.yml
index 5c9b2eb3..5b6e7681 100644
--- a/config.yml
+++ b/config.yml
@@ -155,6 +155,7 @@ nav:
     - 'Kubermatic' : Tutorials/Kubermatic/index.md
     - 'Loadbalancer' : Tutorials/Loadbalancer/index.md
     - 'Object Storage' : Tutorials/ObjectStorage/index.md
+    - 'Public Web Server' : Tutorials/PublicWebServer/index.md
     - 'Reverse Proxy with Elixir AAI': Tutorials/Elixir_AAI/Elixir_AAI.md
     - 'Save FloatingIPs' : Tutorials/SaveFloatingIPs/index.md
     - 'Set up RStudio' : Tutorials/RStudio_Server/index.md
diff --git a/wiki/Tutorials/PublicWebServer/images/basic-auth.png b/wiki/Tutorials/PublicWebServer/images/basic-auth.png
new file mode 100644
index 0000000000000000000000000000000000000000..d0028abd5be8f8c2fbb16865fdf503dbf234242f
GIT binary patch
literal 21865
zcmcG$WmKG7v@KY;1}8WK2p&9maF^ij1a}DT1PeifyE_DTDcr4sI|PDTp@kIk>YV#}
zjC*gte*L3ge?MT1?PJ@TYp%KLhpMvd8+1~1008htUQS9K0D$KO0N}V#;bAFO)o+eq
z{}9|H<TX)IQP;Lr{r~{)0P<4en%=9Y8(#hdmM<t5Ag>nj2DJCdh;o1ARPoN`R8>)P
z2?$mDgw$-&LxMxR2~r9P66h7`0O;Pbm&JMLz9BDi{75O8s_+W%vLUh(XspyLNG(%$
zcO$1xo*ImJqm^5C(L@gP+@R~p_mkFn*0~uaqR&SvI5d9<iHL-9rYoJoaduK?S)$Yz
z9C3DzC#~Gf%&58X6Chq%t#YWYbMjI@dJE}P+qcvS_RzNoC7vLMdmH7bANO9Ak8gbe
zi7FCLHFE3<h#$9{<_I^HjV1&wm(uR6B@p?Kq<@GVJQK3sd1+x}odlGX5YjC*g`v9O
zsqHL%iyVKcu?zTR^7G^7=iNJ#NU>7B3?)|mrgF8S2uP5Y*22!t4$$vz^$c>tB#U%2
z$czu*_%?3HbrG{%F4pesO(=F7<VvAs;(=dnW@#{VN;8|{h|HOuA3~ViwE<aUPbu);
z+-U54`g%9vr~7F{eB^XCv)EkSm6b@RYovI+=)iBV2@Q$O&~{V&i1u_VP+I8B1Qego
z<pbqgYWP}l*<nA%>_{O`PaQ~TGg~ab+CI7MQeLTFt<Q5t_8p7j@!=q^wv!)O<A__j
z{l{MC`hmr<2vV9+2)c?G9fM&W;rM=P|0xa47Cd1ae*f!~_mL{o0;V@gn%L$-S5g6?
zG!yv7w`83zqEf8yc3O+Yz-lb<>T2vj440t!eapne(n&y(OXK~^Z<Rce0M@F9$NRtW
z8SO!@FIqq<iAWO(HG;jvnWBn{iYz{75tl!~JGfL-TWzl99Ssq}L^Uesl*+2>82LXX
zhOMwgJiXc^q|izJcDg%LlqPpJ!y9E-3ex0wA<7sO{;VGwjX%J)D`bqi<H7aQ{*wq#
zI8<f<&a%`pn7ZCbyvk6Bh>w($MbF3MOmieUii~t3YjSx$t)Y%86jLL(KTXwc^OPR+
z`rIS)_~B+nJVXNB9S~WF!mcX{-Nx}6i!z4RSX)ADvD26})RGg8oVZ;2(#AxZ)0)J;
zdHNTkuo{YX+H>Hhv^JI;S1N4g9eGsm3wO!O%R8>MRNJs@<%QtT0FGLnHtd@9e=xGK
z)ffYPSLL<+R7i=4ysmb~SYq!J;yeUtW^wDiddDwDQ1SwQCtgeYQupC(m6#COPZQZ9
z?O{IJU-lu2(Op5*h%ag?;L!`lgn!hW3iwDB17E=FpTLLY57YNoo~Wo%)}LbKOg#N#
zBH<|V?Xuc1sBw-88sH@|ymqAqRr56neu9?s6@GE_af|F<Y3>>|TFCwcTJ^h?eyQ?=
z+--aYU=ph8mT@x*GXDOiDP}1K=OaVlp^D1fY2vqOAy#&%yAW}|{(0(QDeORrh^?XU
zFvDnbpnp=;9g*;z^h~G931IvvQ1c_DK}IU8L25z*rys-toH$b?+iEjY=)Be4)24LQ
zQ?FAtm-1W#PUG{V3diA-aBkLzn=e=Uiyd?ynySC~x*b)x?sJeM<ayfG4?$N-IFkkW
zba}Y50zI}Gj*{kfO1oCujUxm0ugaylgB(N)6rXX{$XE*BVrL~j4;Hph1sWO<WD%1P
zShZNzWae~HqkQg&^J(|`!b%I6NQlMQG)@epjPwb-?7B}bpk3UB|8wYvS4E+pY>U#X
zc1NGy@Rq6xA<{v}eXuvKo?7+n0J}B^y4dkcKYl86jn(<;cRQ4V{Pr-*jcOuG#QmJI
zs$2Yff;sY*5y+I|&(lk@+m<2l?#s;|q-&?Oo{qy7KhlL*Oc9{xi@sZ$F`Akg?n0wz
zpyRQQ?0kA(^ggf9#Y#9m>oL*-X0v5=I&8Qj)+4luxl{t>k`Ab&YAzRZcZo|B4Izp-
zi)5ZzZFOsT$C+yBm!KnV-rbL<*TY>_Cw?)Trng4ij5P<vGw~xCX9w5ZE&InC1NN(%
zLtzr_{x5%41)QseyeqaFuMc=vo?X=%<6`^!`(xVeOI3`$Pysm4qsieLnbKjZeckb8
zpnI+|vpf>FzkE03jhj0+#vBMCJANv}P~FCN&<Ac3gI8<Qt*9@O0O-RcXn*qY(=}d_
zuj2IPTB|d76DR~=Es=?*+$d2@^Eg@Dkjv1a{E)I%8Fue+X_%r$P_<xJuWQJb1`hg5
z%426}W=>ze@CA>|G4I7a{v2VS%6_rdYfU2$r0e<H)9$${pse`mW`%45YgO5i_;o%x
z86JS8VW{zBKYu}u@Vz^2<21Y=UW)W(-Pz@-V7FTZa=c)FfAvI9p}#;!$e+?+Gd*%t
z)|4wQRTXv-DthY16&%_5qA6s*Cc>bxQDZ*5Y5lsCUgmpyDk?&Ecyt+>brN44;Jgy<
zmm4HFjWc6u176LtW?eNm!#d$`*fm0mj)0sl0G+>D{Vn@0GOPOS3!U4#BV_Nd3?>Pe
zs8Gvm+jkW<O3p7A7elZ1Go2??9>vYPaUwphgTKFldXn&8`|F$%a-X$vXFMjCu^=kO
zft5@60VW&7>p}g0q>L&;B}?zM6HIz$YnRL=iS~!zyc(qW0@C#^h2)vZ=lr~1J36gz
zPBxr>C*M5&h>Zc@T>d`fq&RyeoolrQF))-O-sN2we&OkrphiR6J{gWB=5jgoLotWm
zI#uZq?$}*c)9`h{+AfkjI2aavZJkcIP!_x}J~MyU0vZjxowfS6?UT-vRvQOXD=GH{
z=Ht1}gSpy&+jR($KhfR{G3kD|J}4_Lc0Zc6yg8iF7bz(&p3D<{eXDu)f|NRlM^o2M
zTbZB#2MX?aeSw0nudfx6%QSDtTeEN^>nWg~XNz-~f=MZEvjlIQAgnF!(h&2b3OzP;
zf|GA&DA8HG@qD=~A9xu&PZsIfB)lHi+W%UYWvdbX`2v9?-#DP;huAkc7~IL}N8n49
zuN>z_zMiihATD%ONzUz5S9J^QBMQU?v{TdG*FdvK7@ar#sPu&5(*?RscK5wR_)X2=
z(bXC5DEI@e1ptdNP2{q2?nVflrXXmbUoO5oC*K|Ufx|{BMz8PbvYuPD{wi)A)f({V
zCw{TvdMj&VoBWrq&46Q_etnO~MhAoE&ovZLv|i5<F+Wo&vX1(sMEHKL#yc9ccH-ne
zQK>^r;%o`60f4$4KZwr2-@jxz3a_3$NWBl$CZ{5Mfcd)AyCJ=n>c{=`=rIomSSx?D
z?}kqL>h>Hyk9`d>oe~b%)D)UjVrJp>k{++9W+H*4ckaA7Phw{hk@Plmb&XXnah$FL
zjJH#D%ZYBkr@4#s&#K~DiGTHzlyRAebA7bWw9pkuOiF4_p1ooc5NN*vFB3XPF?X(x
zr?4~z*kA;t{nD-P@9gGvaGCJbMs)?=U<=>iaGP|vAKhR6U0GQ{!KUo;zAPNG5OmvD
z^7ro=v*@^jOlo%`1@})5ownmi?SVY3T5<&sHfxrTIb<?Vp$96NbKnZ6=Tb~c=TFVx
zi6J*4XW_keoML!%l#Sbi2p`d612~)79>rF!J_p_`8X+a4nMI?P1aBRFz^;>F*5ysI
z-_=3SWfA@$qQpk0ujtlwt_<}gdWIb$S&OYO<}&%vc{PQ<yx-ZM#If&_iyCEG0Mim!
z=b5pC=PV@R`=%Ne-<c*}Pjeww7Rne1y-KTw{8q3remY^R8nxrhj5Y1SFZBE|N^VOJ
z^<ja-<p1>+129C6r)dYCH{xmH6^bq}Qem>v-q1<^#Q?IWt2~eT<o9O<7rtI#b~5hz
zEt2Vi25yMtWa%iDMk<tixT((IiRJKY{2pT4r7=)@*-~Z?#-6!VvLlkvWEBR`pkrZm
zpS7$t<qP`X*R|A1N58G~9jch6)2K086_6qux`Mu{Fmp!sss0EF?bp=x07!&Rr8y2^
zuD$ZI2bf=f;R@pka(J5OL};AdT;DepTbNdSeCsu|3l6Ns0o<^j+xas;Z@`D==Qip(
zjHnM|XXkz1<(ACE{G1oSe0l%aL<;=wvHJM<nqx)RHc`%*<1=$;&9~b@5CB~gA=&RF
znp6VR!-uEqUgq{h!iHcMdJRaC44vZb9KtuT6R#h->`B%^0fFE+I~m@<uUdY(+b~k<
z+t=@vwh^jwoSrQ9ogPKBYRPtM;QS<KsebeO`}gorO%dn%<+zd<vQMw&=%5dtNHfBK
zazrcmv>Oe=A#zRpI>4_s7WhB8g9V?9OaZCap1ct#_J0E-F6vwWZK@Xa2c>aA`=R90
zmuR5|OZCLUzBi%RB5kgJWdKGU?%xhNlAV7V>Xd(a*iGs-v7@M1Ue?ugDN46U!TI)U
zH<cD(W=03jH#ax`Q4aeGS({JD(Iw5m9MQa))?U3fSiBu3Zq50op-?L(jUp(eJf;=V
z_h!eu$kV1t8DZ-n{sN8SZ!2m)ll)4F7XXB)QI0+)RT1<d1=4G6*Cd_F+^7*k=RZXA
z>Q6puS}hITOl534QgxP50=Tv|?VnCUv&hVBM7$>hq^Ur@>^|c9llf{n#|RuKNMxsF
zZYmXF7oxYXid|zi9FN&4$%*#7gBP3hNc6;Ho~NlelQ9>5O^d6-d_)EihldL7wUI=c
z=2btHbS}oea+j$#tc}$XWCVcb&~lw*S(~X9R*&M^dO<*_SUJg3fx*bKDUD#z#mLjB
z5S0=~Xi8*UkUT11oy6k5W6ZO`mzN@U_lv)*#dfM$itFfXrqgL6;Fa3iqGLmyG^<`?
zpb>gzK=}m5#0m71^-4m=vdXPos?@lC7s6TimlkasS&VfP_+YB5e%F#P$%e>x#_f8X
zk4Wp3Vm1)r0kZ~whhxY7{a~;jTjc&vo!Nj>*X~u2IbCenee;a6|LD{dD>HM0O_8XW
zs;X)d{pWNaP_D4fx}jOPW(dQvCLua`h5<L`fK^T8!+mo?6}ICP2d1B!<>^T6Gb@F^
z0Q4six~4chU+&mdXFl^Q`C4}Bb#>v(X!afgTyJKl$Mm`*7LAlAB`>{*rOj$b=3SGE
z)n^bwZ$w+mkGO%kD*(>X&z|kG-9uc2gI^?Q5imEv5^PC=_dWL5<t4AEXPjZ$q|Nj$
z1h=Tes;k3nA~QLT*4SjTvhLmMpVgA+AY$lKd4}-TRtb-8*5kP!xARzfBI^NcP@U1R
zL0K}cH`{2B``8`kCe&uHUU+^j!VTT8Awi0Gc32$&TdZnEb%2k|E}5XM7AEkfA2#!x
z&Tb)z^k&U52cE17o8DNl>qy-FYj=Jx@k}IJRt85G4FdLAU7tK2NGBdNpc<amEioZ8
zK(E{@P%*0?-$aC*%`;iv!!dI{Y4ly0fp2%?A*61#!>#k})TVA^#3~3m<^l>8p~`FU
zQfwjoE|Lq?J58@((bk*J+stbaYSj8zNgXtBs`o|~E3@-aI{3_bHWip<+i3|bZ*g2J
zg_-qC9t;5PR3=Y!##)PG)l_=<Ag+MV+dP~e^^YFMnpT^gUe1AmA^>T%FJHc7ezcX4
z%E-uAx(`OX)AT@2@|&#APLepyfA|j|**8x3X{PrT4U6zoQekpplz*<A=Cqwi$;^VN
zo1FA144DoGZJ1A{5w-7D$kC<AxR+3Nt8U|e92XI&Xz<BPa7}6cGmquGLKO>6wCCqf
z*<VePG|+$&0@=C|0$?sBg)nR!=WTzn&fXdo&6MX9*YM^23B)oUL-4MtlSfi%ayv+Z
zdaj~_k^({d)FAFyUD-{vMLH1ORgOnBYsDXdZ&HX_S-Sa1tbn$Bq(pE_6nsiE@nQsu
z@a1WRzM1-li3Ac8ofZ^KfLmb-N>s-tuRMH^+-owNU;sbCYb~(Fq<k{{?KN-}$QE_*
zNRsYSGV(^d#U8x!v?KC+I!DNPVH1^_IWKUo^fRkL%P$yB!0V%;wE%<R!hR4#sJR7;
z?_9uV{QB`|8hS$2rs;3a)RVu0)91P9Sc3UjQPBqueDF7k&O1KM!9C%_S612u(B^S}
z^xJ=5B|?}I=$|K)tLH}_er&*G4}5#o(g#Kho9w20(AtJ_2={2358)S<P<=n7c+28b
z2XFgb+)_QigNpL-bwK?&ZxcgI>(6!mPZRDlRhveJuJ6(^PcXP%P+VL*&LrmtJtJ}K
zJpP?p2Hrb!Ydf$@qX?aCs9fic4r0~uMfYBTv|Wp{8hw?%?p6@iJJ6?WQov+f{V2j%
zS=g^-#lD{Be(s0EEJ&bZQ=l?3Lm?-Eud6_Mgw=ws$aeRwORK00A?}3Yu<8nkBe9-O
z7Jy|SPb7Qdc<(PVl;T5WajvIvtF#f}jJE5uY@dP5lIxM&uyv)kwIR*ucN<MSxSAP=
zQjqOWa}Uw<SJ1BgL_V?`cr3t~K7Xa0#@sk@ry)10Vbz`&DV~e1#Iz=%f)>@ur^l67
zXdwxvW^J7sEQwI5Qujf5B6>>`c7Hp&^#}4&HbaI9GhB?XH-*|yg%&wn2cA8btz0EW
zlGcZ$q^CVknF^3viEwKNRhHsYG>9FQb<HD@uI~Vgy3+;^BXw9CFW<B6q68}SAUiEC
zT^J6Hn7kAkbr`BDo*FC>K3OUmM<Np7QN;Zi)@DgVLsQv-CJ||%;QOC*>Hedl(UE@g
zlvSgCwQ`w;2!=AO$!Z-lDWh)xhyHL3t&LCAVK_Y|gjhF5FqBrR{Xv);mY}0;CMA$F
zouyOduMh(3sj8Br(8-Qn_DUXBU27~x1Xc!4fkpw9S}Hg(5>EmZH=miIaMJ2}@CUxe
zzaN8gwheDqm2XdtUMO51<vLe&_+^B4cZ7tUiHfk6Nd=AsV(_?6%xSTF(rT-7E%1D?
znhf`I7H@T>*V$XaB*6e1E47yA)_)4FOQhhd!L~ahhr==l;Q9dMyi{YP1zxJQ6zv9g
z{_TlYfRT4^E5p8tG_Jtl;0l76oZKi++%0Yb=l-@WOUvolr~A1+3MR$jmMSCwCxXaI
zr}^}A0U&sFgXnalu}cLre;(*{nwU%>YH4l#+Vpn|1KNsZMk8@1GJzc^00gBEF=csK
zoUV0$Q98MIYSb=vSgChb84nS;M5fR0`>ldis^n+2Q<==Vc6YYX?%K!As<f%i!Hw^)
z-*9$9XTG`sudz}jRr;1zL}9~=1N!HD9tq)`1F)LD<~65J3`{!G;>efr$b_tTWuRc6
zKb+6m<`km2sO;Wt?8Qcp*mTAS0@J9TzV4WVre44P-OqtS9F0E~e=c_}QB;RePKvbg
zd32kUpdpLh+UAlj*shitVA-X3#)W7zamH|BtC&1&Z2p=I%@At-`@u^EgBpH4Rz?%%
zWb-+$A_hmk{h(WC+6V9WQ2IH`_x89X2k}Sw>58gBf5c*uX!eYt-{apOmtIX|R~1L~
z0%HNkp>cs9eay~*wXwG5VeK1jYVs%tz!qk*2<QmIUHmF%g@(W34((jra1WQ`ZqDSd
z)jk5Zpfc{pP7j;si(ivglA_sjwj;~XwN{@~u=HIl>FUfNfNg-_Sx%?x&bzbttx?(j
zI;ZdI1wTNQ02w!-U}`y>Ti;qGs8G65XjQmp`hGBbSLDt5lr|g=0wC+y-M4U>f%e>S
zrUTS9=QylPvXZPYeY;5{HAuZN4Dwx17tA+`=8b1K@Hi#~$4M1AOG}Dy3v)8Gs|0X3
zAP%|*bPbE<ovwG^BFu5Ue*8LEblVq<u92f0FYC|SU=+O=uqmAL(Q|yXEs^To!!wQ~
zRmRV!u(Db6oK9YDI3-h!ta=RV^#F_2zi2@Yu3)!SSEqM;WoXp!Yp_YKH3kAsnIxg9
zi&czwdU&gN=2_<(c4r3sEVtI*H$APkWZn3TZ04$s98+9f#_X%u+_N}ZK<Phnraz>2
ze?&oqwkCCW_<S8M#ZNn1%$^5%637k>ro$nrE+^D~-4jPi{wu_FeLuSiTBKUSy@FWf
zqT8y95)2~3d)8)mHl{}^m)5MR6RdRvAi!&;<Tn@F=KwJhHQXHP@}}->jH4FuoI{%_
z3B|_@IsGK}k)SIvDO9C~HnSa$0nFB5;!<Ah7S1!Hht26mPiVW5qUd9d95j`>!f#2?
zk7$~?qMW0`pmS9pu@b7ywyviX)|ln>O!OvGij45gI=TI7>Q-+E(nwO(tWdN*p{V8P
zuu;<N8n1nnK|#g(&@E>l)8d6;U9!Kd1?x9{zts4jc{r<lIm4HTWa%idSDQ4fH5T@+
zk$7O+YIn1Ke!Nu^%+nMz`+6q_2pg7>p0`QLPRKEAxJ{r}>(yJx5U`#d_pB<t8#TTk
zoK@mzlu*#@#7&B5i9_Q7L@_m`+SZ~0bm7>tS>ZV&*@;$8hpbiB3gA7nrjUE(l)v<P
z?hjs0=%<~3JwIx+p&+yr%k5nJnU3rsnUr{E34+-F=(mm>1!7?Krsn0ieana>Fxbq1
z6~wm`GZp|%pxWXXS075{#saig0^bWQEs_Ex$oR_1GBrKZ1W>}R52oA8M3)`VU3u>A
z9IYGNqMAcXwN}f&QTi~aHw~PeS2wh(Q{;z`%Qm<<da=;?9l$K`$b<Gv0~+<<ZF@l^
zvxjl6XpjhZ&qY5*_r&v(T5zI2eDH(?yS`}QZKP%=*beb$)bGf0L3fgZncG-?8wRc>
zVj=5C;L2RCkEvEF;jo`|Kx-Ww0-yq54<t`{I{s=7w%6`MROLYeI0Rd}$2lmhq;lZm
z7ES)mCy)l6eg$W~nfz7B44`MMZ0*sCl_Lvxvo$ypn=ID)*f2FpkhN8B!43C&T&-_#
zlf_H~DxPcZok8eHrBLn2tV>O!iI8tu**R4VZ|ZlX@T0Hzx+e~1#J-gzI&T112ksQu
zj%}ji4vaa52BrL3&>e9!)&j=pi|3Zn&ajjNthCSb7`hkP5XEew->ONA{(3t7iDW9p
z6N|=UOY4nUm`HIsz4{KaC8Uv4j=a!(`B5Whwb_;aASQHFSjlT!N`UoJQRB?PsS<x7
zpR^GpxL#bI`kmJ!S7VFS_DW-##IZD)5dd|VzJA7+1J}NDoqt@T)H+Sx?8_aT=AWS3
zX-$Soah{)X#HHo>&4-gSjmpl%_VT5{O$zMaWfu7AD?3;g;!5d2MiqYX5@b&WE$ggw
zVW{pYBx(Z@Z?5C+Q;t2oyXO(;au8@5z`AK)KY9KM6S<@g`}sCtQ~z?Izs$UsU^Z}e
z5M_EYquY0BoTMtM^K;fbTUc~_UUT?x>w`IJj9QM2$|;`jH+v~*?)0Zh4Kb-f#L`)#
zu(v94XY;+i)Kj_SzuSis=E2H!UgWd&0Y;TUio74laS)Iv&mtzX7Rti!bm<@@*J1&}
z-v@;S^4+FRKO4kV0Z{c3U<IaN1?chxy&Tr9JBvW0p0}|Pk7qKUme>fyczy<a?=0l!
z#`$WU*Q)LRupLZX-YtuKUZ(>TEfUHlU8?9V)FSoV&2m;L2N0XW*SBx{Zf|^SGPOF0
zi-odn&3H+5BGUuQ)E8=JRn;e1bF-VTs<88ZxO#z$X<^f(%I9k`KbFLBvQWhr^y06j
zr5Fp&`Q$T82FP`O$a#}N0->1uu2gJGt8<=B8HM5Fx7hOuk|%3sC+yizOQa3a%NP*b
z&nBr7WX<^K>9}MI2DbZ5x1|W>*6*F^aykwcdtwklOq$={T_)&%YO~(*@gs~$Oke}l
z<;WYE-0#XBxsejH9RvtD?(R4s1JWwtg9ApIsPSPn$8+W+)RJ2ds%Fg7_JfHRz6g1o
zx<76WYt_-BLb_@f-`?t_@bZnj3;0bW<3_vv;pT|6tH=KI`(g6&M->5d#bb`4C4<Ly
z`wrnjYIxNv?Y!e!-kW8|mc3?0U_*)M3i6AJ+gD!s0ZiBwF4MAC^V(E*H-00a7BR76
zP#R}=!;KI43btxqMxi`(e^i`fZpbs@3sBE$rDuH#%s;u`1Z^2~R9QO1i?vW_L?{nx
zp79eMoISL*c)@~?kzz8iXwhCEt*Gd$ehYY`^DdgbTek%yB?SiFZ5}UFDcUhRA3s#j
znf8`dAaLjTo6d^(kcZ+(JPEGbu-n}pFPtpZ_B=z@6j?=K4Aan;%UHU0HBA`S^QZ_z
zd8hZ`?U_t@1N?_n_)1O~{H)oLL3s>=!NM#l5%zyEAPgSXcz&OIgH{J827`v*%KIZ{
zPgoAz1jn_88lkYFPo$c}YU1MJe9b#qtBUv%sF!4_W;zx6&2~~2&H6dYWjEe6N^$Y9
zf?PW1HHNkyK^9yYO7xNFZK79EE88w@hHT(QxNsZ^!wiVOW{$Eo2k{e?#O?vTvCE^d
zsa5C3xl4y38yW))IeTK(DO+0clExC=mRQU_un$tgfbT!RH4rW>y4hZyFjhidY6Hj0
zv)xc@1DzViD$Ld-YTg+AC^u1tzL#u&c@G1`%PA_wUxQ{n=CH~q_B#9@zN)FI$;b?+
z*Vk%$6oujJ=rH*#P7V$Z{{H>jZlUtXT~J!hzgAJ6{g`MrL_uT05f|o6vVebR)=0xp
z`#n#>e_-VIg|MkWWc&dG`2QU~|9{E~(Bk{k`mH7iAwY9hBh<IKN0|3lsyw*Pkl({0
z==iF{eij4>?!LX}NitWL#WKF%vS*6T5T=5c35Ig(ME0$61)N;k(+?GQm#38C5r9S-
zY-)juO+=HE=uB5?Y2OqBd3Ww4Xe#Z(nuBZ?@83_fcqnczyLAEja4*mNZi)E?cpWC|
z!u8lZ_Z<uyIAG)tfYl>%JuhBKN;TsLAgv7l7amhEI%78jJ8Pb1$c|uU!wnTre9mmD
zU&D96qOpCwlqQ~HUdIUa|D^@^cTc~=)j}d(03WWGYM&GRE&CvZj*O}&S_&4mR0?FK
zryfqfH9^T+0d8-x)lJW_Tm@3nafbrxynbram2^p|!BI3;1_#gCngpId|FUF_jr;?}
zO_SO^^T6d4>&{`N4lBpQQ_~7IMdu+Vkr7)!M*9(o(H-RW8ymn47qM7d6Ugd0$LMGi
zN3+_)(GfJ#hMFYoy!A*&HVFc5+JTn)z}7CaRaEg+(1&>ttuNLo4w3C}#pGwjq^&Lg
z>?X<-q12md2JeVBdR}+;mbEf9SslEyz_Bq{3G1F7y7(slFIF^2vk7<-h=2?>HM;4t
z5-N8oVSdX;?i{?r5WNLKc{XXXK7=MX;Z|go7^+QHX0NH_9$_J?u@`y}=4W*CvVncT
zs99)%+TAybYweih=fl6Cpmc+~?VdMJZXDcz6fsP1nWyz3=9-Bp&d2(16kpTgPj8n-
z@?JS=&j)CcH_0Xu%Llt}(W#{flOikO2NgCM8m;{U)A9Xca-X-YPtw?xb3Z=KEXIcD
z(t(00eb`u}H?}y9A6##t_OoA=_fMa8V+jRh@HsW%ad8u<MJ@X}5RkAM_8nGTM)773
z<KMsm&^v`>cIT+RScRL7s_3<yn-*xy@N)7wy#36aU;dTC7!_CUePJa4zqhQF-M=I#
z@4#63#btv}Hj3tD-f`JJ`Ymv!vtnBKX5`#9BqAcgqy1tTMAUT2*WKo4koqRL|6K}P
zw&>TUUhb0LwywRV9K;*9$<_Lb&2B5Oa4+)JsWu9xU{T-mMx_X^1ge@ujkFet75&5|
zl}7w)`lB;_fYe0UaL?-Bqk@grxThQb3cBl)kkG0=Gp3gIvX-irFIAE(;tMsDxPWk7
z;PJed6+LJYLplpit`ZAz@!?kqe3Tb_0gi+w^^vqz?4L+v-2Ft%cb>WOCiPzo3aFX)
zv5^UXadc{iC<G4#k_a}=9HPB9m#ZsK@{--NKYYD+9EyVQaYNrANx<b-+G$Zy!$3l0
zB_5{=L(tP*>*El~vX_L9cWC50=1&3r@_?=Ynvwc-_^^d|G<D*^{QOkMze<*!{B&NQ
zwR*iGD7BWwzcS$C`j}u)OKBy1>t@ck2zt0|Ju?Q2cqlI~owQQ$8wclSzQGrIEwL};
zc|NO+4*@W)Zej9RA3(Zbk^-!w%vP=e^|G_x+*tP2iPVblIYOBO%`HmJA#v?Kd)SGA
z|L4S{^iw#;QKs=+R4AVz$DZ5r_Bjb;1?`r3)Yj^D3+Ih)jLm#Y*DH{mu%3)2-|!ke
zg}Czy1x$&i>M|%tBIO%S{K<trYGm+eC5{}zsEiy#!X76W)U2F4>T*9)|BrjNO^04v
zdu%UmzM_xEzE9oM0}gZE-+eJryy@bIlMF+6ZoIZ~*C)WTn^yjo<-I7^<=W+97B?O~
zzNDmNl}>HV(g~sTrSKaCcIM!F(W24kUSSy}@a~FARtu~Ch4d<uRO{JVRk&NwRX6<a
zW>H|v&iiZO6?sFL+ZHXQNyymRx(ikMB(2s3G$35b17&O2%jJnAZTW55v}R8#n>;=C
z&->Gy>B&1SiG1$bLCH`Q`Hz|<ZQV&iY64k|FQDLy?nOAr`V<Deld-CDj^R1IPIZoj
zyAJB5{kz7N|9{NDf3qu<1nvPrg}(k5dt~tu?L8LAVu+IdWwHhl^^gwR16hM`$&#ux
zZ957pj!-#jV!ZF{&!(m^+WC-7xfyL*^(NndH2`BblCKU#?{jq<U5O4oq$}>|wJ(jk
z6S>hjcJF0-SjFBxl|Vv}r{xuDGVRYV$I66r+5=VtO`7mk*}JU3E1p@6QN7aR;&ZB<
z24i<;uS{X)A*fdlms{@#X_pozE>`X~E?vpKJoSqfhQTKO-RyMk?loP0Jox738I7j^
zc)otu9hRwDb2Ssn3@F)c^pa=!3`I01j9q)bihU-6CFYltl6&yHD+ywFtqdGWh;A!Z
z2aOjedf^+b057{tU#m5%jRrUSGa}XY=ZLgIj+sIu-Ctg%GqlEEcANXgve-xsqr42H
zg>3XS7S!KdJxH0qV)JW1>#*qQ*;i&h*UE<`X?!>zI9yYv$yt;m3=HSy&i7uc<<NY%
z_(IJb?|<w>XlfP0)UYvnN9jmnG+{cXE8wQ!`*dP1wD6{-=Mr>C=X~ZYTIv?IBJ#KB
zaEM)b>|sK5e-Lb9|Ksy7`x+9v3B%{<H4`dvrB+UMkpvv=Skxhb3aakL_s{S}mvz#O
zfBCSeF2`JHBtna&o(t$Qc!L?4nbd;3<x_Lye%Nq(-{(W>`!Egq`alOj;JJ(UU4~mn
zj`#C}4@!1N`8oH#i07B#>uZSao7=T#$D7_%T>4PBa1@cCAjmPoVtJV;?7BCN<=F?#
z;CfUZ)IvvysB`>yYjql(nu}OUyDzokfS1A2`u6xVQ)X6vi<v9VK`98m6eS84vyB5N
z&GDR_^Aq9UMS@<>JifDYJ^1$u8~!=0sbxJ}ZGuHDpgPmp_0*ka@wRR|-N(=4kBWlM
z>*a>5H6zRQ@jMs}MEg|Bsn%butv8CTWwGq2%&l5-K>BwtYbRI+MbID)2Ht>np6&om
z@2Sj)E){F#2O11h8O_$Ex1ZMkX&xoDhx6}A(HlQyzuF@mpvl8=Ar^Beswzp}rSM4X
z5oN7bvc0>`?gnm$zqnA0_E&2It=B-b%Qb3XIrEn&TT0+r^-BO1)l>ZXJp;5!`1*m2
zh5O99J99b6&Tg@TPsef<<dDu`I$kOP6O7DxKQ1k+(V}4ciI%PWrrw~52@14xnHvC$
zY}BfNVc2`xdA3Fik(mD>=r#TB^4uRVNj}3&efs+jg**!Cv4{;llk%YSw^b54ICg#Z
zy$kT&p?B-K48@BXSp>eiik}pyY+052ZT&QE?#=;z+)yB23_L7PMN)iSEK>o)Ia9?Q
zK^>MDag1o(49%fYKWHPcp%(|sf$W~b?e6!{12P|`J|8})X6FL<m0T}xYB`Hucn`zx
z;y;pcHQ6J668;e7eOSVIMs7cR3*LCmK-<cM#!{u*SmYTK0Jw%)E1?VbF9CVPkh`u@
z$?xtz5Su8zs0VcLZ~|o@Rju~>!6MJ!l|Dz?P*yLEQ=PH(n7r!rpq)X-d!=Yy5+v~O
z1{Ob)^X#njOo5^TD!mf>dJ3g|K7YqLBR^Uja%a-7B8WQTEOag|D;y1rKn5smBvQ;^
z{q2=9*LqbzyCi#$t0nE=leKjINj~i9*Qvj`jqXp+KnpgKo-4hF`}5=h&tNty2T;Qx
z{l|qo_7CW`o7MK}a~&OXTOg{}>7Xld#FLqvt#iR+M8JI4Np2+Vk?3mrkAD4@YCns+
z_%t-0b0;E`rhtXiPbdkr;Hq2bl$WQCT_L{7q@EctX!k}ZFKV63Yder7|7%~6F__O{
zKNTa`ZcJ{%HSFUrYt4+6+|~et+}IVEq{HW_%VUi*+?DC>{^6(ocCOJ{&evt}VqI=e
z3;i$nna5f<EC9RB1-5P*Xr;5;S@7Tc$65$Vv%}WB)Gl9>&BWTv!#O<1RcjFNb=Hy9
znXk^vu<8AH|KBW`yv;_-S7`u}L65TN_DyP!uUjsKOYU;rOK`g-v=kZ8lI=)_y$08^
zo6F1*7J+1YwqEb#1&8`z@X9_gQ>>*Cs^YACiRr!Q@RlmT7qpMb65Q`-QkK_*Q10s0
zX*DFI?JVMiLhfT?D?~#=CsmU4t-G?1vBkta52qTCUsq^!p$5=dNl_u>NPv%6*x``T
zbUQWSH*?wwG|J2VWRuMl^!gYyY1DC@4T%^C=)iVbp=WmXTa^|QSFLK98EGxkBhU^B
z4SjRF`q?-YQCp0eOiQ5(jd66X>AY7X2`m8o6HDdz3-3tG1AKmK7~i5sji`OQ-4}6o
z9$6>wOQ{&((!XDa2N2Q(hf`KJuQtQ}NFl1j*)*%@%`E1O$f)Xn*3#OhprO5Tr~$M&
z0L%GwuFnY?k11p@qEI8A4RN_64Qry`vPc&EIi@}bA^^(iwN|w7gVD2|3!(j4ge7ZZ
zN@>5|hOX@D)jW22XiRy8nu%IdTZLyscB0=ddP-6GfOjn&n>?B*Dvr09r~^aa7s7{C
z=7h_efgfi4T=Q`743n0}5jFWx)+mP14coIsGu!v_IKt@MskklI^M4sTJ9#l8rW61;
z-nYa|spRR%0Wew5Z@Ss)bSc`mVyK?XT2!`>f;pWoG|+rb=KB4x{Y=+(=jX&+%7~25
zW9Zm>>bBc3BK#O?NsskfEx1#fm=Mmt39^c!QupzA)Nvt*Q(JWwEelynR6Q^Bz4Gg;
zqxK~U=As3`vVXASHu_mNNBs%P82P%1rJ>6>gH|5ZZB^|ewg+!tPwVx1-$zAxo8vZ<
zUj{*95mZ;CSG6JRL#L_PuRsNe!!_w800>S57-E_w@_&w7VAkR)Po4_LY(_;!Zv5lH
zr^p~b!bfa4edpvK?VYSMX(`f=Tsb^%O)p&af|_$Q>NidW{BVE&tf~p(BZ>)nH{0t%
zu)CYf_5~jxb30ru*c7!G>hVMVGYGupl^AKNq-3Z6vz~!UYLIBIX9834I9F5F%*ADn
zvR0WiIiEJ*+FItd-SnaJI`K7k(YtqaIsq^#-WQ=*_EkmbTU}Tn_E3hqZ>VQ=>3cPT
zMS7g$E=5gvB{d4l2MrGV?{pqE)3USJ0sv&q{*optu7N~KM*|F(B@uo#l=&F@JJXTj
zg$?PfLP7T*+?|@0GY#hOamChxO<}Z)iw;y86#4zXerb4skF!nbiBCMd%Y9f8f}@YN
zEW=yRay3T`Uh)ws<Q5VKxck<Vj7!VojGVBo_A^<*iejFt)Ze`z)ON$IL3II2JOHHc
zSo^X~{_pyfIAlD%8S7KkWZgNRJ43hS<6Ei+CdtXS{w~NPWK9Io!GgLsh44s14K3g$
zY#(#i$p+h^7Y}b}pyg=HQ2j({tOAOIfF9(0EL!$^_z}iz>ZGzjp83mr;6o#rjSLXX
z>a%t*y>_k|>}wPeXP21>gj#s7NsScn#W7(XX0?2Fw*V%foJr`sEP*HENJS2TTC^mm
zqbdd>40H2O4`vk8wZuSbD*or~{tc=a?}C#Tc{1Lh#8tEV-FUEwi3_v+MikweF}dIu
zyILf_t~YF6$C>@XtPFFIwA~^0h<`^ktt=34^OKhvdK2MgwM6xAAM4E^VH@i(FaO8(
zQYMscVc%>x^UD`^#rWMJ&fF;s+-iz<S2gW)2mIF6>8))0C1Z-(`sgZWDxXD{nbBpY
zUmwpbdVpD3M`DOgrz{@fAl)v}joGT=!ujj-s9<%%Dc0ITucV>~Y+vVF)V!$OH+eWI
zu?ic-G&NBfT3Q~0IcaQ0%*@Q=qoc%k<6&94CX>MrZacg;ftI1S!xJ43fkxGY5}M7e
zo7oBJ>BOX@`aoX~pm8l@6nM?VXN%!Kg<Ze0GXL50|9F~E=``Tn+$<5<OAq`%&Eotw
z`2KHH^}o_WA|9>ks#<*STyT1C-?UBbR#yBJ$BMZ>OV~QT;wL6D9PLml%TCezC6!!m
zXs80Jt`ag-{yrhjrrtNJLDa*Fr$&gX#mFSr^IUkI+&CMT04w)#(6s+-L9=Y`p-1tl
zXvjw#sZVR+3{PU+y+H6I_9D-(xHh{EjZ_5|?al2dg#knWkNY6olZ`83g=$;n+WW9J
zx+p__Q;+&_>W=XzXLejV=8PYxVhQNp5{jsoeyY3hpR9w&X<*4D-1wRR)e>yFur_Ku
zwZf}<h+l~ul>(}(<om+G&wU?^7^w$i6C=_2HNQIP1f*3V1~-AZ8X-n0T~)^BX+s9|
zJ}+ux+@8M(Yf_H--&kU%h*DM?I}1oeZgKx87u$YAM(?bU^5mYbX9oE7S?nFnS?4B`
z+c+V9c;u%IQs<1*hmo?kA=;%1zf;nDj$^Sl#=u!PJA$K3w5p7T${@)JLYk}RR6pv0
zy`YH%g$pqDgQJAhYGRb#rGK<0v#?%vB!E!W60aR+M>{dHl2r52uom9bij}p?t+|<>
z$-`&__%lCr+N-{w&YlZS<eB-(Gs7PlEkF?=KM}&JP0aidJKEkGOw+>(3)3qp3u*;p
z-l^#IIJmQfdZD>JT}Ll=Lv7yBAg!8{jw|!2Di#i9x#YgQX}T{!_Z2w(K@O73**VgI
zs}v#%@RQ5ExUM;KEOUnuk*#r3nhT5p>x#at=f=r9aVX646yb0~&n4C(eBAave_t9V
zn+w&`@(Dm;s5Bwt0N1gL{Nu)y2_wn`@GV2-eAX3=%pBh(3HT-n$B7x+8ArK5%ejuI
z>N-6f?##Yng!qo@Xk|NebtFB*5lQc4zYBOC33K;Q#_FLOQxqM)J4i^*Ok!7nlcY-p
zX4Q41kLxN{$`3m~2Y%;2V-%rml9+uYQN5q*xU;SnFpc%y4{eXd{?$$FrV<+2vEP{Y
z`pkWe0K_Y_TjZfM;=GN0BPtYW*Ba<K|Ho6`==;*N{L52h$~sYfF%fLrq!beo%B5r8
zeG*_izYuzUgq$yU?KaG{Hung@E8$`TKbGd0Pqn=Op>NXb#@3y8V93-VZH#;gp5+B{
z7;UetKe|ps?Y|M0z>eu3XsqqflPix5V>F#CszT^!p*Kg*lcxhghkV8M1Y&QwMtD3w
z<nh}L*7Y1b6>OE)JW$1w3b^mit`8b->|n-pV8@a8)w)fk|I;1u>*w1Sd=z@pjcW7Z
zH!3nj5|Q={xLR}yTa?9he$+WVst!*7;8p)(>eo)};hyU}f7PkZ)gdBB6QBSHi~p+o
z(Jn}J0`mDyaets7tL2>l4UM|v>qg6EU1%g5rKnau1_t(i$g2`q2!=}~07O{Dd;B3}
zi`?+R!p_i^PeP``p1*<vH#^SK(Yw?Ao(xr|T;83YLoTI-bR0#@P)>bJ0&{TZE1w;u
z=>EnEJ}|<=G$1qx0b2df)A<(DA>VG0wE=#^A!u%ow<nNY`_SQxt2<}ikIrLpjeUK6
z5x!^i?22EVEfGr=5PKO#O#Wn8DtkhuVFadb(>8zQTIHRa@TyEWPH#k=>42xB+j6$H
z6*B(mv1M6!<mkElRDS+DNua2TeqdTZI&KAW%B&ri+gMKbY&7heVg83wQq#3TtH8%q
z+WnncUNGY^ki&3Y{Z41oi)!lWoR+vBuOr?k;O5Vyi1TUd|3p&TYCj<vN&uW&M1a`k
zQBuWfn3yA%^uIXj7n{#R_^ppJS4&pcqd*?A*a>k;&Wp>moyTq<x9i1s*=Ik++>a^#
zu+9a!e(NBOCe*u5R9Fd{JlRW7;H$YvO&GJ^+9tf_)y`6I3U8&q9zQ1_M-*{Dbptt%
z07Ho{MpiKOA}=mL)9qilvcB#on+#4bfR<If8P5m}iA@9T=6d3VGu-$wZd%NfEqhtD
zEBxV7@dai>{;gW958!XJjn`p#qwu?rTW2RCj|~<NSQ7Vz&BXSni*0-EGth0o!*k!Q
zWclH40>T!M^Rnm}OXAr2XeuwjYXtys7+d3Y-t<Iad_CFSMJ___X|zj@&d*(Kc5q6?
zz}+lUZp#zfW-^-T(0j-dl|SO}zZ&r(%oX*xxYmkpje}Y7V|)yVcUA$%=(P_CUA)Qo
z>toJ}+5pOw5l><UMcG^`Xv*DYTXqng;O9C8?Bq#XkY0M2TWM+KC?CL{WJE<padB}C
z1G(ze73h&WlZK(hk?Q8IyFlr?@w~U*3xw-cxVG_)06=-lY*k=kgzv-E-hwqn%2y>=
zWQ7KJLR_g;1+m@sh-vM*-H-W?C<-h{b#m(qi=wFb&PG=fq~Kqd<mvCW3%5E*>%`{S
zKeZXW@-e2kSNwRF^a4YpFe>-|E{FP`f~WtLQVN#EoDoYRR(>9VfhX})Y4dvGnDWSv
z`h!tzEXqg<od<hS9_EKaaVsUSO(~c(Pb()4?)HxGV8P}NCC8AP*h<>f_s+p#_Y`Ub
zvq!fXL@bR;|I}3$tp8isZOdcy1_ATx{d?*_s#9hY)uZ3iyFw*Ibnt8P49fcNbHeV8
z+L>PWEE#3~lVIw<n)d&qrTX7w?ZU|wUJ2x2bxze()>Jx0;_NJ{5#-ER%%8kT(X-M5
zC*QwmSaJC0LE>h4<%CtEmQ%*R*0xgH13wH$D}VMCtoXlBlKt<e?jImDhVYXa$!P2N
zaq;hxk`q<`s*Wf0VZDj{?ew!nkhs7ePU!Pndy}?SIvOkFd_00~^_)p1sdE~=+b&3n
z?^Xj2-=S!bQ)BI8?1oEyWqdWx&YdDGqEybf$y)?YX2k*wk7^^BkO)8Qh4kU`5#E<j
zz)hAE4YEh3>tU3!9N+_3lhXCn%0rY`kJP!7ueg*@shya9lr#5E<|mGX@hg|IzdVVR
zZ9D$OtPmoPKt7X+q4bt5hB-U^2zfoCez)JEhtt2y#vdmTI{}h+vgfh4^b!N%B8H9r
zBMn|PJE`H~ES`%L*yR0TiYz_bO7>o|QIwLh%VD%GXphs0ti{`RBOb~&>_!WvlP00~
zz1GlU@CXSpLaKj$I~ldnI_7U;tuN#+F)aLd*gYQmA8zZOdWkW#S0a*`zN~;*ObT7n
z^)6oX%%tBEfNKBx6z%o)1H~qEY!hKqgm}(NZi(@56+%Mbb$`~aBD~PK6+HnOY;h)p
z<6Xbr&2Jk3-<+(KdG)AGDDxe;=ujN=o$1+R;z&#F4{Ce3#S`Pb=tgH8x7d)THs9__
z(#kZAn>@9OsEE$J4uQzeOh`8c5FybParWN`C8_*en=gOh2GDv<k^e4x{aImq`!Zk7
zMWyorc0Pk)fI^ipM`3k2`%9#az~Rh(ToWtwtT=b;V>{T5yOjW5vnj|qj<!uLAW2<S
zlRW!guC>J#cUZ$<Gw%WdV`AK2B<kCJT5IH8aUY++BI&Ti>7SYPLY>-%*BrAWtq$2)
z9n|cC+n%&2t@j!Ow4JYBep&ZBP3&{i2rj!povxyI1{+QQ&5<J`vN;T~?I4G@Fg7Fg
zISr1$3ECsfaH<vX6E;pS*xk)Tu#o-HcPh;s6|jc>bylZa#JMabviy7l7y+>{5Df$H
zh9Qx)a0_8g=5c^4U^Irm<8OYAmzOuu`>ZRji}gX<VeNq!L}#Dur<VP8GX}%*f88&K
zAlO4z5-B@bM8fokvlU)PO8%g@aBl6mo0xT2)RWRmz;Q%jpc4Z6{-F<aFbUtK4ScCL
zK08i@DHSbX)=X0R60&lBghz?^?*7|0yT?~nis$}_zih<kIWT+lg`;Yu8+tIwI$?^c
zcqn2uzTB4q++03)*>`+^rM|kelM6F8f+o)%j=rN)Ixg^XuHIiKKKU!QG)h(pJ+wrl
zEbi%L>EaUL+V!FdiIqEHwHUBYn(1#$ItV*6n6q+oM~>oXvncs4|Iclw&Sexb%KeR8
z%*CZ{%u^8Dgpd09@J=;*CZGGO5{U0@w{KAKw{1rLOs~?&H-Im`-JDyE91M5vxFi`F
zKYMs4-Yx+ht52IgpzNKCkS`wpkTQZf$!v0K2_#>aB&++=^W%N<4MK#?*W#5yO~N#6
zqvPZ84hwXgVfnRdmj(OH?pgsc|11~mRwqTwVJPYPYm522Vya3*Febh0^xW-0#j3`r
z+hR>oQdVio=V0z;9|QzC<ipp|IYZZd)+o@`MHQW2PCF-%aT4^iI|I(UD3mGwOm2Ge
zx2*wJ$Qn)oTtVZ}=XkA-(y0_M!G<%)mfz|Er7E`-A$8znGqZIliV^S*Ip1Y5O2FRS
zIJ3*5q~v1$W&S3#x^T>8VXYblfcIUu?wM*RxT`9U-38f=Iy5yklVR^p&r^Qz)w0o?
z@s>7-(%+H__3aH|!kspDtzQKRC|-tVxr@QV_|xQgzD6fK|J{&Xb~0%oKUOBbLJ{tM
z=N-FE{5p``qq&Mh@nza0EUA3)TE|PM$yTvjeEb|}GRqTAQ1Ml^7Uo<ez#_4m92Y?$
zp-}4ry6*}u-+=8yhF9rmtTB<#5<?ovJ7|<z7_3`wHn!d+2Yd}v_!HGA%j83flt$z&
zf$FLuC#3~PpX`g6pieJNuoxmGe)JvzH!@P*gQ+_!O@X*XsdZwbPhEF`GOO6N-B0tp
z48p{Ca4E;EYv8^29wxmTr^D6Kdb%1A+AsA8Xkrg|o9d%X)u{4a9ww77)NGx6E>Qpw
zsG!JQvKp3IV!NM@%!B|Pud%1q%|l_`!yd|O0k4KnYHatelF^y(R`r|i-{({k?g2we
z?qy3CF;$9F9O#qmVUA0plxB(xcBZXbpCvv2eZbg-aRPHQ7t3xBMapBjJm(xa06>WL
z&+h_Ysql?HbBN`o5L%tt?w_;hRtEWsTUN8B{8`(krFs1dTR-|lXklfT*Y981t*9lw
z%u3~lIfxa8m!4u{ZP`$>;J~%St!HErT5oj!kh-n}VIKop7^c~Er)5rxK}4r!hWWw&
zsHy+K2uYr<iX!zoky{Mv%mNzk3#InBwW>-rA<mUJG`&nw(-vGXgUV%8s6L8BEb0ps
zuT8@~Ba~QY^r>R`Pi(<|5o!Owo7Vpa!18~p!R|`3cVRfBi<=+0xp8fS{CZ@iJdWq9
zsTS&72V`buVhc%me&Ld8(^Yq=YPy^**PD+7iUfYR)7=DFgR-sm$=Fgp1^Go6LaeM0
zRGrjg2iz6XvFP`P?b}6G<9kchzhNBY)Hq}%s!JJs=$QS?Fsr@Tt%;VhtPbNdq=J7V
zdqfiA3}mTHuAi}Q2zhqBChpC?Ud8P{gO~ZXN_Y1uJ6*OVQkoiMVoBB1W@1TsyNk3Y
zdOU;rEw~(3uFfKEVY00wb}2-wFvcfC$7Wf66sFbls(0$dl|fcp@cJGLk+hhRAM^D*
zKB*_MvfVbqzd-d$bZ=jR4TE<A6t~A1wCEW9ix50uYZ56YJ~;U<MI5Gjwp*&Xe!`%g
zoAZhd+OzE3FkX0r7z}$xfkDLfbTbzZ0KoJ^MwF+J)!icuk#sl6dWK2Y3E<?9FEcr4
zaa)xF0l@Mu#T1aOl+WD3Hc*TQSPaz!Q2U;nWOaV8zyL8;VT_Ks+yxM-i|Lz0W&B81
zI8yv)mEqwziS@ZSxg*Qn4%qJ2*Ic)s+8LC|?=ZvRRN<t_(0*llK6+W6dP37)jXS+m
zR?E|d9ao<6=I3jJ)G8db?|~6DomD4dxz98U*R6}P6^R?+sba-#@vRV*^0*Nxegl*v
zV`1^P3mZOPK#Z1j5Qs$wY!~I12N&Y>e6sTYDR9&L<F9fyKUVJnO)S(`ORIHG#n||K
z5Uohke%||X$hF7xnmDwhtN!Ht9en4w(7P0$*;mUprGd!ufbxHmu@^M+-|MoZ!A=a#
zI}SKiEp<Q)rSRo<aJSywN>7us)&trjX#nKtI7g_p=jN(P<eRStk4O64Pje*zV5qgR
z{HzlTu+@aw#&rdWY3e2j-GG+<k2<b9oDJ>^$7pM`YD=p%QY%JLwMVp)+I#P|J`|;9
zVn>Z8c2zZ$QbFygqCP8j6h+kzHH+AzVvk??{r|iF-*eA>&$#D2&v~z`VWRXC2O6fa
zVm-mk!1p%v5ZS-3Gi#)^ctsg;^r9b$*qq9h5S9JJ#dlU1_rB6|647;j@Q3EQihtt9
z@XKXbX`-I9rA4S12oXKA`%9oXYY?CRW(f?qnQ_?kY+p!(%?yDvZ!`Q$SYY8Z15haC
zo|BvSfwAy;2WUY%pL(#F<ugKI4sJEjv5;7^YNxA6<IXQl7qL2_&jIiX1WlDIP*3Yo
z+tBW`5Lat%Wv!9L6et;E=E^0b9ORSXwj)0sPV*^*(Tb>(<L@Tp!qbsqhOc7Qo13k6
z7xakMQ$-C_V!gXONUtmEmn*!}G@d$8NXM?cIJ|hNHh*d%LX5rbe9<ocO^Rv+Fv`8O
zW^ejEuA)fnHDzjyHqHwfq@o%&7Rx3a`p!Hs+<bgld<6r_J_(=$q-%2{=6@b=nEUUG
zSv#zLG6ReS?)LR6!)IHjQM~7CX_nj$n5Y2D9*AN6+ZnTFGe1f2vUi%!kx8it-zd|K
zHC^(wj`JT5Y!bZ-EGRb#?yc4E(F)8p@V5b>dWoK_Z9tm#jBVp<nwNSF&ON?tb*G@U
zl%0<4hd|G`E_#a}N_@~L*|Hc5?w>kDt||M6&N7IlbDY*JnZsY7)thD)hm{>pkF7U%
zrezjVPcy<cwSxsMGquPYO=*e>t7($2z#Yiq-1i)pt=3K~dOBtP+Fc!8#1^zO52H+G
z51br`C4ZKd`F87IEEak3yf;bp24rJ`+<x3S6hc4+8hlc7wHml8bMZ%!4Xs74fUZ#;
zN|@0BWN%l(2e8>o9{T#3eJ-^V?jyyvgA9l(RdW}U4F}srB_33>9vd>r3Ic4;(4A5;
z8RIB0=Unhh(d&-S^g{P+80u<$H#Ax*sGGECdGjMdhE9Su#bgtSpYt`XB{8;CDHyu1
z5xkchEz2YX*gm?uXx$4+|Nebq?cAq7!%`?!JAL|UeK>Oanv83I*2EFM$z`jlpV*|&
zZ(=5I7;WXvEkVRKdaJ7-t;%NZa`qd&q64TSV#fdFc^*8qfqz>tVD(1I#++J9!jc)#
zVxQZ17`eYsB1rSx$Y4>ec+HQc{Q^q5@%Af}zG-7907L*Pb1`8`=Z3q7x4O-t7CQ;9
zqY$YtI|XrIOZ$C8%dn8?S3{kD#?F?%Ki!BRSxZX%h9V9hL&eMKsIl24LUd@OlsVy(
zfgz(U-@4%7fTs+D203oSJzVp2|GHKd7u$RYC^*hTe!7(Wb2dY&lwJGbFF)UNY7*a>
zGU4hg=x-HZKOL9!P*lJ`@xc`1Z2~D36u|!)Ae9eERyFWtO_77wiz<f)t>5wqpeI;8
z@>Ysd;kn*HdpYB`YxR3XyQ<6-Z&`*#-HH={e`f*V!FkcOLX2hp9O)c5VTc*XF?uX(
zJ-42FtyeS$GG%gqD~&6D<{Z{r^rhnWGIAnxe&Uj!JkPbKtu^r$DhhQ9UDVS~vZXvW
zejn-89sGYq3UbJEOwu<rYRZd;Y|Gbdge6<?7&i49`~UvcPVd;%@qRU^dj88lzVVE<
zi@hg&S^)Lw+G2O5_f2$>Q!*X9y~EZJ*4yy<a-BLiftZ_}DH!tumC8bB*u_at&(jh&
z4z|0W_=CLN?Man0PqidJ(*lT-i)Fm(UNK+30Oe}t4nZ4QHSTw4VHKuuXf%+Tx$_vK
zGdYXWG)|~YnDtjOlppR=!<0pRv6FjJO&)*enFCNi#9U;YRSd5~2GcBkFXri|WruM1
z<JC2;CP$SM{4NOkoaSWQCy0BizUlNGST~7dCTxssA)5ZxeX+K`Oq3ULe!S)RaW{<-
zcY{4Y(ybSRxitDKsNFnOc!q4VpEbhaRAsjQN5cAAc5q?o=R(W8-I-u^o+}JchTGT!
zfQwqi)cNgGqPIZH659`w{AejH^UIJ|>2e7rx{K?@xiV}pepXte>ei1w3WqU9i|hfd
z_k0J83C>i2$9lLsIs(sQ9xU)7G>UxV>b=42eIv=VT53`cp%UO7-KFjA`>H|9x3EB`
z8?7sMRRT&{t-vd{C;ZAh9kyJ3VmSniBet56CcBacUaE`$Pt-mV_zis1<udCqxizV;
z>tVzX8w4>k4U?nl|Fm14`=F`1SFCug<I{;(#xCiloHME8&0u*$cumb+0CUkvSYK<F
zwtQmszH}4~;N}~Hy=(eUm~^@EB-_*ouF+7g^U`<taFkWGb&yYk?@Vap4|o3sR+dHi
zN7#egN6iuds=&O<N(l)aEk49Q5CGsdvcRPjn3X4-5A9@8{dOg(SG9`{Ks4+TVq9{G
zQqwXCZnnXOvH|#3hEm;H*up3lW(L10ca46s>&0}oVLzdPvW}$&HZ{NH1Bj$6c(i`^
zko-!M`<bc6c7|5{0d-`n%L6*~Sxss{LzvX%uyP`O?#LPkz}wg$$vM!CoH+)jjaKJm
zK6$muODwFz<F7ZqslEze4t`?Du_2@`6Gje}-k`GkCpV@vkw%cIyHl=-sC3!T6y<Z7
z6v?D|r*T;lRDGv13cIRFx>9%uLs!ShWZ-tLqeLiCSyWMhP_mbh=t>Ax$xz{;z20m;
zSrgdfx%qx(RF{^D4shh0cEGh2e%!IgQ9H*5Nw@I3NB8b$&Xzsh<KIah&clhM<pX&Q
z_=D_A2A2Up9QMeqo&jY1=qQfOb`u{!_F+zW-lBVVWli2!k&#;^JKKT$>SN1KRMnI7
z+F29r5GE>s5i^9ykojn#J+G7R?c9!$uJE;<%MwNDyU~dvtaDNYDf+dbmtcEtx1*i5
zQg`c^CP~KvwD2*-mFD!?!G(EJD+8xM(#-i`g_`%wi5|Jx@n}S)RIp1H7dqmni|bPx
zVg9^qrEHj^a2o);2k##?wuqk)HBYDrz5>8&G<a;V;pKz=<q+Sr#o!!~Tfoxo<}<?J
zsmErz9YFo{pS}!pkELW;-F3egEB>5v9Thm(;ltwnc^lJj4=~^=9!syBd{@+U9+<qN
zZerIzRqwDU0QH6M)w@{&c$Z7}hOQwZB=CYE%^xfXyeU1TSmx?yzH&tcOrQ?I%>%CF
z|3YG+m|Mo>7Sv08!#UMDvPE-X;5_#r`)J1T{3$H^woU&n<Uw-sR2|$ygKulBBF!B4
zOBz2IvP61S1DUKlZABr2#!3*?@{eZxV}u>Uf2Uwkq7K9cV9do~X`1fWW0tc_P6<&v
zlggcPRDl@{a^@nwpyq+GK;8khK}_k7u<hBG*$!u)86Oc%6d37$x+{#7o0g(`kR?-Z
zlhOAM!T4rIp3)?*yGMgcfeWn0br>51F-?b5R|3J_%g)*=@4?=PI6&PDbYt0u?PW^R
z;A8-G&w@RH_sY*I)zb)1M))}h1a=l-KVGjII1NX7dTyLuH)Gm^NyDdmdF9rH{W!(L
zpFM$0i%Eadfa*99`GO0eA!QJ@T2f>*l$Ca0MfY9Vh27WFomF9rps?xa3I~kFh=I<c
z$}fH@^da^34ms|7Ughf8;VQ@KG>+C4ee_9MR})%-r$O)VWo2jIV(HsY-><zxY8WqM
z@3*Y5k#ipwY4{c1dWkDtPlzA7#~p-CmVU>gcJzB|RJ^JaTQRUlY=t3y%pJ1hHES|S
zaSuT5Ogg~YFN7R6dI2pb&rbu8#qv>ce)fuiu_3A}lhS-4ik^0Nn03lKXrA~VSuSX?
zzCQ7+3`YUC)S>nMqD#CO-b+sXACa;*loetVur1@cqQ?(Jcjy5RBarS_V)=~oOUD)e
zi%4dH{f%GNCc%DjmyT&4+ofzlV_oNHSS{YbK&uuK-GMaJD?7!I8rGg3uZe?EoIqu{
ze%sPJ_V&*Xa?IKQ9T0<~=emml>)GVuag;*SBb5;Kj3DXqkm&vnyGEWD(s(o6G<HyP
zUzKp0d&6A)0UuiIgA73p@%8zHO7Pwyg)(vSVpl})Ww1^{Qg9yHfceM6Bxw2dGyuB;
zCN4)%gNiS)HG{O)RCE^;(t%E~t@SbpA14~ZEG21*x0PN4SfTk9C_#}{COY+dbRnW6
ziVGT5IJ&+j`%T5WA@)5f>?hWbY+>+7L-4e}w%w#iLh1Y}YeMC~ZRqLZ&<G@3)$nF*
znGi%F4TBXvgXW9mpzXs}<f5_Tiy6=ZtWaG<!&dgecNs(S&5=;i#;JUy&h<LDvHg7=
z=<tiBjTLGs6>Hb$!-H#~ZpmwESkyAx+hSPcOcqQ+lf{^s#S-&4A&e<#;26F&tw?UT
zxH&N_Yie4bucy)|BAJ7C>iYUg$Wc@{sGbF~PW!{8dH~f2r(zY?AA!$TO&1Nrp?X7(
z8!B!rgmJD2&P4cT;I9?&M&CBtjczZenCf!Bti0&FqS#d24Y+YD&VJHVMY|!o?%JUb
zGmC)#<ZaQP_uPp5p9f}A60XLRUb?NrMz1_JP=&)xjOKO4J}@#-iUU3VXuPa3nXR;<
z@#)X%;tNiUWqFg*56nc~?(Pc4QEjPvwM4CHEtRj|vqi3^Fi4J`sAT$H=}e7&Mw6rF
zK1W8|9qcFO@5Poj|3tq1R{d=XBImRo|7dMifEskZ9&4_zuP<hS^HJDakHwp7A6_i_
z)>-207RbRl!Mi)*`L-7Yrc;OVI}V!PgSl3@t;r6}WM0v3$tXx|yzPaMN^3e8U)1G>
zmb9~vlzzuAg%fSfRIa5AP;Do>4k!ojHF-{60M`?yB9-_w7|!yXWX8%z%f5WEePpM!
zTiM0q>8>=nH6(}HMv;3EzHXZ_`5Qz0#=1W>)IDisr0y_4srmR!1-PO<DhgzuvO9Ph
zoBfb92Xc37dfMc?0$cwD=qii+y@!C^qkf!K{UIUqh5grRQFc<9N70`^l|q$(Yu9+1
zXCQo*Zncy4xQD1-dn+rFZ#@TWqQP}6Zc(>?r<&olz|M)w)MlabpWl1A-Y?Y>7+B~Y
z(A*!?6xdV#5JkrTs4m`a5ZcM&n#?~>1=$hrxHOg29-D*bnLB~KdNv&<^qpVFYM+OM
z={h)MPcHH}knk?Mi7|IAabe#g>@4D&yBBt{N-C81mJtpUdvCVNB=s4kBGFopGdprZ
z^bKWyj!d}6e!xGCk<9Q$Q(J7PE!;Qv)M5d_b)GXkNEJON(!V&|DTlMMXb%(ofmMl(
zJ6HGC`e&jQpwfhU(6%HslUoDJe~v?^5y`hUdld(`Y-*W+=GIOxGRG$`185pKozdDe
zQf(#&kQ;@%QUu`1(^-n<PU0Fq=%)$N?{fdj0rndGt;Q0ZMJSk3#IjRz59LLT(_nX^
zK-|e6Crz+=_4mU6f7`N-F*~YV`iEsJ&}o?$)t)QTtyAZRUKNJ2Q@CQ!<!s&D=rzFv
z;2ImM-Pp$FY1KqE{{9@NX``bV@|iw3+K63{LR<UEGUI(!lC-+|=H4}Kei_2}ayE0D
zd(9GMEia43fubXz-2A>2sS-<+mM*i;!pP_~2E%prax6NJqN^a+CZyb=w9iE*vya$l
zc5p`#N@fGS*At5Gq#Ounc`jF4Qc|+2?#Sho@ZkzO%$Oa<Xv`Vk`Om!_sG|};7AxXX
zbpyZ->+b0>F;7DoQSf2#%<Z6PFV0ytQ6{3(#vB86n|42skH9{Q5_SWUbSVJ+iI95M
z4o+YV1EPw~f83NfeGy0>$DJxoFkvxJVnh{?kati%6-3A!eC<4ff@DS8V9`m`H|eR$
vY(_6tO5=v0=fXz(hjl{dh~WRV0~tx}Y<w|0U1mV}I~AY}Gl1eAK92k!*{Q4^

literal 0
HcmV?d00001

diff --git a/wiki/Tutorials/PublicWebServer/images/connection-secure.png b/wiki/Tutorials/PublicWebServer/images/connection-secure.png
new file mode 100644
index 0000000000000000000000000000000000000000..133e13f0b5bb18cd909d242b91a782a5f390a173
GIT binary patch
literal 32214
zcmbTcWmsHI&^CDR0fJkCGq?v0?(Xgu++Bi8g1ZNIcL?qf+=9CW_uvjY&-<->d+ooS
zYi4>*OLbM9)6;eLUExX!k|;>{NB{t!NK1*S005LP<YNPZhSbz2O$I;;7#9&~H4q52
zx~;ec0HlDln6TQnmD4N_AME+No~blO#ASH|Xo_CRpadn%BvgDMP|8+AAofvi0Fp4A
z4`@kAZ3PScH#7|hR9c#JPk|ex2twESLjgvl6iyKG;v8w>?iM^BKOH}(l6r*t`|9_y
zWj<=>axmU{knPRXWVedTS6W%=%0<|-?a1|x1~OntlUr;zB1AnX7H0+pr51Qy3~@uQ
zMyJX150tYMJUWpFw;k<uj^}JTM#<qZ^l$K|PTqG1{u>}^n95ap!iAxKj2=ZPE~a<m
z$VJ%lp%q3mx7D$=f7>yaxK$NT&)tzLlYZCvCaX=W!5jr6nvna-nsOK-Q>MCj?P#HD
zb#EPV^`@bB#Z^K4aLOCn|H$TeAcPv~Qnl?I+P|%5bED~e{d9ZM?t1js{WCSS<YQJ!
z%H6|Gtl<TZGgl@-<h!A7=;}{y!Wimdsyseg28NEgUq6enh=_bU=?5SaS+@B8kDQh@
zh|P=mOdec>la2ck`weSL%?_Kl)u@muksUeCMhQ_vuPs`3ol-DwPSXF=%AWQA9LluZ
z^*t;Vzd31$d(V-}nrWzdTr}7TVpw2o!++93#)$qmh5y$?={#qnU%!4`Y`29tYyZay
zFQm}v--FE7y6`{#spdGpBdVCUuG1n!MKDx=sQQ-kXE<wRW##JX>O`LcA~CTbo_BtJ
z-c8?v9Ulf7`g>3itnk6Xfu>>vq&EMMfu6pil%{#v_E=Ty_o5uc|IuqsT!h)0AEO7U
z<kLfb{CFF|PE%vec!dJX%0wU|O|l&I2SYUYYPlOzB2WGK^Jms8+|D=FeoRPTcv#r|
zy(}hX<^vIkzdj#lOd%m6+D(I>>Vr{5YZjX=F<uYmDIr?Ts+O!FLYg*SQYw<=ulJi_
z;o%J~M*q7R&=<}_mh7B1xPERf5m6ljmh1)>PmqR_SdZ4(Lh0E^)S8!<7l|0cI?L%G
z@krb#Lhk%GX(r&$$*p`kd*{Y291!qNIme=S((3)-hmk(sd$<_BfsDYSpen?B+u|({
z%LGkgKCu{od%n9o^=P)&$JpM9U7Yimm69rD?YvDr@EJY9s;6_Vw$rbcEhe0tAB<dk
zObq#{QDqMkARf5^6>yN9fr*EAZ*h+F;RB!l+skeB?R<~>-SByXf216DW<_+WlZKJe
zKXHfa>uZ}oxljOr4%Ct35n0oQ6BH!uSIY7yB|qAjuS}}XVu?Tj`4V;lnN2N<kj2gJ
z^U&EJDnNt@N6Ox1^HiQ?)xE#F`;vY)5fQKdf{2l~9jD0F+$CVTGMd#s6GOb*Zm*NN
z^me^)CMVD9Y<b`<YK-y&*v8_tIL~DBS_sK1^NuClxIgnQSbZLb69$7}P3B&mrSD!W
z=70TABE7NwbYms>xRXSl#+`<sx<TO94i$jn={{xUp!NbIMhdWiohI?x8(7)U&fa_!
zj47a{x)95wX1esbqt!p*qr9=ZoK#9?>vi3(>OaR2F5gZ+R6`xhX`b<ArX_lEnYB{Q
za=`?Y(q(^)=Q_BalS{Gc1{tM+16hvW78frBGP9D?8e<#T4Bz@%G5&!)n5<vVW)IFG
zceQqNivRx9Wr}~yk6Gteu3}C*b3zVjK;764PL0Qi=j-&t(kj-V|M~Us-$&7OsO*=A
zJseMuPWGw_jB!L}xucZUn<5l$qr>aJFYy>w4Ok{7e@TA2u-+NEBwUb!r{RAn`(jQp
zA8uBRy<XSrD1P&IGG4h6;BObW5*}DrrMkHz14`j?h7l6BvLvzE8Wp`5@9)Z7s0M0P
z&`H7gZ3>2$5~-Ps2)`VBz59MM4njp9pdqGi$YB6+05Dvl{5L=%gL-qmYb>rvT)(6{
zeGN&Ux%LVMW2E~%@|u{VI7-HH^LG02F<iPXA(O3~4gWoODq!F`lpO||9$Ji&AOB(G
zj~{>gO;+MOr{|UEL;xW6&noG`atUt)@vQyBqla?yQ4Q5l3qA%18q-!_+BL#(TJ}-u
z+zLVf`f$m~4UU7W0L#I23+LH|S3;u;mq-5JH9#+Bt@ZhQ18{tKxUheR61v#vJn3GX
znwna=oqmf(t@)YiJX+nHEqHaAa536`r)WuoX<F@NCF=Q}HXACJk^Jqgb5ZjEI_PX@
z`Ss${)1Zg{+zLZ0tzn_MgqV056f6*UD!EuQ_3OJMCnJ51HL8EzStTmjyQ4;+|F;G}
zNJJ>$`$_6)h1hQwS^^dN{Pvp<l7O-p0GKR>CgKzMIrzy`<JjWG_;t8a(}%0*6hD)K
zv`=ttr|6pXx!T@dv-TL<T^&NQ?c=1jW^XsD1wt3Q8!mz-G&=lmhuZ0vXhoa<lViX#
zm8`7Y{Dz2<riT?<X;@c-iNSQb^3MCCIf@<WwAHlA-$vKH=&WygN~;)S#;Lh7TL1jW
znC~|$f6m=yc@CY{SFJORaoLf^@FrwQL4yR9jYfZw{*(0`uFSF3Au4uuYyg+>sd@Dh
zhd$+t?Kh|Iu0m?x3IeLHWB12Bh<K-2p|^q#hjsY8efvTd5%w!T*76{SNePjGzh0dp
z>gPj$0D=^SN~gY(001U1%B%)plFn;r*(Kve*pfmoRcg=!AEyIhjriY(mUWsAH0=zg
z;SMn|z6SWvYQC5L8-!ZlCmGSsr41K4z);qi7Y2+N$43~cMZ|j3{okNn!y`Tmb)~*~
zzVwUw(7z2ggMn~U-uOg|GiU()54gig=*twHDidiEHlD1zafQ0jRq~|n)WNO>YjC8Q
zmuw61l{l#>y+Wb>h}4K00x9&0;_j|CFLL!t85`xo<olFwM1Si?gWZ@3^XKarPRJT%
z09a10a`K9c@hgq0mQvQtoFn94H^4vyIy&w&$cBuxJ`ID_E-d737O&e+b24+<_lv1+
z&$q>nb^1O;01yX^pTZ7hB#OG?uQJ3)VTBB#fF7h=TS`kDTbxxY8(ERCFj(RW30Psp
z-6Yd!oG>YDaex$7SdE?BP>d7gT;J{*AU4b@bDrKYTdsgP5(V_kU<AftpCptM)665=
zNRwKf4vkVlBZh&xfF9T)HFIpJ0Ne94FjSs`4Z&Z>Y8Zn-?Nos&Uqnur64gpB@1{O#
zIy#judQ!gfJX82f#Y_P<vg^j_>#Ot3Ta_R|0QQ#yiSlLlt>KFXoDljn9bHc-N-hXp
zKbRW)_*_#JuUHWF58jq*XSVdKC|8d6Mhs1K!sz=j{XGq$bzw9O^<UXtSiq!(9zzIf
zX-w{SHAA~&-e9*?;WQ!u8cdmv_aYT5=gQDL$C?L=D5zGmBK@E^l84Tfn0aK60NumQ
zkp(J>S<+++diLf?X;Edv3Z+=t35l_hV2abKE~KkJsuZh4L-)N;$9dm6+JicVv#zdY
z1pVLh#ozA;9p^<oJ<Ax+B9mSYS=d5<KaoE)lU&`k5z$MCLFM^REjK)68@@bQJTG?F
z<<-AuE+f9FdENzakT%&6_<xq5P{?vq6yk=H5W_^bzQKS($3P7H^J=o;cX;#L5$3U(
zn5W!uD?Dl4Kdzp2qsv2fR9jxUspcaN9ITPT$8Oh+xI3BW-)LzI&1u;$CLuA$cuCj#
z$J!VGx)#(pq9S9~mqM6;L#gMxu-iMb5yXk85Oc)D961mG7z*j8Cn-mL>UobLbEsK;
zdMl-go1=siOG?Io0_^=?f`6MskFh`eMiYD^gU%2T6Jn*7(_(dy@&-E>`g#}M-F;2O
z>hryEF3zW#1+d4@LML^*cV4HJ6TpM&#FMwb$G9pwI{5hb>a)EgA|pjbMRUCEBNkO}
z4>S!7P@8;RsK$f1M^5fLiGjVx&?bJt*TlrFS+l2cgwaJb?HpM^J92X=uEqN9hB<M+
z<9eZbfVonUz-~fO_lw2V=?@%w345*NdrMaDgQ8aIy=TQOd`ke(nkuoSCwOvt`s*la
z_ZI7tpt+9@1gK&|0k&2ygHu7=iHjE*SOCsrsJmQN7Y|-s&ljFL598@CgD6HYg0*`W
z5B0{wAuzIFA8QvC!>kTg&7!{;4-)rhs~0a#+61tx!HhLi$2<;q5jlf@NF=*o?vGzR
zKEP3ur(d5A`qpIB@xA|PvQpLD^YXy8K!`S-SiSRH-nu=CB>&LJT~<Ts?;3#)D3upG
zxNdfZi|hJw=AQMXELwQ@djBVpYl`^oIBWiy_k#o=WV2F%W!`I3nMHq%=G$*Q6pVV%
z_I<t0P4$h2fx%QT{Y!Tdaq6Cc?>RA-W5A+n#uxv$*L%S^Hxp^;%QUu<8vVUKN#AT%
z9vjQQr{rtBsr{{i{{(W>l^mHqf0inl_2hqsbU$6sz{SAWcIOim?9L7gRw!x6-CDb?
zW`@MVZ{JdRIWx}2(^MIC#1`Fj-P~?3cZQg0OV}(F)+y-!3$K&6eKQAIBFMf?W^(JR
zsQBz1K`=!|z|#vnB&f|&ki6c1FSY5pwQ%IgvY5>LyQ&5WgyHl}3vG@^XL(E-b;d?z
z+<5fA!{ZrVA4x;hKANT0uIH<UK#i}KH$<HV4$Z6U)wRpEkikqeTzDV<dsWUN-j3y_
zr(2h(GB7hUGB2K*^mkab9zq}le(Me-1YZmoHgCuh^nXJVJ#fr}z?~lX^M{8ANGN>e
z8^N8~P2-=e*iPZ`GwJJ2E<6f8%~%%1l4vwt=hE4u5AZNp{9jrC=ObP*(}v|!)RNf|
zNML=v7z9XBV`6-Y9wg8^1awivSW!d2BNL$>Fh|TvkBd0(#A>qVQDiC{+%lm-T;~J%
zg~H_YF=6eia^)K)<-Q}A+oh&w{4_+#tVsxth=_<Nkc?Hx5ZLj;3x_}{s_TQ!Pb4HH
z=;&J~Cl#|tu)-}YcKivxl1Z%_dyqk?u~*>DExK68J!yywCn<aXUuZ?|9O8Bxl+^zl
z$hg2<UX3*zbiNjkn5vMlr^#J!_+1yJn(JT8=yUuBg6v7hsZ@P@US2#MX!D0mStoMt
zHGF(Jx|e-AWj*G%An>j=@Y~)zcWZ0w^z^jc&F4G_YRk&Vcpj~AsrERk#($z$41(y*
z$bdUGXT{9$^PLlmAL#ip3AxZ>NIB7OtAJnhfWQu9DzBdlE~-dG|09z{8JA~mi=LPX
z4TAL`jg9h>b|(-E+tUBTU28(6!T$-MfvL`ryZK)=9amSj|I^De?fC*?<vUtALrPTC
zheoor@N7sKIn<Qyug`Zd&5TJI7KV-}Bm}KeO)08WGii5WPrNW^${u$s;(1wT=>K@U
z_!kL^sY%tc(?Yz;R17G8R(vGJhAWrM1|RjeF?!PMhTifD)RZ>!oga}u%L;)pF(8{D
z#c|(%Z8t+G&erE1o>jRgxl*Jr%Yzsgup;1TM&Vnt?B#F}be%6&uWsb}5A(5ZrW!Ao
znK~_o+2Z#TFT68r=aDzwFi-#>MRTvoE~)Tzkmd1^L^R2lprT|lpXOlqX`MVzF*K~R
z#y3Ng;adkLzSUp#Ll9}$xd_6XLs%FodVBy)g6`!pCQny5+WO-0pT#kS!~zBn)#Fw+
zj&uSumeD3yGB98ajVoqcB1V)iB?JpVLqS0WOltc%U!MoDah%@X35ngP5NlS!sX1$k
zg|vN6Hzxx~%?dEhibXr|DrWkmq@?7K$jPAQl|>+E&IRWMe!|z=qqASD<!wxVGdcVR
z5P+bt`+}bOPo-HwR2Q3xzv@(-q5C6`GWH2tH%$=zRo-HAFp(1$4<JVsP#9-LMan`$
z2a5p;$ZfLJOgVvt3Xt)D0pfqINP>h4O9KuW2@4X^Nf9-guX)f1yx8&oq4TWt(e!E3
z2a7{zX`s!}ltTimdf1{(nF88nXZcW<&KAN}@+0V(FPw$q7a;wOY+v3nkdl|aup{nE
z{rv=3UpNp27C=XVVhp*lbdj75AcaZB#XH^1d3&Ud)CVjV9<!cbJp2-gmKtC6ze1s8
zCUd8SZp!lNMjfkOdT^rNVC|_w19=;3wnicuO!A^Id3SxmL0R6Y#hJ}e=;1*EwU0ae
zE3Q_!hY0frlZ1x%s&_SxCzbIYzhDEN;cJ>qJ1?`Qk`P4w*J^jJWdKYR;rEX#RTD(=
zFhQ=9S2Ov)UPC!^%3VPQNRHs=e-Zo^k;<<#30=~Q0}PEwVmEe+tvdx(_#qiSWlj5Q
z%ZVB9sh5!&bs{%bt7ZQ+d|~_4>lRH4%4I8~SARImhM^VLfP#gdL3lAa)VFJ6N45=^
zhbxJ#d8R#C)cGUnZkV~-eKzaxt{O~=36dX-JtlH8T|E^|e$s7Y=-TWs@ixd1xMY+?
zm4BsbUg=)$`N65*CjtZK7U{&bm_1fUUw{O%#9WbM5O7`zD%JQDm&;i*Y>Wp0y-T*I
zkWJ_TyYk)o<eET*Gt<WLz_&A03^aU-@)Y2=o?*Cjz5ZK0<L%Z(+wz$ShFrbGi@m${
zpuI%XK9ekKCJ+W7h<UN-TlXu<=zjD%P8D>hLGnEf<b6(qQWDCcG9f<n3l(@zba;C{
zjxi|_U8TCWSuW(U=-nTm-5r*CwC=NzR0IR6Euh{d*EN{+_NV%K-|ln0@4Oc$-0VSR
zXfjal0u9bPQ8{DyjmcyCd9<~?`a-s;(r3_Deot0+=~c{jQ^UwDjI9?{c{(n!?{@lB
zjmX2#+-`R~?(!8QzPcfp80>_PQ|(?~Xx3jQ7FD|+JiXQbnY>=K4H;5H2h|;w`nz|F
za<!YE_#13Goys|`?s_}efuTt;5PMc+06-{S3KoF;&vRa#OxIbRSCedP_%?|!Q+GvE
z60_F6XT6ROb3nqQt%SW88e}{xY^<%#fIk|C_PLbvX4sB4atNwNO&6$V%yrnQ$*1q!
zXa0L{`a2n;og0ql4|z$~ja#m`#Dej5w^qdVU}$ux9>?=$QQ84cfXCxStZDw^awQZP
zzR7xhp!@IY#r=CtX<JK+<s#bijBWIDBMNjpw9eYXNX<80nZdW~qLRtI$~CuBt!M{T
zl9G9I1d340#uafPk-#t@4mw|V^DEtQy0fF9(`|5h!mD7(Yt7PHksVeiJ0^SP^O@49
zCqkf>BOmqZSIdp@!urCN4P8!n8*FULQpTqvQzzlZqOF&**e3sGBSpW~ic0{%4~G3z
zB`&y!jhE73qk?<Rt;;0RV^_tCpmF}P-7|H-h$j>2{#q+IvD{*)N1AZ>9;=Z>pttn)
zI_)cN*6P3ObJJ}y#Ly-03xJfc=gAq8?IO|Tn=-#=DB>I>Ey7DQp8uV~tYKoJU%Bmn
z^Sv8<U4eJ*?QbR4t6!Tgvn2$}+<Uw2nIm9efC=DE$|GIql2vi2WlsIx^0sG?RlUzU
za9}affm067&xby{_4C=h4rXO!E9F&N1^1M>VN|^#=|Kep^{+t@Y!SczP~|}hO=Q4-
zDwi?MVBtaX^S*yJ2|cU)<;*Sq=tds)0r|69>aIp!WsQ1fspAt|FsBJ#<U$Z;#hOf$
zH9h{VfQ+x1cSFT!iDGuUk^SXdzdn2uQsk9*CGB%n%V3@!1t~a7;Bm-PHL`^GoR75F
z37KRMKf)5%_7}E!5&$5Agbw^^bK?f{prAP&a7{~@_!(mtPc0f!i)&>9@yL1TVw<RH
zS|XOCz~JvF90xJU!&AW#Y?BSRJC4=-skWQ(o9q}u=%C*b&h%mX{;;!C1EdweDZX&F
zhlKxkh0?}($mtpxA~4Sx?-PYm$WG)A0D)q6<`Hz?%lfwyTq2g$KOaYJd7O-gH$wx6
za*INAY;Zx7xz}(dogtrW;_YV0*TqS_Cea^1p(xo@Q0=+lRM;u}ySy|j!aH?u-}e#%
zL&IVSOQr{5VDKQ#9QbHI{W(+SKR?Zy8`IYK_EfQcR5k!EGru8(dp3Npzv*2qIPa+N
zP+>0T^0$_?_OfPq07?9_dHnk$rTjE*R4y=oQqlpoq;s&7i0SxdtF$^<SMGDrrX3sA
z+J4G6KzJa!r5p2Lf8Y6ZG>j%9EDW5Wr2Ost!(g)wPUWWRV3SnxCQ^6xnL}O9q=24?
zIx4~=zK=933I@nef=J7*v0g5oD#Fx)L{sB9w$&Q5b43SvFL<okB0HW*2mmA};4on_
zH9q6xe_lRFH#Y|>0jWU&ut2_+UBma9yg)ixK@x}*4qMi-*DUNkE89SJ6KSPF#erZf
z8+T&E?_KhJVB+JAue+UpNls>BZ3t>#Ucxze6)T}k5~)Tx5UeXTXqdISIIg3P^KuJ{
zrCi~;){qbr>W_-e^CwA5ZK{&~Xse#Yw*(kfv^wHEp@+JZ>BZ=4r(NQJpk$ogvzmej
z+=-W@03u!{u+Vi=mZWQIV|#bD5}$8%-}z!~k!%TCj9qC3t-yQe{TlzEtsGsMn2>>T
z>-yAOkA_=y<*}Z&nXtBaaKE;JnFlD&12PH^6AxAn{g7aA%IBB2Vq#c+SS|u-+zp;G
zI#l6_Xu)f|7Ot_8ZE1D!LmziaiRN`Ekgl8|3n0p8aCY-+31J4<!ojtY6uo~%16iKa
z=c^#Q%Y)c5D{6Y##Le6VRblGtb1Nb5^4gC2KC%>TLIt9%$Aa-~JbV&{y;6sdg4fgS
zUg^Et6eYRHoTG5aA1uw|2xKUfDNU!alX>O*y6#4U>PLgF{`*GCXy_O<KNv+l;Bibl
zq4=}+NVnv_=4Rw?cgT-M(dlSWVKBX&<q-MFZ_~G-?F+-Z+2*JZ0jb8WDRKRen~VAL
zJE0uF#WI$d=;Eg0;m9%%3kVo4Q~21)b@!QH3N~)tt=xZVO%v-*Ytvm{WFpVpr9wmB
z0;TN>_ktMgUTa#YwTRb!SEuA`53al}-}K3XZYCu)U7T1u%8%lBd0lq)FX#Xu4FHu~
zX`Y2Vh5j|1%?J;$KSjOQ<{uThN7sjtG7YR5%ipH>0@SOZfB^Z`wQL`U*k=bsTVqZR
z6ss#EAJLuQYwkwq>ufS;pw8-Km3njbwQC>hE0yYOTy5xI(P&CM=PKu-^OzGtYb1{6
z#<s?jO5uAsdowU5ouV00CF=S7NepiWoH&QgrC5!wLtX+Fj#LreTP@r#yLGNVh&-Er
zo_QPpB^J>kjeDUwN4}<O5OH$V>6f6ZmX53)H&r*lud{IvzK5*+PH~xa8QEcgQi25^
z*(gGjezkjxn0ilK&$GMm|Mh8QaLA~p({a16nO4w0QMXs1#PZ!_Z_ztsZP|Rcpz8aF
zyL#jUk2jCaeGv>dl?0|?X|Z(jnXyT^;nCs!KI+ZWY6VNSo4f_#pjj1lXWOY*l6PZa
zqJY;mNy7`G^grf@ug#BvjieV32|4vs#~|x>DQ*LSCb#<oau>~#wkw#`R<y1awqKGN
z$}lU#W~=X>fm+RCci&XinPNh_6<=E{hP=JjdH=wgHe^5V++30P^V3HAQgFK+hR!K^
zxgRc`Yy_g*>{c>8?96%d`f*DGj@yY2e&t8YUWcMp-)|ITwMXjs%W_P0lz>_spPTvY
zA@8P7Uj83kWOS~&D}A79sXSiKLlj-l9u??mY8YNNvu}L!d{-WkV4+<kU6-GaAU3|J
zW&LqqBCmpRi#d*{k9sfiOHd!cJ9Mf>ID~*dR7rVxd2#W9=>kc^heh#)4ljMX!jBsB
zl6nR&KYmOKmg$l~<!LPrtgK;RBymWl-x}*&Y<Mjoe9KmevBbJbU<g=rwq8&y!xR=X
zidiuj+gYx?>ila~T9i#MrFRRhoOF$;jBY<ztKzS_;dc@ZLCygI0T7&gc<UvM{x3w$
zin&#^oq_8L%1D974MYUQ$H^P(!!|9cz^cgXS?NzR$t1Wk9l5(w{?%X(?4i})fBP_Z
zAt;Spvy1Pk|E0LCK4wAncPI$IpS|qV`20TX&@3zcmzeDQq(OYNWV$#ZO@f};qHA^%
z11O9K2%L~|{x2X^Y7hrwN*(Q`H>S^!r53|nJ&{g0?V&z~?uL|brU#r9%`;@FxY8?Q
z&m)c|$^<PkxT=6}J1v|SMt@4V($|8O_)LGO`BgpqDa#mGwUDIj5U+v5Qm54TQufO|
zSsGW^+SKe*Y68Ekq2t&|aa6|0qm9!iXGtXug0`GELzKO+jM1&UZmIAvH}8r1`420)
zg*dCFjl%RQ-*NioDdP(<p}-ie3o~P>Ba^&32gFm3STgBXFL<izVgS0h@}Hk-*l;qw
zHM(B*7;I~m%RvWhD!*8i#fVy5r`m9z#?&3@aBkWJvin<8zO5wJyqIWtAO+nw+*&>x
z7%qAxs0hvJk<v<ogaT-SYnAjR@EF6r$#!qxXc?WyrdQ*6kVpJTk^H+}^#j@UoaM<2
zv}em;E5NX=UHz?-{}f67H&*lib58L85T5`4nhZRA+lT$bf?hJf#0EEyAy)j~#rA9+
zn~!pQ>khX;dtOJz80#}+lpM?@`4UX4Pv!~X9sB1$;E9HqUyV-&6|*mlU$Efdg}AB2
zh&ZmeVvNG%eM(J0q)2Yq64xbRVZ$OJV1TSl7ZK`n;Q=xUV-B_htKqL*=iP<Kxv;%M
z_rmI9ODqq6c6-_uV#&E-4|SZy4OxSRJ3bK=E!Hya<MK$K&Ml5tulIsBn{t7HHtpYs
zd%F9SX=~?{#$UtNR<Zao?<<c`?luj-k1dyI;b2J)Z`NC?DwnXBv_FP}0TP2vNY23j
z$^{5846VcB$y#mMt>D{3Ju+^ZE+q^>Qpae`gl-Ln#iH@JuB^LOVOWXN48p#aDRI~+
z^A_7rU?G3=?WvAt+~>f|_0dyONXTuK%L>6}QzBXQcvyE577|Np_q=O)l=-^5WRxCe
z3|+T00*w()gKlk%W9*n?K`mCu?0Hek*r9sApC&sPrPs1qJUU%~bUrn}rkAH1#X_M@
zp&EN$@`FdUq`$AK3`<$$u>~wK8V=KPcC$?^-Gr(Xvqm*aW||Dk(L6>Q$KyNQ2?k^4
za^}+mt5~I7=B7Aq^c1be%izcydYRs}LM~V6R+)ld;hgc^<KBJ+PDjtu=ydTy;hAC<
zUl=#meBXYDXZh>LF*T7qyWY=CWpBFDbu8}gZtH`i+*!3;R0XwLj1{d;vFHyZ?Y(x3
z9L{KrBTEGJ(7P_{w7Er7Ct@e1Snd^mFjEUQA5~Ilm+ti}ZiX+jJQ%Kimt@o>^mVMF
zEY=k3k3-kruyE*lvKc36xIkrliqXDP9-k>mCAMC>KHA-0hs^eQ#o4_|rv+Ta?)AIg
zlQFjVr}yo5MhC*PTjQI$=#<iPjIYrX!G@jh$&cB>P7^`+1d6^-D+IigOTr+<Z|288
zQNIen!z2+sAFsn@jA9z5xhrD%pAe8pR(jnfulY}UQtx+*n%h?Ofw-CfvrLm&FJ1$m
zTZQ(krDLst!*xcDUzVNbz$?tFT|fL<dgoi!>3;0EcbTGU*3?fkl5!bhtJ+8j?#9yi
zO5yYKP(wL|jU;9SS)765^_)!hCX1wH>4ni##z;JSZsMzd8IjNLm!rRnKDkGI`*!{}
zbZXM~cwKaU(A<N+O6_2g@nUlI+c+lo)%w8nryO<h`!L(JVYQoE1j95egaL6_4$f@7
z`;`-31@8P1{|AMWDCUa%9fFMS(6-A2cnmKN)p~FkrB=<<RMBUj%&6*9%pJ5l9LErm
z^Eu<1<mSTA@P@1tSDa?-=Qytt;BsEAStKasv#zwBmH6Y8(lV}k`_vKWdj5c|j*|i}
z$+}?Gk~6N}^5-Sf1-p;ov{=1_+w?!Qdi17C7dP(YtRyL-^IsNx>03ZGL{wZ@j`H1(
z+|~ZXZ}9DHTdSd}^50T6UjYCZSzh-1vOxF^_Y4@BoloB5Rmm`?{$>I(6q<=mStNvd
zgx@&D^`<}Xl*3(=BuhkVb>;3&XBBURe>Uw=BWAg)Z~gEb^YRsJjQ_*&>STa`{(?}j
zO?7BH(JR%rY4;@apT9!3k7Tc;BFZNguel`VO8yc#nGYJ9Q8O^Oy&BQ`KksVo{}xQy
z@kEY((Y{qL!-f94Bhu9IaGJz|m1-`DLNdqbKh|yVTvp5DJCLZzz;7D;aIiZ<gsdsR
z_U)lGek6z2i~n72leBgL^j6p0-&R86X|EaxH^K5=>&Ig=x*JZiD}m<ES>~vIm4uk6
znPv5bhIV1=$5u90u`7)}ztwPDZvo!xhVjxvp}D8wgno_{<BEXG96hay2X?sBq|Kk<
z>4IY0rh6ZI72{f=`9l&syn3^Rq!E)Goou4lhum`s`R_-oYpZ2n7h(|@9j_|z3|D=t
zCDgBYk^WP0_Yh-BrYyb+e}bjCf8{ckuL81Lqo=REul<639>kMCCFVBXpA7iQ923p9
zZ|CVCZ<UJJ@4yyv`$>@I+hSkrETfb#;{T}nIvz&`S)JqdEXE=#uz*?tH`QpDA4C&H
zUq`Ul(zSFj3AJL{XHPeSH52KoTi74&IX@R#oSu?)ofH|z!ifay{7q;bD99=W$9(6u
zwhPStEQkecY%?*~+Y;#2n!=3k!@~#UXG<tzy^q&3moBjq`bZzD5mkATD!t4hULwac
z6-UYVi47G(EIKquXvlSXIfQ_gQ{P0xlc)L-owvpEp|)2vL{VE8d%Z!GTyj5~!5Rk-
z3fO;$iN5yx^2-KK2KKAR8gA0<b?b9NA|!Dq3JYFt*^)4hufysoqaY-T@O>q)wq+k)
zh}D&3(D@VVw{KS~`G?s={YhOT5|$Wf6x1GZ&+}BeH3w9b@ZYQO<*HWtSHfcj5Wsjm
zsZ+_PtJK2zue&M!4h_^De9!hLO#_B|Jfij&#JZkF&%MqVy#@~^GVs4WY|A9?9S4T*
z*lKZzmON{d&Sbac9g0>m`8SC@;y@`cK`Nq3wIql<#rF{)vP*trdNf;EW^pm^?bvsI
z84p+6Js6<{k(5eOkkOdps`rA7n(w|GOZM9J^(UZogqel~4gp5#=)UFy$-BArCqRRE
z*?-2~dSfmi3>pzg?+g%K@i6g3guUyVdp8&I3H?YEq?FNqu)4zu)MnDsTp}Xg&8p>o
zjl>nUh%wg{YAj&E2>x|}tLy2g>qQH2A**!rM_dx=;zRXl{PI88X0;nW=utqd!|@he
zO?HrU-M?6JAHRq(XvSx87)x+V4o@`9x%`&6E}Kfy007B;?<=*J4#g=jLi5w#xjDP{
z<)eYzhOG5=>dhFfWd9~umqLkQUR`4()UW)#={a539t3~}$#RB15z*pkPf%+F`rM;J
zN;^&u)82**y<Tz*B*$Ul<vXu`1C-J2bmy}Av{TiGBEc?JpBLTsF{qvdCz{3ojF&3f
zOWt>XO>7(ZafIx_oYDI4Sp>cGS4ZF4dEnc+N#Bil*_b)gOEoA{5^X<Z@E5X#uWcx<
zC+~a4X2)5TfN6}wbL?8bh5Z@6YF&4=IRl)&)Jao(FoG&uIY!;h!Fyp&0~A?uvc}Jq
z`pQT@9RZi^`vY|G1q6)chM2OY?lU1oU<p~Zdm`W=ruh>f<~{x9fR+r6Nn)Z8mD(W4
zW9jZiDgr!@aAd>?a3OxF;kSdav}MgJs-0m%%7qC?FSj<)LT`{n=bBH80Kq0x7THfJ
z!Ok})^;lOxNJ4020H|GO_^D&cnwHyEJA*0(fH>4~eYFBW)u!QLJ=V?W`J`a3k^NF!
zpa&k6_KWSB=buEFcF6~F;8T!%NT*7N>lfZ2dgc^wyX1k7=2T#68A@0Hxq%NFnKTy2
zMYA;>tglx&Vgju27!yYnrK7{F8Po@BN#kS`BF+M=bj=e-{;+TFHLe$OvOp7qpa8Oq
z_8K-~|5nLqZx??zDa9h`q23+%`>-3BgbEnIC{#z113g}73&`jX0*qjk7lg%wB7#(`
z(7a`n=h64cIneT#v2z_#{*9KbQ|kACzLAE7=?Q16=VifRg6NQCim>LB-A%9zgCw#L
zqCGgAVSMoeuMZ>AWQj?#*>Coo-dS-8*WadR)UEI`B{j!&t{(msk}=2n3UgbINC~pE
z`DPlr+qxdrMTb_dlN_(nDIKD#$Gv@RY;|~@utc&U)rq9jR&>-VXMo+}w_%=IAycm{
z9yPW+MFXUgi_Cm*A7onPTFD)t5Aa<u0`!0B3d5o^;3B8>y`Vtzpo8##zS^cBxl;zA
z0<fLZ4n~_QHHIj{o#9!Bbtv4qCzS)nP^u=07{l<OKRvef+H^orA+oYb@7zecZ(zsu
z2aGh#9KULkN<Y7uy9W2qYqwVxigb%u@ue$%fqQ!nfGa3>ml8Hm1IkrqLAy~p;}aE>
zx+Fu2^*`k6FTfHMhPJg-U?tqIv#26<T<;CEhQY2JWEyDcjCZJyCWBF7yzOT~|8m29
z@4B9R$#Tm!f0u>VIv=a9PVvmo3v<>cdn}T9dZ7V(Rb9|>!XRAIK6vxQeuJ2gy-ZAH
z<&K%$JSJ<;)avaSo;W;Wu)AXazQB=bp#wgz@|@m9w3lfI&*2r>{yKE?A&5VOwuTj7
zcPHi)d(a8*|NYV|iJ2sP(MX3`5*8*|yNky&NaN(O`M2tgj7r4p{Yy1=l{~6M0|!^*
zVD9dCE?Y-~`1z@lax|!z>XyBr=y!-fv^*p=_i5{oQD7K|@UhHhW960QqsS^h`)#t7
zNdtU$tEO3UgBC+|iKqxn!-#>tG<IPJ)EdH`Ov{b$v#F|J>HUa^7;qO90V+b6sej?U
zz4$06_7v8I_Iow<{Bb}-M+;6qKmQikTI@PF>jeOwXf2`nZk75T_e8QY+hCa?M)}P|
zv-6iJ)LtMr_R!nE<Lofo@bq_+TB`d`=Q0HyQBv=~2|ucwmA(!zK}6tL$U1=u`{50E
z$=3ab<@p&@UMY)KXqLt+_=grYz;)aAX=phHGO;izI(m>MM#PV%nLausBqVV$C^a}5
z{<xG+f6DwN%XVLPY$fmBj1$fM3lH)W{gm9E&MUX<(cB%xK!+r}j)SMvD@RJ3_T$$c
z1`n>&Gmj*NlF`|jAK?M2#1TvSQF>?e$03w%=0VFp1RaX5Wg(r=kbIah1GL|1P&6&N
z7hGJ~Z|(9;E46DR=L;YqQq_t;HUoTu5^_uQL`R1yEy1%cqOh<ntm%`$CMryA73vxP
z>&q_$Hd6;U-00tTLN@Vs3T6ptj_X?K&2OxXNo!O0_i@y7nZX-ZO9W#U|5Z7s?Cs;I
z1u+BYxNkQVjq{@GqRyzMtC!<>vt(KDgD3v)n@$$mPhD~@Ltg21?7Z!tEBk%zCWJz$
zIxnnNhr_~@V>=st2G_rOk?Km@8z@tLT#o`|NF>Dcch^s~BXg}->@~V<nY1^RJ@lCg
za3d+ug|-)wQ^e#5p3mFD-3uc&o5uCit)Zm!+h41tnSDQMs;MO;`caS&j3q9B!1*!Z
zh=HJ@N%~JtOS;kdg^a@qDoK9Wew~g^*JUQDH5r!T^)F3(6GdgXQ4|0=ER=ZsD*(n2
z281bzU@3%x`t&nA?$U3r(iMu#g0&6(+N>{<!V?ep?vCsEB|j)m>Mvg<a*rSgBY>og
zr&EF>$%|vO+rD-r*YZ49d`T_V5P{7|#)F%Yw#Hx0M}`By6bzFSjJ_SdQI{to^s^XA
z3Cv#9#w#smIs9gn^``!}ckS&A=ukk|Ra2N4ST+&qy}?rW_pVdq7m7&GT@Z{7uEpc8
zY_2+sqm?q=h=7O<Lnp`O-I7FBbBEPNPm3B_=BhI-9hJCFv-NWRso0#CmE3z&DCt$d
z_?Ijrl)qlz8cXUc-}U}YHw5-R&A?RPoiYSUJ?7!PdGrSDs}3@5#4$iGBhM}}jMT%d
z&6xa7ByxXCNLN2QCKd~WU054mK{%-K5ugw=toOeS%AyP|mgmKy>a1@vagzRem*Pf$
zFTm?`Wz!ldAc+3uZPP{)3Q*rGVbrc)tp1+FJiE%DN4VB*dSuWZur(|{#wz%S%|f>c
z1z=@Ukh}?h^*nPx4MgfPXyNL}Hpgxd(66UFUe?sCs$rlXmg0VpJpg^)FSd2xGagxO
zFdZ>y&s|ul{de*|KKJ!_72{RjyU^V*NVmoyXZL*zS%Z40>7~4g^$Q;6gc>j#8>8-j
zKCK+jS<_oPqhcmzfqf?_7N&3nmsd@Lp4<~tCTv^W$7Kc8bL*q2=hR;-LhtJUmjI<4
zFxZycc$v43H>9JsQ|5rDbfZ1l7wuQHxlHCGbjP(ygm~h&$n7!Qq0^5qHD|baF+34K
z(5lN#`WuHt12Sh=A<+fQvs}dO{jZbpRfkSLm-ARZO49re@-NSeN4Knd%M~6E>hPw{
z7C7rF)#QrGWyO_8!{uT`0=B2DB{t2*4&iOBrDYz%l0q~1g(FU<v+_d@-nNcW1|^s5
z<iJHi!<cBhGD*vsQl%})C?V;bCQ=aT1x0kZZ(QexQT7$4LvpgSYyRZ)6bx~@_V^QL
zO&jE`ZR@ZZiR$VI%agyp-eyI&)g7P2laQESr9s3*0cQmh>+aQ=6*L}7{AfjPHYw=h
z@$5Nly>5dAo3$5tf2qs6VmrC5n|0=$78=AGe}666jbR!gO>Nc8;229n1X0In)GUm%
zv|fp;c)PS**hdK!ZN7Vp`z`LWoXMTLm<Flo7*XD@l$@L$GS%fLGpNwh(MnAX+**@?
zBg(U4l4rc^a~aaM8;PgD%MGesf*M6fA~NTPX9lIZYZWT)c7jvvxoz%sRM7iJOoD4X
z8OqXu+)3VZ3b5#K(6<ynni<QdPiQC29Mi6~v%?Ot3;m=48gwATMfqfgCRgS}BMXNw
zQ~`3H<To>ehQX1gax1@Ji&bqoCME{WTH~Wq6e1PDr*fhSjhO4DxWov~1$N)ovGhz}
zYrY33%z2u4d>0COs?5w{KP2Tm_`6Y?D=N&-Dndb>D`fjo92}%zO0G3El)sjbAq|f3
znhCG>z>I)xwaGqKqyPn#m#Mdib$hV}suTVy;N)w)D|_48pB5$V>z`0Mgq;ZOy=ILS
zCRv5oQQ}BXH8(vb$YXb+iyKx+$mVUm#a)ICaUP4Di3$XyD4fGx8e6QNVuXS+({p)-
z-)br?!MCCRrfen7%jzmZ*G5gTo>e^6o6@}V64JN!*eV!6NmNyPMf~Xw1y|6Z6>e5q
zjKy^6MwdigEUOvi#(+}B<U@D7*^A6-T%$&GJ-pog*STr|7Zmg4Vo?n7=*?E$ojD7G
zYg+@L_nJ#@bV(9hpHXR1RP7da5yn||u;CLTWqb((lxX7(_8eW*&FXEg85Bhe{3P98
zDq2%@K!wBR<${H@w*e)n`eA#7?Wxq@W7%2zx4K3j1+WUvOk_X>2}bf;m7fz1a{Qq(
zUGq7;CGzQO-eGQ6U#TtF{={~jA@bZDxyDTltr@tr)?yZ=xKc6irTlY@kLpePeX#}u
z9FfoNj@#*L!n6=&a9qj>hpw!@AVEnhtO29V^!NQDvqye%KACsC_*;A|)pK=(?Obd%
zZ%1^SeoNX%e%n%^LmjuOMt<*4td<Svd=sVMAX32c^+PA_xa_MbGF+aJnAFUNcx$*;
z83bVfAj;K@{0M}tcu43fU`XreGV5*@i7zo|m$Vb9Y2%;6*_~UjLqQ3Zc$MryrB+lO
z3yV>{gn<Al137B9VXo=^G+86N;Cf1B>0{%G!(vcg<yzixAksNcWkn{q<w)57DdYF$
zX!01*z_KECk>lsn#}RXdGo`WQy0LX__YC!?xSNN0Gc3w6n06u3+p&E*Bx{X{ux$Fi
zVfmv!wBaqc++_~&`3<E5nLXx$Nk}qC9XHJJ^e@mSHPuJlt$aZ;7wF6KbnV4dAtAs<
z5*#<t%;f2)r*wiib@vbFpz4rY>x4!34|`6Q)_H2M^A~xx=*q-D?u5Vp9Vq!2J_jTE
zg-DW`&g|dkE3)T(P-Sc8)*A=ru)aZQc1r@&$R?)B{-O}RleZn#{o;>Xi8-GQKAh4v
zbbh9X)$m%`6kcK%O1WzaK$rmB&!Im7Pvq|>6+DB)@5VG<i$rQO7erXqgL0diID*<d
zf^X%-EfbiRgil*WyNH#Sai+>Kl~4Y7eaM>hZIZpB5}tITk1j#{$mh6OmNl*{AG=ju
zo;+P26(PU0Q;Y4l(g^P@4!)Hvw3l81K9v<LOk0_V^P`l#uDJa|*+(xQG^O=Eig~pp
z6!mJ?wSCd~y{i>Fp@J7A9XOd|%yOo)YNv{l!MPw2vqbpDya_w1NvwF!t#*1}|8}y~
zqA{Y>iJ4iy%Cr#IjE5Eq|Igw)rFss#pPXO=#V~rw__c02Fo0tslyK-gRrGl{jo%1t
zG2e(#zrCJKXo~X`uo6g%et2x0rZGOA`$dj=9~hfqijG~RGCi#JS9AeRirVY>1!=Tm
z5}tX6FI88X;#S7hUwSu>snwd!<3k|(tSB9KHLiqxH9QkbIW~b1P%`*QWVOX0yQ0~C
zhi4=u<9q0w25pCqFdC0YBhB>g-gFK>!#V!Eu39JxR_9TzKRuK7`L{H*grSjJv{=f$
zwXsvK(wyd}3FWqU$>Jb(yy`lH203YBIcXD``OgOWHX?Jal*eA8aTD2X_l0dCH*SQQ
z^daSBA!@?Wdm^~A$As(qO0aQw^|EDHbq<Ydr{nqLbQiG-9Kr<}xoS0OG+^{P|7F)~
zYaTrc@rQ_0lB$F1@;JJ1hL#G=(FWCMmSskR%qAg<q9t&y(mn8d0<ARLzTj6ZUrzAh
zdQwbomczWhTzx6>)_&1Zh)|H%=zN9Z{$|9O9$vY8KSu{Nu#lrB!%TNv{Urk$>PM`>
z+dv0}U>N@8#uu08FOJYh##kh$gbe;M9k5#Ev)?08Vv;a&Y^^j@EIIc(8Ltyw0HL>(
zpoApIbDN6=7yG-@KUJ^%zm2_VQa&LQCizC4U&RzdN&l}(3bb52_EHj~@b?Gli|Wj2
zaw*<b#ww8|o-ZSXPSqx<0inTtRY431B^9{J1sl)i_6gG1!;u(2K8<BE`9?G1qeC<~
z|Cs+%d2J2}J9GCgH*MURS^jr`neL_+#qewG;0Q2G+p;-USgyLaEHzD@VpmnOYIHMf
zrh7n@mKg@hAM018BuQovGr!UdMpqJa>OEUM;`}4=XNc;p!6Ymr90B8|E*#DMgYX%8
z<J)q0My4!@MPA8+V@3crY$`IXWl2h-{ZLRLP%Ai)m|-DM_ixoYaDdaEUYte^8BdLN
z8_<!>Uc`v7MrZQ<rymLPOI59&!7*9GyWsFvbzglz)Lk!$Z&oZh2pT$QtiDh|c!wiY
z$>pZg15GSCC-Y-v@{v$0L@diD<JB+80sVPR3o+<~v6&BlM<yDEI<t&1ex>NAVsQ`4
zB+8=AG#>GGXzInCKpR!F$n5&K?u|v+SZk6yY<f<dP><eO&36>?NYtz0K*%%++}E~h
zdr>h4jeC!I_=PtaG_{Z%x(Q7sg7tY5I}HjVnn-Rnm#~P+R1;?#dfD7qdBSOGCaIX!
z(~U_@m#T5Y;IT{1g>U}o?B@bj$3Lo--y~>8HoA<b%Ws^+@bkpvHxl^lG=Kjb+3^y8
z{;s8)&}nwm$2e5+hxx7!ub7|k#DboAd?~{M+ciui63XR&0>0|0?qW(#&gIPq3gh`C
zZr-uE$eeUHZ;7nMQ5Z95{PbHN^OeK@hzS0a*ZRG6xE!Jeu~^q&I|V<Mg6AkJw4tZ6
z{*$27P#K}^{!K&Yleb272BCTuhid`|`#|*idlU|XfW*(Uga|00_Tv)tne9pIM%C{s
z+=DP6hs5#G1Yc;@uJU+fF4xXVv`X*73N=%x*H?ajDEf4AFu9&>gO^^r^_z-9*Xb^$
z2)Q}4RxDbNvpaZBY^qb2!*#Uh0i6UW9hdj?pAJ1T;~Bb~$cXj-Y-u!Jjpo;ocj6mE
z`~a`(W)+$87oA*rU?k}t&)2n9?J^V>;|DIefRR(oPWn&L7eeifO@rE3)9dN6<P>ek
zUk8yayzt$t-!`rk$`Z3zk`RF0i>sQ(sh*ijhl{#kYCbkQ+o3@Teq`QGM-%Z)&Ei{R
zw$+UXF5~%znxZ6*b56g}mLIxuU>(^aFEW;Qqq$~pzdcty9taB|`k~EYx@5%9Cfmna
zRiL*DOE7)*+Yl~n4i)0a1>YPQ>zq>Z<xxhB?L?EwEYl8E>`77h-%}*Rbv|~kxZs+%
zi4an_M}#PRc8g0pH#Y*YAEkjV8&<bDWNb;esw<xAUcu(dVR_;+bF?sjMWX-_2ycOg
zTP2_bmA_Otl$bcUfnz37n{4LSYC4^=qaIJ5!W^UUJ~vZr(Xh2;<hz0AV#tsEeD%xk
zD^-!xt^&c^7X2(HL4$;>A7fEa@S(kREuw_3{qblp{axzYt1+Iz5g$+R`t#{8ckv5(
z{D<M4#IB&{9Folmx%ASJJMZkAjoGftV2tmfF@Bf4*Z=T_eiN`*D_zx69l1!N5MTbb
zIg0-4z{0aPCGdBd(ZO!G$#CiJZ`h*BC}eZ^de1M&SnW7a2o=jG;EBBU{_?;(0rc`y
zQ+d$na{MoH!c-E4AO{=Dr~>!JWVL?<F_y1=gv$~l|9O7fP1`z*=cqz`2V{vy@-$yb
zn>ZwJYj1wD^WE!ETf2})MmL|-7$se|xwgvN>55IU)1S`kp+OqXCZR-5${-8xUP}cM
zs0#hFTPL$!t&H!7=erg58&AY~;^?h?F8nhrN=(9$*cd=;t1g4(yDWml#%K92jMgSH
z-`m|59sno>OU!?`%0_X}Md#Y1h{opa82jt8`z&n<LsCTKN6fk{M5){B+$w7?gDt3|
zGg@Bmm#C@k9P;_n|A(d_1JH&1WRAm!4YK-s5rGhe&J|Iw(Lg%TIrrsqOnKPw&IOv_
z>um->z3oBs6ydFo%%_lbHn)|mrm5msVm_a_@e4U}1467R0TWnYYj`CCh2?Srs%Nds
zrGTxQ;O`17)YqN6s-TAZx4&YWhwky-8-yIE(@rG&L#QNkqG-_<X8LA@gae*(9T+`0
zU0&m}7jFyBOAtzDxpqJ&$TNC=*$$h&EAP3sj%E3sSip98YkSI1hj6{Y<fq1}abDIt
zzt7UncM?Sd)g{(ElaFCbH*W{Ulw1NCEYAP_#j|zYlf3=?`K=(Pd|Hr6;M-WFYH?Ir
z3j^=dW$!w2x1Wn>N>vy~4BdQ#VR!5Hmy<^#<`^%?BM5#=%UmmS+?(x}i21}}*1-QY
z9n<T@VW4O=S$_u=0|?^1w^envw9%;p#WbvLcp3j~N2oyW!QtR8RTZ%v*oZE(u%lR-
zJYRZ?EEAp5h&DC>N1(obtHj5Uy|)$o7m8DeqjKJ0#0myr-DNEGogG&<RG=l_?wYfI
zKAb}#tNce@_&cAUvjU}j36s$G(6tYvp<_y*2)p@?LnUho4nS(#4N8c(ldXm?kJIDA
zA9D6DMV9$}JR2v~)pRwj)BEZSHihkx($RS;TNO|`i%|KXmXX>-*@=ygbpQ6HA9sDb
zDTJu#&oCz-`4&U;$&Uz2r%tM~GQ761W9C0TKwmfXDCu)Q06F|K%SMcdxjIZ`NKlaW
z45qaN1y}rExd7GvD$PGXueau;Oz1u6=eci4lLF6W-#6dv;d+h>1T7XNh8kIiV<k|J
z!-2S*CshU08scqe;qQ~3tJ?Q(j^j)al7<=0`)Xp2HI5v-IWsP4;DQXG&y{Jej<Rbo
zd%wk;K~(c<3u40JiXk3Hv6|=ncw5E$Le6aF?Psc287OzQDzQ&IS_)r2v3k4L1;)<(
z{45qoMl(#f)><;7boWBU%ldLI)iMF0NY?l_vugvx)E^IIZiIXNu6{0#eJHSKR%ZCC
zrlDgMqbPHXyQ*c_Vly%xyonb-IFQC4_9m@w+!rM-$e2?{Q>1j>L!feP2i!HRzPXIg
z<yp|XDcMyDjP?217}9u<fJB56`Z-Hdp~4`vl0)qD8IgT^{+EZE5z5#Gu@M9MV3~hx
zX+7@Q!6HJXw2X=Q7IfRu@>Gd=R(-NINj*J35Q4_P`WewTp#%ArHD&dm**>t9m1l8C
z#rg2U0-rPFOzEpdU=yyOfoWM+Q=k<92XT+*{2$GIRd5_lw`7Z%EVP(qS!kifG-76E
zTMV{n#B4D$Gh56I7Be$h7Bfp0?|gsU*tmNa{(aeqt*4%fu9|u1={o0Ro=ltmd0#2=
zkuB%M!sr<jhUx_kSrk6~nlBup+N7C&^L7-Nu)uT>R~v)OC*OL?Zd{#aND&|PnloK4
zsHj8B;tMsV7k~i^DWl=i6b1&~Mc~#Yp%b~hg)DEI{l)w8p~gE_W~8ipjT$pY%7rUF
zNz*Un4wYW?Le|vqf{C~Bw3p`R46~~Z)>rx%G0sIb?MUO!-|ie`vf+0{U(n=_uv*+a
z!Ua!1Vsxh2!T>gF-!I|=T1yF&LZ-f=L1Z07<J$}jR@J?0$xjvu!k8p6G6_gFJ4IZ6
z9?X~$MQgPQ%+N0wHdB=ybO-;KO3aCCAoZQwGZT_WwVW1i4WK9=x1HZ<eTOu?D^K+!
zp}cK1<f=TI-SlCMrZ@POjMw7?rBht8$-CO=w$sEpd^xI<+i|#hOS;#9kgvCx)$~bH
zR`X22{_1)W)W}6%gaGABThe&XLx2BQGVlm<9okn(U%Sx$-M7;7-}2pGD<w789Lt#S
zF02Wy0zDa^9yz0tD@H~clv8!Xnf}2TSfV`M3XV`PpQpr(P&q&OAbTlUROdX(HJ^mo
zY_UpVk3plj5#<$o^1b7*AjQ>jrrmV8pPjsi;enKwlZA-(8!u*5Okhk)$S`vg@JsMi
zN=rwn#HP{{lya@a^7sAeDdWUYMtibO6AP0*N^XGJ2P!`oX4!-hbngWqic@-QR7UT=
zHWNlte8*6n9e7mtyl|>Dr$mG$k9n7oawBpXE$8F>*t|*Vacmwua0>Kn5<?q7QCb;s
zEfeoDUU69KE*58n-4&Qc%b%>2k#jX#y+zm{04a|OX&ccRg7@{h8D_i7wK0<;@#?7;
z;`E<wjon>_1Hd;S(HvPi+G-ZV4Yx<G!LC1POl3)Z87tJ{-_aPfB8&F*{{9qR#<kC`
zYcH@aF>l&m*Cy!ZaZfmd&@aG$I&ZmM8*E|n5r+3#Ra5pdi!AkVq`oFKV2`v;ZDoQu
z^V3;}YKbPPKoEwJzL<e1g=_g8xic!>S3Eg%0dyk-V0v=XrmFIWaO7-n@9LEA1dUNJ
z?q7gG6D|ClB&|Xww~tM`-_jSDW8ww`7jrnUN42gP@UP;&S#%_}*3hc=cQXLBi?39_
zM1*~!aoNV`=9-(5{<;|&NFY`iy*i)k@-P)RpnOt*bQL=BkxieNv+1B*g%JZH-+RwP
zKM|t3kFzt5PcS1M$1F_*8risjRoavS(tRmRP)Z=2w`HeylnGhMc_QIEi=F14A(FS^
zEY^Jh;7RGe?wFp6=+Ao-6|jl%C5h}W4}0?})jE;C)Q1M&6=$gs(wl*+_g-m)em~w<
z!dg~~61=m)WBkEL-PvYuJZEa(!F_#JBtdSjJ(2oLX1bd=O0Clo5X2IQUr7xiFYq}3
zOhNY&s4w##;PC2jT0ASSw(EV|)M(}2#lZyrroW(a!kHtV0#KEo$GOtcB53QdI7E{D
z<SO9XOXkAmk$C)&y(bz6_}2ue_k|mAuVx$r_|Tizzj;Qtlac3=mwoyEFZ_iW1B{{$
z#%)9v*9nFyoAF>Cz1XnTLmAH_O>aBt7c_PcCZ1R>xqPDzakn|UdLOFNzR$j|J+*su
zv%XBRPIkBfqMye;#hD}x_N+n#{O8Ri$re6;1l6xrd@&mQ2PR7Y2cKfhBSw4N&-dZZ
zg-OOX)b1dNmP+pOI{XtdY`U?Yf@(3m++s9cX$2(;B!rIrdSlEW%X;p6hnIH$?5DUn
z>=5I%9>>I#?cp{bR95RBk#IAHj%DQJ#Z0{H!G5#7srCNl(0VvK6Igz)`MJ$&_#Hh<
z$=HkCR$g`)?8-k#!A|m`6Ei*2&_=DxeAYglocC$XJvzO0ExpHjTvc9{&)3_>fA+Q4
zHUKJPx<d|NV-|@=NAZzW7j4=cuVl#vaB&kem$GAnBX>W-_+m@Z9i!Nt#SV-_+?0u2
zYe>Ms9e$kAoRp=fd%6=xNs}jR`y$5H;*T9%!-(bUpxQ_r;o-2gq6`ga?7g*rp?^Zm
zH?*<2uFY6eQGfJjQ_oJn>i2Uo#jkje2B;-=fe%%7XXSTbxd?0b%(Th0tF5e*Vk&Lk
zB<;@`g9dUG<Sn75Yxh?-voe-H`RxAT-_zB+*e*&4l&&g2RnybBSWQ0GICXRRwX+D{
z-YVzLVZAT6e3LDHovuiDAEj0WbDaETInm7m1T~e~#yz^$bsu`V?1DpntYrY&T<SQk
zJq=sJg_{RL`(wP_*W%EI70AuE{1lVF@O&D>g&IDkIz$%g?hC%R+is=j-VKMb9jr+i
zG2&@6Km5ZHd<-Lu2$6dr4spadMg8%n&C&HRtN3C5+3C_A-GUkyN{x)P*8H5OjOcA(
zB*}VDZo^5>p#?V6XmTSxH~V6*tc0^le);CsAN;F0TDS3gUS!EtQ`Lqy7<{^^wAnIp
znTY%KNd@mD%#N_sLG*R@YlP9EhlE+&#7Jy_H2P0w6574csxQ<`h}7jQ_wF*sSj)0%
z(4Y_{LrNJ8Q$d?D5Wgu!c##211&PMppT5FW^aSYRTwSX?VQ1@dWvV2mDCJ-|4T(W&
zOoO~x#L-MO<(LKrwGI~;Wg>YrD5+Bk#;0?{+nth%hEcJ^b%m9lghjgm@{c02U+G{L
z>}0sV2?!P%whWY!>g%XGWCpjjTbl&x)6&t%D2$#dRBO5kWps&qe#PQMV?ro|o8o<<
z$7ko)_*3SxjSFjAA{}jsGRMe^zf*arLG`ucU7K`R;0JXLog|tk@WEP<sG4jBXI5!h
z|3MapN~58Bc{ff2!!P}83uPzdBVKoYM6a=nK~pwv?=;)w%tzQJPh~7#JG&99WT|)R
z;&JLIv`%YTv1VqHyW6y-ksqLk(nDJoTqs-#3_+ThY$QM}5FHlYSnFCl5%x2y;Um4$
zJ#3+LY{8V!tuxVFZu?dmf4AC#RrA<n`TfV&un`CBevF}B5j~}c*CAE2orG0G-n{P!
zw}0Hu1+u2)CwGTPG^25baeqa%7ZjEE!LS@VC3H&3q=h9{@Bd=p;Z!EsQIkQ?)<OnP
zTJ{&JUtr3~4BpOt*E<eS!u~1J@j820vCOabb$BJuYh3t_TcmM9m55k!0wC-YxRonj
zyH74k_=sO(Drf=65W^MMUeck0%Qihf_q+Bmj}j}v#l>IY;R@2XfC4DoAlfkh<dWfQ
zmQVl!DNFOUVO+KPb|!MdbdGhzOD|C`F7!2^nHCmp``n$7Z)FhuLMhY<ESuci$HRDR
z_px?%@gWS>w98C}qq?6`D=b5sleU=O`onNRUmA3*t*x)GuDt(V(lysBzuPCgxPKyd
zU=DBdpaV%rJU%`WMoMrEwSF@E@{%7dcmz>&vbJVmVDNd^#is?^jnzT~iyjXl%=gts
z+n1LYFE20qFHaEK%;%KlL^u)F^l{BBN(kTCAZ2{7ySqDmt#a(2-f2IxI-T9YNO~$B
z;)!uTw&QXnv?p%Vc8H8r<$Hrhyx;${6>I*7o>ZmU86tTft>BQ!2=W$8l5OTw%sY!X
zOJ&HDZtEo$g%EM(fo*a5XO@`LWO<?GK2@AYszQfz7G7$h?_5(qC~{xO?QKR^&&OkZ
zrrY|{8hRNXB{HdIUb|&q_Ek!Z=yh41e`}^Q%Ae7#H95VzRwbTqt)23lTVP#>P8pWV
ztJbi;KBt);dTP6OZ;LCAKeo71{E^|cKB*yp#oLjtp5r+FqS-Jf#mJXviLY4dJi@HA
zS-xEuuCX!WZIwBrkVji+L08iUVuWG|3FGzsPL^V9cK7&FV}7S63|Dw++hN$@P-lL=
z?{;UFg>kGsd0h^t^*qmDdV7oKm&T+AzZuC2?V4BiS7LI0aj`9LUk0}Yyxh#@(z0EF
z=^Ii&SzxA%?3pF3VEK(rF-cK_)~eHkNPPOR4S7Sgy#0Js|8ryWh0cYJl>F<eJb)!m
zc>{a-_0X94<4QT7fwU$7oO$2&`(gRX+cSmge7=M<8=yThTTV{2K0O|wr#<Sw*$>p)
zqvVsh_A-!Oyo7GK$K<ar4AIv^NzL^&_ilzM89w*6Yoj<=v!3~Jo29b_kIySyhMo|`
zo*?zL-KV#lS8iCxsw6g=RD~Cy>bDwPT3LbP4L~*DHP6oIyENzhFp0q95eX%TB(T1=
zPgQ)y&j#w)q+O3t+f@%MJ)!j{eAmDE_-vM~6x-Q8P<|GE+V9+7ARD{iNXJ@x5u)PV
zv#aYL40b`AA$~e-Dm*$f-G=6aM}p&7&0?{!fDSoc*iO{t9W0XuJbKRCiqA^^vNOIO
zBSd!XS)U(JFzeTFvKP4Zy1K`<lzfi=o;1twu-s(tqdcV+%X1sMSXTxGTg-g7Qj%?6
z5Zx}cJxhgzf!4N+y)KGuz-K)-gw-o4ucxyiaQld;7==^p+4Gby5k>Gi<d~fuBHKYB
zx)Bs5*_GK@JLUb0WEp&M{U+B?l|c>nhm)V}b~>xFWVqse;%7MD?vg_>lhZD{lP)8%
zw<=kGk9%+CcfyOig|EuEtKKI~7f(=|nzU;(j;^f8=&?@8>mgm6+;7E-$AA+Scj;Y}
z?(OVv7MDG7>WJe%U7zBdwrFd<t!Xab+g5ViwroMkZiH0T2ER=@Y|DQS1&o@X4Ff2n
zU+O>EN^87T-Eq-u+*pB`c=Xj#Urv0odGm`fLY;TaFtk$U-;R5GIy{8%djvo4nQY5-
z&SpuWkJluc`CQAs&#7y_5KiS{<nOK{sjn?!E*bpIrz(eaRLexB;AO9xYE4wn;D)HN
zFoz%u6)-=jZyeOYh38Sb*($nGIV89Mo7drFyT{y%W=TuGq5^62N^g3rwVMu2%FjNr
zucgvCj;iD@YS|t6<~&<-iBg*-^c(P9$sa_?cpQZZ37ML{m?cxED=<#zcpUU{mIr>9
z3u#1?pnm*zI`4viR<f+MW+7hkv+M=iiW^TCDyOKdQM9;APCi*2EL~5m>$Zdr$fFHv
zkht7Mq0PR_%{LxBPgKt%=RDc=ij)WBoh3C$XKy-=R3ZX~_0}?sGgK8Rxxrf4NIVvm
z$kWh*^zZpEeFxh=z*QyYA<BA0!9lN{xv827@mmcIX%2Q4aGuApSkO{Z_uC|iZRAM=
zl6dz_Dw^KH9&@x_EVV>S$eKzh2WXY6$G+N2FGh7xQX_(3oe`L965tb!s;XP<K$sQi
znjThA(x)WGV!te%LqLe=wf=R(p&=Gv`|lVFmN}(0c;e)o!2GI|`5dGN^d%4tNgwTr
zRbWLu1-?`ZLn(i($<H`pE5cbaCcg%g$E)_T#f0y#t1Xst6ap%tX|xAj$E&D>A73j|
z7;K3D0pve@NAUQoUi!U9ko@M}h$+Hv^mFn&hT8MFPuF2^x!OAgv+l;?z*gY6-Omq%
zO(up|ZhJlcRqco4)M>Y0??!l)mBc4VJtCiC1I-lo2@M|H<CWMvVKsH6L`DS8sKNE0
z)aJD_bLN9%bdX=)5$Du!E&<RxTyM)e)#@iiO?f4l3ii#P#^7Yq2elm*zG;3-D=MO$
zdg@QW-7!l32oaUT5)SeB_9z)|e_W2+ZQy+IO`P-S8QQKNJ^gh$VYT3(5kZ#WNcbl-
zwL`1fue3Dc9ClbsIRBtECLe<M;JZUu;EU8ZNk(+`TapCAV!l%<Y~}SWDz~2G=&%JW
z$}&;X<IUq`MAU^c7@MR&yjXw-jksa)%z?AYlYWmPjrJwzRIE!&Pk|mjk#8qQ3PkA(
zDBKg}V@sl+vN@4VtILB{x+i+`NLKGPI4Pi8{Ilmtc{A{5oYm?foI~e>Z5Vd}qVJVm
zRH(BX^~)QVVc&xR;X6^q?)8dFYyNndJcbN>U#*N=XS?XZjW>RhwI1t^{8eaQr=G6l
zs92W2%M?SG9iAT_9oEZJmABdXDeU)gmXLluMSAml_nwXSOTMf`<g}cg`)pFZ>DBCS
z;64?3lHKTR&W-CpDe)V$?>DerYN=0iYZ`Kc<@%7qofqxf%+KUg*WQY1Hj_QF7LS+p
zE#bYc&9hH3-O!0-=&CT%vKH*?(qOCi_g{HWtFis{XK3|VzjpZaCOq-7Mo@A@SMlHK
zafceGu<v9xZMOd1W?)C{&44QBL+$;5c8uQ3D%0EA%Nj9Lea4EK&+-5Lv{hHOSmc1?
zI(3jSv%|A<aZ%Zk9(O6{?-sl6RFVBwC{#y-?rp{(<AfmRU}J(p<8@;K2}><7L69=x
z0?B`wo*SRg%aJu@Mtsc!kB<7MprAJXuW$UH)>|sBQ&<K6pf;)FWDYs-V5Dp)Vur}<
z=^?x({#}bC&#LDDL+Cd*9M<3ZG|Hz%oH|^nvx{LM?MkHb-omBAH(tn;=GV!+toX>M
zrF<J+!Vpx3WV`+aWKjfwsGU8q3SVhI!`0xv$OFJHyliFi8#`*hZ!<Iei_N6JIo$W>
zz4=o=zvEfce9{*KDTrXU8z!icKM2C*jhqXxkHPgVA59EDc6n}8nbvn^lS2WmZ7tYX
za1NYWG>y5-#jL_QmW-b}@L*AF5B3y<bca#EPhO{tAXrR=*RbbN<7s1Nr3oeQ4k<&J
z$uWza?N-(Xh%&~|9!I&>L~pQ|8TJrIh9cP^ZR002?52YE$}}E;i3C!hc2lCWEMXiZ
z&pYtOjFuP`V_jUmEe%d1iY{jFBG~iXL3J*EU@hzK>X<3EeW^Pkgrxv{$)&=mMlw||
zB3v(U77(P>+n!3-;OS!8AiUeGK#dMq&`tf8lWra+78a&@paWItlqx+XBK6`iO+B^$
zYC2UOdCUP5Qyi;XI982Ea0{T^bPK<HNiPBlA$b2jHO*bt$SCJV`Pv%jwra53c#dDT
zvGdY5_<`u%MuruuF#C|XQTFjTpU?}QtrjnX5Q`=ovn5)0(?OcUt6*G_G3I$vYJ=EP
z?~o4C&VaKv=?|-rD=#J##KU4yclP%^i;B<LVwIuibK(Y_qS<S?*5y~Cqjw6tQRI};
zR|?+XQH=-=R-5A~Me-Qjg4>t17g7Z)Md>8j>u71=9s%?HCpPhOKLUyp5SLpDN;KE8
zLim9bFYtk$p2zhfXR|!%##HW~5n)heuiKI*=wdXm<e@4zoh$PD@2p<4>3p7>br@sF
z@3ct4QuscMcD~PGXFD3vwF3<E^o7WjXMHcF^Y84mo6Dtw9(zmnm8qO`-s@s46{Xhm
z<l!N(B8jX<7Di`fYa^;)rv%-?V?kFfvX%XI$eCiuxa>+SP56Q(yg2uXiuW|_em=_m
zt*uv;R3UmIv!lIx$^46Z)0*}uN~RSQ0J5B6D%X76UUx9xbs}_b^BxUrcuIrCtp=yI
zOj(ev$1V)1X{wX(I+gTCLuAZMO-xo)(#T^PpQ^dd(P!V<FEV|;oR<|0S<jMs^KVCT
zqp`^AX-8C|qlWCj`bc7wdEAh>S#Q72w<HSp8+K&m*3D6swcT|-TnRXmy3>q`UJU*d
zf-_IYCW`V3v+%@Qizs`I+fqGg-&KuN+(e}7)V8dh5sQhw`C%cv)_s#~?%c1C)~|~u
zbyn;x&BxvjK(~F&Hz2HaLt6tao(8&_tS*v4#FF5KlLJ5YeEoxk8L}sz+Mgec!8-m_
z**(DEnt~E_H$wvWE-h*0PfHmHW!cozgcTe3Qjt@>w|8^Wn(O?bI61}-MGhpqHJ)wG
zjv%Z{$@BJIBn%Fiuf4+${POdo9_M|Bx(Cxb*~`WH=(P``{AtyOrp?Lxu#t!L_qkt4
zvv->>dl`WZRD$#Ek0Z9RR<;8O*=c)%Ek%Pwj(^yLJ5nsMDDAzEe$d5j`!^_QH@j>+
zK_YvsIsGTWmtQFcSUQ>T4B)C)qrK#L7=z3?A-18*g}9O**oKp3QF3lJo)T7im?Emq
zJ=~5Px(%EDq=s$SAFhfzGo#-wOy4iRuBm$->n{$zxH|d77g#6L(R6oKg;(IX_n$Ux
zx~L;?=4oj@jy^hfk$_tbeKFHK-}05aCUjaBOT(JCvM7d?{Tn(Tm&g+1wzV1GZue(y
zI=y&tU$uI2S5i<SU39snKz!F%cr1^emnMrobh^B*R$US8I+~eN3?iBdiTY;(@#;x!
zuWclfr&s~m>2r&n4p&sYl7)&d6c%#{pF(wN=lv)sLX!lXH~(7BCgF3be^HS45%{@a
z`~K8W;31O9Y&0sGZ1V4K?lx;@OypQF|Gj8*t=sl_mwg}mPos<LZ54kI$HrA(pMiS#
zK(y;Y&&@sZwnP-s%<hm+F$+trx+nL)a*9tT7kxf=4OO0(v0M41sd2a*RwF5(hI=Z+
zxqhd@*Msx^$Pd1CpR1<u5^=~7VS$3SBJ=V>3(Zi~<QSJhbu=MwwzuAv>`ETIEUp}L
z#F21#JqA*BXcsBc6tlJa`Ct@0Mjh29dM;5EAkc^}1>E<oe_r3U7{zgG+U^dWvZ%0d
zeWfb<VD~c7GtV|nGTC#O5}E*YWu@#RA1C-v;Cf7wQaU?*TRjq@>|*6OS!@<zmHrQl
zs-f}63S`XCwfONkeC-QYL*)c`P8F11_xq04qb6w{by%&mhdWcD{6f;x>dOY@F2p2w
ztX%KKC=-v#17^aK%W^OD<MsPA!cwRY#QIHKZ(BEWuC}k|@>e?v6nXKvWd|v$ASm&V
zlcPW7yO;&P+)wBrc5u;`-8G$<D){~yb3>>uMFL19(bYb0|3U+CIoO{F1IpjxDrL)S
z+~4kZ(Lsr)zwHr@<Rpg8oJd(JkUPpu0b*;VSC3v+b1{#oy4t!rZrc?cBBJ!HEauGN
z)fUIo*7HaSQ}@RM4c<g`Us!5P-~JgKlZYwumFGL`kf0nue!uhWk$<^CP>SLA9V<Xy
z@>Dld#Sito_gf112JH*c6oL<cO8a=EN5-k9P6d>({uwZi-pqc7OX(}Tq7*<ItcUi^
zA6wX#m4GAjsk8Nl7Jxzmkw~EdZc%HPHr0!|<sUFH0rj&LH^vt5%vZjq&sFV>vzM8M
z>VC+qth|M9@}IDvjG6+N<q*WJpwneB#i>EK6czzD7EN0EiqjSiBi3jYw|H!Ugn$+}
z1tsEcF0-Hy)Fu5h)6I=5ecXm?e`n|Bc(ID}M>8k%X`2hqO4gYWIj`fb@_hnYP_f`G
z=)OXBgehu9UX^{11hz{1sN_jRCr(nB(j9F#a8F(8dNIVJMvJ`K5dn?30mjJ4NiVpy
zH~6$k@b+0)>+iE_s$^zP%Webi8vqQWD*GV=Wk*bRR7AxQnLbl>)k8izAGiT5C_;=K
zQiTpCdIuqWB9$x0TwK8U61?_3@_O(q%H2X(PV1kEVg#ulQo4eLZcfw|R`qcMIS3^%
z05bB-uzlz{@7NC+4|fD~5?(beEyxK>pB)=*YHGTwMUeaT+T4)zAn9`Nr&!fFVbKgh
z>kR?hVJ1>Xz}W6!qdh%q(OUcrlrXv2GfceU@WEl0ktjK=(~?aA5{E^MuoFgkH+cM$
zzZ59ZjR&r$<Gj5ko=|NX#^7%knC!GPAV)Z0LC2+e3>|a9aqjm|j*<mT4xW=7P68)j
z>cC1^61cMRO;$E5{i#WW>K>i>m0_b3zp|a?_T#+YDS|B}P~xQ1P*GI2;FlBGOi@}V
z^K+&I@VxWI5}l3RPRw1$rkn@ixH_B2g~+G~Lwm(QF>xk!T^;wZ`XHTJo(Bf~aAS(c
zhBBJU5uu?8F6`%<T0q0z`C#xcQh@#5^vuIWLBbVtE*;}!gUw^4mT53VX48Y)%5xxt
zg*HdHvG#Oy59c%auWbZMkDdk3TkKhUgO-zVq*Z~{=8z$eWNc`}LhJppP;av_1O_@_
z4%gllyoVPKq-%O_+W)Hm%KfVC*8XiCKinb9=TGY5dG_5FWS8c{Y-hvAfj*YS4k32P
zca`sABMuofdM#%_^TqkjbfO4PtGN7fxZcg=Y`b68X94lYbq#)EgKK(oT@rz&<iL5(
zSiG)8$Z8)^G4wiF94CTE+kBg<HV`6CU=m!6sc<;P5HjT2=`pWtT+~e5ITf-y3Lyme
z%358Js!B^N_z^Y<gLwF+AQeR7sDXh2h-#yLn@h*vnNf2kb&W)bhX9GyKOO-x?(Xh#
za!q(bD=m)2(-sk-p(1@SGzdb5HxDh|U*LqPk6c$x#n6cGJvC3BQLc0;LRJ{g$TD^6
z+(qyv^V!+X+g~(HOiUmOe8R%MIu&@ZTh9?wbAsE9>ErNp%bwp}ZWl)fqB^GCE3-A<
z577%Rv%K+bw46I<>fF6%*uoJkKkZfSRp>H&HlcQenh|^wg}it`I|%|KOqHnh+7;=w
zO&Q1g>WF^AHXnvo2>5J_tPZc_&5Fx9WN4w31BblDDob>pzKRG4w<V6ThD}2@7&oiC
z51O1kU1~qT632mshLFx=@5HXhZ_HuBV1d2Ja6A~GB;+8@dv@%{@bbV5ulQ1?EH+lI
zyvM?1UK0DV)+Fmbj5*Q0tcCs*W2kIyyj0jWN!m}&*bUw28}!|nDpW@bhsI6)E_tou
zEPA^A!+<;k9I2=6x47V2@7}+QYLKUr^R$HpN5Og;5x=VgCX11$63j4V8LyN<(MOBn
zX#C4??XLKT8h>)&2AiDq|1m@QPl->_L+2C<B@%H}uyG0s!T)Wd^uO8N(s83xHGlC~
z{_>JmwOz0~k*~gBN6BEL^62Qu@udKgpt95#pQXqZ<$^cW_4QS?)YMc|pn-wv>Xej}
zQ0(mGMq6E%JG`H_?}no%SjS2&xYwm+W#y$iEngnb!F#81ib>tMnQm=dU+qbGZ_aLR
zrmy$B94fPujZ+*I9oH>wLy)Sd5Aue;$Vhj7pZ-&5R;LZRk=;?z*T>FT<kqR+&D=1n
zYv}wA3#ExlaD5;!j5NIkU#*^md#cr7v5`hOD!sBKYH-&)O*X+*L2_wg)-mEJe=jMR
zVXMRUTqq|Se#QiXAi@z4{mI7xco9r-OeLRw5{$bVuebhaI^K<MgWWp^N}L?(r*97s
zV~a|c)+##6lbEY-?oFq4nm9a|SmHNdT14WmR+~rgm2rl;1VAAFx2GHCz88kxA>CPo
z<HqMM=O>%fw5UwuSLBrw%_Kf9N|~0&8}}ChvEWLBh5;L{<J-sP(KhMDAx#5sNLZ>h
z^rt_2)uwTw_#>W@V}F2s$2CaQdGAet)8;~-YM`U8to<p4dxIE{&Tv~HD-@ulMDENx
zl*T+s?+Od+a{qeLrfrb7oi39?e8%qq?Y9=Z&P0b9f{OHlAc0f$lpFEK?#ZK;)_(b!
z=Pm2aR@$|z&HjwqpDvt2WS8YFwdu%rR?!JmCDC$4B9lke1mYDo#7bVFsgH>YA4_Mu
zcWyWJmG%iTgbh-T;fk*FyxO6J7WN-jQ&(>&t_HBOp9h;`rl#_K35;q!2ZzkeO0pO{
z^H6H2FFxWrutCM`M*Mmd<Sm!I{AF%tmP7?nEUO&zQDh);g5j`);=S{7_;Zk+U+*%r
z6voZs?(@o$2&-(VC{K|1uCO6?z@Xi&$K%?&B1!$-ToJ<N!(z-;^c#<9_|`vl@&$CC
z!#4O_*(=j+c9m`a5F7O$KleJDtn350&d#JKH#TQWV0>Hulq+uNHh16w9i(~(DbGz4
zgWPr>u+?i82Sj_y+GXgFzj=;E%^cftIX{;^D}o!K12>&~{>h;j!ce&*y*Y}$h12ln
ziWy0T6g~S`zqVZm&K}b^9X$;Vh1fcFGCGj^UM77q<+aJYUEi1r^aE255<&^va=tZg
zt**_`0>}~aBu=^}%@fR@31uDG7SBIo=XyRZ<R6xDgBjPfdcIGmT&J@)fxpPnswykT
zk|P2+vz9>rlv4i9^y4iNFlEEc9rPnbjuwdFJ*O`xZSnYt?M`zLR$Ds`+EEx{NZPHO
z922k#e|!o=>R`Z&Ap7(<eG_W9teWlNAdD!!emlm_oxtSk-ggl3uW3U9p>8P<5Ez05
zW01yQ;JuuXnm(RYRx|s1pZ4}Y;^~><S4@tpT}U{uo*g{Uhu<M&wG*<HPs_}7zR?7R
zjj{J=({n7`f&|$vN^p93d8PC}MW6u8+&>^MDG-8sUHvYkPxjkEn||r&!}%4Bp=aZr
z*8bear;k;|Nf@Bz9STZ{JNuW`tfA*GXTPHNylV>C9*>rUzxn45o`Pw#d<>q4CCPkR
zDGl$NJf2*zfNmGow{KJGn&7Pltg#1$^sfAkJ9L0NPoYXkONBDiu)%%2v7*cK`jl{3
z@e5Zv)R0vJvrhX-RxX&9ZgUBKQB29Vv9WA~*^p(Vf|Hgu{ix}UyXhTp@-@9{GWgg%
zm6w{9ZqC*)UY90wt(pkizF9^L(bunIpzG5>wb{xsBtY{gCvP24-s*Uwo!cuPVzz~@
zPp;H&)7@m?G*H#n$DiAtpr9{8bbe4IllM9wWD_QX8ONOdRDCt{9f86EhV#Jbvu^=6
z6&H_mp>n{iu2!Kk77}7q?Js|91>tX5B_--a{&0tdp@;@maBx@8zpLlC;U#GGNoJ?X
zweH@Ut;Aw~!0MONkJN%aL>h#JIr+fE(_qCASipf)K;`{RjcGT}1MMfdW1iIq#wM!X
z`Eg{Ff5uBC7S@>A^>@dXWgD05-dPkSFH_Z!ns~x$Bq(8!$dwbOvXT;}&d5<3rV_00
zfO|L>B{lUFfcDkdWpN$N`F14)6A;$_Rc$WUT9mnG)i$bs@`!*6AJ8a!^ix(f27txk
z^j#G@dAKf`c+c|~75tibnODgubY0hi(v<m4s1%Xhmtx7Ns)+*`_+7muU8n)W0|f=j
zlwevSMpweZip5rjBP~V+c*{2ooM*^+a|%6=YAv=d<=-AE@8vsY&g71BD(E+AzIvVY
zNMtG$pG{q#(N(z&SL^r&zyre7Tyv^QTA0GUhIc=VQ(S(RJ4xR42mS~exeE!&dFO|D
z<L<RTq|lFmA$?|$K2L~^t*YXn1;RW~gLKgtlDP39+bUuZEZLqO<pY#qh#>==iUMxC
zjVxogqDG+Vq;6(FSU4tkSjF1X!nZrb2+fxS<dg|}fV@y!zPRysyR#|V{VWQGrHb!J
zU0J=O@bDr!o-Ex*3gqzg9qGX0F77Zr*_XC{Ux1~Pi$34zZv=7M+~CWYSWRQ?4BiS2
zs!K8y`9Wmzd#hJQY$PZs<sWvV;#}{P%YYX$JYb5#clBBvCr3lpSy}(GN*lpPd<uNv
zyx0+dkThwiZdS)L>iy(Cy!VksC`t_-3+wU=o@1w@MkjE{V4$L6!j@W)_X{$_dJDX7
zqv=R}s0CiOf`eduL#pXLWM!@*7wPVB6c$<3C;@T~8-w=RX5E4GD)bJ)k&=0M=hII+
z*>BtwJinV;zDQ1xK_dF2udsl#+8dt-*Xhcmhxl2e|L+a(h7l}atGOu6_s)1XH$c+c
z{XXDSIa<M;Tmi)n1-84^%TYut+asRu9W)`tO67SZg;aDcU{)x@L6?pxG%D>6)vj|+
zBGKMeyVen7S`N7Y7DeJtatuAqa0&E`#HNE-(};f88~rG9!%qJdAAQVEp1g(?=z)+?
zSV|Re8|}hxh$}*sac?j+Y>bpq1#{EqIoJ;?=y;^aEk^@dFhES1X*A!NbQlioJEWT)
z5&y!0ybExM@rn#zInmhYsA9USwU(Bav$L~}T$6;gs=PWU#lfwP@F!|&P;2=~b4ytn
z?Hqwi*f1lKC_oM^IXzO!qV_eS<Gy9tR4gE8qx~(K$<aWk_2F|j_<a2A?$;8}Xtq<B
z$?3*C`<`7R;Q6$1Qi9JWsP&4$r>sAH1Qr}?6b3^Tbn3s2KHvLf-5xo<7oYUjJ11-w
zdAL9C!WZx!JK4nsk$Y&L?K|EtVI+CSubQ5mOwK|H*C*JevoG47G%sFhjl9|%V9#sE
zcNxNdeEEL6ClWwP3bxL%fY6zqxvFLqN3a0co2)WP?K7-cL_{PYFi2q4K^`VpkW^jQ
zzLb$yi#ZTR{jJm4XYDjUs}&6x($G$5*{c?dyjv$?>$UH4zR}9m06cE}PMpmUe38}l
z^CLKMaU=I1W&2r+q4p=U&z*SF)6&W{j$^4Lx$GXLNd+3RR_(h4xbCi^_k1W<*#bpH
zpVdE2E4N+w2pO2c`|j)zsm9qq-<M<P7~0gqIh;vke<_)vU2#fA{NTz{z`Opqq|`ew
z`P!xk%H`~j^ZhU)8|kS@(dxrrS9~D>?(fJ~wbo!6`r~#Zo22`68yOX~aD1y%p^+wP
z`4YxMqrB;H-T|?fvT9hEpMQCMIw#_Oae_zpA5Z5V9Efl~=t0n^c(sq8mw<GsL#(lk
zjj;eIBL|0bZ%Z$HCIedib2?%=7;%5IQJfxjweQY4rEQP5t4ZY_6Yv1pecg81ya#Ff
z>F>~qFIPg>LvzPe=sQUsiBVFZndag1!?iq^@%F<kvPn57{^-z5_szBWc4vLKD$UNo
z!`b4=hD8G+V&d|}<9VwFYJvS$Wu_c-42-7L)5yq3e{xtjxE^}^+f3A-^R2GKGaf;&
zFUz5d=H~XxbznpJuef=DFl{_N&%?k(Y$hJ$r%sw<HJS*@Uj1s_kti_pK-^hJediFI
z9DxG5%EA|=wEVoSBYT<z54N|j5uo(_-9Z8iQQpL*)I#QZUh-P%o}1ZCkLJ_UeV;a*
zr>QF9#3JGlns)PscZ-iDu8afQqo4C(a@S1|ZW!xKTVR96b_iGf_)T>x$o9inzoe3q
zl7)rEzcRUQw+g;f&KKhbo#d*&Ghbw+6b?BpE{q;LA>xe+3KL<thAV^>zpaZiP)oUG
z-oW?5i*l*a;sICGQL3183g76l!xR9KEIn+*5YUDD(@aL3eI_&Ckb1-DM4XTLj9TX8
zE9~(rr|eyuj2Q3X0g^KLRR}s35;+i4pt>~U8-n;8)LIL{R{*uEN2)5B!=)ne@YP-X
zVOAdjroV}k66BC$4|4bc<g`UZKtcks%PI<G&hImY3DwDbH)ngCcDxB!d%HN9Z{x!G
zVV+|YletgOn=hK<1sW^f^v9WuDl_#QCf5riBa|erwy@&%(;}49Pk4u_hXSs{2;_bT
zk2oQqO?VW$Eh<Zq7^2wT#!vVk%-OPOQXh+xisRyXfeo*vhR<-qHoL47oIiJ4Rd#Qi
z*6oGNQC6E@7^&{R?G=#VcE}@w&apB$bZj<wOG!(GTReq+#ARv5iJyz=U<$%6-&vLp
z;H94$CO<VaTA_}z?#Hk{2Q2IH^d%J((ClAY!e^MszM=!rRq~1<h?H2d!XLt;+Wm+C
z*muLSu506%Kn!fM&;HKjA1snh64WfN#|{DT6sicQYX(!9CM-{Lx;7D3MHV!<guPB9
zOL{(Qf$-?fJns<)&p!4b?&z_9v$=w&FKW(%;2Gx7{#a)I8KyD?KW{Vgs{cddU&g?^
zn@LO3{RE8pT9GX)-$_YO<$E5t9k{DzxwIVz&1st?eP7i#W}OU7o2pId-si&V0N;Oy
z_Wh?^_WuGK{P%Ykx#`_&&`e%U(1(S91nFzy;_c^-Zvi7)o3*>qJJmH0<Y$LP&Mp)r
zq*c7Zc5MoS7Kliazt7`T(v@2ylXW7)kJ7dc4O$C9>(A|cjs}jj4|Uz#_b6Bo&ix_*
z@WX>VtKPSZ;Tj=P1)n!~_~9^z=*Y4d&RJtsC(MGgocaViNC07K%qfP4s-L8jv5F&1
z#UcJ+7Z=5C=@^HnVavOMnf1{6DLypx<~l(sX-Ky;>^X66#z9yMi0AryQnn|AGA4rn
zd0B1jM@mouAqTC#Aqv(i!`dZ!59~BzP#v~pns*;4vvJax8$>nj?=5qEzl|htdeig5
zT}?>s`e7Ed_xY3O&^bnBNXg=nOg}N7pX{Ca=tsK_oM#&|>rG5;Ky3;V<KZQ}4)tpM
zyfqr$f{h=3s-+wFii39+85)W-WhwN!GkbKjGW!|}ropG30^O6{_q}+%6XndIDq)^9
z<g=g9d{9UHo-deUtHTY+tHT#Kelzz***h=@r2goLBs}lSy^;zGQTq@g>}@Ij6?3i#
zN(_}xV_zdLjDOJNewu8Ot%BrLrAVBd(xTEXYb&=a=P9asg@Hk!S1+bM+K`8-qDrtE
zlMv5)-Ffj42D)8n27w^1vW<DnVh)b*v9J)rXUO`+L<N?@+9u7q`l52{zaNazcHZeB
z$^T&7dHJe2xM>2L_ovF>{nHtIxbR2SH)TtKUQi5gBS$r5@&0A|$2duqkPpxh1BV+#
z-)I(T59c@Krn`g_E@x551#J*C@Z0a7)pkkZ<W@XFAB9JU7dw1F{#@>b1P~_A*eOZs
z(9lpp0X5b-JwKFH*-!A^E>yR(v~;eqvBR&+zJh{mpNDxHu58iMooNKCR+sSV6W!M9
z5`6&hSdMa=&DzYVD1#1MdfH5huXg#1kT(2AOn^0av#_s>lI<n%v(<5A`#<Hi6ME`X
zzE;sh;@EsUKSD96gN}jfO4r`!d;GlxO5rafrh?!KJA%Je`0x_2oE;6Ht+x0cO5-6P
zmdzOtTYsloKAn4;D*Rg6V);rqE0jjkW@?#F&vaDFnqPMF^KiD4z8-;2kk##1$0fYS
zc<!mSOskOlL(olf?XPnuP2}6By1j9o6y1Q3Zg>nwq*?U4sAZdp;o(@O@U)|&=zXua
z%nlkpkI}(v!P3$)=N5gSad#(yOo$fqZ;Oy8mVT<|X&d*xXtw!=o3Y%RV37hmWeKm2
z-U1?Em#uKv#GZuD@gGPLAr-t3cWIT^Zg?~*S)$-=@b76=_IEHLQltx(cBHAsA3c5M
zhPHYo6tw=~j0GWL=FXCzxA{xR4<BfssoQKp_ByZ8EKj`}sz>8A5G#X6RX8$!-rEhG
zjBq;&_;rSX(ZvI7le(Iy73;GPL=e2}JX3M6&5+DlEZ(?T*gS9COGXlZ@|^3NWT=ul
z#)SfbDEVAcWK-_mo7*m3^fqP?AG(?wWR07}M^$JXPw00+LBeV#y8S0KA<W#6->0a8
zZt-Px<`LPg)k>z1Puuq6Z)W5E+EoG$j*^F}%1OYo<-3Kps#0ciaTiN$-wvl!@B>tb
z%C_^t`&nakb$z8jnPMvMC^^6C3VOQj4X_EDo_ixTWVJ1va^1*8YCepqw*-lMdlUEQ
zwBJ5;$OA_7oSK%uBK!vW0uRF0&aaM<i2JSCz>9u}zKNU-JpyOMaVB9($+oF{U-u-~
zp#Vf`(c_{!g1tZaBm>&xv9DPu2J7k<azYd#bFG|=l)}#53&juGz8?bn-%dM~qZPe%
z*>6J?uXpnhg`Ez=dW@zdiaH+M$b_)~DU@abR3&Q5Afo9kA^W3@U`aH$1H<<$R-;#o
z-dteiiO}wUp+8m3^4}ZuWFa>L8Pp?_e;OzB%nKU%rp@e~qzlBYe5ZY#=h0^Lqr$G>
z*`SvohC%#KTd`olo2m$W=dTZ`+2i`nr?5ct{<<4wW($rb+4}p>)jl#ZVRJv?-eEV{
zK0(4OXkUXW#gkZSeaG!_df#U67k5ZB`Sbh(+jn7%mDq+h<QS>)k7KVkhw9wpav><c
zJl&8mV#%cnOaBG62+6(Ydm~3YtHFgv1ZGgNp+3uSv!rHq5HxHFoTuKb6h!!Mv0okk
zcTmP!Cfy%iw(}$P@D{avY8%~XdV|_y@v9;c+<RydVOS+FD<LcZI1n$_ei=xj$@z5G
zZa!1*6U9U<xNV;95tsEfxP{s>_`AlJF9nReARIFe!B1y3_4S>WmR{Ke_gY%6B~I_d
z65`_CVNJK--i86bewX)x>~0PcRTeN%zAGuLzq1mg9F>i6p_<J`rtO+y2QUi|d?7q7
zxPb%@6<%meIQ@t29nAsSGQCJqOe~Wi`8NxhE~!ZD6ZL+{kz-+oO=m*~SRjVt)o-}!
z%Z(Zmmn60Ynuv}ld3puXykCz_7wrhc_q8MVTaWuh@jDrIB;m4V3b9HIO3E-2u9y7b
zCTER!HA^N-off@xV`h_;o{dlG<8E$l5UZ=-XOYGdrfJqAYcQ01r)$~<2Hr=`tszp>
z0D$8o;6}*Ld3ETsX*x$0wlFgDTrq2?tA_Xi!)?eQCBBOEe!-t1se{LOxAop!B62dN
z!GtnqRypbEAwxj^>dFLHWH_h_%>UL`{?!!lJ(6|Y8yl}dQEEJUfiSuTJG(q7p_WG-
zgtFTP6`}-GYSxoGKV6RI**>%m7H;cB>&g70qm;ID06F1!@|?Fd7jHiLSk8Zybnsbn
zp{7T!`Fwo5MjGAGWy9f1t~oN(tM?}d;;{uWxQ&c#XlQ72Id#7*OrFe1sIIQ28;rEA
z*Orw*PnV;uP@ubKNN>n3F*@I^`Q+Ylx9yg#rn#8aC@r{(|IF<lyGbB#fOgO(j|w#e
z4qlX&aG{izO?@HS>WV%3!q>>(|EN~nc|>--an^d(lUzq!d7M_EObrz(^;cFxhu^ae
z<hFm>^bQ+aOjHya8hXyEfgEvv->?}{F>G(shFF*Vq8S}CV+R6%*t*><BV9?7O+J;k
zwh{uAR8;GEjz?b7JNiGsOlL4X#c0B{vn$6`(15a&t9-@-Ut&R=IBuR)NUf}t3NIy2
zL8;ySA4^E#<cArbGR^i602Z<Bc6?HTYwTfPS19u!#!0d&1cvBt2}&<t6qf?=pzd5Q
zq0zQRf;E}=v`!Hk7#SHU2sk>jqKh$SYj4%zjZs5_P^NH=tX+^Z?$VN&FSvxMr~d(7
zSO%*-Sz7m7pZgS4_<I_T5W5=|mL;jah)_c*v-y>Au|V*x)K6rd*PoY3Bz-ak%x{&Q
zD*Ql{!Vh*J%Xpoi2GG5Fo*B7k9MJ(HJKuF}w3;?>5qhm`y{m+$7KE;@@EqUYSNCr^
ziK=miXHg7IGhuq&i;-uH{k>9!rHm`;U%OWN(9H4;;}UU7JA>2O1kZ1>MCPO6t_~{F
zfi{e=lR;WH>UHw09$2RkaYo|%B3dQW9(DFw<7x7p?bqvD!7~G|R)}nomwfo1I8l}+
zv%Ifa*^X{&@?wyuHO1x(!JbOsHX7UiW6GXjYraZpUS8gWb38#14>sgV?c@A%az0Q=
z-04q_=#NQ2@Y!NYIEgf<<#$L}7$Jv+5rlCympnOn!^vi)`RX8|RH{b8=hD7+6j)NJ
zZ^M=TA#A_Z7PYq?Sp?IGS09q_4Mvfue@rBAJ_&VPuZ+)2B8&_njHG2{t(Hw@hLDD;
zS5HBGGrg?)LJn{9hfaQeevl>y!k&y{mrP_%NOe}HV!^5bG7IEPTVyB{&mQtG+L{s+
zsh6mIOq8KHjMDh2{&Rl6t_G&|3^E0YbOj)9aWHSD%?az+5C0vyX$uZWqMtuqqE>dT
z2UfxncYwGK=cPNYa|Ide{P-=w<~bGaxL%(mB5k-c=2)v6ta`u(S;)^vZ5?_4HYuhw
zLwFdxhk)9vhv~YHcF*@2Lu7$4sAcGLHtyiOXcAG7G0t9l){Z&BUS8n8XC(gntmA)7
zT~bg|WO>{Z?(1fM+<p9fhW`(n^X|WLI^W3FEP)>I4Nfh@%NdXsR{&Lt8u|Y>eq^Yb

literal 0
HcmV?d00001

diff --git a/wiki/Tutorials/PublicWebServer/index.md b/wiki/Tutorials/PublicWebServer/index.md
new file mode 100644
index 00000000..1d1eb4c2
--- /dev/null
+++ b/wiki/Tutorials/PublicWebServer/index.md
@@ -0,0 +1,113 @@
+# Secure hosting of a public Web Server
+
+When providing an online service to the public, encryption and authentication are the two main security aspects to consider.
+Neglecting either one of them, could potentially lead to unauthorized access, privacy violations or even server hijacking.
+
+One quick way to encrypt and authenticate is explained below.
+It is assumed, that you already have an instance running inside the de.NBI Cloud to host the web server, with a public floating IP attached.
+
+## Domain name registration
+
+Every public website needs a domain name that people can type into their browser address bar to visit the site.
+Domain names can usually be obtained from domain name registrars, which is out of scope of this document.
+
+Please make sure your domain name points to the public floating IP of your web server instance.
+
+For the Bielefeld site you may request a domain name ending in `.bi.denbi.de` (e.g. `myservice.bi.denbi.de`) by [contacting us](../../Compute_Center/Bielefeld.md#contact).
+
+## Encryption
+
+Using unencrypted HTTP communication is unsafe because it allows data to be transmitted in plain text,
+making it easy for attackers to intercept and read sensitive information.
+
+Therefore, do not expose your HTTP-only-speaking web server software directly, but use an encrypting reverse proxy in front.
+
+TLS encrypts data during transmission, preventing unauthorized access and eavesdropping.
+One simple way to use TLS is to place a [Caddy server](https://caddyserver.com/) in between the internet and the web server you would like to make publicly available.
+This way, Caddy will act as a [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) encrypting your traffic. Caddy will automatically provision a free TLS certificate for your domain name through the non-profit certificate authority Let's Encrypt and renew it when necessary.
+
+### Caddy - Installation
+
+Requirements:
+
+- Operating system: Ubuntu/Debian
+
+Execute the following commands on the instance that is going to be hosting the web server:
+```
+curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
+curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
+sudo apt update
+sudo apt install caddy
+```
+
+The Caddy server should now be installed and running.
+
+Source: [Caddy installation steps for Ubuntu/Debian](https://caddyserver.com/docs/install#debian-ubuntu-raspbian)
+
+### Caddy - Configuration
+
+Requirements:
+
+- A domain name pointing to the public floating IP of your web server instance.
+- A web server that you would like to make public (e.g. a Galaxy server) listening on `localhost` or `127.0.0.1`.
+
+Replace the contents of `/etc/caddy/Caddyfile` on your instance with the snippet below.
+Replace `example.bi.denbi.de` with your own domain name and replace port `8080` with the port the
+web server is listening on.
+
+`/etc/caddy/Caddyfile`
+```
+example.bi.denbi.de {
+  reverse_proxy 127.0.0.1:8080
+}
+```
+
+Reload the Caddy server:
+`sudo systemctl reload caddy`
+
+Afterwards, you should be able to access your web server by simply entering the domain name (without any port).
+Your browser should now indicate that the connection is secure, as seen below.
+
+![](images/connection-secure.png)
+
+## Authentication
+
+It is strongly advised to make use of the authentication and user management features your web server provides.
+
+In case the web server you make public does not offer any authentication methods,
+access must be regulated by telling the Caddy server to ask visitors for their username and password.
+Users are managed inside the Caddy server configuration file.
+To create a new user, e.g. `alice`, generate a password hash using 
+
+```
+caddy hash-password
+```
+
+on the command line.
+Add the username and the password hash by creating a new `basicauth` section as seen below.
+
+`/etc/caddy/Caddyfile`
+```
+example.bi.denbi.de {
+  reverse_proxy 127.0.0.1:8000
+  basicauth / {
+    alice $2a$14$osbZTr.aovwDoO8WULE7hu0rF8YbrZt5Ltp0W.tIARgkE8525HLCG
+  }
+}
+```
+
+To add more users, simply add more lines to the `basicauth` section:
+
+```
+  basicauth / {
+    alice $2a$14$osbZTr.aovwDoO8WULE7hu0rF8YbrZt5Ltp0W.tIARgkE8525HLCG
+    bob $2a$14$INrlWVMNeuULZYnkVIBclefLHGmXLB.WQdKQGr/FjpeJYDrmGUN1e
+    carol $2a$14$nPEUHsqMDS7YfuVzo1n3iecRBexUI9wQINymbnedI0iG4E.Pchfe6
+  }
+```
+
+Finally, reload the Caddy server: `sudo systemctl reload caddy`
+
+Visitors should now be prompted for username and password:
+
+![](images/basic-auth.png)
diff --git a/wiki/includes/glossary.md b/wiki/includes/glossary.md
index 167c1419..4a14ff30 100644
--- a/wiki/includes/glossary.md
+++ b/wiki/includes/glossary.md
@@ -24,3 +24,4 @@
 *[url]: Uniform Resource Locator or web address
 *[UUID]: Universally unique identifier, a 128-bit label
 *[uuid]: Universally unique identifier, a 128-bit label
+*[TLS]: Transport Layer Security
diff --git a/wiki/security.md b/wiki/security.md
index ac2e18b3..7fec57e1 100644
--- a/wiki/security.md
+++ b/wiki/security.md
@@ -89,5 +89,7 @@ attacks that were (easily) able to guess your instance's IP and port (which are
 means). It is also highly recommended to protect your network traffic from prying eyes using TLS
 which is available inside almost all server applications, especially webservers.
 
+Feel free to take a look at the tutorial [Secure hosting of a public Web Server](Tutorials/PublicWebServer/index.md) for guidance.
+
 **Always** change the default credentials of services as these are well known and
 will be probed as soon as the service is exposed to the internet.

From d0ca93eaa220b42a1e909bf1f7faa764290f18c6 Mon Sep 17 00:00:00 2001
From: Christian Henke <maitai@users.noreply.github.com>
Date: Fri, 18 Aug 2023 11:17:41 +0200
Subject: [PATCH 2/5] add security group set up; fixes

---
 .../images/security-group-rules.png           | Bin 0 -> 13621 bytes
 wiki/Tutorials/PublicWebServer/index.md       |  51 +++++++++++++++---
 2 files changed, 43 insertions(+), 8 deletions(-)
 create mode 100644 wiki/Tutorials/PublicWebServer/images/security-group-rules.png

diff --git a/wiki/Tutorials/PublicWebServer/images/security-group-rules.png b/wiki/Tutorials/PublicWebServer/images/security-group-rules.png
new file mode 100644
index 0000000000000000000000000000000000000000..1b31451131244bbc76653a5145c9f9a0b5d8d806
GIT binary patch
literal 13621
zcmb`Oby!<Zx9_RYmIB2}fnsg27AP*o+Y;Pe6I_G4Q$dTnlj6mKJA@W@in~jSJ0XO?
zrTv}rzJJ{FoO{mm-2KPS+B5U4J$tQWXXg8v2~}2<!hihyF%}jUzKk?b6$|UW&#mqI
z=<e;=0JS!B`*F|tgN*v4M~~)Kl$NouUSP=p->ZAf?k)Igt500=AEr@E(=DIB<Nnzh
z!h4U;FzVOq7nEI3J@H09_(>$QtA{YfkDlhP$f-Wt#0@Pp{hsH9H~wxrI^+Jy``!Dd
z(wMu@`+m%7+vlIm1J<6I@;y1Z`Wg1(+ZV1UD@bQg5LeYfi}|2miVhMCDXZX2kq6R0
zx_jrgQ&?E<T8+siP4@)<USQ#wOE>;wu|AR^`)hr~e!2DMF|e@8U(kd88d%Q)a&iA!
zKR!ph{NqQPFqZ9~O56{l*ncg<_y2O%GdWB8Pi>gxD^!J@zoeR3pbTLNDCuW=kWr9_
zr;rkKgZ!|*p*UHd5kOo{`M2?dm`02@``!|S?pY`~&djuSli-(--f;lAd{-hmf7m5c
z^dxZwuien&<)7w149Ap@*YYsl65>H2^y1NuXWW#OF{UAwJ<)P#BwzfM<<Rs0=+J|-
zMhpd?aZJRcQeU|WqEMTT?AwCP`zHK<?~BK$kU$EMG~Uz2a{@??s_PhO=GGMd$u1Ta
zW`O<?xrU`9AD{V<^5_3;7|w^n2v2qQBo+;KjbeaB$_-VMeo=q@Vre=D%Ot@)`oC(R
z`#l}m`y=S_LqJu6vkz0qu;xLZ!Nn8Yj}y`>yd?a_wkZPp24_i8BqXO6)ej0~_f7Y{
z-afxVXplF7V+o|F$g09k!E1AUWm$1B!6Gf~;GAViWt71OTDfU35KiqmlH)B?WE~bq
z#%|EW<Zu9C?jJXJbpzNaU$pOHdG91=UnEu&hAqS;o0o+PkmLsDVzm0;aaw}UxCWFb
zC04loVrN^}BR*tpFW2reCq++h`61O6-=q&HqO>%ITYFx(;igiTCe~s*bv|rmV=WUb
z;ExVSD8Ax(X=FmWmzK<OVQO%c7imo1m6;&=n}i2kT3?rza0#tM`hj#c`bk(cumdCl
z(7i&iE%LJsgM-2AEZL=3F<wRO`BE1Rr(os16^)ACtJA&L%*2Z31?$@w^Uenit~e`^
zd(&C~d{2?K;_ZAiPn%SluQp`Yku&EJh+~atGavC(T*E4i|BzcuF>^)W;|Uvl`|x`A
z^W#XS!qo~HZoou~d9k~gDzwge=t*bSmoVBLxfCp{Us|d)Hu<x#v$QGcHws$eH5O%w
zr2Ojq$#tS@93t=cJ$J9#s3V^BT9cz+S11;-LD7F&wI-b`kx{ZOdHIec&+KzXCN27i
zBbx&2Op!_OxP*qAk>eb3fFyEp-AzSGIB$7K^Ek1n^*y@%=dOMKS(gyIwQ@1LSb7}j
zDlO}5q;s^4zz<YZia>c~mLbl_iXWddv1bxhtmBsIwC+m+>ErG7YTRyq?j8&pn3WTH
z_y((CKXg8p9d;GAqqXSQ+S8*tx>}9@QgFZUL*8>v^|uKbRASu5NARLzAkcI?$v@5a
z5H0IF2mWOstQOy5b~KRUJf^tltXF+6smgS-jhcy}DB7a!gQSe2U!&nU<;>npBz(E$
zcZ1&7vib`Y=InizY4_)8(qM@9o7ZT}y6P~hzknsA=TOhlZD{5AlJW~IT{t~Mt%P^p
z8v3{ywl>mm{5ky#HdDh+7$v?-v9s*u_%Z2P%^b;C(Su$1hFlz?3)Z`#Z7(K9z&xxy
zZ`H3S7JE}zFT0B1Z)7*Si}k~nd~@ZkTY64GSkH(G&%li0R=+5}|HZ?m1ba!r(*p^k
zt@ssMb~9>pbLQT6$CBA#ip^I}HW<XftE+S{_;R@mi1_4VcA^+e1}2fVQ6$&N$}@U;
z-<aIFXv*~svHOD2-I0%rU+VgQvU{C5ot=r^-(T))fYdS4Ql$~EIPKH~LRBX>IYgP6
z>(0^j=;ZF~DdEX;erT2H=mWO(GyDorqtjXN6uTlyh4}dVoHUDCYXzIleQ@WXpk%se
zwyC4+OvYTjLkQ9iGpPRlMw_zExI3ujz17HLNUH)1N20~S>+GXqK306A(2x(G=PwXT
za{Zzd6&FOrezNFS&<~3XaOPwNfY+k`URapgdHjPK`+=bg6QNN*r?6=XbMuE6Z;)2M
zX1~?8`pJbw&i+&c)x1>oGI`A}RG@vfWbA8BU*Ln0?{mIap#}DS!O+xY;prutOi45{
zU})vC8%d3N3CT2m_%7F>GI#z^x`bAI7SFl=KGw&%$tz4GE);6(ZHU<AV3<4$)M-!R
zM38X7-1b^4DcX`#?G^?OXv}ktE8L&Y{!*jo#mP@2n^JeQ+Vg^|DFBOf+Lt2Z2UB}m
zk%KjJ9_?=7_&AKX1aGO-tH>UAPX=M8irO`>U*kdvytrQd?)`=!J9uT=+Wbb{tSpt}
z*;8`zw`QBM3!NGQEN#~i+fVO+>WyaR+CFYaWVZ$G%F{ur003OrdvG3c<8ElEY`C0@
zAoKC4&k+y4F<UB{Mlgv`kl!As1|uw@ukCg$Na{bA%9#gYV?Ve(6ukVdXTRJ-R=V*U
zdrptPJGb^ky&m09p?p@c?SQcR6gDGw&0-@H3HK$5&o2?`kvE_kDOd?XMykzNb)O#h
zxC@%;13P-ewVJDJ-tVf}wZMK8KP6%<;AUz<_RdqnewPvMY)+2&m@mw0ucEvF*?lIR
z>1xW;7w3T`mnlb17$o+F$f?tB0t?c^s6YvAOXaE*!3;GZkS)$UGAW+sqS5+=TfZeP
zyv%sqC~h`N!CYNCgvr3AM4kLmOjjRCUbEIm+PPq^J6PYKJX5@zC9Q{^0ugvgq8qd4
zxpBk3Vf<dXHz!%A@*0=tL}iK<2NlCbNgQahNl$qGGfq*YfBH&=Wja1lC@2`7{B1e`
zrR=pS4z+l-6lq5LTb!;cZyV}EI)jIdo+ct{XPXsq8f2B}Hv45nvH{(9^B-!N^TOkP
zIVr**Uc-Kp<(ops&)CydpL&z+%lkc+t*htca<rO&pely4l7MEu$&2{JWOg>(36Ndf
z*?ZKB{j{2SZ~13Ne>Zdv&YYufFkE*w4%#@gc#`kiKcHW0-l<MXl+@xQbL=l?VIv%k
z^glj_c?H2iHHIKgC7>2=Y*InGi??Sx{L4cE8tD{7`<?-O8#gkf8m(1w`B{s7#&LQ1
z=NBO@iMLNnBa~1iHQ4umzN3%f$n|K8Dt+_zs{M>JYrdjg;_R{OT#KyF)_Kjtnct-B
z-Y++{V`_7y<-SH2_%_<ob|JPXUPjIDK6&~jMp`}=e*Wvp6Jw2K6ILx%{YAmMarbRy
z3Wt6!+4B%>)#ygjsJ{}lr3eiEe5zXt*AuwR{v7vtc=|=5Cp$!d8u65fh|_OvVz=S*
zXYNUuCIRV$bq&3L`3bpa;OcwHi_-0`7;nwc@x;V!((Ueb-&Z79SeFUWNQHK@uEnL{
z#E=deWG7RPy6ai*$#B=ewe1eUI_(ah{d`0_!ixYR*qD?5Jt&;iwKtTkN>-ucZFBlE
z-^_%=iwZ$=P1m-4Nw@5|w2H`00@0^Uvw}ptyw%l&M4>@%zfz?r$~>Vn&ggXGuWhxN
zI9WhMkR|PjBDYJba7kRr<}=9H5(-%-n)iZVuRVN5$4&sE648_ejxHy)pVP_<Xyh@`
zo_9CjZQ<G7!+y^kB>lYBrh?BJR%=3^mHb_kyv1uGTm=X`?T_?r<uHP1NeH(Q5*0^+
zMVmY}CtHFMg>*3M8sVJhV!hoNF9BA+S52b`TjIh)sx7M9LVlMYF$)mMOmGvcO5R9*
z6_eXRS!=jyavtPrMll+Te-IuUJ;uHGH5p?+UvcHsW$zh{OGIRFH8Lwc`g`1xR6M-~
zBEkU@_K)fCD<bj*tGxAhSgNBs=?Nb}{#Jf%)f3A*dj`=Ocy;`ofyr0Hti^b<Xv0Vq
zuzGg$vMXY**+{z}3(xV=E1U8`hh|0zS09vOf)~NH9cim`tT%<<4{-%PmTO5H`kPv2
zc5G6041rS7o!T#yo-OZG3)pI61uN8tPwu@?y-};s+(s0<SRG{hlUA*hhJ4-U%&s*g
zaYrMs6*C95RQbS{4WB|_qz5oZq>8YRS@N8F5*yf{ebd~?BJk2YdlO>84C5ojPx~#r
zh?yM;xIrp3god!u7Gi>f#oK@d-R}HUdscS|I76wZCH8XeNT^0-shJCjydW19bDOw=
zI2dcW^^w%JBJ`(SI}GWwk1uVl&eM{fr2Wn*W9Cf(g`*yTMi~-|CEa;yr?Xgz*vUgK
zs&q4()d^}Wbi$RE*G7GV1xtG_FX{*+R~0oK={0aS@)&G~AJLmd<Y{OCqtMvQqoaJR
z+GlgzahZoFlnhBlKDq|OQq(<uX|?p3Q69|7)XN19su$sKGuP6BidSaW^VO5B5yI}0
z#dR8k(%OU_#4&*N*HG%FNYe4(Kmj6*+uMVuloxK%@gWzhQGDw%28v;|`#(zW>_3l5
z=0vzjtt9!%t-|fR9W=^B+9@OhN<6rYUo4(FYaO;GBtkjMnQN@$<4<$@+1W8!`ZpfY
z)vhLA2OBSP%Qifm;@q2fV;so^T`Z>x=rOwJv_EfNdRJ$Y0Oozb2$o!9_+6p}kB+Yl
zrcdwhNF7TsBoMb+vO5~|1<*XYk^p(TF~>AWqkV?C-`%X9%_r2NTIkQY3P~h~@oc)x
z)o^1%q=DfD!EYugf-jzExU<3_M$N$<T;s2|8m+Xa&`nQi!gCxH9Ng6Fg1@GfQBauY
z1`m!L(;P!zT2CoWWIVi^$_BOX(Y@&=v*`5!u%jO)CvtZP!)hVkeH9yAGt4a%j)gz(
z-g|YMGzq-1F>m7MWzpJ0g8KeJ7`Z98D9qXUG-)Oiox8`*?5biv1Dh(><Bp3CJK30h
zRQFHzSTcV=bR6JtYnmU76U$AH530$Kk?R*sKVO7DrK9sTRXuG+5k=vZPij1@P(Mr7
z9ce7>AU+pJfOaX3fOSx6Fa4moR4nW5ndUVpY>g5@FIKq@vI2Ut`hf*eIitN<0!!7x
z_<*oWT|k{)5c3s{{Xv)cw8ix%$#+eegPBA^gXm_iJ!1#iZXn%AmQc3I6ifqU<B=LO
z9p{k1?~*ztS??7XvgM;%$E8miqTL1GsWMKvv@d=ZzJ07eF^LGP#%SH7W!`4YSabDV
zo5q)fI%oGMtSpQ$NGD8xrBE-?I#4>R`jqTgk1KUcE#+56h2>s2X=xp2+_c5}&2x&n
ztB-ff>G!U&x!oapH|9{8A-ybk&gzfRU48P`DtmdG=0T1w^cCEc6my=Z24UA<Wo)Fz
zIVrH|;5yn<5VJ_}&W`Cw=pOO(mJB>UudZP?wa-<?R?TZ#n4^<-GZYfc=cMD?TOSfa
z!TkIKV4?#Z?Cw_!YnW8!H^7JI7F*!86XJYWJChr@N&r91#WT|(Mh`5d5KpeHC#yn3
zTJ1wFn!bstf#X{bXen60{B~l8jRZtFk0L>&RC2;v*JBlB$Xtf*os?m|fD}%OZ=}-A
zjGe$@Z^%;9{lJSndRmrc@s=kDEtziiN7YP4BF#ubDK^jI&Gi~dP{XTVHPzT7!I<mB
zN)J|;N{xzewlVkP$8ZDyV82_rszjRZ@<?55I@6+|*ka%b<#$gM$i22Y-U5?ZFG~3`
z=lH}?mgOSvYv#FHeTBN?QFhGq`IkhYZk+JG(m51^5jo%sX})|5N<acgPk!Gx`FhV_
zhafyH4L1SWDn0Jlu`LkE#2=_{v)5xFD~B&S5>?^LLefZr9$ZR!w&1m=DLig#=*Ri9
z1$aH5T76^-9S@Ido1OTiS56_a_+B>X>KH;FlJ>kuyFf`>bE=)7PQR7Mx>-kC3;%P>
z{S{hgb}H_J{yC34l)A*6@Ye!smmJ^uHj@LPid|J#_9Hhpk!Pc$@>5?$i>{{uUvQe5
zs`M4xl-J&LxjuUEiGC950uuc2le{LOwML9jGa>P}H*R9_Q`OPT-79Aq;et}qkdW<$
z<2c>SkdPR!%fOaOMmN^>4B_6GZ)MD7)*?mP4Z{}{{YjFqp7$$h>Yy{0_8;JS^+9FB
zaQ&EH{pu6{fFTDMW6a?-K7R7IQ?WU*8ljkC18q}ablbMK2bK{{l!xTY_<hvxWfTn8
z8aGx8rhV;KJ2}fs^=(%t5l`zh0~W-yjgmADe!^fZiAHfCzJ7(-tHSDm{Z|uZXcvYO
z^}guqRjl+ou~S==GR!rX_h}bGTCQ%GCz76lppR7z)P27C&>-V<g(|nZRTsy~Y^hKB
z18B;flr$)n1j2YoOCn;JXQQMO+OSJQJ}DHrh0<8KH`HJE=m3a^((Q?&%C%g#e>xqP
z)B3HIkeLS&#cUxTXN4N6gZZeHLO~47T9jN;)HgbkUzXoQ;2e<iE*R54Uwvgg>|_&9
z=S8l(;8VNhvt!s6SwJqNM4;EC*SfyfkdrG%MEFXqf!)*J5mi`JlzE-t*F?9$GQ{*_
zczf!2=Hs__5BGO$t@6k`!3M4u?d#c)7Jmh?XGAN#2;X#{3p^#@2iq;UhO@=c5}1wf
zrazLwQ7+cG=(N<GGQF2YkU?66lxy_~%%FTZgSr!e4FJ41NHypSC4C%NvxKs>=N#nz
zRGT+5_r#g*17po%x_Oy$a8RI#F9r&w6i1>0gsE2%e!*pY^&FzkS{;{<upw)kj25Kv
z&=Kq5cryQ($`@{(MlT(H>Ty4vge_xjP&{3ik)Y^(SnL4+fc45nN~M*<3C;n4^Fj(E
zI}P-r((AW5h_l(xr3d*LvB86>;}{<Er;o86XRGen+XYr>=*BV&KQ#RO<2y7;dBVJG
z!J)n=5iy*UUpk|*PRO-pB|sEY;nRKfy8#-nM;FV235^qZ_MM|3^H#i20@^K#Pi$vd
z^9mXD`Ett9UKwr~<RW&&7LRB}Zj)7De|^%l@QZ9ysE{hO$GjeD<G319XD;+)OSNaP
zU4HOx3@&%y#ANSCKKw#Vg4b;g(HM>-3=O3cnNH3lD3RrG2mG9+^QU^nACbCwED!Nk
zC-f6jQiU3sEZBC?AE*B&-lyC4i%L8a_Rp=B5a=|^pS61wlTn4qMeT>~%;#$tsd!to
z<4Q@`d(4%)%@twmUC^ML$eAPzO^;W5?i@zE!q-VxZrE<G#wHR9(YUW*&}`_`_xTk3
zxwGhZZp{_C7XnVNmX$Z9-}+s?0YO}H0N2RMLOtF05`UMUl_H(1z8>LD4rp)#xtG8`
zM;Pk<f;=2!039crsF8gO_u6n;MENJ9=ep_rg<u?&l~hYw&YT=Iw^yUJd1m%HF$-Rq
z+^W!{irzAbV$Pxheq)W@S&blkS_Ua4-F^=GN8w=x({ue~;pQPB<gM7WtYnL5%g!)#
zNJzT6k-e?<p|%oj_x`6(bZ(|((5IQI1m7VA8e)mtGe3TO5@?NN_8M%unkAS5A|3%d
zyn<L2b&1CL;Fpixi;7f>>OSPctG|Ce^Oi6Ji`>rX{HG%#5~6G|YL+8Ye3<l~zA?@l
zAG}Rk8$Kjm#SAvjAj^6kIEh0G^Ddjj`1b59w{`mz+5<?spEC`+>DDf6AxoAP2kI*!
zzNH>;oBgiVW?6bhHQ&w+CBE%}>z{fr?VG?YN7sl=L8$cirguTjC6`hNp_X$Z^m7$o
ziG`u`pp}XR|EK~~kEGqSPtsvtp9273U1T+YF5lcaF^5|k%>0#Z_cMB-0ktdn8+w^g
zbgAG5Gz?=Gt8(bIPpsr0({G=w-u>z~L;!54P1aDogSot0HU(Pk1v9%>cp+)<uq46$
zD#Ii!u5re~Q4O%|hFP!@;QjDcfZjk$m)Sr@gH+?{3Gd5$1p;jGj7oaSRL#BzJEHfP
zNt?40uOz71%?B?o8d+jKXEs?HE;L02a<|H3ee|BX36L+3Td;39woRX>cx_TtMs$i_
zM`Dh!L9ptN@h1y5W(B?Fwj1L6kl~QEA9+w^47A&KbHg7bgXpH(KY!&`O}WoZ%+CXD
z)i7mGb@dl^x%mCYx}5_lKiWxFz^YiNS|*!WY8(>6u8>)^T#hKZ2N6Ha!{?aRf1}{%
z>9{o=UwtQT#S%Fju}B9xnn{hm^R|%?3+n-$924kQ-$3pTIHe_8yY*Xl@~)Dx#Wnfc
zS&90K{!pjK`l19BWIqf|56GHWZT8b3bx})j!xvXJ?J2$xcjr%X(T=y;`+UxRN+ufs
zFseoR6q7rFOFXHNN3+9J*LniDWB73uzT~bgCJ31Cp4CbEhT&_P{!K<?y-EG^kCcri
z0&;&CMD|zRpU;VQS)ev&1U<VPH2X)9e$hBaEA`;7{W0yo5cU5XLhvO5zdgFw^j1K3
zV~oQ$nH+Wi`~wllZEnT>x<?NnQ^wH{B0TZt=D|?lKfHir`mGYwjH@<TSGNQd^S*z4
z)R?RGPmv<WKWO3O&o0j8qg&zM#>(27lgB9CNQ^s07f<1hf&x+jx^;^W1R&FYzl8UH
z&bmJQ)A5hj<I2Y-3)kWKeUC|W(U|W4gbilqU7Z|w|A{Q*jL09f<NgCO{{MoHf5&L1
z_S*gW$`dkm|8GPM%a0BZ%WqN4B<!CM|M(WT68N|3e~(xGeV6}&)tEx|{y`TXCG-WZ
z+i5AhVVdb&IG<~FxICsg!dsBv(H1Q{E(0W+Fk`Ni5|HiRPW-lL3?IIpMyEtb(;L&9
znwacu;{h1e!VEcTs^`T{BxXv;26gWJN6;Rmv2^=im>gIDdI@7pA92C_%uU7`jc%sV
zGYM;A$yE>jGl82?;Uav1f4Ga)LbJc=E+-Rt)8D`wmN)1+%63SXfWqD@c1Zu}Bg^Ql
z#$S~5(a)UtemHaWTS`i9i&yXeZ@%>32H@YY%I2W?(HFRG|4|S`gf+G&9!#eVX_fjX
z=*11~xpG<;Mpu2|T;TbBC%WFQ4u;aSwXgwPtOtad#p`%5uq+cqYdtYs*gci5A?Ygf
z`YG>kMF@6ElF#x1`|XP+&9WXz*xi_4l==)Zm206$^JITq-?O#>W!HL4%>W8I;A8M(
z2%YtHiBw`A{FK_38+a7j)NS6fZ<caN+4sa|XaXfQh?}VArG_cI9r$=FN<+bK2c<p$
zCk$+5*%3m|WXTg<H7*q&O@#mMA5O$g5YXdh0ex6A$DUU!eJ}30xmm`HFTzIB|HU9B
zC+3#FNC*flC1|9N;dYce+21gUw|Bpu<L69jebb`6q!JEX{UJ*V|4G8*|CwhQ_RF`<
zS&QgE$XDfi_FUzDcV-MbTFYywwf}7<c_Ejfs_FWf!a_!tjoy5laM?r?N&FeZ)?DOh
zK>c@4P}J&JL)sJdS5SkeqQ^lZ6M^e1RxzvM8N>N(av68C!MF*F4nIN|O5*0d<qrd-
zHZrU&e__(o;<QxV6o)B8U1M2%c~;cEB(TOLv-vb|!S$<9aT4$+iSw&IW_FV1*JV^n
zs(Cl--?yF%a2o>78gSSPnE4T1Xk?x|7S?Z;LR~&J+o{<!<J`o2maf?<t^Ti+MU(@2
zP{-uV7f4|@zm-VIFjL-eOuROeM$$0mPphSV)Ik`2l6?!@a=->j-YsVj&q6P>=~bfT
zmU{d26B3a)8JlC?adR3Z0y4cBuw}HeHT2Phgg}a?nP3if-H4&Gf!pu?fwt{h+JQ}3
zXD2vwA?zPO<4VSIf@FN-BkHsA$@)tJ!}GpcnEXIb?^PYD81LBwaKTg!2F)vm=%0^u
z-Xl2MTeCs+oldnEz~KT2t@rtd$IpL0_ZyV=qT{+cJMEJM0JygMj=7w#L4}Yx+(z62
z+$vFha+J@&(6P5&*!jnP86PIzlXrG0F!Z0au^~%)lFx$QG8x=(!rM^?YD*zs=Rh-h
zGeIP2T7Kq_{Dr`4zz(fV|CAJinLWCqT6)AgMI0$$$CUf-(sr!9lhZY5rlQHU`F(xS
z+FVp{Uv_%By=;-t6M~jo#Z;Zl+%HAX3AX35c1G40xvP(oHC-2K(C-$S<zu=^$eq^>
zt!rhxkny+I)T$Q|-OlT1^8y&(Ta<ppZ(2I9YFt5}3V_pFxyi5cQ=!XSZ={*$svIVF
zQYN}S5%)r0l^9-Oe9@|mw|{FvMl_Ko-2z^XA-4ind-`5HeAoFT*uPv4Wu7a31AdyQ
zNO66nI$1HiGZXo|yT~`$C=$>;=|2?SHoUcwM_?!Ka!&P&Y-QiZV}<vN4mNr3JC`~k
z@$d)tWaw8#%OqA|Q{C9vcUm6WCyD<^cg0DK+%s8sO6;V!lj-y1a!uVSo#IQMPQS?O
zm<sDF!HDjQhTf#p-_*9E*vS;NyA`g{oAqp<hQ@g$nVsNJ06ZyyBQJ-){fBSd+k*uK
zd%L4P-DkfpbJtgTCTIf;#CWZbNen`jKuI*|oKjYMbygbsLyZbR(VlrMtfwn~)&eBZ
z`D`TUBh5spyu}Lqea63eviP2;QxJ{pN|*5iNVvIhEf_2tq0L>}r*8zV;&7a4c&iMw
zXyB}`n{5{=6^6S^MW_<0*{a9-;4<vhn1q`|M!1X3{KKO=8KRyZ0Ajf>21>f8hiCjM
z4MJ?@JC{+=@siA*SW$O`1?jO))9B6qoQlmrRiU%_!F;uUs(B_EC)^pF7Tx6Jyjiv7
z%*t)~?eb(Wr3Q|JR%_n?0#!)NRI1d}qU04*JDz-$7N0rdS{bRw3MxV->;1`J?dE~I
z{>7Ee+&v+S;MWx}_JQZ{Z~<tvV-4gcVUVzEoPNIY$G#CCGp%<)7QTptYMf!Cr=tRC
z(j*KaGy%*_<-OXIo+$~v@?O%<fmfN>NOS0T{8;&x+VabRhx2qRp&<d422LxY$QcPA
zk@pp;$%Xq`nQitZec-*mz9yj~^V8Kvnfd%43q{=}Qt1tj$+9<nMiW9nU4R49`T*=m
zGJ}(GyQa7Le`~!7D0HM<uSF6Q-8f(N&8RVjA0d&*DPd~T*3$A)sKWAb9cwt=#046S
zhA_%!Bqgh%5L=am{q4|+@(44tR@Jlp<X?p>&O1VHHn_+{sT&Xb&lMlSO;6AQu_;Gm
zmpoKQi${>jp&UWf=|lz>8z8o)fWE{JGEy8Dglx=)99D-q34$~=?YoNc!1JFv6g2LH
zfpN(veRZO`7w^R-!Q^y#R3@*rH_?X<jYVT;F4q)(Lw!Z@ihh2dH7K`;%Mb-9xr@qU
zYe2SO#`W{wrx{VtVuh*VQniwK%ieSwcPrq!7WN1#8>bA%Z(kiS(|=mY+RLeCAP5eQ
zT*r-a^A~^spR>p*9)eBoPK(Cl+zt(M8(^Fkn84wFE7SVZ!gJgcMN#CN#osa4!@;B6
z8e4Nx&4QiqZqZ_J+pd8&0+p)UaWQ}67}TBZ$Ooi%qrNo$Y^=2@zLi4Yo0;V!l<517
zAcN+O#?5;1?Hn_>BQk{CZDc<NVh%d+qTo}x-m*g?=9@~pIY^8b)VS2qT(q-E0!}8M
zZNe!;2<jlp3?O2<;T^@@`RIOlxd0P8KLqrB{bHy?#0&_G2$Zp>r_NjM2%n!9!TE_$
z)!KhOHgPiEDE8cQVXMq-lT*c>fkAjjp~DQ`z_DeaGrn0C>F3U~gK_B7qd@w-R02kz
zc9!PV8KG6EcXoD*T7_jOC+{_qCk{aM3?it*$0^o@GYzoazL=(x^DB8D6X)L2xSLOH
zh8%>P#5k|--J4F$3H}NrFk6k>d^X9#`>8ZS7j6nMenJ^XxW@ac3F|=r?5NFJRq@Hm
zUSh1QPl05hTSFW|@&R4Uo3n;sHx7ZMl=>RoDtb}%S<J=u#&n#Q732L^Li_Gqnq)L(
zi5{2dZ~c`vMtm}yf82L&YGCcM{014HEW7?#mlQ7R#*{~k5M&@Ao-9;j=!F0L<OCWS
z;gZA4BPlAbq1W<o^%BWbeaUIbQqy&ZPzU7np=|u37p;8z3q56dd5{*=AKuameM1x~
zvLB`tUAVm+hk!<;VCE)id&DMf7wajdTF+=EU0kFTRPZTSwqr@y%@a~X96bbn+Ex~?
zyfbzkDA^8Jh}Z?z@taT&()zq|t8oQbTU%Pa1Q6ppJ{91~h^3P35DeS1v(cI^LNpCi
zva`+k?oa4gkTGtv)eEufGpp$odCn22brG;if<+nphTc*T^)e3O4EM~OLINXwX4Zm_
zT`LdW$sTyigqW__cWSi~s=cvWDlyJ}{^g)?LZx)g-%nBDMu+(N{c5!o1F+-4kc>wj
zhm+i8mKN_AOcUZ6iVRR*A|eLFDugbrQxv(!604kTS+|EIAL4+W0I_}9iwb8GvB$%s
zUUnq|m(9`cqn17))4zVj2)R@DA_}S_eb$bn;$^OgKZ8O;F0yaE^cah#tabjvhD>=G
zt`31-%wd&1yll>1(O2}MVM0O1TZHBcDg-f@@oh&O84@#>%dWsW!E+Y|s0Hb@U)J$O
zDDKb-&Vj@k4=|3UcvMCmz6eqp*tRDoyLO)<m}!*7U3@3u)0<gBLQg=TPDsR=Dp9=V
za<Dsls(a1Ily{H=hx_CI3Lm@gf@#4oyV-anpsd-e@+0ILrbt)DA3e~}-`|_AU4&pK
z_$UpsGO8ID1Iu)zf&L`DY|~kxhDUwdnu&2OM=f1Att{83`PBIy5r}0Gw6>q);nv4d
zcfbZ}h6fD}whcW#8w3tc4XNwfzIe_z;@OO@$-%ifNOK|~0*R`k2?&A%LKUM9?B33f
z-KQ}o77+Y8D|PQ{E{%A>fScDl4j;eWBGlA!2W&T<$;N-Up?oLgr!;WmY;JUypPia-
zM9M(JnyZQY1ivv?jum;nMQ+wnd5fAJ0p}^+D1pJ$TGA8-gXB7w{27|2zV~MB6PNo~
z-p0xVRK~9TAx$P_3F?}}B1GR*_GcT|?DF`0oD4tSv^%9F+3(zvK^~h$SfKsk7^4-B
z$=!HGSp!;#eMFii>pTy;xy8=Xl*hh&jp8o#*?zWRVn}=(6Dr>?6>30Bvk%M_iAS>(
zd$Maw0)1BUT^lNA5*sT_qdAB}DY)pC_^#67hY9Jm4<j14$I>|fJVrCsxBO>l8xtxt
zY(+eYjf{3(yqqSf@2jjF6Wo8?yKZXvG^Ekhg2GiFzv9z^xq*dt;$Er?1v$>yQZjFj
zC=!!gSqp#rNlXg_>b~DxDKOMp8nm0^%;!%5*3rJe9L18{fMU-;ikHE}sQTo9I>i0z
zrFvG!IGMum;+NaV+<wa!*_2V*dO<LXKX59rn}y;=0K5v1#}VN;OowAs@6x#@ER2b4
za}XX1M%oLxQ#>pj=$*YsxV#xYnEwnw6ca*ztG*U-KRKc<+Sk^fYV#mCGX1VL>N-{q
zL%P2fCYM@CUEcj}M?lJNz|A!vO^}weA+jzeJ`RHx2@%}q0f{a}*IY-j55=N@;Bx|w
zHx?nD`nFT&@h1Idl^R~$tEykHA1LEB=7!PBD;>yKHp|yK)s6-9x2HGOHc?GSb_);3
z#Rye19HABaDYPgk@H;NLY!wprXHgTMas%h^)^o?@BlHB>wTGf@WLMeDr-p_J_I!kV
z<5U3NJUp8d5@R&f-+iCea<Pj=RJ!VgGT7v5{fN8Mciz{>6!^eqDgB0;Ry3hh)T#RO
zM2B!M@lhZxY}h?w?rgM0q`$qiCzp%Mq49aP9;1?~*^lJ&7$-bRQ6y1Bmz>*hZGd6{
zlV1_8pS!aI!3kZ8^KNhZk|I7+cGq?~a+TO%N=8)aal)c@WL6A$FlFm(0ts2EU*XOo
zvuwJ9aO=$?C7r)^jupm_Fs|cu-<1F71N=JRS2OThTT55q@Jj&vcCavhrl+<xg@0oW
zvYhkW`XSrn&@ggWZ_$q&BByVXRQ4_tp~tSLBcS@~H7ez9B1-mBozcaDRX#j?*uEw9
z#X0D71NPnfeESI=-UNkX3{<o3dQfq}=hQZ$26CU@4ACYXYR%5e&mEpa7n(8CGd+}Z
zqkF0)Z!DA@+53w8Xt1pj%;HSN%-H32Ws~$nQR$fXP0OI!lsZh#I&HLl^V4e>r;@%<
zbxi-ZT$coJKzW3axR7yiX#<RI+|-p@@Zr6Pg=KPv2lTw)0YfE@xR!Q)zf3ff*=@2^
zvi69IGm-TzXld}AO?$AgRoO<jB_tLGwU|GfSn>^}?+bM-X6hmuPRQsPo@wFU!p|_h
z*>u2NjCE(y>wp}yIP<jB9Du%vWB8az*H4tZ5j2I-3fkWtUla+%U$aN*JClI>Z0CZ~
zKZQ4~nr}Q9P>7%nhN#;<^*=L4Qi)vJ+s)$g^I2aQob*%iJeQcOjTQbDda3tzHmp=u
zREeD=WQm5XCL<&SuhBYZzYVQoMpwYdmX${9{b2Eh(OlHKhh`UYSwd0f8&Hk_#m1F#
zQ~Fx^d5jKON6A5z^QN$kn{e@XbNt12Ss;s2d_0Bt+>qK&!xypItK52kq$cH=2HXr7
z$!|6X;obzNiW)k9QO6I55l0qiO-2`{C)%e`;R2;ocAX_Y{{SwUlz7gpmV$m6qrL4P
zZ>Ga(4qh;b`=NM=I~4FuOU9U3i;MSYrehd!y3zt&Cti@t5MFa4+c-}iu#uPXK#MHX
zq>j`h?5d;mJa&DV5<x}#42wgs?hm@DTe>4s6SR7!97gW$iTyJ4<CgWF_ar&Ur9Wue
zNA=Sv%fd9YEazw`S(K=z&YrO%Rr|g-mXwSMtu<^vzel7ZqNNEQBq5S9rMuULU}(9_
z4Paqe>-kp9T3qrH0MOhQdda*}YSq_OSqb)MvHTc^9eg<!+IB^PLQNe1dVPoZcK(;W
zD5HH^*V98bdmTajetnhpx~&>Vw)kM>4)D06+95E@6q%py3?ds}FEe;Xdt;}0wwE9@
z{kninR{J^GgrAE<&}F6Zr1uBY^;{`aev$K{Itl9!WM-54?0w3^xROB?2X5M5%~W3>
zc`bZQ-G$l6tp|i2HC$3=ZsJD(S?4%)XTObY$uP#9SGYKbwA`gh*iw87hUSSIXkW0P
zB5|U1ges3ca1OR;U+kHr{JN(pI$As^{TF{J05oc8W5BXn)qn?lg|iG^=?fdHmvk1P
z(r=yNw~JT66NL}^d)xgkBC5d26q3OFC6)ljAQjIU7hwjsgzx&cJyfn&78LlO>v$N`
zt!_*qoPWkeH5LMVeMIs|f|kuH1%%#15;x(_X-}`|*@a66`{7%ysE_lxr>B>yq|r=S
zLV^f}rB`m@RB6av{^La1MwQ8D-Y5D)lNk(D!#ga_V%i3lyBNr<zwWxUsJoo%zEx%j
z9xua|eJ5~8?hQ%E4QegWU$6eUUlz2p@SwoC^=9G)WnnyV(uv=Eb3$Pt0uKoM3|p7R
zu_#u*wtBc)p%et^V9?PcaHL~YI%fa?9_E?LdR&a}++1xC$D)E1@%L_o&^P1cOZD!n
zKKQ86vJQIROar&Z#!DBSl}`$eoJS3x%~ym}{Aa(kRho)sWkkUaU$9fi#D7{@A!(UT
zqw(%5X!q@8C_KpByy-hS6Wj+Xu6F5XKn~ZXnp#8j1!8&AX|&@OP>PQ=9^bkzlNZzN
z+VX^hyEUF|`Vh7jhWJ47k=8d{%R`p<#Cb^)L%gAzfzk)FB^|B}3B1DoFjGWRVc?T2
z6}8)WYFFjBrwZp>UkOofLi%#<wMoL}_@6a5p*@4%-*rXQOU;?&8`#aazR<E_!cKiK
z-9pznOaLy->7c(~9pz=44^sji(e1LgxHpPaN0T<)FF}tRJd+D`UN{*^Hp~hN%#M@Y
z6nyWpyV6fOq5*Km<UFLTI{l=9v#Ch0?Y$m#ZzEr2Oh3~q<0<&RAY<1p_QJ!ouWeNn
z9a9QxDL<GZY{abK-m8LjulLPcESDB$loNtY_*x;-^Nn2l;_z;kZepf9^UM4TvIjr-
zvw3)~7rqAIH?8L96BpxUlC~ah4LW*z;XLymoJsCztrK;;3`n@8UA;bSB%&cFW+9BM
z3SMSrtHD(tmh4-gX&Q>!@u#VhAD*6pg^_mFS5-pzx2<LLecPA7)Mto6No|FTx4IYX
zL*C%;WU$clm<|iYZMzLvX%iQJmql$Rf;h!qd46*WVaZWcuoMv@J8LOD8%=YgIycTy
z87#iG6g73~P$5Ok!T2s#PrI#Chta#?4cM8_-bAe~|3E*nsSu<0iJFK5RSI$(b~F90
zzjE|A)Zg@DyDhxu%}#W6s?vP)+a0-kL=|-6Yy6DWOZwdg7d6?cMOC+OEVukCelp^}
zfn(_D*3HMDV=2B9^QBhC_D*T~{KV~p>*?yItU}0ZetZ%|DoDEUoYjn5!BUl<H}_f}
z?5t)LRoOs!bIcr*EPqCtBsTNCn9Dtt{(nTrEC{ScD`P16mKb~rxza;IQmvn#h?bx(
zn*(c$B6?liyEvbaf0%O^t0XAsT8~h`X!-n5;Cc-1-tu&c{Y%Cye@!?vzc2!=SHf&x
z+$$T~@vKbh1(hzgJiPZYX39}8Q#(aJ=twxx{5#_GtmEy1%d?WMwhqLz#6UCC7QVy$
z<)<E?h)8}}?Lze~H(%U@!Wi}qkJ5f!+Zh8_zQgoPvMO^QpM?bJ_uY<ng|gAwZ%=L)
z_13#%mR>|;?E3X5*srY*NmHo#Mtrlc&)^WU5VBZFh5sBM!RPHradfUF+77^Vbx((K
z0QlX7nu0dNc;5{2<3AOe#djwSrA!@OVy+|`Y!tiJdcRW2Kh+ZJauk>bUQ#dAY1y&|
z69ZP|V!>a9c%06(XaiQ|D3>$as6*0f5_EVBnHsh}u^}RQ==~HYnUWozU||iIZRO(X
zrlhzmuvC!|@6hhD_s%{e@zh`2F<!n#11YSC!Qx%m4#P2GX@tmy5``V-yP}V7)CRl?
z(9EyTEDi#jV*aqPE1d;y5fBiVTRgxntWrusUosEbjl1K7yFh&h>z=-^&QOxsZpZiK
zPtF!v_Tl;~*W!)A1%U+9w3vHXAMfD&Kk(SUkeJH9_PP8|ID}z&g%Nq1lDJN4uW38S
z=KX(>vE3G_ntze8^TnKjf0MC!u^k3Axv;{#&RJ55YF+*VOcj`miTs}}IzJ4#Z|Mzk
z*r%fN*SN7|+uL?ObFLb@X|x6W?H{aDVr0@L`WJGLhr_6DR&E)L7K>uaA4o<aY(w6)
p=so_&9rqgGU;BIhzoMvbHv}?J8*Lr#+`s5cMnVw?`(XI_{{XyRM9=^L

literal 0
HcmV?d00001

diff --git a/wiki/Tutorials/PublicWebServer/index.md b/wiki/Tutorials/PublicWebServer/index.md
index 1d1eb4c2..6052d29a 100644
--- a/wiki/Tutorials/PublicWebServer/index.md
+++ b/wiki/Tutorials/PublicWebServer/index.md
@@ -1,10 +1,12 @@
 # Secure hosting of a public Web Server
 
-When providing an online service to the public, encryption and authentication are the two main security aspects to consider.
+When providing an online service to the public, **encryption** and **authentication** are the two main security aspects to consider.
 Neglecting either one of them, could potentially lead to unauthorized access, privacy violations or even server hijacking.
 
 One quick way to encrypt and authenticate is explained below.
-It is assumed, that you already have an instance running inside the de.NBI Cloud to host the web server, with a public floating IP attached.
+
+It is assumed, that you already have a designated instance running inside the de.NBI Cloud with a public floating IP attached.
+Please start the **backend service** (e.g. a Galaxy server) that you would like to make publicly available and configure it to listen on `localhost` or `127.0.0.1` only.
 
 ## Domain name registration
 
@@ -23,7 +25,7 @@ making it easy for attackers to intercept and read sensitive information.
 Therefore, do not expose your HTTP-only-speaking web server software directly, but use an encrypting reverse proxy in front.
 
 TLS encrypts data during transmission, preventing unauthorized access and eavesdropping.
-One simple way to use TLS is to place a [Caddy server](https://caddyserver.com/) in between the internet and the web server you would like to make publicly available.
+One simple way to use TLS is to place a [Caddy server](https://caddyserver.com/) in between the internet and the backend service you would like to make publicly available.
 This way, Caddy will act as a [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) encrypting your traffic. Caddy will automatically provision a free TLS certificate for your domain name through the non-profit certificate authority Let's Encrypt and renew it when necessary.
 
 ### Caddy - Installation
@@ -44,16 +46,49 @@ The Caddy server should now be installed and running.
 
 Source: [Caddy installation steps for Ubuntu/Debian](https://caddyserver.com/docs/install#debian-ubuntu-raspbian)
 
+### Caddy - Reachability
+
+To make your Caddy server publicly reachable, outside access to the network ports `80` (HTTP) and `443` (HTTPS) has to be granted.
+
+- Launch the OpenStack Dashboard
+- In the menu on the left go to `Network` -> `Security Groups`
+- Click on the button `+ Create Security Group`
+- Name the new security group "public-web-server" and confirm the creation by clicking on `Create Security Group`
+
+Now the security group rules list should be visible.
+
+- Click on `+ Add Rule`
+- Select "**HTTP**" as the `Rule`
+- Enter "0.0.0.0/0" as the `CIDR` and click on `Add`
+
+- Click on `+ Add Rule` again
+- This time select "**HTTPS**" as the `Rule`
+- Enter "0.0.0.0/0" as the `CIDR` and click on `Add`
+
+The result should look like this:
+
+![](images/security-group-rules.png)
+
+Next, the security group needs to be added to the instance hosting your web server.
+
+- In the menu on the left go to `Instances`
+- Find your instance and select `Edit Security Groups` from its `Actions` drop-down list
+- Add your new security group "public-web-server" to the list of Instance Security Groups by clicking on the `+` next to it, then click `Save`
+
+The Caddy server should now be publicly reachable via HTTP on port `80` and serve its default web page.
+
 ### Caddy - Configuration
 
+This section will configure the Caddy server to set up TLS and to proxy requests to your backend service.
+
 Requirements:
 
 - A domain name pointing to the public floating IP of your web server instance.
-- A web server that you would like to make public (e.g. a Galaxy server) listening on `localhost` or `127.0.0.1`.
+- A backend service that you would like to make public (e.g. a Galaxy server) listening on `localhost` or `127.0.0.1`.
 
 Replace the contents of `/etc/caddy/Caddyfile` on your instance with the snippet below.
 Replace `example.bi.denbi.de` with your own domain name and replace port `8080` with the port the
-web server is listening on.
+backend service is listening on.
 
 `/etc/caddy/Caddyfile`
 ```
@@ -65,17 +100,17 @@ example.bi.denbi.de {
 Reload the Caddy server:
 `sudo systemctl reload caddy`
 
-Afterwards, you should be able to access your web server by simply entering the domain name (without any port).
+Afterwards, you should be able to access your backend service by simply entering the domain name (without any port).
 Your browser should now indicate that the connection is secure, as seen below.
 
 ![](images/connection-secure.png)
 
 ## Authentication
 
-It is strongly advised to make use of the authentication and user management features your web server provides.
+It is strongly advised to **make use of the authentication and user management features** your backend service provides.
 
 In case the web server you make public does not offer any authentication methods,
-access must be regulated by telling the Caddy server to ask visitors for their username and password.
+**access must be regulated** by telling the Caddy server to ask visitors for their username and password.
 Users are managed inside the Caddy server configuration file.
 To create a new user, e.g. `alice`, generate a password hash using 
 

From a1946388a2333770b30fe325812a0b98641979de Mon Sep 17 00:00:00 2001
From: Christian Henke <maitai@users.noreply.github.com>
Date: Fri, 18 Aug 2023 11:41:43 +0200
Subject: [PATCH 3/5] clarifications

---
 wiki/Tutorials/PublicWebServer/index.md | 31 ++++++++++++++-----------
 1 file changed, 18 insertions(+), 13 deletions(-)

diff --git a/wiki/Tutorials/PublicWebServer/index.md b/wiki/Tutorials/PublicWebServer/index.md
index 6052d29a..ae607d70 100644
--- a/wiki/Tutorials/PublicWebServer/index.md
+++ b/wiki/Tutorials/PublicWebServer/index.md
@@ -1,21 +1,22 @@
 # Secure hosting of a public Web Server
 
 When providing an online service to the public, **encryption** and **authentication** are the two main security aspects to consider.
-Neglecting either one of them, could potentially lead to unauthorized access, privacy violations or even server hijacking.
+Neglecting either one of them could potentially lead to unauthorized access, privacy violations or even server hijacking.
 
 One quick way to encrypt and authenticate is explained below.
 
-It is assumed, that you already have a designated instance running inside the de.NBI Cloud with a public floating IP attached.
+It is assumed, that you already have a designated instance running inside the de.NBI Cloud with a public Floating IP attached.
 Please start the **backend service** (e.g. a Galaxy server) that you would like to make publicly available and configure it to listen on `localhost` or `127.0.0.1` only.
 
 ## Domain name registration
 
 Every public website needs a domain name that people can type into their browser address bar to visit the site.
 Domain names can usually be obtained from domain name registrars, which is out of scope of this document.
+A domain name is strictly necessary to be able to use TLS encryption.
 
-Please make sure your domain name points to the public floating IP of your web server instance.
+Please make sure your domain name points to the public Floating IP of your web server instance.
 
-For the Bielefeld site you may request a domain name ending in `.bi.denbi.de` (e.g. `myservice.bi.denbi.de`) by [contacting us](../../Compute_Center/Bielefeld.md#contact).
+For the Bielefeld site you may request a domain name ending in `.bi.denbi.de` (e.g. `myservice.bi.denbi.de`) by [contacting us](../../Compute_Center/Bielefeld.md#contact) and mentioning your domain name of choice, your OpenStack project name and the target Floating IP for the domain.
 
 ## Encryption
 
@@ -80,17 +81,18 @@ The Caddy server should now be publicly reachable via HTTP on port `80` and serv
 ### Caddy - Configuration
 
 This section will configure the Caddy server to set up TLS and to proxy requests to your backend service.
+From then on, any requests on port `80` will be redirected to the secure port `443` (TLS).
 
 Requirements:
 
-- A domain name pointing to the public floating IP of your web server instance.
-- A backend service that you would like to make public (e.g. a Galaxy server) listening on `localhost` or `127.0.0.1`.
+- A domain name pointing to the public Floating IP of your web server instance.
+- A backend service that you would like to make public listening on `localhost` or `127.0.0.1`.
 
 Replace the contents of `/etc/caddy/Caddyfile` on your instance with the snippet below.
-Replace `example.bi.denbi.de` with your own domain name and replace port `8080` with the port the
+Replace `example.bi.denbi.de` with your own domain name and replace port `8080` with the port your
 backend service is listening on.
 
-`/etc/caddy/Caddyfile`
+`/etc/caddy/Caddyfile`:
 ```
 example.bi.denbi.de {
   reverse_proxy 127.0.0.1:8080
@@ -107,9 +109,12 @@ Your browser should now indicate that the connection is secure, as seen below.
 
 ## Authentication
 
-It is strongly advised to **make use of the authentication and user management features** your backend service provides.
+It is strongly advised to **make use** of the authentication and user management features your backend service
+already provides.
 
-In case the web server you make public does not offer any authentication methods,
+### Basic Authentication
+
+In case the backend service you make public does not offer any authentication methods,
 **access must be regulated** by telling the Caddy server to ask visitors for their username and password.
 Users are managed inside the Caddy server configuration file.
 To create a new user, e.g. `alice`, generate a password hash using 
@@ -118,10 +123,10 @@ To create a new user, e.g. `alice`, generate a password hash using
 caddy hash-password
 ```
 
-on the command line.
+on the command line on your instance.
 Add the username and the password hash by creating a new `basicauth` section as seen below.
 
-`/etc/caddy/Caddyfile`
+`/etc/caddy/Caddyfile`:
 ```
 example.bi.denbi.de {
   reverse_proxy 127.0.0.1:8000
@@ -143,6 +148,6 @@ To add more users, simply add more lines to the `basicauth` section:
 
 Finally, reload the Caddy server: `sudo systemctl reload caddy`
 
-Visitors should now be prompted for username and password:
+Visitors should now be prompted for a username and password:
 
 ![](images/basic-auth.png)

From afe90b604d3ed74c5d94db7b7976daf1b74478b9 Mon Sep 17 00:00:00 2001
From: Christian Henke <maitai@users.noreply.github.com>
Date: Fri, 18 Aug 2023 12:04:47 +0200
Subject: [PATCH 4/5] clarifications

---
 wiki/Tutorials/PublicWebServer/index.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/wiki/Tutorials/PublicWebServer/index.md b/wiki/Tutorials/PublicWebServer/index.md
index ae607d70..0b362828 100644
--- a/wiki/Tutorials/PublicWebServer/index.md
+++ b/wiki/Tutorials/PublicWebServer/index.md
@@ -123,8 +123,9 @@ To create a new user, e.g. `alice`, generate a password hash using
 caddy hash-password
 ```
 
-on the command line on your instance.
-Add the username and the password hash by creating a new `basicauth` section as seen below.
+on the command line on your instance. The command will ask you to enter and repeat a password of your choice.
+Add the username and the resulting generated password hash to the config file by creating a
+new `basicauth` section as seen below.
 
 `/etc/caddy/Caddyfile`:
 ```

From d876496cc0c2e16f2aeb4e4bd25478941402a6a6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Kr=C3=BCger?= <jkrue@users.noreply.github.com>
Date: Wed, 23 Aug 2023 14:47:22 +0200
Subject: [PATCH 5/5] Update bielefeld 08/2023 (#475)

* update Bielefeld specific Images section

* update formatting

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

* Update wiki/Compute_Center/Bielefeld.md

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>

---------

Co-authored-by: Christian Henke <maitai@users.noreply.github.com>
---
 wiki/Compute_Center/Bielefeld.md | 168 ++++++++++++++++---------------
 1 file changed, 88 insertions(+), 80 deletions(-)

diff --git a/wiki/Compute_Center/Bielefeld.md b/wiki/Compute_Center/Bielefeld.md
index 47e8d529..963349e2 100644
--- a/wiki/Compute_Center/Bielefeld.md
+++ b/wiki/Compute_Center/Bielefeld.md
@@ -1,26 +1,26 @@
 # de.NBI cloud at Bielefeld University
 
-The Bielefeld cloud site currently has OpenStack Train installed. That means that the general descriptions with 
-screenshots based on OpenStack Newton differs from our installation. 
+The Bielefeld cloud site currently runs the OpenStack version "Yoga".
 
 ## Contact
-The de.NBI cloud team in Bielefeld can be contacted via email: os-service(at)cebitec.uni-bielefeld.de
 
+The de.NBI cloud team in Bielefeld can be contacted via email: os-service(at)cebitec.uni-bielefeld.de
 
 ## Entrypoint
-The OpenStack Dashboard as main entry point to the de.NBI Cloud Bielefeld is available 
+
+The OpenStack Dashboard as main entry point to the de.NBI Cloud Bielefeld is available
 at [https://openstack.cebitec.uni-bielefeld.de](https://openstack.cebitec.uni-bielefeld.de).
 
 ## Endpoints
 
-You can get an up-to-date list of API endpoints of the available services using the dashboard or 
+You can get an up-to-date list of API endpoints of the available services using the dashboard or
 the OpenStack command-line tool (`openstack endpoint list`).
 
 ## Login
-The Bielefeld cloud site supports login using LifeScience AAI via OpenID Connect or default Keystone credentials. 
-Using LifeScience AAI is the preferred way for all cloud users and the only way for non-cloud users not working 
-at Bielefeld university. 
 
+The Bielefeld cloud site supports login using LifeScience AAI via OpenID Connect or default Keystone credentials.
+Using LifeScience AAI is the preferred way for all cloud users not working
+at Bielefeld university.
 
 ## Network
 
@@ -31,33 +31,34 @@ Project network routers are managed by the de.NBI Cloud Bielefeld team. All othe
 management operations are unrestricted. The routers of the deNBI projects are located in
 an unrestricted public network.
 
-
 ### MTU settings
 
-We make use of a network virtualization technology called Virtual Extensible LAN (VXLAN). The MTU value provided 
-to the network interfaces is 1450 and therefore differs from an expected default *value* (e.g. 1500). You have to 
+We make use of a network virtualization technology called Virtual Extensible LAN (VXLAN). The MTU value provided
+to the network interfaces is 1450 and therefore differs from an expected default *value* (e.g. 1500). You have to
 consider this if running docker or any other container technology.
 
 ## Images
 
-Preconfigured cloud images are available for Ubuntu LTS (18.04, 20.04, and 22.04) and Debian (10 and 11). 
+Preconfigured cloud images are available for Ubuntu LTS (20.04, and 22.04) and Debian (11 and 12).
 These images apply some auto-configuration on boot specific to the cloud site Bielefeld:
 
-- Site-local APT mirror is used as default
-- If needed, APT, Docker and the environment are configured to use the local proxy
+- Site-local APT mirror is used as default (only Ubuntu LTS).
+- New login style showing important messages from de.NBI cloud site Bielefeld (if there are any).
+- Fail2ban (https://github.com/fail2ban/fail2ban) comes preinstalled and configured to monitor SSH access and improve
+  security.
 
 All images are able to run on other cloud sites without any further modifications.
 
 ### Ubuntu apt mirror
 
-We run an apt mirror for Ubuntu LTS releases (18.04, 20.04 and 22.04) to speed up package download. The mirror is available 
-at the Bielefeld cloud site through the external (http://apt-cache.bi.denbi.de:9999 or http://129.70.51.2:9999) and cebitec
-(http://172.21.40.2:9999) network.
+We run an apt mirror for Ubuntu LTS releases (20.04 and 22.04) to speed up package download. The mirror is available
+at the Bielefeld cloud site through the external (http://apt-cache.bi.denbi.de:9999 or http://129.70.51.2:9999)
+network.
 This mirror is synced every midnight with the official Canonical/Debian repositories.
 
 ## Object storage
 
-The storage backend used by the Bielefeld cloud site is powered by [Ceph](https://www.ceph.com/en/). The Object storage 
+The storage backend used by the Bielefeld cloud site is powered by [Ceph](https://www.ceph.com/en/). The Object storage
 endpoint provides API access via SWIFT and S3. The latter should be preferred due to better performance.
 You can find a tutorial [here](../Tutorials/ObjectStorage/index.md) on how to use this service.
 
@@ -72,13 +73,12 @@ are independent of this cloud-center), you have to copy your data to a safe loca
 for yourself. We do our best to prevent any data loss, but we can't guarantee that 100%.
 Here is a quick overview about our solutions for storing data:
 
-| Data Location | Description | Performance |
-| ------------- | ----------- | ----------- |
-| Root Disk     | The root disk of an instance is hosted on a RAID10 backend. This means that data is safe against single harddrive failures. However, if the hypervisor itself goes bad your data will be also completely unavailable. | Fast |
-| Ephemeral Disk | Some flavors provide an extra disk called "ephemeral disk". While this storage is practical for most use-cases it is also the most unsafe one. They are **not** included in Snapshots and should be used for temporarily used data. | Fast |
-| Volumes       | Volumes are stored redundantly in our Ceph-Storage. Since volumes are network-backed storage, random read/write operations performance is significantly slower than using the local disk space. Volumes offer a great solution for storing persistent data since volumes can be swapped to different instances. | Medium - Fast |
-| S3 Object Storage | This data is also stored in our Ceph-Storage just like volumes. Access to this data is completely independent from instances since access is done via regular HTTPS. Therefore data in S3 is safe against any hypervisor issues. Performance heavily depends on the client used to access the object storage. A single-threaded connection is slow but can heavily speed up using multiple connections retrieving different chunks of the same object. Pushing data is much slower than retrieving data. | Slow - Fast |
-
+| Data Location     | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | Performance   |
+|-------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------|
+| Root Disk         | The root disk of an instance is hosted on a RAID10 backend. This means that data is safe against single harddrive failures. However, if the hypervisor itself goes bad your data will be also completely unavailable.                                                                                                                                                                                                                                                                                    | Fast          |
+| Ephemeral Disk    | Some flavors provide an extra disk called "ephemeral disk". While this storage is practical for most use-cases it is also the most unsafe one. They are **not** included in Snapshots and should be used for temporarily used data.                                                                                                                                                                                                                                                                      | Fast          |
+| Volumes           | Volumes are stored redundantly in our Ceph-Storage. Since volumes are network-backed storage, random read/write operations performance is significantly slower than using the local disk space. Volumes offer a great solution for storing persistent data since volumes can be swapped to different instances.                                                                                                                                                                                          | Medium - Fast |
+| S3 Object Storage | This data is also stored in our Ceph-Storage just like volumes. Access to this data is completely independent from instances since access is done via regular HTTPS. Therefore data in S3 is safe against any hypervisor issues. Performance heavily depends on the client used to access the object storage. A single-threaded connection is slow but can heavily speed up using multiple connections retrieving different chunks of the same object. Pushing data is much slower than retrieving data. | Slow - Fast   |
 
 ## Server Groups for optional performance gains
 
@@ -86,12 +86,12 @@ Our OpenStack cluster consists of multiple compute nodes hosting all running ins
 can benefit if you schedule the instances of your project on as many different compute nodes as possible.
 
 - Distributed systems (like HPC, databases...) can get a significant performance gain.
-- Spreading instances over several compute nodes increases the availability when running a high availability setup. 
+- Spreading instances over several compute nodes increases the availability when running a high availability setup.
 
-This can be achieved with *Server Groups*. Server Groups act as a "container" for instances and describe 
+This can be achieved with *Server Groups*. Server Groups act as a "container" for instances and describe
 a "policy" on how those instances should be scheduled across the OpenStack Compute nodes.
 
-In order to create such Server Group, login to the OpenStack Dashboard and navigate to Compute -> Server Groups. 
+In order to create such Server Group, login to the OpenStack Dashboard and navigate to Compute -> Server Groups.
 Afterwards click on *Create Server Group*:
 ![sg_screen1](img/bielefeld/sg_screen1.png)
 
@@ -100,55 +100,53 @@ On the new screen, give this security group a name and assign the wanted affinit
 
 The policies are defined as following:
 
-| Policy | Description |
-|--------------|--------------|                                                
-| affinity        | Force schedule all instances on one single compute node. |
-| soft affinity         | Try to schedule all instances on a single compute node. Allow to violate the policy when there is not enough space on this single node.      |
-| anti affinity     | Force schedule all instances as spread as possible on all compute nodes.     |
-| soft anti affinity    | Try to schedule all instances as spread as possible on all compute nodes. Allow to violate this policy when there are not enough compute nodes with such capacity.     |
+| Policy             | Description                                                                                                                                                        |
+|--------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| affinity           | Force schedule all instances on one single compute node.                                                                                                           |
+| soft affinity      | Try to schedule all instances on a single compute node. Allow to violate the policy when there is not enough space on this single node.                            |
+| anti affinity      | Force schedule all instances as spread as possible on all compute nodes.                                                                                           |
+| soft anti affinity | Try to schedule all instances as spread as possible on all compute nodes. Allow to violate this policy when there are not enough compute nodes with such capacity. |
 
-It is recommended to use the "soft" variant. Otherwise, instances can fail to start when they would violate 
+It is recommended to use the "soft" variant. Otherwise, instances can fail to start when they would violate
 the more strict policy options.
 
-Afterwards the creation of a new Server Group, you can add instances to it when you are creating them. 
+Afterwards the creation of a new Server Group, you can add instances to it when you are creating them.
 It's not possible to add already running instances to a Server Group since they are already scheduled.
 On the *Server Groups* tab, add the group by clicking on the small up-arrow:
 ![sg_screen3](img/bielefeld/sg_screen3.png)
 
 Afterwards, the scheduling of this instance will respect your selected Server Group policy.
 
-
 ## Application Credentials (use OpenStack API)
 
 In order to access the OpenStack Cloud via command-line tools, you need to source a so called rc file.
-This _standard_ procedure does not work on all Cloud locations. Executing `source` on the 
-downloaded rc file prompts for a password. This password **is not the same** you have used when 
+This _standard_ procedure does not work on all Cloud locations. Executing `source` on the
+downloaded rc file prompts for a password. This password **is not the same** you have used when
 authenticating to LifeScience in order to access the OpenStack Dashboard.
 
-Internally, OpenStack does not set a local password for your ELIXIR-ID, since it does not need to 
+Internally, OpenStack does not set a local password for your ELIXIR-ID, since it does not need to
 hence OpenStack confirms your authorization separately via LifeScience AAI.
-However, the commandline-tools can only function with a set local password. Prior to the new 
-OpenStack release, users had to contact the cloud site administrators in order for them to set an 
-explicit local password and send it back to the user via encrypted mail or de.NBI vault service. 
+However, the commandline-tools can only function with a set local password. Prior to the new
+OpenStack release, users had to contact the cloud site administrators in order for them to set an
+explicit local password and send it back to the user via encrypted mail or de.NBI vault service.
 
-Luckily, there is a new feature since OpenStack Rocky where users are able to set their own *local* 
+Luckily, there is a new feature since OpenStack Rocky where users are able to set their own *local*
 credentials via the dashboard.
 
-Log in to the OpenStack Dashboard as usual, on the left side navigate to Identity -> Application 
+Log in to the OpenStack Dashboard as usual, on the left side navigate to Identity -> Application
 Credentials and create a new credential set:
 ![ac_screen1](img/bielefeld/ac_screen1.png)
 
-Afterwards, you have to specify your new credential set. You can leave the 'secret' field blank, 
-OpenStack will autogenerate a long and cryptic password string afterwards. Of course you can also 
+Afterwards, you have to specify your new credential set. You can leave the 'secret' field blank,
+OpenStack will autogenerate a long and cryptic password string afterwards. Of course you can also
 provide your own secret.
 **Warning: The secret field is not hidden in the browser!**. Afterwards click on *Create Application Credential*:
 ![ac_screen2](img/bielefeld/ac_screen2.png)
 
-In the new window, you can directly download a generated rc file. Make sure that you explicitly 
+In the new window, you can directly download a generated rc file. Make sure that you explicitly
 click on *Close* afterwards, otherwise the credential won't be saved:
 ![ac_screen3](img/bielefeld/ac_screen3.png)
 
-
 After the credential has been downloaded to your favourite location,
 you can simply source the file with:
 
@@ -161,28 +159,27 @@ Now you can use the openstack commandline tools.
 
 ### Note
 
-Application credentials are currently not supported by all applications or development kits accessing the 
-Openstack API. In this case users have to contact the cloud site administrators in order for them to set 
+Application credentials are currently not supported by all applications or development kits accessing the
+Openstack API. In this case users have to contact the cloud site administrators in order for them to set
 an explicit local password.
 
-
 ## Instance Metadata
 
 Openstack presents configuration information to instances it starts via a mechanism called metadata.
-This metadata can be accessed querying `http://169.254.169.254/`. Services like cloud-init make use 
+This metadata can be accessed querying `http://169.254.169.254/`. Services like cloud-init make use
 of this metadata to initialize and configure a started instance.
 
 Beside metadata information in AWS compatible format, Openstack additionally supports metadata in its
 own style. There are three different kind of metadata which can be accessed by the user.
 
-| Typ | Description                                                                                   |
-|-----|-----------------------------------------------------------------------------------------------|
+| Typ          | Description                                                                                   |
+|--------------|-----------------------------------------------------------------------------------------------|
 | Compute data | Structured data containing information about network, hostname, public-key, ...               |
-| User data | The user has the ability to pass unstructured data like shell scripts, ...  to the instance.  |
-| Vendor data | Optional the cloud provider can make vendor specific information (static or dynamic) availabe |
+| User data    | The user has the ability to pass unstructured data like shell scripts, ...  to the instance.  |
+| Vendor data  | Optional the cloud provider can make vendor specific information (static or dynamic) availabe |
 
 On request project specific information like all users with their elixir id/name and public-keys can be made
-available. For example, this information can be used to build up a multi-user instance, giving all users of the 
+available. For example, this information can be used to build up a multi-user instance, giving all users of the
 project access.
 
 ```
@@ -203,8 +200,7 @@ project access.
 }
 ```
 
-**Important: This feature is not active as a default setting and will only be enabled on request.** 
-
+**Important: This feature is not active as a default setting and will only be enabled on request.**
 
 ## (Information) Security
 
@@ -217,19 +213,20 @@ Our cloud infrastructure and user virtual machines are clock synchronised using
 
 ### Information security incidents
 
-If users become aware of a security incident or notice an abnormal behaviour of their instances (e.g. unexpected high CPU 
-load or high network traffic without actively running anything), they should immediately contact 
+If users become aware of a security incident or notice an abnormal behaviour of their instances (e.g. unexpected high
+CPU
+load or high network traffic without actively running anything), they should immediately contact
 the cloud administrators (os-service@cebitec.uni-bielefeld.de). The administrators will assist in isolating
 the affected instances from the public network and will (with the owner's consent) start a basic forensic analysis.
-Depending on the analysis results a security incident report is written and the security incident 
-officer of Bielefeld university is informed. If any personal data is affected, the data security officer 
+Depending on the analysis results a security incident report is written and the security incident
+officer of Bielefeld university is informed. If any personal data is affected, the data security officer
 is also consulted.
 
 ### Cryptography
 
 We use cryptographic methods to protect user data stored on our infrastructure:
 
-- Client connections to our OpenStack Dashboard and Openstack API 
+- Client connections to our OpenStack Dashboard and Openstack API
   are encrypted using TLS
 - Local disks of instances are located on encrypted devices (LUKS)
 - Cloud storage is LUKS encrypted
@@ -249,15 +246,17 @@ If we detect an instance with a **HIGH** vulnerability:
 
 If we detect an instance with a **MEDIUM** vulnerability:
 
-- The instance will continue to exist and connect to the internet as usually UNLESS this issue is not fixed in a specified time
+- The instance will continue to exist and connect to the internet as usually UNLESS this issue is not fixed in a
+  specified time
 - For this, you will also be contacted by us with an attached report
   - These reports also give hints on how to fix the listed vulnerability
 - You can contact us if you need help in resolving a vulnerability
 
-
 ## Current Known Problems
 
-- Spawning large GPU instances can fail after 10~ minutes. These instance have special requirements for main-memory and spawning them can therefore cause timeouts. The solution is simply to try again or pick a flavor which requires less memory. If spawning GPU-instances fail repeatedly, please contact us. 
+- Spawning large GPU instances can fail after 10~ minutes. These instance have special requirements for main-memory and
+  spawning them can therefore cause timeouts. The solution is simply to try again or pick a flavor which requires less
+  memory. If spawning GPU-instances fail repeatedly, please contact us.
 
 If you notice any issues which are not part of this list, don't hesitate to contact us.
 
@@ -277,18 +276,23 @@ to connect to an instance via an ssh client.
 If the client times out or throws an error like `Destination not reachable`:
 
 - Make sure that the instance is running and in an `ACTIVE` state.
-- Make sure that the instance has a floating-ip attached to it. You can't ssh into an instance which only has a private ip.
+- Make sure that the instance has a floating-ip attached to it. You can't ssh into an instance which only has a private
+  ip.
 - Check the SecurityGroups of your project and allow ingress port for SSH (Port 22).
-  - You can check this in the OpenStack-Dashboard: Project -> Network -> Security Groups.
-- You are using a broken snapshot or image which is not able to configure its internal network configuration via `cloud-init`.
+    - You can check this in the OpenStack-Dashboard: Project -> Network -> Security Groups.
+- You are using a broken snapshot or image which is not able to configure its internal network configuration
+  via `cloud-init`.
 - There may be network issues on our side.
 
 If you are receiving `Connection refused`:
 
-- Network connectivity to your instance is given and the internal ssh-server is running, but the instance itself is not allowing your connection.
+- Network connectivity to your instance is given and the internal ssh-server is running, but the instance itself is not
+  allowing your connection.
 
-- You are using a wrong or too open SSH-Key. 
-  - Make sure to use the correct private key-file and that the key on your local machine has correct permissions. Usually only the logged-in user should have access to it. The OpenSSH-Client won't try keys with too open permissions.
+- You are using a wrong or too open SSH-Key.
+    - Make sure to use the correct private key-file and that the key on your local machine has correct permissions.
+      Usually only the logged-in user should have access to it. The OpenSSH-Client won't try keys with too open
+      permissions.
 
 - You are using the wrong remote user.
   - If you are using an ubuntu based image or snapshot, the remote user is `ubuntu`. For debian it is `debian`.
@@ -297,13 +301,15 @@ If you are receiving `Connection refused`:
   - See [here](Bielefeld.md#my-instance-is-stuck-in-maintenance-mode-while-booting) on how to resolve this.
 
 - Something is misconfigured inside your instance.
-  - The public key in `/home/ubuntu/.ssh/authorized_keys` is missing.
-  - The permissions are broken or too open in `/home/ubuntu/` or `/home/ubuntu/.ssh/`. (Too open eg. with `chmod 777`).
-  - In these cases, you are completely locked out, and you won't be able to access your instance in some way again. In rare and urgent cases, we can manually repair this but for this we need your explicit consent to do so.
-  
+    - The public key in `/home/ubuntu/.ssh/authorized_keys` is missing.
+    - The permissions are broken or too open in `/home/ubuntu/` or `/home/ubuntu/.ssh/`. (Too open eg.
+      with `chmod 777`).
+    - In these cases, you are completely locked out, and you won't be able to access your instance in some way again. In
+      rare and urgent cases, we can manually repair this but for this we need your explicit consent to do so.
+
 ### My instance is stuck in maintenance mode while booting.
 
-When using a regular OpenStack-Project, you can check this by opening the VNC-Console of the instance. 
+When using a regular OpenStack-Project, you can check this by opening the VNC-Console of the instance.
 Click on your instance on the OpenStack-Dashboard and select `Console` in the tab-menu.
 
 ![](img/bielefeld/vncconsole.png)
@@ -317,11 +323,13 @@ If the console is not receiving your keystroke, click on the bar beforehand whic
 
 You should then scan and repair all your filesystems. You can list all your connected filesystems with `lsblk`.
 Afterwards perform a check and repair all issues with (replace the last character with the disk of your choice):
+
 ```shell
 sudo fsck.ext4 /dev/vd[a,b,c]
 ```
 
-If you are using a SimpleVM-Project, you are not able to access this console. Please contact the [Cloud-Helpdesk](https://cloud.denbi.de/portal/webapp/#/help).
+If you are using a SimpleVM-Project, you are not able to access this console. Please contact
+the [Cloud-Helpdesk](https://cloud.denbi.de/portal/webapp/#/help).
 
 ### I can't suspend or shelve my instance