From 0ea05b302c3e1ed7cf0eb8328d6e318a08682c3a Mon Sep 17 00:00:00 2001 From: Bernd Worsch Date: Sat, 21 Mar 2026 10:50:22 +0000 Subject: [PATCH] chore(creds): encrypted secrets [agent NK-WP-0005] --- sso-mfa/bootstrap/creds-state.yaml | 4 ++-- .../secrets.enc/authelia/secrets.env.age | Bin 1507 -> 1507 bytes .../secrets.enc/breakglass/secrets.env.age | Bin 491 -> 491 bytes .../secrets.enc/keycape/secrets.env.age | Bin 588 -> 588 bytes .../secrets.enc/lldap/secrets.env.age | Bin 724 -> 724 bytes .../secrets.enc/postgres/secrets.env.age | Bin 594 -> 594 bytes .../secrets.enc/privacyidea/pi.enc.age | 5 +++++ .../secrets.enc/privacyidea/private.pem.age | Bin 0 -> 1875 bytes .../secrets.enc/privacyidea/public.pem.age | Bin 0 -> 651 bytes .../secrets.enc/privacyidea/secrets.env.age | Bin 1143 -> 1143 bytes 10 files changed, 7 insertions(+), 2 deletions(-) create mode 100644 sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age create mode 100644 sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age create mode 100644 sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age diff --git a/sso-mfa/bootstrap/creds-state.yaml b/sso-mfa/bootstrap/creds-state.yaml index 83d3639..277fda3 100644 --- a/sso-mfa/bootstrap/creds-state.yaml +++ b/sso-mfa/bootstrap/creds-state.yaml @@ -25,8 +25,8 @@ secrets_applied: keycape: false # Post-apply bootstrap (agent-run when pod is Ready) -enckey_bootstrapped: false -pi_admin_created: false +enckey_bootstrapped: true +pi_admin_created: true # Derived: all true → bootstrap complete bootstrap_complete: false diff --git a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age index 727960abf0ca68627aa3bd7a01bd94f9ad422a77..3ce0f5bda759809fa84c9ac22523706baebcfeb5 100644 GIT binary patch delta 1493 zcmV;`1uFXE3*!rrAb)pBPGL((ZAvdWGf6WtW@ADzL^fk|Ohj!{Rc~x;OKmr9a%5>Z zQCCSaK?-enX>BxRN-{KhZ#Gv`S~+E9HhE_^VsbYtRBS<4L`X1HL^ye4GH7~cFbXX# zEg(orMOHFocTizPLU2`SH&jniYGPeggmKynHrLkX20r&G@5>l9WbK^dW*%-6|)KxdkQsIOpH^2 zvU_6TeShs(d(3DJ3iGr?^|qNl=U4nf0$O_0Bb>FDQ25tamPrc=R5_jL!&N^|3f zzM$AedPUTX;WH+gMz`d@&&j~JA4;tUMW=!;ptg{`wtoO3gt+w2l;J*3=?2~G?<@J< z1WAH5s$f`N(}L~52y^ubf1|vL4{TxB1ZB!Yg{CX@HCzSL9p616oi!|v7{i838!cEy zhV=`QgIX}?w)0zr@0E+|Ic4DGr+rodFrDOV?o>cx~PjViMThG{A5xvgkDaQ#3=z=AWsx*vt zeUmPcmu$a=P^&@9;tLX;f6EA#N#0MCtqhCB*F)Jzq^3T#;M!`a*R!gwJV25duI|?k z6)Zjd+^tTFh-o(iW9G&;)p5a8f!Q{YIUEgs?|(>@(*zOKpVu&QiGq!Uifpa;N#EEv ziu`?Ju7v2EEyM#-8XhF&2}Ad*LVIO!A71*%2}2{wMWq9>2tLoQoRVY2Y5zgLV<{KTL>_wxxseYs?$Sw$Y$4ZJP2%9hcJ*{M^6T!4-(|?y}jguZ`%B#`R z8ieWjn^?Q1R>@a_XX5j}2kP9*g}zfCb$^K*+5rUnjL|X9`8YXTjxe+P8qW?HdzpBE}i{OU_6F=-L-rCC{9Dw|hbgxQH(vh8vkP>$0>(I9uQL1E+ zv(*MOL`7a4TROZE%}AujMbdF7(0rHypGIr5#pTy9FbToEJT!UU$h@6;5WFM(>wn_p zTmRVDHzo^uPSh4PvxH=Wep3ZdO&r>U*eHB1b5gh=;Te##nZZojj}}#JgaO-L%`6W_ ziF+X%&X=qTLMeJ#m>3{0ad1qeN!qep2&!_ta`Kl{JhdG*_I}c^B{bv9(?+qtHnv2OE~bh`=^4dKaVWqb3h8qI!L?m2@Ae5iaa%@tGy7Y zI51l0EwFA-2!!ip4#j67+7W215(TCnfKz9@)G&1xB9hJ7foljLB)bIY8eyTPFO?H~ z+2!(krwzybbQFan*BjdLrA~?cHP?uN%TKOcC$*$$@8xg>`}58DYHa;q9^W#Kyr}Vz vRU0n2d=Z*&tF!z>%@-mL^8Y*-J74;6I+M|}LFYU(4G=ECPn-kMJ-ADvPKC;u delta 1493 zcmV;`1uFXE3*!rrAb(D0cVkm@a7-~VNpUtycWYB|O;|}pR(DQuK~zk1b!~WfQaNKa zcyLZLZwfI`XjVo`YIt*VW=u?MNkncnOjR{WxFBZM|n*r{@##M>5aw6I_+eqN{pwnNAwj`y-lh! zUWzY9T*)x}cH5Wkar_R#Gr8#sX{QW$>}5f~7pBZY$uG#7tEqGXzXmVynwtMwMVlg# zn$U~r`x<42$A7DK@pa4~xS3Hb=^`B{@x-UZVVSdaOmcZA?Uq<@#)+yQui5N3nZEXa#?FmY1t zL0RtGGLyzL>r-Y%fy$ceFGSk5fs#sJqDmbQ3fI9)#n%x;mv_XmQzeSf`BS80PsH{k3A$z-J6hQ8jpx5XWnyy zFhN--ntyCfP~R3jgI-2WV0DemJ9JG6kbpkk)n_U$yI6P}7=Q=pF=+pMQ&`bE^m?i- zi`2D2G#6!DrMK~J6OLDIyZ>9xv7F<@B%KrR2klFaBe4&{Pe{Ih?X5JcC*64wiJyx9 zU6@6A=@)peLtLY^&z#-4J{lz{x~tP-#kBxhO@DHsxBLjh{e3SOz5YP`;+gggx_R z3Etl-GzxMRH85fIG=VY+RvvP?)#=tX= zAAb?9uE5jWX@>0jC)iHyK~!WAQ?qcAe4)P9Bi)~vK>EzT!?fI8k17wRpzxxwQZHYo zz%{eItHK9$W&d*(WnOYldkVr*)=TbG0U<~pB`LZ%sXMd-Rg>B6rJM34=sD~$;J=Z0fn%Vz0F#iX% zmqJbOK;}VPO_jQ>rhm+-19Wkq5HM12{^eE@li0=^*xHqt`WwPC(hV>d?B`0)4elRr z7O8)~M1By8SdRjaZzNhpw#YZU6|s~j2bJd4A>KjHj1M;rn5B7ZVhF>yqU5_Z+<(dO z(X=@@2c!nk!k!?)T>nw^M}2jd08gi)p+MLr)Q zswb>XvEM(Zfv}RF*4Rj@*mUYAYhVWAftJ;^R`RM!zG81sNn|Ok@4YmCT8P?YdLOAr z>=C%g3IzaRuvA~0!SIo<>{#z~Cx5R<<^*IT=kuqsIlJhs7>F4+kVGM~tvrZ9adPJ9yqbw&X<=9h-Qd$wR3I?>OO1JF5RoP&2lWn_snZBy z5jyW-1*=T%)Zcm@##;>G`gVtF3);QzG;oJ*H9hv z??hT1H>RwfHrp5zTfP!a%e;VCr$_<3U@SjEt`(ATNkm;0eNSm1(o4Ji0vJAMA}~$G z`1kT(7w!wtb>}sv@6Yn6E(4>L4|$|ZSF|kdfF=Vm?$wHDPL<#sVqcT)$zs=RWkFJ@ zLbxv(#yULYPt{APbB@#||GE1sD-#&ZJE&T{iU{}(fRWZlL vOn$vWn95-eyum$_`YYsv;x&itlk+r*I%(JM?c^smJVHxeI(Y~+H-NmZRLI(y diff --git a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age index ee20e08cda1545f557da45ed2f226431fc21f7e4..d3e42c7839675a7b43452b52ebc12261fc6403e8 100644 GIT binary patch delta 469 zcmV;`0V@9M1M35jAb&DJRBUifRxx#OMKM}tD`qiTVRkrEMs8?iG(<3NcUehEMmSke zF=RGwZwf_7Mp|M~H)VQEacyNaNl{ZPd2>)iO>;tSRBm>4aydkDbZI$bS$9%ZK?*G` zEg&ySSV3}4aArtpH#l-(VK!tkO>J^3WoC6pNpLf0N_J9bRew=#XG(Z0GEE9)$Siuz zimXT&n@bmJ!nBU;y|=Sz=-^0g0g6lG}3ch)(v%gu{-bZGba%#Q}?IRpk{9 zOAG~PFfcSs!G13E#|v(+qWl%XW41)24NsXJ+2Cuhn+yW6#mWm@p>_~oKYP%3WHh6} LfU%TR*wHSFYOvUQ delta 469 zcmV;`0V@9M1M35jAb&(FWlAzIYC=?PRd8ZOdSo(GN^wUqRZeJFFgRFjXJRmLM@UL` zcxZGmGzx2ET4ZTUP(w^uWKei`Lr80KW^iLNIe2SiV`^+!OE_#*VMRn`aA{{+MG7q~ zEg)fGZZL3lT2gUgV>oFuLTNKgVNX$dXH`u$Og2PXZdP(PQGac8SVd`dYgr1Yi25Qn zlVT_u6bJ6eV)-O=iMV*x4F6Lo=bs>>s)bKZ3JB<1@(uHi>sP1qjb_$=&4dbPpD*7PL z+~{`6^3a{yScsR++2Vq~@g~Y|-SILPem=2Gx1yGsM5SvIvR-JE%0dr1qCh2YuE>ds z_+YGvn2MGxPAh}^Hcpl~ys^;N>3@*wW|w~oh1G^_1x`O)WoafYCG@lDkceAorY@Jm z%nWVIJrai2KwFT!?)X)+R+kGUPhrt8M9L53takbvczSupSs6Qgc4l_k%uJkc950$q LLk1*V4Jq&kNXgC+ diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age index 98bbcfc58996cd2eb33bc0c5713b9159d9d7eb99..f6c93fca73dabd5b95b617a8281d609f75137494 100644 GIT binary patch delta 567 zcmV-70?7T$1k41GAb)siSW-e-OJP!PX>mztd17K#ZFy5V{aVN7#%OLl2ZH$!+%a#c4mYYHtb zEg)uVFHdPfPCBXWH&^4Wq)WvM^-CqT1g7ntxod$ zurHLbF^6!E)?bo79<+$LdviEa88%+HI^r;EZ}T)?+4h;)J)faT%Z(67cpX)7KPy?UFgT}rki=Z z+Pb1H_Rio=1%GEXy;sWvY;SoSu#0gm`&|8U6QVO-$6Tn3R6a5fZB5~ijwZWtkf88r zri`}*Th%Y1#C|(b0jOy}>_UX1| zW7E7JqE}XDedlDJ=;4MB^{OWqa)#SL2;Xwe#Aw;mBnjDjinqK6>&h^S>XbZWK8)sL zlbl*V5ioWDO)#=_kKC+qpn6~)VsF(w!=6qa6>B*0u=$j=9%F0Y6oko|vka6aSf9QB Fo9id83=RMQ delta 567 zcmV-70?7T$1k41GAb)jfX;w}*PeE5UPBC;zM^Q^vPE}b>VQP15XL(sQGh`RzX@bVrFh@WPejdMRRCkb}$O-F5u@{ zP78SoHe85Y@};B}y8B#vKI4+7Sa8jw)BNi|Unu=mgT<%L#q4}J6@wlrgR>4Ab1O8vK%d z_Ws(i(=eY5nqng<6G8?e%_>Z4L`l4?bi!C;-yp$`k}S7taEMSxy~V_DA F3Vaw61Y7_B diff --git a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age index 01446c0b3534fcee466b6e93ace08afb5219341d..c1dba676fdda5af019eed093bce1cf0c6b11924f 100644 GIT binary patch delta 704 zcmV;x0zduK1=IzQAb&V;H$!DGS1(9mSyx(CPD*KGK{rNub}>b8Pex%(MRr9|cQrR` zRxeRlYYI1FF;Qu4MQm$jd3G^MOJh@6M0GYrN-}y`XmMIHMRRO(HEV22YdBRyV+t)T zEg(r(NKSPxSZQo$IdM^GYFB1xFL**`VrpzSO*d6;XnJFFOn+ikHe_vPQdJ6cYo)Kt z>5^B`caTrM6AMU+|46VTfapU9Z&gLMWz7Vpf!9#Q#uKmgs_N5U8zj&0nn|xYW4$57J1WcmlaU!z8zRpOxH4x^(3P2@wpoyVLN$}T zv&@xky$fZT@HIOWnMDy9F`KH`n)t^JFw)Ad>=$@0Gc4?C#6~PDpt=2xW}rq{*neAa#sWHn>lxc3p)Rx8`K^Hr z3GJ+R!22vfp8-#h7wyI<6h9z$z}(xPDD5M_(vY1BfPj!5kH-$AD%~q47h_Ho#bF)z zsGojfI!=wkTeEkPdpn1~^sJR8hwi4_rSz6rVgcdtBO5ea`~5t8cs9 zCIon#8h`)UE6yh-i#bpNq)XV+-%+&~+qL3garP@jz^DL>uSW4(1Ngy}g;u~4>J1xD z1M|Mod>?`gTJ3W@HSeZq=Lz(i7H`}Qr{BlT2=9{h2R?17+F~@Xad1@2NJ8G*@QSQx zl_Dik0e)e=8qTV&I}v(wF^RW31Qfnz@U@wsl!CeN6u6l1{^-* z+L51aAk0VFCPmXgmZK8?I&xb>JGDgWp!1p!zTFzLqc@Uc!+!%w7THg?nZ244QuE05 zK{29PaygM<27hSB^NFt6w^t(oq1(Au2%MCf_5qBtHSr%O93n!2wgtPyP?DP#Hc-J-310ZfBaQzs#{&m1du=)Jk1ng_(O;0T7N!El zk$8$kT1z`WiRu0XLc%!HMy#sDf)yusL8rbLvF@yu4S#hixOg{-z(tsz^6fyk*jP8I z-vX4i)xurZT&r@;d2#EeEn0$56Ct%-X+03g?N8a?OIc?`Z6C4yy$1awfVJUV*LN=sp|kl0Vq2YQV*X zhtogQZ-3b)AxwsGm&eS1+I|*v>t}Gc$3Oket@Vi}ml#Z52Z&ePI|m^%cmno6_av&p zpGV!b3Q2-%I&raD1^YH+TX`9X1BV!ok9@k(;H41XNdJ$m8^9&%_GxTv6AKjVBQ>xg zLFi|K1?FO+wc(k)3yI{W&<)#aAWb_$gUoZbX*q->Tzb^$1kwbMAb)g4b#p{=QcrhBNLpraHEL;aG(#|JH)ldIX;E-8HdAU@G)PKR zGD1RVGzvj+XGm*vH#0$WV^efDdP+%0H*9f7MN2VpVOJ|~YB)?)a%OBuFJv}mGzu*( zEg)odaC2oiMQm=8 zScJ_;n|IuS6f-kce7tD@u9y=gAxx~2hb=41*F5Z1&vb^+DT#7k(qb{R>eq7eO`d~U z5_;BlE90~cJt(4wR-X(NQMp{$4Ey^kQcq>s3 zyWpS=O@?3WlnHTU7D9GZ3_5CN4Ix>;4TePbiz#8=;&^cof&`_T*=L7;axle%8m-Oi zHL(H~iZ=Dh9`7vt1V@>lP0UO$G4QP*zWP>*58C#FIx>a8Z#N}Kbi4L1ZhrJ;H`mqn L9>LZ^qsTQH3|{!V delta 573 zcmV-D0>b^$1kwbMAb&4UGiPF1YkE~rG*fDCaba_FPcm6%YD-KnbWBxnH%(VhLNzpG zRWL$WSqf-&GA~y|He_;5aY}4;RBdosOJO*9IWbW=OJQ?$GI~RAG)Zx7Y-=$#a|$gj zEg(2fRdQ%AWNTqlRC6_INir{EWqNN!G+1;mZ&pNPOfzFcLVs*@IZI(=ctr}oR<6x* zgo7P}3x@-tRh2*u=@WdL62m|)Z&|={6Tp={P;LgdQ1nnR6qT#5RexgX^MgvSLKGA5 z$+)|&U+6(&PEMiAObbqOnXk-RFc9-Rz$yjb=c1ZL9GA-npkAH%mBU>GOOBTF)QS=+ zx>-=efY#*{Y=4Ak_|aAr@u4;{-R0^Wkph8|prGTO1Y5NCY+$NqJ%FwADC{)~{b7l; z>|zu_!V*^MJN!_8L{~rmZn22)XTPN*2MJv=lev=N5IVjacUPI&sZgjwb$yAG4k_`{ zGie{8NP9se>&=e@d}By6?6%xdkh9K)7?1TFyBOcR_kWVagsxmvY@e=8@QWuenS8Cb zrd3JfOYez)c;4M_BveJf`AY?2AE;mk?4fVl&S?qv`7N>`V!rQ6i0-1d#Gk4|6mZUD zpPJdlel?S^);AlXJ6#tq1I{_#7_>cad||+WI&ICr+@Iig%q55q?FOu5OE*i$X} X25519 iXg5LItvsPi0WbdSrtqMSRLvdzl54r+6t+GAsmwlUxI +Rld/KatZ69DaRTVj8z6FixuHSkHgOKAe5R1evgDNCVg +--- NZPzrPNZvqJLhsdBcBNSEYU4+acvHy1WAPMhEoSQcRU +2 ~?"Sd <2R`J,+@',]ter^>1tDU>YT}B{@qU-I29~7w)sS{*C z+ek`_fXtw1w`z&sym_4Gp!Qem-`ehSwrdgb=KZcjbR&Y>D{J}JAYD-6myp5@PgQW; z_JnZ-LH}j*)%0-AYHu}U=V%~lF{r?Z`TaNq$SR>sob2(r9w-@0T7_0FlWC~@fx)Wn z50?&Fu8{T2z-h5iheYCK6L*mtyYe<3Bqq5xrBVvf-8aZQ5`>y##O2Iinc{B@*WJ{Q z4R!0J1l5MRSlt%+AK*A#qNYX#<-C#BJ=0&cyK)MXJdY}0;zUF$VCu`K99v6;&!qM9 zEVvdK&c7cVP-$L_3cvrtTCNobI~hk9jdr~Yyr7aSO!mQHWnV6zU(RnL%GJ-oh%EEw z=7;|7Fh;?__kP`yX41{v`;Yqh?g?}{&yDj4s~Z}Fa8Q$Y60ANQi!v;Ws!YDo*l^5{ zR%do&pqo&>IY-R>`%Pr#no6}Vp`C8R>!ngU?Ob~uSa(u;>2Nn=Z&$t7zf<0_i3C~P zXvcaWjZQq^)7AyFvpBzDgD-#ouYU5b%cYjmo~V7H!lLx%6#E}(xdUp=B>`ix=@b|8 z1P5XQxZ@&#g3Tj~Zg=}{val2VK{UT)(#eeUV}X`^>z>-Anobc+?(vd#c9(rTP0J#i zjA!7gjo^byV1`vDl1@x2*-gfq0UYM)@t1`r2V?eV+P?ZQ8n46 zw(y9}DeDeqRb+>c4g9*iQ_-h%BLB|s7dl0mt?1ll zI40r-RKq2u+lyt2!8XQ}-H7NVokSHG2c(qgl|^w= z)C)$;h=ARfqlrlQO(j%Hkacharl4FN-iw;p+r`d`=5rWDzmGt4$PPo!mKft<3EvAj z)c|-z^A=ur>9~OTYatau{UAzypY#vbd;Ijwchd_)4KNpyG1DDvcSLOrOnPQ?l|Dtj zC6%3`l068feUXaZ$-Z%C{n=XX3N}kqR!)~-db}LXFL|j$2;jGoV|?0_gQb45a~a9H zp$&lx@4R$1;kCB`N%+u}SM{w4n=wpe(|IhbyMt4C7>YDJsrNnsho#ivR&e3Sx;JxO zva)sn9MMMDG#2hE-G=6ue~ zz`6iOyofRiDH%K1S~*6fsrp6t{z158oQv2TR%xCeTlT*6k@x}7+2RoWvpP(;Mm{!= z0i!_K%lpwmav(YVoruD#cbySv~|uff<&~I!(q$2=-DJ2oG4# zg7aLJhNncq*%Y9qo*{7Rj>^zTY1b|?`Q8Q-=OYVrCC6A^sQC2e;uV$_`}*dbp@QK9 z#Fl|1%!M`Qt|Y4WQyHA9;NJRcv*T>Q@q1bq zOWGJbD^PX8kp5n^qaw5##N7AHTN%6X3;I)cUQHR#oc1h3P`9E`P5?gXs4~&-KQTDJ zvw#eooTHJ(#iRG5K3ngeSVSeEHD6j%LV`Cu6XagblqeT4&NA}nsR2g5zoHFF2ixr? z;F${j!wXj1AQI`W&AjYGlUK2lPr9Bt&1fjO Nln&Ryk&%{`?0`M`o7n&W literal 0 HcmV?d00001 diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age new file mode 100644 index 0000000000000000000000000000000000000000..bdbc8de67b27a4a926241e7ada16baed53cc180e GIT binary patch literal 651 zcmV;60(AXhXJsvAZewzJaCB*JZZ2(AFlBE=XGt?+Pe}?Soet^^26m}Fw5OU z7ITlDpI-22ePb_qFvT-7u`zU9-9DA)PFco1i8zH$KVBJsD(g-MIhNsT;~R(e=vy&(ZCw7>EvFbnRBL@U%RQS2RC~nq z3?-TT^i8(z&45fj=bDce`inw(P~Uxc1L(QIg%zlw4I}$9^Z;K)sjpg!d@%Pp*ZODj zC?x_Ng*Q`{e1u@=40Xe>Vp!oLt+n^N^X+(Qko^aqW8>NUJm%@TNilltzOF5W z8^#{?We>Z%TR^ptH@}1)4S}1iRdMi8ayPQa;zU8td`ss@HP2scwsQ@fgi#8Danc literal 0 HcmV?d00001 diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age index b7a3d01317ff67d91537cbc6e09f51f9d79dfdb3..029049b72e2fbeee2923a35c8659d201a8e39831 100644 GIT binary patch delta 1126 zcmV-s1eyEy2=@q(Ab)vuPgZ$iX*X|Bcy38{T4i%YOl((Dc}H?jF=94KGc!S0byHSX zD^fE?MGARJLTEH^P-Ap(MQeCSZc2D|L3lxPX*pLlP)RFDGG=KtdU-ELH)v){I0`K- zEg(-TdR8xGVn{VXcW7coQ!iOVH*-yGGI3FCVpMP|Fjq`VOn*p0I7&22a8U~SMOrr> zR#LP6NrVf)I??nwMImhyDgQ6{-7TrDt{D8{e!kN^=V8J#v3uNNaD(bX*nWFpjL=Xx zA+My4C{96dU`X7d0So&Wov-FP1XS+?hU)Vj!UI83o6OajzX)=+7y)11j^JkbpH@hB zEvkH}e;Bh5#D9$O-P@fbE@uMb-6JfXwH1{n>X3f%T@U~|Zu#tvqo_HioM3?l9G;`c z)JV*fUxZTOvjTypdbLqkgnsE`=D!}H{23tQ&e12m$}Ks?5IkC+VIIPi{T1B9OUH7w zx8Ovjo@IilZp#OaRjR0O(dT;MZhof3VwjgY%VY<3g@C&xjxici3} zyPB#?bbsu$L0}VE&_W|;OomAozGa9VcOy;n`Fs1(=npCie2#jgorTw~h8Ji-LfY^i z!kQS$bqk8G(BA_YjlZqkIo2f9%DN$}k32bAV3nL%BKhW;4*v^lj^KSrL0W_f@-lgMVzp*x^pMRI|Z? zs(8*60CRlK#%?ujACgn_>oGEM1aPf{7D$R|diHZ(NmO)`mgC>R0=wA(B zj(|k(i4;`>KCkl-6dyZJO~t2^vR^i4#gs!0nkUip_xbcbNlYen#{hCKthzl!w`HRa s?iiygkpc_qU5tFuKG1=u+9*A=;Rro)mD7x8`2xAOXK+2J)cJ#qq(EC4g#Z8m delta 1126 zcmV-s1eyEy2=@q(Ab&D3GiW$+D{w_CQ%XxTbW=4pHcCc9RcvHtdO2%IcxE(qQ#f*0 zWJ7FsK?+Q4bapmSGIVToNp(j~Mo>aRS93~JaAR|DX=pDsNmyiRYHBz+H+eEbFbXX# zEg*1jQc-A7O=oH`X+=X%M00Xhcs62qFi3AqHAQYrMNCI{HGf4mNH;Vzc54bQrFQ_~ zU~}MxgF#C}-X#=| z;F*mT+zKj)b${Ybgc8FqNywc*>#1!sYyn`x%N21_gB~52Ko0MdKj2Ne+_7ATU*9U7cYB1hnOsiSavB;hk-F4(7#Y zhT8ualAz^EITKS5GOE3L8IDb_f&%cDwp1bHUmaqf&AaD1d z39Z!N`a)5_!1_BXd)5aWh2c<{*c8^d;KdmFsRjaSl$97;WE;B7YnC`)?(&EmnxEot0baXDij>4J$!Y zk#4P++V`1Gi)Ep>tIplc=69pH8GU~CLf8;la{BD{NEjuj9hkr&n|W@Alpk5~LpKPL zjyFa4%<{A{41wAz11WBjNX>qZgC}?yZPl2S-%Rq2M%0`cGs&Z3YM*vXBj(IPkoPb6 zwtpu?qxPtVaqCeLp@Z?VG+@v^T6Y098O3=ANIixU&X|Wq3r^v8mq((}2O}I0iC$6F zpa;?1qs1C%fXL?qj!fdP6!;65b{PJQkV@kHV_1ZnYiVfrj66B*s!!s9)UR0dh)Nh~ zmWf^T^8%0lgb$|g9*{#jGEs0Eo-X~zhJUt5II5;onIN4xCqJ`1=>tXA{huVf>d`g! zivsVL`;HHZaJe0gT|F1&ST@m_Ip7_Rd9tdxXHvykBt#9&FlKBN4l0uYr7WgzzdZe5 zLB6yXVxlM=KZz*rG<4d7bx#>(Kc`nD1grVP5_(|Rwj=|zqRdhY!6xV4(`G%aqkWf97!5Qj|=)WxUaj`G00g|bbmiTtX?MwOMi1H(e sk5DiNegJ1KZJUy8-`V@k#2JPhMImn}?