From f6a80cfad7bf4d3711c30b670eeba5b81aabc481 Mon Sep 17 00:00:00 2001
From: mack-a <57424792+mack-a@users.noreply.github.com>
Date: Fri, 22 May 2020 15:30:07 +0800
Subject: [PATCH] feat(init): init
---
.gitignore | 2 +
.idea/workspace.xml | 476 ++++++++++++++++++++-
Cloudflare_Flexible.md | 126 ++++++
Cloudflare_Full.md | 174 ++++++++
README.md | 500 ++++++++--------------
Trojan.md | 173 ++++++++
config/config_ws_tls.json | 10 +-
config/nginx.conf | 35 +-
config/nginx_Flexible.conf | 71 ++++
demo.sh | 6 +
firewall.md | 131 ++++++
fodder/CDN域名解析 CNAME.png | Bin 0 -> 86614 bytes
fodder/CloudFlare SSLTLS示例图.png | Bin 0 -> 274454 bytes
fodder/CloudFlare Trojan V2Ray.png | Bin 0 -> 244029 bytes
fodder/CloudFlare dnspod解析.graffle | Bin 0 -> 14301 bytes
fodder/CloudFlare dnspod解析.png | Bin 0 -> 166213 bytes
fodder/CloudFlare默认解析.graffle | Bin 0 -> 10581 bytes
fodder/CloudFlare默认解析.png | Bin 0 -> 426266 bytes
fodder/Quantumult_Setting.png | Bin 0 -> 260270 bytes
fodder/Quantumult_Setting_vmess.png | Bin 0 -> 277178 bytes
fodder/cloudflare_idcwiki.png | Bin 0 -> 209356 bytes
fodder/cloudflare_tls_Flexible.png | Bin 0 -> 175018 bytes
fodder/dnspod原理解析.png | Bin 0 -> 420771 bytes
fodder/dnspod添加域名.png | Bin 0 -> 74863 bytes
fodder/dnspod添加记录.png | Bin 0 -> 81934 bytes
fodder/dnspod添加记录自定义ip.png | Bin 0 -> 76705 bytes
fodder/idcwiki_traffic.png | Bin 0 -> 75973 bytes
fodder/moeelfDNS管理.png | Bin 0 -> 194705 bytes
fodder/moeelf添加DNS记录.png | Bin 0 -> 75559 bytes
fodder/moeelf添加域名.png | Bin 0 -> 63484 bytes
fodder/一键脚本手动模式.png | Bin 0 -> 188692 bytes
fodder/一键脚本示例图.png | Bin 0 -> 93188 bytes
fodder/一键脚本自动模式.png | Bin 0 -> 185165 bytes
fodder/腾讯CDN示例图01.png | Bin 0 -> 124097 bytes
free_account.md | 10 +
generator_client_links.js | 94 +++++
install.sh | 514 +++++++++++++++++++++--
install_new.sh | 262 ++++++++++++
optimize_V2Ray.md | 284 +++++++++++++
ping_tool.sh | 157 +++++++
recover_version.md | 32 ++
settings.md | 207 +++++++++
traffic_relay_tcp_vmess.md | 52 +++
traffic_relay_tls_ws.md | 80 ++++
44 files changed, 2981 insertions(+), 415 deletions(-)
create mode 100644 .gitignore
create mode 100644 Cloudflare_Flexible.md
create mode 100644 Cloudflare_Full.md
create mode 100644 Trojan.md
create mode 100644 config/nginx_Flexible.conf
create mode 100755 demo.sh
create mode 100644 firewall.md
create mode 100644 fodder/CDN域名解析 CNAME.png
create mode 100644 fodder/CloudFlare SSLTLS示例图.png
create mode 100644 fodder/CloudFlare Trojan V2Ray.png
create mode 100644 fodder/CloudFlare dnspod解析.graffle
create mode 100644 fodder/CloudFlare dnspod解析.png
create mode 100644 fodder/CloudFlare默认解析.graffle
create mode 100644 fodder/CloudFlare默认解析.png
create mode 100644 fodder/Quantumult_Setting.png
create mode 100644 fodder/Quantumult_Setting_vmess.png
create mode 100644 fodder/cloudflare_idcwiki.png
create mode 100644 fodder/cloudflare_tls_Flexible.png
create mode 100644 fodder/dnspod原理解析.png
create mode 100644 fodder/dnspod添加域名.png
create mode 100644 fodder/dnspod添加记录.png
create mode 100644 fodder/dnspod添加记录自定义ip.png
create mode 100644 fodder/idcwiki_traffic.png
create mode 100644 fodder/moeelfDNS管理.png
create mode 100644 fodder/moeelf添加DNS记录.png
create mode 100644 fodder/moeelf添加域名.png
create mode 100644 fodder/一键脚本手动模式.png
create mode 100644 fodder/一键脚本示例图.png
create mode 100644 fodder/一键脚本自动模式.png
create mode 100644 fodder/腾讯CDN示例图01.png
create mode 100644 free_account.md
create mode 100644 generator_client_links.js
create mode 100644 install_new.sh
create mode 100644 optimize_V2Ray.md
create mode 100755 ping_tool.sh
create mode 100644 recover_version.md
create mode 100644 settings.md
create mode 100644 traffic_relay_tcp_vmess.md
create mode 100644 traffic_relay_tls_ws.md
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..a36861b
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+# Created by .ignore support plugin (hsz.mobi)
+.idea
diff --git a/.idea/workspace.xml b/.idea/workspace.xml
index c700bb9..6627f36 100644
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@@ -12,15 +12,141 @@
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
- jerry-ap/v2ray-network
+ if [
+ source
+ nodePath
+ echoType
+ ==
+ uninstall
+ GO
+ checkOS
+ centos
+ Ubuntu
+ /etc/nginx/mime.types
+ sed -i
+ 更加隐私一些
+ dnsmasq 实现CNAME方式
+ wget
+ zip
+ process.
+ node
+ Docker
+ sed
+ FullFl
+ 到这里就配置完成，可以测试是否能上被q的网站,如果可以使用可以测试上方的优化方
+ 免费
+ Trajon
+ img
+ &
+ idc.wiki
+ aff=1146
+ CloudFlare
+ aff.
mack-a/v2ray-agent
+ domain
+ $blue
+ $skyBlue
+ $purple
+ ${
+ "
+ V2Ray
+ yum -y install
+ ${echoType}
+ .
+ .sourceResult=`. /root/.bashrc`
+ Trojan
+ Cloudflare
+ ,
+
+ $PROJECT_DIR$
+
@@ -28,12 +154,42 @@
-
+
@@ -66,7 +222,22 @@
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -90,47 +282,293 @@
1573007543792
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
-
-
+
-
-
-
-
-
-
-
+
+
+
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/Cloudflare_Flexible.md b/Cloudflare_Flexible.md
new file mode 100644
index 0000000..6a2867c
--- /dev/null
+++ b/Cloudflare_Flexible.md
@@ -0,0 +1,126 @@
+# 目录
+- [技能点列表](#技能点列表)
+- [一键脚本](#一键脚本)
+ * [1.自动模式](#1自动模式)
+ * [2.手动模式](#2手动模式)
+- [1.准备工作](#1准备工作)
+ * [1.注册cloudflare](#1注册cloudflare)
+ * [2.注册godaddy并购买域名](#2注册godaddy并购买域名)
+ * [3.修改godaddy域名的DNS解析](#3修改godaddy域名的dns解析)
+ + [1.登录cloudflare，添加域名](#1登录cloudflare添加域名)
+ + [2.选择套餐](#2选择套餐)
+ + [3.根据提示修改godaddy的dns解析](#3根据提示修改godaddy的dns解析)
+ * [4.增加cloudflare域名解析](#4增加cloudflare域名解析)
+ * [5.修改godaddy SSL/TLS](#5修改godaddy-ssltls)
+- [2.vps配置Nginx](#2vps配置nginx)
+ * [1.安装Nginx](#1安装Nginx)
+ * [2.nginx配置文件](#2nginx配置文件)
+- [3.配置v2ray](#3配置v2ray)
+ * [1.安装v2ray](#1安装v2ray)
+ * [2.v2ray配置文件](#v2ray配置文件)
+ * [3.启动v2ray](#3启动v2ray)
+- [4.客户端](#4客户端)
+ * [1.MacOS](#1macos)
+ * [2.windows](#2windows)
+
+
+# 技能点列表
+- [bandwagonhost[Ubuntu、Centos、Debian]链接一](https://bandwagonhost.com)
+- [bandwagonhost[Ubuntu、Centos、Debian]链接二](https://bwh1.net)【境外vps或者其他vps厂商】
+- [freenom](https://freenom.com/)【免费域名】
+- [godaddy](https://www.godaddy.com/)【域名厂商】
+- [cloudflare](cloudflare.com)【CDN】
+- [letsencrypt](https://letsencrypt.org/)【HTTPS】
+- [Nginx](https://www.nginx.com/)【反向代理】
+- [V2Ray](v2ray.com)【代理工具】
+
+# 1.准备工作
+## 1.注册[cloudflare](cloudflare.com)
+## 2.注册[godaddy](https://www.godaddy.com/)并购买域名或者使用免费域名[freenom](https://freenom.com/)
+- 这里使用godaddy作为示例
+- 域名可选择xyz结尾的国际域名，可采用多字符乱码的方式组合域名，(比如wk1c.xyz)首年大概8RMB左右，第二年可以直接买一个新的。
+
+## 3.修改godaddy域名的DNS解析
+### 1.登录cloudflare，添加域名
+
+
+### 2.选择套餐
+- 如果仅仅只享受科学上网功能，选择free即可
+- 如果需要更好的网络环境、更快的速度，可选择相应的套餐
+
+
+### 3.根据提示修改godaddy的dns解析
+- cloudflare提示界面
+
+
+- godaddy DNS管理，根据上面的cloudflare提示界面修改为相应的dns
+
+
+## 4.增加cloudflare域名解析
+- 添加域名解析(记录)，可以选择二级域名，这样就可以一个月解析到不同的服务器，name填写你要解析的二级域名的host部分，比如ls.example.com 只填写ls即可
+
+
+## 5.修改godaddy SSL/TLS
+- 如果vps选择使用https，需要把类型修改为Flexible
+
+
+# 2.vps配置Nginx
+## 1.安装Nginx
+```
+yum install nginx
+```
+## 2.nginx配置文件
+
+- 1.下载配置文件并替换默认文件
+```
+cd /etc/nginx&&rm -rf /etc/nginx/nginx.conf&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/nginx_Flexible.conf&&mv /etc/nginx/nginx_Flexible.conf /etc/nginx/nginx.conf
+# 如果缺少wget 则执行下面的命令，然后重复上面的命令
+yum install wget
+```
+- 将下载好的文件中关于ls.xxx.xyz的内容都替换成你的二级域名
+
+# 3.配置v2ray
+## 1.安装v2ray
+
+```
+bash <(curl -L -s https://install.direct/go.sh)
+```
+
+## 2.v2ray配置文件
+
+- 下载config_ws_tls.json
+```
+cd&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/config_ws_tls.json
+```
+
+- 配置文件的id可以自己生成一个新的，替换即可
+```
+/usr/bin/v2ray/v2ctl uuid
+```
+
+## 3.启动v2ray
+```
+/usr/bin/v2ray/v2ray -config ./config_ws_tls.json&
+```
+
+# 4.客户端
+## 1.MacOS
+- 下载V2RayU[点我下载](https://github.com/yanue/V2rayU/releases/download/1.4.1/V2rayU.dmg)
+- 下载后打开，服务器设置，修改address即可
+
+
+- pac设置，添加下面的链接并选择使用Pac模式，即可
+```
+https://raw.githubusercontent.com/gfwlist/gfwlist/master/gfwlist.txt
+```
+
+## 2.windows
+- 下载v2rayN[点我下载](https://github.com/2dust/v2rayN/releases/download/2.44/v2rayN.zip)
+- 使用方法 [点我查看](https://github.com/233boy/v2ray/wiki/V2RayN%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B)
+
+## 3.Android
+- [v2rayNG](https://github.com/2dust/v2rayNG/releases)
+
+## 4.ios【需要自行购买或者使用共享账号安装】
+- Quantumult【推荐使用】
+- Shadowrocket
diff --git a/Cloudflare_Full.md b/Cloudflare_Full.md
new file mode 100644
index 0000000..8d5be6b
--- /dev/null
+++ b/Cloudflare_Full.md
@@ -0,0 +1,174 @@
+# 目录
+- [技能点列表](#技能点列表)
+- [一键脚本](#一键脚本)
+ * [1.自动模式](#1自动模式)
+ * [2.手动模式](#2手动模式)
+- [1.准备工作](#1准备工作)
+ * [1.注册cloudflare](#1注册cloudflare)
+ * [2.注册godaddy并购买域名](#2注册godaddy并购买域名)
+ * [3.修改godaddy域名的DNS解析](#3修改godaddy域名的dns解析)
+ + [1.登录cloudflare，添加域名](#1登录cloudflare添加域名)
+ + [2.选择套餐](#2选择套餐)
+ + [3.根据提示修改godaddy的dns解析](#3根据提示修改godaddy的dns解析)
+ * [4.增加cloudflare域名解析](#4增加cloudflare域名解析)
+ * [5.修改godaddy SSL/TLS](#5修改godaddy-ssltls)
+- [2.vps配置Nginx、https](#2vps配置nginxhttps)
+ * [1.安装Nginx](#1安装Nginx)
+ * [2.nginx配置文件](#2nginx配置文件)
+ * [3.生成https](#3生成https)
+- [3.配置v2ray](#3配置v2ray)
+ * [1.安装v2ray](#1安装v2ray)
+ * [2.v2ray配置文件](#v2ray配置文件)
+ * [3.启动v2ray](#3启动v2ray)
+- [4.客户端](#4客户端)
+ * [1.MacOS](#1macos)
+ * [2.windows](#2windows)
+
+# 1.准备工作
+## 1.注册[cloudflare](cloudflare.com)
+## 2.注册[godaddy](https://www.godaddy.com/)并购买域名或者使用免费域名[freenom](https://freenom.com/)
+- 这里使用godaddy作为示例
+- 域名可选择xyz结尾的国际域名，可采用多字符乱码的方式组合域名，(比如wk1c.xyz)首年大概8RMB左右，第二年可以直接买一个新的。
+
+## 3.修改godaddy域名的DNS解析
+### 1.登录cloudflare，添加域名
+
+
+### 2.选择套餐
+- 如果仅仅只享受科学上网功能，选择free即可
+- 如果需要更好的网络环境、更快的速度，可选择相应的套餐
+
+
+### 3.根据提示修改godaddy的dns解析
+- cloudflare提示界面
+
+
+- godaddy DNS管理，根据上面的cloudflare提示界面修改为相应的dns
+
+
+## 4.增加cloudflare域名解析
+- 添加域名解析(记录)，可以选择二级域名，这样就可以一个月解析到不同的服务器，name填写你要解析的二级域名的host部分，比如ls.example.com 只填写ls即可
+
+
+## 5.修改godaddy SSL/TLS
+- 如果vps选择使用https，需要把类型修改为Full
+
+
+# 2.vps配置Nginx、https
+## 1.安装Nginx
+```
+yum install nginx
+```
+## 2.nginx配置文件
+
+- 1.下载配置文件并替换默认文件
+```
+cd /etc/nginx&&rm -rf /etc/nginx/nginx.conf&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/nginx.conf
+# 如果缺少wget 则执行下面的命令，然后重复上面的命令
+yum install wget
+```
+- 将下载好的文件中关于ls.xxx.xyz的内容都替换成你的二级域名
+
+## 3.生成https
+
+- 1.安装acme.sh
+```
+curl https://get.acme.sh | sh
+% Total % Received % Xferd Average Speed Time Time Time Current
+ Dload Upload Total Spent Left Speed
+100 671 100 671 0 0 680 0 --:--:-- --:--:-- --:--:-- 679
+% Total % Received % Xferd Average Speed Time Time Time Current
+ Dload Upload Total Spent Left Speed
+100 112k 100 112k 0 0 690k 0 --:--:-- --:--:-- --:--:-- 693k
+[Fri 30 Dec 01:03:32 GMT 2016] Installing from online archive.
+[Fri 30 Dec 01:03:32 GMT 2016] Downloading https://github.com/Neilpang/acme.sh/archive/master.tar.gz
+[Fri 30 Dec 01:03:33 GMT 2016] Extracting master.tar.gz
+[Fri 30 Dec 01:03:33 GMT 2016] Installing to /home/user/.acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installed to /home/user/.acme.sh/acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installing alias to '/home/user/.profile'
+[Fri 30 Dec 01:03:33 GMT 2016] OK, Close and reopen your terminal to start using acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installing cron job
+no crontab for user
+no crontab for user
+[Fri 30 Dec 01:03:33 GMT 2016] Good, bash is found, so change the shebang to use bash as preferred.
+[Fri 30 Dec 01:03:33 GMT 2016] OK
+[Fri 30 Dec 01:03:33 GMT 2016] Install success!
+```
+
+- 2.生成https证书
+```
+# 替换ls.xxx.xyz为自己的域名
+sudo ~/.acme.sh/acme.sh --issue -d ls.xxx.xyz --standalone -k ec-256
+
+# 如果提示Please install socat tools first.则执行，安装完成后继续重复执行上面的命令
+yum install socat
+```
+
+- 3.安装证书
+```
+# 替换ls.xxx.xyz为自己的域名
+~/.acme.sh/acme.sh --installcert -d ls.xxx.xyz --fullchainpath /etc/nginx/ls.xxx.xyz.crt --keypath /etc/nginx/ls.xxx.xyz.key --ecc
+```
+
+- 4.修改/etc/nginx/nginx.conf
+```
+# 将下面这部分前面的#去掉，并将ssl_certificate、ssl_certificate_key修改成自己的路径
+
+# listen 443 ssl;
+# ssl_certificate /etc/nginx/ls.xx.xyz.crt;
+# ssl_certificate_key /etc/nginx/ls.xx.xyz.key;
+# server_name ls.xx.xyz
+```
+
+- 5.每一次生成https证书后有效期只有三个月，需要快过期时更新（剩余七天内可以重新生成）
+```
+# 替换ls.xxx.xyz为自己的域名
+sudo ~/.acme.sh/acme.sh --renew -d ls.xxx.xyz --force --ecc
+```
+
+# 3.配置v2ray
+## 1.安装v2ray
+
+```
+bash <(curl -L -s https://install.direct/go.sh)
+```
+
+## 2.v2ray配置文件
+
+- 下载config_ws_tls.json
+```
+cd&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/config_ws_tls.json
+```
+
+- 配置文件的id可以自己生成一个新的，替换即可
+```
+/usr/bin/v2ray/v2ctl uuid
+```
+
+## 3.启动v2ray
+```
+/usr/bin/v2ray/v2ray -config ./config_ws_tls.json&
+```
+
+
+# 4.客户端
+## 1.MacOS
+- 下载V2RayU[点我下载](https://github.com/yanue/V2rayU/releases/download/1.4.1/V2rayU.dmg)
+- 下载后打开，服务器设置，修改address即可
+
+
+- pac设置，添加下面的链接并选择使用Pac模式，即可
+```
+https://raw.githubusercontent.com/gfwlist/gfwlist/master/gfwlist.txt
+```
+
+## 2.windows
+- 下载v2rayN[点我下载](https://github.com/2dust/v2rayN/releases/download/2.44/v2rayN.zip)
+- 使用方法 [点我查看](https://github.com/233boy/v2ray/wiki/V2RayN%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B)
+
+## 3.Android
+- [v2rayNG](https://github.com/2dust/v2rayNG/releases)
+
+## 4.ios【需要自行购买或者使用共享账号安装】
+- Quantumult【推荐使用】
+- Shadowrocket
diff --git a/README.md b/README.md
index f9873d8..62f80bc 100644
--- a/README.md
+++ b/README.md
@@ -1,355 +1,199 @@
-# v2ray-network
-本项目旨在更好的学习新知识，采用CDN+TLS+Nginx+v2ray进行伪装并突破防火墙。
+# v2ray-agent
+>我始终相信人是自由的，这是本项目设立的初衷，同时也感谢各种软件的开发者与维护者。
+>世界就是这样，当你开始思考时，你已经是小部分中的一员了。祝大家使用愉快。
+
+- 本项目涉及知识点较多请耐心看完，知其然知其所以然。
+- 此项目分别采用CDN+TLS+Nginx+V2Ray、Trojan进行模拟正常网站并突破防火墙，同时包含优化方法，以及简单的原理讲解。
+- 极力推荐【[自建教程](#自建教程)】，自建教程可以快速入手并知晓其中的步骤。如遇到不懂以及不理解的可以加入[TG群讨论【对小白尤其友好】](https://t.me/v2rayAgent)。
+- 优化方案包含对Cloudflare的优化（[CNAME优化、DNS优化、断流优化、](#优化方案)），VPS处理性能优化（bbr、bbr plus【阻塞拥堵算法，加快对流量的处理】）、其余设置（开机启动）、docker镜像、防火墙设置。
+- 同时提供[流量中转教程](#流量转发服务)【大大提高流量传输的速度，减少丢包】、[免费测试账号](#免费账号正常使用点击查看)。
+- 接下来会提供V2Ray配置生成器、iptables流量转发、Docker镜像、私有Docker仓库、私有git仓库【gitlab】、以及可供部署k8s容器等方面的内容。
+- 提供免费订阅链接【[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/free_account.md)】【如无法使用可加入TG群反馈】。
+- 如本项目缺少还未加入或者完善的教程，肯定是群主懒，加入TG群鞭打群主，让群主更有动力。
+
+## 欢迎加入TG群，共同学习、共同成长。
+[点击此链接加入电报群](https://t.me/v2rayAgent)
+* * *
+# 目录
+- [技能点列表](#技能点列表)
+- [自建教程](#自建教程)
+ * [1.V2Ray](#1v2ray)
+ + [1.方法1](#方法1flexible建议使用该方法)
+ + [2.方法2](#方法2full)
+ * [2.Trojan](#2trojan)
+- [流量转发服务](#流量转发服务)
+ * [1.tls+ws](1tlsws点击查看)
+ * [2.tcp+vmess](#2tcpvmess点击查看)
+- [客户端](#客户端)
+ * [1.windows](#1windows)
+ * [2.Android](#2android)
+ * [2.ios](#3ios需要自行购买或者使用共享账号安装)
+ * [2.Mac](#4mac)
+- ~~[一键脚本](#一键脚本)~~
+ * [1.自动模式](#1自动模式)
+ * [2.手动模式](#2手动模式)
+- [防护墙设置](#防火墙设置点击查看)
+- [免费账号【正常使用】](#免费账号正常使用点击查看)
+- [备注](#备注)
+ * [1.推荐使用v2ray+CDN的方式](#1推荐使用v2ray-cdn的方式)
+ + [1.优点](#1优点)
+ + [2.缺点](#2缺点)
+ + [3.数据包解析](#3数据包解析)
+ + [4.建议](#4建议)
+ * [2.速度首选V2Ray TCP方式](#2速度首选v2ray-tcp方式)
+ * [3.本地网络环境不稳定首选mKCP](#3本地网络环境不稳定首选mkcp)
+ * [4.目前不推荐使用ss、ssr](#4目前不推荐使用ss-ssr)
+- [维护进程[todo List]](#维护进程todo-list)
+ * [1.一键脚本](#1一键脚本)
+ + [1.自动模式](#1自动模式)
+ + [2.手动模式](#2手动模式)
+
+* * *
+### 优化方案
+- [优化v2ray【断流、CNAME自选ip、dnsmasq自定义dns实现cname自选ip】](https://github.com/mack-a/v2ray-agent/blob/master/optimize_V2Ray.md)
+- [其余设置【开机自启、bbr加速】](https://github.com/mack-a/v2ray-agent/blob/master/settings.md)
# 技能点列表
-- [bandwagonhost[centos7]链接一](https://bandwagonhost.com)
-- [bandwagonhost[centos7]链接二](https://bwh1.net)【境外vps或者其他vps厂商】
-- [cloudflare](cloudflare.com)【CDN】
+- [cloudcone](https://app.cloudcone.com/?ref=5346)【vps】
+- [bandwagonhost](https://bandwagonhost.com/aff.php?aff=46893)【vps】
+- [freenom](https://freenom.com/)【免费域名【注册时最好使用全局代理、ip所在地和注册地一致并且最好使用手机】】
- [godaddy](https://www.godaddy.com/)【域名厂商】
+- [cloudflare](cloudflare.com)【CDN】
- [letsencrypt](https://letsencrypt.org/)【HTTPS】
-- [Nginx](https://www.nginx.com/)【反向代理】
-- [v2ray](v2ray.com)【代理工具】
+- [Nginx](https://www.nginx.com/)【域名反向代理】
+- [V2Ray](v2ray.com)【代理工具】
-# 1.准备工作
-## 1.注册[cloudflare](cloudflare.com)
-## 2.注册[godaddy](https://www.godaddy.com/)并购买域名
-- 域名可选择xyz结尾的国际域名，可采用多字符乱码的方式组合域名，(比如wk1c.xyz)首年大概8RMB左右，第二年可以直接买一个新的。
+* * *
-## 3.修改godaddy域名的DNS解析
-### 1.登录cloudflare，添加域名
-
+# 自建教程
+# 1.V2Ray
+- ios端建议使用Quantumult，表现要比Trojan好。
-### 2.选择套餐
-- 如果仅仅只享受科学上网功能，选择free即可
-- 如果需要更好的网络环境、更快的速度，可选择相应的套餐
-
+## 方法1(Flexible)【建议使用该方法】
+- 只使用CloudFlare的证书
+- 客户端->CloudFlare使用TLS+vmess加密，CloudFlare->VPS只使用vmess，[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/Cloudflare_Flexible.md)
+- 不需要自己维护自己的https证书
+- 少一步解析证书的过程，速度理论上会快一点
-### 3.根据提示修改godaddy的dns解析
-- cloudflare提示界面
-
+## 方法2(Full)
+- 需要自己生成https证书，并自己维护，一般使用let's encrypt生成有效期为三个月。
+- 客户端->CloudFlare使用CLoudFlare TLS+vmess加密，CloudFlare->VPS使用let's encrypt TLS+vmess加密，[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/Cloudflare_Full.md)
+- 与方法1不同的是，CloudFlare和VPS通讯时也会使用TLS加密。两个方法安全方面区别不是很大。
-- godaddy DNS管理，根据上面的cloudflare提示界面修改为相应的dns
-
+# 2.Trojan
+- 需要自己生成证书
+- 客户端->使用自己生成的tls加密无其他加密->VPS,[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/Trojan.md)
+- 少一层加密，理论速度会快一些。
+- 速度取决于VPS的线路。
+- 需要自己维护证书。
+- [官方Github](https://github.com/trojan-gfw/trojan)
-## 4.增加cloudflare域名解析
-- 添加域名解析(记录)，可以选择二级域名，这样就可以一个月解析到不同的服务器，name填写你要解析的二级域名的host部分，比如ls.example.com 只填写ls即可
-
+# 流量转发服务
+## 1.tls+ws[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/traffic_relay_tls_ws.md)
-## 5.修改godaddy SSL/TLS
-- 如果vps选择使用https，需要把类型修改为Full
-
+## 2.tcp+vmess[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/traffic_relay_tcp_vmess.md)
-# 2.vps配置Nginx、https
-## 1.安装Nginx
+# 客户端
+## 1.windows
+- [v2rayN](https://github.com/2dust/v2rayN/releases)
+
+## 2.Android
+- [v2rayNG](https://github.com/2dust/v2rayNG/releases)
+
+## 3.ios【需要自行购买或者使用共享账号安装】
+- Quantumult【推荐使用】
+- Shadowrocket
+
+## 4.Mac
+- [V2rayU](https://github.com/yanue/V2rayU/releases)
+
+# 一键脚本
+- 执行一键脚本的前提是下面的 【1.准备工作】完成并正确
```
-yum install nginx
-```
-## 2.nginx配置文件
-
-- 1.下载配置文件并替换默认文件
-```
-cd /etc/nginx&&rm -rf /etc/nginx/nginx.conf&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/nginx.conf
-# 如果缺少wget 则执行下面的命令，然后重复上面的命令
-yum install wget
-```
-- 将下载好的文件中关于ls.xxx.xyz的内容都替换成你的二级域名
-
-## 3.生成https
-
-- 1.安装acme.sh
-```
-curl https://get.acme.sh | sh
-% Total % Received % Xferd Average Speed Time Time Time Current
- Dload Upload Total Spent Left Speed
-100 671 100 671 0 0 680 0 --:--:-- --:--:-- --:--:-- 679
-% Total % Received % Xferd Average Speed Time Time Time Current
- Dload Upload Total Spent Left Speed
-100 112k 100 112k 0 0 690k 0 --:--:-- --:--:-- --:--:-- 693k
-[Fri 30 Dec 01:03:32 GMT 2016] Installing from online archive.
-[Fri 30 Dec 01:03:32 GMT 2016] Downloading https://github.com/Neilpang/acme.sh/archive/master.tar.gz
-[Fri 30 Dec 01:03:33 GMT 2016] Extracting master.tar.gz
-[Fri 30 Dec 01:03:33 GMT 2016] Installing to /home/user/.acme.sh
-[Fri 30 Dec 01:03:33 GMT 2016] Installed to /home/user/.acme.sh/acme.sh
-[Fri 30 Dec 01:03:33 GMT 2016] Installing alias to '/home/user/.profile'
-[Fri 30 Dec 01:03:33 GMT 2016] OK, Close and reopen your terminal to start using acme.sh
-[Fri 30 Dec 01:03:33 GMT 2016] Installing cron job
-no crontab for user
-no crontab for user
-[Fri 30 Dec 01:03:33 GMT 2016] Good, bash is found, so change the shebang to use bash as preferred.
-[Fri 30 Dec 01:03:33 GMT 2016] OK
-[Fri 30 Dec 01:03:33 GMT 2016] Install success!
+bash <(curl -L -s https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh)
```
-- 2.生成https证书
-```
-# 替换ls.xxx.xyz为自己的域名
-sudo ~/.acme.sh/acme.sh --issue -d ls.xxx.xyz --standalone -k ec-256
+## 1.自动模式
+- 只需要输入域名即可
+- 仔细检查【1.准备工作】正确
+
-# 如果提示Please install socat tools first.则执行，安装完成后继续重复执行上面的命令
-yum install socat
-```
+## 2.手动模式
+- 可以指定需要执行的内容
+
-- 3.安装证书
-```
-# 替换ls.xxx.xyz为自己的域名
-~/.acme.sh/acme.sh --installcert -d ls.xxx.xyz --fullchainpath /etc/nginx/ls.xxx.xyz.crt --keypath /etc/nginx/ls.xxx.xyz.key --ecc
-```
-- 4.修改/etc/nginx/nginx.conf
-```
-# 将下面这部分前面的#去掉，并将ssl_certificate、ssl_certificate_key修改成自己的路径
+# 防火墙设置[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/firewall.md)
+# 免费账号【正常使用】[点击查看](https://github.com/mack-a/v2ray-agent/blob/master/free_account.md)
+# 备注
+## 1.推荐使用v2ray+CDN的方式
+### 1.优点
+- 1.防止境外vps被墙
+- 2.由于CDN的方式是通过完全模拟正常网站，也可以是说本来就是一个正常的网站，同时又使用正常的CDN厂商（全球最大），有很多的外贸以及国外公司使用，墙一般不敢ban这些ip
+- 3.可以用于被墙vps的搭建
+- 4.相对来说更加安全
-# ssl on;
-# ssl_certificate /etc/nginx/ls.xx.xyz.crt;
-# ssl_certificate_key /etc/nginx/ls.xx.xyz.key;
-# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-# ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
-# ssl_prefer_server_ciphers on;
-```
+### 2.缺点
+- 1.配置过程复杂
+- 2.知识点相对比较多
+- 3.维护相对复杂
+- 4.由于CloudFlare不是国内的CDN厂商，速度相对来说慢一些（可以尝试CNAME优化方案[CNAME因为要使用国内的dns，相对于来说有风险]、或者使用自定义dns服务器[分享相对小一些]）
-- 5.每一次生成https证书后有效期只有三个月，需要快过期时更新（剩余七天内可以重新生成）
-```
-# 替换ls.xxx.xyz为自己的域名
-sudo ~/.acme.sh/acme.sh --renew -d ls.xxx.xyz --force --ecc
-```
+### 3.数据包解析
+- 1.首先运营商以及GFW获取到的数据包，无法作为中间人进行攻击（中间人可以直接获取到v2ray的加密数据包）
+- 2.即使获取到数据包之后，还需要对数据包进行解密，所以证书推荐使用第三方的，而不使用官方提供的，用了TLS加密的数据不是说不能解密，而是需要耗费巨大的时间以及运算能力
+- 3.解密完成后 还需要对v2ray加密的数据进行解密、嗅探等操作
+- 4.不建议使用不明来历的机场，如果机场主是国内的某些关系户，你用的代理相当于实名翻墙（违法）
-# 3.配置v2ray
-## 1.安装v2ray
+### 4.建议
+- 1.注意隐私保护（今日不同往日）
+- 2.建议只用做学习以及娱乐使用，不建议发表一些敏感言论（不管是诋毁自己所在的国家，还是诋毁别的国家）
+- 3.不建议人身攻击（有被起底的先例）
-```
-bash <(curl -L -s https://install.direct/go.sh)
-```
+## 2.速度首选V2Ray TCP方式
+- 1.本脚本目前不支持（后续可能会添加）
-## 2.v2ray配置文件
+## 3.本地网络环境不稳定首选mKCP
+- 1.本脚本目前不支持（后续可能会添加）
-- 下载config_ws_tls.json
-```
-cd&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/config_ws_tls.json
-```
+## 4.目前不推荐使用ss、ssr
-- 配置文件的id可以自己生成一个新的，替换即可
-```
-/usr/bin/v2ray/v2ctl uuid
-```
+# 维护进程[todo List]
+## 1.一键脚本
+### 1.自动模式
+- [x] 1.检查系统版本是否为Ubuntu、Centos、Debian
+- [x] 2.安装工具包
+- [x] 3.检测nginx是否安装并配置
+- [x] 4.检测https是否安装并配置
+- [x] 5.检测V2Ray是否安装并配置
+- [x] 6.生成vmess、二维码链接
+- - [x] 1.shadowrocket
+- - [ ] 2.Quantumult
+- [x] 7.启动服务并退出脚本
+- [ ] 8.HTTPS续签
+- [ ] 9.开机自启动
+- [ ] 10.面板搭建
+- - [ ] 1.在线创建、删除、修改账户
+- - [ ] 2.一键管理Nginx、TLS
+- - [ ] 3.开机自启动
+- - [ ] 4.流量控制
+- - [ ] 5.日志查看
+- [x] 11.Docker[开箱即用]
+- [x] 12.自定义DNS服务器替换CNAME优化方案
+- [ ] 13.k8s+docker一键构建V2Ray Nginx
-## 3.启动v2ray
-```
-/usr/bin/v2ray/v2ray -config ./config_ws_tls.json&
-```
+### 2.手动模式
+- [x] 1.检查系统版本是否为Ubuntu、Centos、Debian
+- [x] 2.安装工具包
+- [x] 3.检测nginx是否安装并配置
+- [x] 4.检测https是否安装并配置
+- [x] 5.检测V2Ray是否安装并配置
+- [x] 6.启动服务并退出脚本
+- [x] 7.卸载安装的所有内容
+- [x] 8.查看配置文件路径
+- [x] 9.生成Vmess链接
+- [x] 10.返回主目录
+- [x] 11.退出脚本
-# 4.客户端
-## 1.MacOS
-- 下载V2RayU[点我下载](https://github.com/yanue/V2rayU/releases/download/1.4.1/V2rayU.dmg)
-- 下载后打开，服务器设置，修改address即可
-
-
-- pac设置，添加下面的链接
-```
-https://raw.githubusercontent.com/gfwlist/gfwlist/master/gfwlist.txt
-```
-
-- 选择使用Pac模式，即可
-## 2.windows
-- 下载v2rayN[点我下载](https://github.com/2dust/v2rayN/releases/download/2.44/v2rayN.zip)
-- 使用方法 [点我查看](https://github.com/233boy/v2ray/wiki/V2RayN%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B)
-
-
-到这里就配置完成，可以测试是否能上被q的网站
-
-
-# 5.其余设置
-## 1.开机自启
-### 1.配置Nginx开机自启
-- 创建service文件
-```
-cd /etc/systemd/system&&touch nginxReboot.service
-```
-
-- 将下面内容复制到/etc/systemd/system/nginxReboot.service
-```
-[Unit]
-Description=nginx - high performance web server
-After=network.target remote-fs.target nss-lookup.target
-
-[Service]
-Type=forking
-PIDFile=/run/nginx.pid
-Environment=PATH=/root/.nvm/versions/node/v12.8.1/bin:/usr/bin/v2ray/:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
-ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf
-ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf
-ExecReload=/usr/sbin/nginx -s reload
-ExecStop=/usr/sbin/nginx -s stop
-ExecQuit=/usr/sbin/nginx -s quit
-PrivateTmp=true
-
-[Install]
-WantedBy=multi-user.target
-```
-
-- 设置开机自启
-```
-sudo systemctl enable nginxReboot.service
-```
-- 可能出现的错误
-```
-# 可能会出现 (13: Permission denied) while connecting to upstream:[nginx]
-// 解决方法 执行下面的命令
-setsebool -P httpd_can_network_connect 1
-```
-
-### 2.配置v2ray_ws_tls开机自启
-- 创建service文件
-```
-cd /etc/systemd/system&&touch v2ray_ws_tls.service
-```
-
-- 将下面内容复制到/etc/systemd/system/v2ray_ws_tls.service
-```
-[Unit]
-Description=V2Ray WS TLS Service
-After=network.target
-Wants=network.target
-
-[Service]
-Type=simple
-PIDFile=/run/v2rayWSTLS.pid
-ExecStart=/usr/bin/v2ray/v2ray -config /root/config_ws_tls.json
-Restart=on-failure
-# Don't restart in the case of configuration error
-RestartPreventExitStatus=23
-
-[Install]
-WantedBy=multi-user.target
-```
-- 设置开机自启
-```
-sudo systemctl enable v2ray_ws_tls.service
-```
-### 3.测试开机自启是否成功
-- 重启vps
-```
-reboot
-```
-- 重启后查看程序是否正常启动
-```
-# 执行下方命令查看v2ray是否启动
-ps -ef|grep v2ray
-
-root 4533 1 0 03:03 ? 00:00:00 /usr/bin/v2ray/v2ray -config /root/config_ws_tls.json
-root 4560 1287 0 03:04 pts/0 00:00:00 grep --color=auto v2ray
-
-# 执行下方命令查看nginx是否启动，
-ps -ef|grep nginx
-``
-root 762 1 0 02:20 ? 00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
-nginx 763 762 0 02:20 ? 00:00:00 nginx: worker process
-root 4562 1287 0 03:04 pts/0 00:00:00 grep --color=auto nginx
-```
-# 6.异常处理
-## 1.偶尔断流
-- 修改cloudflare Firwall Rules->create a Firewall rule
-- - 设置Field:URI path
-- - 设置：value:/v2
-- - Choose an action:Allow
-
-# 7.开启Centos bbr拥塞控制算法[我的测试机是centos 8]
-## 1.检查是否安装bbr
-- 有一些vps会自带bbr模块 比如搬瓦工的某些机器，执行下面命令
-```
-lsmod | grep bbr
-```
-- 如果输出类似内容则已经开启bbr 到这里就可以结束了
-```
-tcp_bbr 20480 28
-```
-## 2.yum更新
-```
-yum update
-```
-## 3.查看系统版本
-- 执行下面命令
-```
-cat /etc/redhat-release
-```
-
-- 如果release后面的数字大于7.3即可
-```
-CentOS Linux release 7.7.1908 (Core)
-```
-## 4.安装elrepo并升级内核
-- 分别依次执行下面命令
-```
-rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
-rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm
-yum --enablerepo=elrepo-kernel install kernel-ml -y
-```
-- 正常情况下会输出下面内容
-```
-Transaction Summary
-================================================================================
-Install 1 Package
-Total download size: 39 M
-Installed size: 169 M
-Downloading packages:
-kernel-ml-4.9.0-1.el7.elrepo.x86_64.rpm | 39 MB 00:00
-Running transaction check
-Running transaction test
-Transaction test succeeded
-Running transaction
-Warning: RPMDB altered outside of yum.
- Installing : kernel-ml-4.9.0-1.el7.elrepo.x86_64 1/1
- Verifying : kernel-ml-4.9.0-1.el7.elrepo.x86_64 1/1
-Installed:
- kernel-ml.x86_64 0:4.9.0-1.el7.elrepo
-Complete!
-```
-## 5.更新grud文件并重启
-- 依次执行下面的命令，重启后需要等待数秒重新使用ssh连接
-```
-egrep ^menuentry /etc/grub2.cfg | cut -f 2 -d \'
-grub2-set-default 0
-reboot
-```
-## 6.开机后检查内容是否为4.9及以上版本
-- 执行下面的命令
-```
-uname -r
-```
-- 输出结果
-```
-5.3.7-1.el7.elrepo.x86_64
-```
-## 7.开启bbr
-- 执行下面的命令
-```
-vim /etc/sysctl.conf
-```
-- 添加如下内容
-```
-net.core.default_qdisc = fq
-net.ipv4.tcp_congestion_control = bbr
-```
-- 加载系统参数
-```
-sysctl -p
-```
-## 8.验证bbr是否开启成功
-### 测试方法1
-- 执行下面的命令
-```
-sysctl net.ipv4.tcp_available_congestion_control
-```
-- 输出下面内容即为成功
-```
-net.ipv4.tcp_available_congestion_control = bbr cubic reno
-```
-
-### 测试方法2
-- 执行下面的命令
-```
-lsmod | grep bbr
-```
-- 输出下面内容即为成功
-```
-tcp_bbr 20480 28
-```
+## 1.手动搭建
+- [x] 手动搭建
diff --git a/Trojan.md b/Trojan.md
new file mode 100644
index 0000000..15d729e
--- /dev/null
+++ b/Trojan.md
@@ -0,0 +1,173 @@
+- [1.特点](#1特点)
+- [2.安装](#2安装)
+ * [1.生成TLS证书【Let’s Encrypt】](#1生成tls证书lets-encrypt)
+ + [主要步骤](#主要步骤)
+ * [2.安装Trojan](#2安装Trojan)
+ + [1.执行下方命令](#1执行下方命令)
+ + [2.修改Trojan配置文件](#2修改Trojan配置文件)
+ + [3.配置文件主要内容说明](#3配置文件主要内容说明)
+ + [4.详细配置文件说明](#4.详细配置文件说明)
+- [3.启动](#3启动)
+- [4.配置与V2Ray并存【并保证网站伪装】【待完善】](#4配置与v2ray并存并保证网站伪装待完善)
+
+# 1.特点
+- 1.tls加密数据通过防火墙。
+- 2.无法使用CloudFlare代理。
+- 3.Trojan使用C++实现，较其他语言效率高。
+- 4.客户端少，ios端表现不如V2Ray（Quantumult）。
+- 5.需要自己维护证书。
+
+# 2.安装
+## 1.生成TLS证书【Let’s Encrypt】
+### 主要步骤
+- 1.配置DNS解析
+- 2.安装Nginx
+- 3.Let’s Encrypt生成证书
+- 4.参考[此链接](https://github.com/mack-a/v2ray-agent/blob/master/Cloudflare_Full.md#1%E5%87%86%E5%A4%87%E5%B7%A5%E4%BD%9C)中【1.准备工作】和【2.vps配置Nginx、https】。
+
+## 2.安装Trojan
+### 1.执行下方命令
+```
+sudo bash -c "$(curl -fsSL https://raw.githubusercontent.com/trojan-gfw/trojan-quickstart/master/trojan-quickstart.sh)"
+```
+
+### 2.修改Trojan配置文件
+- 1.文件路径
+```
+/usr/local/etc/trojan/config.json
+```
+
+- 2.修改证书和密钥
+```
+vi /usr/local/etc/trojan/config.json
+
+# 找到下方两行 修改为自己的存放证书的路径
+"cert": "/path/to/certificate.crt",
+"key": "/path/to/private.key",
+
+# 找到下方位置，有几个用户就要填写几个密码
+"password":[
+ "7f3a2df1-64e8-48bb-ebf8-3953ed699495",
+ "b2cc18e3-e4b3-eff8-f24c-a4a4f80a9af9"
+]
+```
+
+### 3.配置文件主要内容说明
+- local_port:监听的端口号，默认443，如果443封禁了，可以更换其余端口。
+- remote_addr和remote_port：非trojan协议时，将请求转发处理的地址和端口。默认80，80端口可以开放给Nginx来配置个人站点或者伪装其他网址，也可以配置搭配V2Ray，来实现一个VPS多种协议；
+- password：密码。需要几个填写几个，可以使用v2ctl uuid生成，也可以随便填写，最后一行不可以有逗号。
+
+### 4.详细配置文件说明
+- [点此查看](https://trojan-gfw.github.io/trojan/config)
+
+# 3.启动
+- 1.开机自启
+```
+systemctl enable trojan
+```
+
+- 2.启动
+```
+systemctl start trojan
+```
+
+- 3.关闭
+```
+systemctl stop trojan
+```
+
+# 4.配置与V2Ray并存【并保证网站伪装】
+- 1.需要配合CloudFlare
+- 2.需要使用【方法1】配置V2Ray[点此查看](https://github.com/mack-a/v2ray-agent/blob/master/Cloudflare_Flexible.md)
+
+## 1.思路
+- 1.配置两个不同的二级域名
+- 2.CloudFlare对V2Ray的二级域名开启Proxy【☁️】
+- 3.SSL/TLS mode 修改为Fiexible
+
+## 2.示例
+### 1.CloudFlare SSL/TLS mode
+
+
+### 2.CloudFlare DNS Trojan&V2Ray
+- 1.blog2 指向Trojan的443
+- 2.blog 则通过CloudFlare指向VPS的80
+- 3.指向的ip是一样的，一个通过CloudFlare代理一个则不代理。
+
+
+
+### 3.Nginx config
+```
+# For more information on configuration, see:
+# * Official English Documentation: http://nginx.org/en/docs/
+# * Official Russian Documentation: http://nginx.org/ru/docs/
+
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+# Load dynamic modules. See /usr/share/nginx/README.dynamic.
+include /usr/share/nginx/modules/*.conf;
+
+events {
+ worker_connections 1024;
+}
+
+http {
+ log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"';
+
+ access_log /var/log/nginx/access.log main;
+
+ sendfile on;
+ tcp_nopush on;
+ tcp_nodelay on;
+ keepalive_timeout 65;
+ types_hash_max_size 2048;
+
+ include /etc/nginx/mime.types;
+ default_type application/octet-stream;
+
+ # Load modular configuration files from the /etc/nginx/conf.d directory.
+ # See http://nginx.org/en/docs/ngx_core_module.html#include
+ # for more information.
+ include /etc/nginx/conf.d/*.conf;
+
+ server {
+ listen 80;
+ # 这里是你的域名
+ server_name blog.xxx.xyz;
+ root /usr/share/nginx/html;
+
+ location / {
+
+ }
+ location ~ /.well-known {
+ allow all;
+ }
+ # 这里是V2Ray
+ location /main {
+ proxy_redirect off;
+ proxy_pass http://127.0.0.1:31290;
+ proxy_http_version 1.1;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+ # proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ }
+ error_page 404 /404.html;
+ location = /40x.html {
+ }
+
+ error_page 500 502 503 504 /50x.html;
+ location = /50x.html {
+ }
+ }
+}
+
+```
+### 4.Trojan则不用修改
diff --git a/config/config_ws_tls.json b/config/config_ws_tls.json
index b3799fa..22f7ca7 100644
--- a/config/config_ws_tls.json
+++ b/config/config_ws_tls.json
@@ -1,8 +1,8 @@
{
"log": {
- "access": "",
- "error": "",
- "loglevel": "debug"
+ "access": "/usr/bin/V2RayConfig/V2Ray_access.log",
+ "error": "/usr/bin/V2RayConfig/V2Ray_error.log",
+ "loglevel": "warning"
},
"stats": {},
"api": {
@@ -34,7 +34,7 @@
},
"inbounds": [
{
- "port": 31290,
+ "port": 31291,
"listen": "127.0.0.1",
"protocol": "vmess",
"settings": {
@@ -43,7 +43,7 @@
"id": "a4f7ef9b-6951-2397-098d-bb1e660b3805",
"alterId": 64,
"level": 1,
- "email": "xxx_ls_ws_username@v2ray.com"
+ "email": "xxx@v2ray.com"
}
]
},
diff --git a/config/nginx.conf b/config/nginx.conf
index e433ff5..f87f1e2 100644
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -2,7 +2,7 @@
# * Official English Documentation: http://nginx.org/en/docs/
# * Official Russian Documentation: http://nginx.org/ru/docs/
-user nginx;
+user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
@@ -27,7 +27,7 @@ http {
keepalive_timeout 65;
types_hash_max_size 2048;
- include /etc/nginx/mime.types;
+ # include /etc/nginx/mime.types;
default_type application/octet-stream;
# Load modular configuration files from the /etc/nginx/conf.d directory.
@@ -38,7 +38,7 @@ http {
server {
listen 80;
listen [::]:80;
- server_name ls.xxx.xyz; # 这里需要修改为你的
+ server_name domain; # 这里需要修改为你的
root /usr/share/nginx/html;
# Load configuration files for the default server block.
@@ -57,32 +57,17 @@ http {
location = /50x.html {
}
}
- #server {
- # listen 80;
- # server_name ls.xxx.xyz;
- # return 301 https://$host$request_uri;
- #}
server {
listen 443 ssl;
- # ssl_certificate /etc/nginx/ls.xx.xyz.crt;
- # ssl_certificate_key /etc/nginx/ls.xx.xyz.key;
- # ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- # ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
- # ssl_prefer_server_ciphers on;
- server_name ls.xxx.xyz; # 这里需要修改
+ # ssl_certificate /etc/nginx/$1.crt;
+ # ssl_certificate_key /etc/nginx/$1.key;
+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+ ssl_prefer_server_ciphers on;
+ server_name $1; # 这里需要修改
location / {
}
- location /v2 {
- proxy_redirect off;
- proxy_pass http://127.0.0.1:31290;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- # proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header Host $host;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- }
+ location /alone {proxy_redirect off;proxy_pass http://127.0.0.1:31299;proxy_http_version 1.1;proxy_set_header Upgrade $http_upgrade;proxy_set_header Connection "upgrade";proxy_set_header X-Real-IP $remote_addr;proxy_set_header Host $host;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;}
}
}
diff --git a/config/nginx_Flexible.conf b/config/nginx_Flexible.conf
new file mode 100644
index 0000000..a63b6e2
--- /dev/null
+++ b/config/nginx_Flexible.conf
@@ -0,0 +1,71 @@
+# For more information on configuration, see:
+# * Official English Documentation: http://nginx.org/en/docs/
+# * Official Russian Documentation: http://nginx.org/ru/docs/
+
+user root;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+# Load dynamic modules. See /usr/share/nginx/README.dynamic.
+include /usr/share/nginx/modules/*.conf;
+
+events {
+ worker_connections 1024;
+}
+
+http {
+ log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"';
+
+ access_log /var/log/nginx/access.log main;
+
+ sendfile on;
+ tcp_nopush on;
+ tcp_nodelay on;
+ keepalive_timeout 65;
+ types_hash_max_size 2048;
+
+ # include /etc/nginx/mime.types;
+ default_type application/octet-stream;
+
+ # Load modular configuration files from the /etc/nginx/conf.d directory.
+ # See http://nginx.org/en/docs/ngx_core_module.html#include
+ # for more information.
+ include /etc/nginx/conf.d/*.conf;
+
+ server {
+ listen 80;
+ listen [::]:80;
+ server_name domain; # 这里需要修改为自己的
+ root /usr/share/nginx/html;
+
+ # Load configuration files for the default server block.
+ include /etc/nginx/default.d/*.conf;
+
+ location / {
+ }
+ location ~ /.well-known {
+ allow all;
+ }
+ error_page 404 /404.html;
+ location = /40x.html {
+ }
+
+ error_page 500 502 503 504 /50x.html;
+ location = /50x.html {
+ }
+ location /v2 {
+ proxy_redirect off;
+ proxy_pass http://127.0.0.1:31291;
+ proxy_http_version 1.1;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+ # proxy_set_header Host $http_host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ }
+ }
+}
diff --git a/demo.sh b/demo.sh
new file mode 100755
index 0000000..fc60a0a
--- /dev/null
+++ b/demo.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+yum install wget -y
+mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
+wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
+yum makecache
+yum update -y
\ No newline at end of file
diff --git a/firewall.md b/firewall.md
new file mode 100644
index 0000000..9a3be48
--- /dev/null
+++ b/firewall.md
@@ -0,0 +1,131 @@
+- [1.CentOS7、8 配置及使用firewall](#1centos78-配置及使用firewall)
+ * [1.systemctl是centos7的服务管理工具中主要的工具它融合之前service和chkconfig的功能于一体](#1systemctl是centos7的服务管理工具中主要的工具它融合之前service和chkconfig的功能于一体)
+ * [2.firewalld的基本使用](2firewalld的基本使用)
+ * [3.配置firewalld-cmd](3配置firewalld-cmd)
+
+# 1.CentOS7、8 配置及使用firewall
+## 1.systemctl是CentOS7的服务管理工具中主要的工具，它融合之前service和chkconfig的功能于一体。
+- 启动一个服务
+```
+systemctl start firewalld.service
+```
+- 关闭一个服务
+```
+systemctl stop firewalld.service
+```
+- 重启一个服务
+```
+systemctl restart firewalld.service
+```
+- 显示一个服务的状态
+```
+systemctl status firewalld.service
+```
+- 在开机时启用一个服务
+```
+systemctl enable firewalld.service
+```
+- 在开机时禁用一个服务
+```
+systemctl disable firewalld.service
+```
+- 查看服务是否开机启动
+```
+systemctl is-enabled firewalld.service
+```
+- 查看已启动的服务列表
+```
+systemctl list-unit-files|grep enabled
+```
+- 查看启动失败的服务列表
+```
+systemctl --failed
+```
+
+## 2.firewalld的基本使用
+- 启动
+```
+systemctl start firewalld
+```
+- 查看状态
+```
+systemctl status firewalld
+```
+- 停止
+```
+systemctl disable firewalld
+```
+- 禁用
+```
+systemctl stop firewalld
+```
+
+### 3.配置firewalld-cmd
+- 查看版本
+```
+firewall-cmd --version
+```
+- 查看帮助
+```
+firewall-cmd --help
+```
+- 显示状态
+```
+firewall-cmd --state
+```
+- 查看所有打开的端口
+```
+firewall-cmd --zone=public --list-ports
+```
+- 更新防火墙规则
+```
+firewall-cmd --reload
+```
+- 查看区域信息
+```
+firewall-cmd --get-active-zones
+```
+- 查看指定接口所属区域
+```
+firewall-cmd --get-zone-of-interface=eth0
+```
+- 拒绝所有包
+```
+firewall-cmd --panic-on
+```
+- 取消拒绝状态
+```
+firewall-cmd --panic-off
+```
+- 查看是否拒绝
+```
+firewall-cmd --query-panic
+```
+- 查看所通过的服务
+```
+firewall-cmd --list-services
+```
+- 添加一个服务
+```
+firewall-cmd --add-service openvpn
+```
+- 永久添加一个服务
+```
+firewall-cmd --permanent --add-service openvpn
+```
+- 开启一个端口
+```
+firewall-cmd --zone=public --add-port=80/tcp --permanent （--permanent永久生效，没有此参数重启后失效）
+```
+- 重新载入
+```
+firewall-cmd --reload
+```
+- 查看端口是否开启
+```
+firewall-cmd --zone= public --query-port=80/tcp
+```
+- 删除开放端口
+```
+firewall-cmd --zone= public --remove-port=80/tcp --permanent
+```
diff --git a/fodder/CDN域名解析 CNAME.png b/fodder/CDN域名解析 CNAME.png
new file mode 100644
index 0000000000000000000000000000000000000000..25e4ac418bfdb31147c49cdced3f64543e0a3945
GIT binary patch
literal 86614
zcmeFZWmJ^^-!4jbNlPQrDcvAQcPU*;hjgcuNJ+!cNOwp{cMK&%N`rJaL!O&w?f-uE
zUO#>>&pPL2SCSbqWb&P!x{=-M*mWa}W3*$0?
zgM2C_4BHcn6Eg@-%kLS-=Kti=8Gpey8u>z*g53t8)J6?eK$9hT^K|ne>)?7hF1eIA
z+5|a~E>5bC*(TJtIhKoAKHLiDN{-XilzKYsx?DT^G>ka^8-A>uwf|%S`&LILEL~3p
zoS`LtPXSJtg44%bp36u@M}8vHMu~9=M^QdCF85+pilpq-vc!>ZG30%zoLG8X4YBkZ
zy;?U}ntxwc^W5>hlQ`sfEPbVB`c2RxQkP0OI#8R`v_P1iTK*tt4nLg#O}8kgR12p+
z>DT+%_Qr}!SoLWRIa0zQt!
zpZbbmh$sHy8t)bL_n2XHwJ5Z=us{9Ds!J-_s5E$Vvq7=&6cXvkx#Dbh<*Flbk?$0c
zu(PG^Vzzx!Y}hn6X2tAmEyJg^@w;1CGE7uViQgm;%VE$9uF-i=9mdFX+i+;QFCbr$
zk6zY_ty1R%Ib=B`j!QKPXy~)tmQWC;Ap9~8c2F95X*3-<|MtC#FambK-FH%pHM$N&
zN^F|y6Ds0)JY50MaN?Bz$bADz+xD-%m^Jygj6WDU@xv-Dtc9$+qpKLaZ_L6bo6IB6
z6S+7~U42H0G6*}oCucHe)osPxNQ9y@da+DK0z$}pb*s>4O=u}}q_8zhE%|j@n6k(Q
zXdYyQGwBLy;+hO+hyRmqoO+4ShHKKi`e>$<6O=YL_b!m@x^u_7ysy0u<=5_0X-Lb4prw@QBk
zz7}bre0-OUr-(X=AO@Gr5%OIsMUsJ56Sp1@3rD%LusG}(B>S2({PNxBYwiNv+VHcl
z;BeA#@2~w|$$RYAV8Y*V(h0=F$yUFnV9e5#|0DiKNlyz68GmK|zWv75o3thqo{z%d%*f0*&rqHakw7s-r4?hXf|*UHUR$hCq%|qM
z%eZT|tH8?2%FJq1KB#M2-m9yn>s>c$xd`!+ffNe-=KpEMjcA8xhkQVMKzBf!q1^BT
z83Ngco)esV-JsqW-00bbUTWJ_)Qfw^x<$FgyA@t?k$;OW$I`P1RgP88AN9+K5cK_p
zZy;n4&8Fg>V;^<+c5&|)ycdQDU#oVjaO;Lw^ZDqm$Ta=V{7%>o`nke+!*162k-0I3
z4N_RAg-`cvAAj%m8!D1nQU}Z$%ppuaPD{RRzDYi^&ndRrmf9aZW~(B?-yEdqo3lC7
zI#ZsJoZU0js_m>=zvEb
zKS<}S$eWtZxkGBl@yDOr-(_yw_s1iLlv0M`y3$svJx{B#ps~39x?+w|R6&q~DZSK|`4)zfQ5y?9B~5hFupTGh%mH>^smG^_+kdMxv-$mRRxab@4i
zFSQq|3v_R_Ep#jE>}wAjs;g2zaV-~gZer_wD~~B3aBDrVn&)%7bYpZ|p5vJpspqTN
z`a?9wH@obXErcL2>{jI5xF+jz?l|nYuU!#eD=@`x;3A#Tn%+A~njzGO({~*m
z8(B>1ycn|C<;Lh><hw|y&Xzj?^kK~5r;nLrwGxL2y
zi_O!wzhVMa(#M>#xY`hwah9dp!hDvYp3sfkgR@)ka<5pwfAZrx>Lp$^@m%Ss_F3
zm7tLTOU!qlcgJ;=bRUN5g;<2}1z*W{NDoKw6Uu#!{H9OtnPJnn;k?&$kJn1img2$r
zjW7{Mi`-T052G&Oq9AGpx8npzuHmEY$JcL0s;QDlo9Ql<(|s5A8;$7k==+r_QtvpH
zSpEF&b`YeyhJy`IEAb?8KhQ17JISiQuA|+1t)ft&;unt#QjeYBF$?6@)4o@YPv>wth}n%@oY5u&4XEg$_n8ybQD09sWDAkfkiEBDb9Q5J&_r
zUB~?7z-7&K10{R#deC@VWn7;9ftaccM|22dplrY=o#1;NUFiq>*CqHD;R0*cCujQu
z`y+FoolKqG{$gwt{5>3`*~;G{PuNy)dQESUI>wYfMeUlDB;Ra)J7UP!Y(z*q&nEL1
zvcU>Pa_IJZyPAFd-m#LZD!X9iApNhvE&2r-Z3xk(;D`b5m71Ez@0hb=&pS`MGuAEk
zRR7Pg-knJy16`3Jb`fPni7dN1WYr#9xVv%bwCzOAgdgzRZ|FACrg3ZIdTAGzrG4gA
zOAMHpTOTqW-P4lS6nYirlRa7HtM)Zgv-kCzY&^}NVH(S}s~(q%_P@
zUY{aDEu(VO;yDc)-R82(5$VppQKil_623G$w&lAAfQm4*=49!p!vyV7VAT6IlCQx{u5)pQvba`
zqyC3q>)$tWK;5BXA1HDt7zH?8er|7fyxFO4Ti5Ato;R;w6nwMMlNcYbQlIrr&~>xn
zcv(5!JWJGzZe=*9*3SYv^GsmIXKBv|f;fhb?00o{FW&sY8zOZS!J6#DUgxH`%|G#S
z((}$~dtl<|tJBM)l(N$;Z9IB9(@))6md7;g>3P1RdGAsi`n6v#>BC1TcNHjs7Vm
zqFcoXYFSEJD0lQ_qUa?(=mF9m8ul{+{V=oWQ&>#oB~GQ8#2BjBF)yaR3PZXLMx=u1
zDZ1u!a+1wqzU#tXGmw&yEbw!mJCZ71(!unbmyRXNQ+L&NVlzc6o3EN4C*G0DB?Kae
zDhWpcvjwVytd27b3?c2)KUg{S*T*n0;xKaW-fDWl?k^%|(`e;{oz#NW^MY2syvja*
zrSy&atyesjdY(H%9*Q=O?-zy$6oxgtM5b&8EicENDwprSWRI%ON8xS{-H-o{WMs%W
zIe#7+xySkxub8#0=oIfin#yH6S)_(1p_0l$y%Z9JCHS?F5D{Nh9QL0-vNzyFJk9jC
zzT#`w`=IORz@af@2mJGg>MM?xPmMtY&ptyuupadsjjh~wu6}*x+w-r
zRF!$=6i+9!EQHZ9!(hW?o%bZxZ}{gCo{sewF_ctyQ_iR2nIi&!KOijPCa{picr)+I
zuiyUcBP8|y$2o}qupG8N`x3ODdI4nGsVwq&I~Sb)H9_6rZ#eL^?45%M+;0)>mx}n*Us5{-V0z6
zcL|Cn8x`fuTe$=?o)?;790RsyNZw&ClAuxXdEKgJzX&AOFZh$R(-w;;5c6-(F#?XG
zyI#{CH(L3;NbqdN4gxEAY^u*|?S@$ul}&?S_4nP#aFeDopZ+YTvTL>
zb0IMCu%%TyB>#(E(YRk3JIs9rojn^>+2R_AUWm!Oq@PRb&_6sEp5lQdfFJD>=ufBg
z|9;*u+2RTarVgp05~3mGDjWwfq!|#xEE{?csi|F`gw~KQ5!q_|L@Hl
zxqa7fMQ&QJme8}H!xp-2*q__)-8@zTk=MN1&-2+sQY|u@tmZpJu_#4_6-A+cmGr{U
z-#=%>>?t?{Qhh_`5gwCkd2l$)P6Qp*){P?n*1$
zyr#s@`$#`y-0s(^=s$EKQQ3eAr*}$#z%i@>jw1N9#)wl$Dej(2hDxn6oYC4CB
zgcr$@*IxNGzZfPwaLR|dF+bk2meZjS*w;$kR#(KZ_vXZbO-rYBfZ8l>eKJ=3r_#Yqnr>$XgTfR@5wOd^b}q`ud^%(E^((
z9jtmNC!-=)3*s7wjD_i(LM1uC7mRoz&atc6RdZ0&ca@>`M@qw6luCB-Sk
zZA<91-sdPhwc_aaoxY6825vfyj}N!&EDG$cE|%PP`(VK|0lOKbWNfiJhZO6Q;x60T
z5yB)r`zFil*^e<7C8^p-%@@;p$x$U3W0!
zE?$OK;kZ*LA`u3QO;vIQ2HTF550EG#`soagV(EP`iBrRl<86#_dCk#h>=ZYEjHG}~
z+LmROq_f7uTs$bZN|N4B>3{cb&y0-TLCtP_pZASHEm{U;dE3oyb)RMH9
z^Ipcn&Oh6gKx)RSA*Rw`z9kPD;m5nP)y=fe(TS5!!CgXlwdih?o)lh$-|)w}R4c=;
zDsunVN*vuP+eV>!w)ed;<$T9!pAj)97`Z>DkGU2taG+jCt
z83bWlk1xgid{&aafNhnA_kRZGk$!G*G?5WhU~BrsfAAA>LpF~4r6%Sg3Gf=4(2@(~
zF_*`inf5LU@BJ4RodeIBpc-awyri^(L@17~ay8C(vPH4n<;+?5Vp7AAB-9xyDFK$F
z&)^oD%l27v?WFDeEA|K-tGd6O|6t8b;WGaA4Srs2rcGsQy;F9k&*`9H=f+k0XNsOazgpWv&r!lM$YoNWI%(uCbmID@chIPmA2}L_zg%noqe~0@*#Xos
zJfV!uxUWZTxAqtegTK@d-`N7$wPAUs<(
zNM46$iMy@xYO*K~DiAI-vS8&Uy6kgy;rd3aP=$vY@@@w)Hj{6?t<1`YYkGt8pFLw>
zC)M#(r5_JV+x42Gh7sV~@(1!rIJ%sXrx%s}A}m!Ma3_v@_mD&$HVAC4!DDe@CdoE!
zx^Y~=QnJ32+$_*uOuRmM_#3Z+H70s%I}6nFZZLa0nX>Rn4>6K@bDa6s^4%sMGX$~^
zB8gePUAi*G0euFI1W&3e=Es+8Ih89_wCa?8IDX2Sc782epd^HR1W<6Ra9_foEGr#;
z9EXXQxa?#@u`(1dE9vDm9MB-+!@lFe0QWu-0k%EZ9A|xH=4W=E763naYO=0)cODdy^sZ)y2GaJ2wIe
z6!&<${22X1eY_73l;LbJ3=}FJ;k)B*$2&~E1)Rp;WFk{*ku+Wp)C1tl%*Ab2YRDCSl}+>{w|TF;)Bowx^;WjC@_mlrXg=Hh`o3
zQtuTQ*?MlU>nMcN#8+6QB{;0P|2m$2N4k71J)`bwr*Y!aa|q;Ahf#s89#Dc6@s-P(
z|Qs`>R#quRqmf_}(v6tf7{~1;6
z_Q`8$=2q-}MyHf0K}vdHE$yJIeUrix5y6w&=C-K6kODVHo2x1BDNh
zc!XgW*w&1jlU@RxJKeFkHhs}aI|A~*?xsYlP-&WauZJkn{n`I^-ef(B4=c;(RBnUc
zys|pQ>(TG9Y0LD?QbM7E(E&)fp=v**Lx66JZ6ApGkQ|yBLXVrB!gZ&o&Q+@-O|D;{
zVadzJ%-4!M5jJS0bIJRN{Hgd3B~27#kF@nizQhZ2JW%ag(QLb2JVGjYqcJM>cvm%V
z-<+@ZhF@8!ml@vo837nn8N|isMySnxE4#aDID*0o-5y;!B+-xGz^>4
zP+KFxjs~Wn`^Ubk*p6q$pG5sfF1;eH!EIt@ddZ3TlS|X>N;uPz83jXShEST>09~k5Np_@ku%62Xj+0P
zceVvIz!gp=5c*7ySCOQAY_?4sNsfel$r(7@FH|zda01jJRf!=uNqgE({D`}eBnfPe!LFhUh-$%3vc_);(f0<`ecWC9OguPSjDNOHb
zlq5N;Ftx7Pcxm#u-FuZPaL6amw>tkUjIf9$
z=)%Vx@T)+p7moKkjz8_gNs39rQ=j7Yg)GbEx7cG=g6nVPYUaG(#d$cf#)m+C_az|{
z+Ga%C61~~}ahzD`lRqJRH=)3e2~pxR$p7F7*XZ;4Pq1fUx|6)wT$)|IPUZM_P-gLa
z3$xsXpys1CAwYbQ6X}`D;wCTq8bg)-7)qmG3qI^?@k+cpm7ZrRC?9tMzDg7+ln>dO
zcs|V@+SbMSUI)xGr#)Z21*wM!1vv$Gi+(T#H6Csd>e;@4AE}|cN(_H405Q~Ho$yWx
zhY~cDUrK^)5qT)^3^}8_HqbS~emja2-9ZvNX;)v01Qyn;hLZN-#MI{f(LO{xOnI8qimz~=?3
zqsI^4k0SJ>Gn}$uCGgqy<}z+(+m(24d7(%!X7KU|@T#ANwi&b3Obk;dzm1%r@MS}lG4*}h5Y2MpPs*T$j2
znyGCFh34y~d=d#xu57*31=)=+yPG-4@%))==Ho#wrj})u?`qLRVFl*pOK}Dn)l|Dz
z83lv9*zKo7%-w4d?3vObXQM*wEkI{?0*zM@owJ$qKB)V!pPELugAf5sSQ<~|nCWa3
zXhGnoeMLsPYeVSf(`OkIHu97d;t7+M#JhgdlDi3k+RZK4)v{HL!M}X4G^jEDq8l$v~gH5Z=`(o#KLF*zEPGec{X5kFf!^RzM~$O$)L@W#35wO%DLdbJYd{Y%jANkDko!dNu4yQ#~E0A?lX$
z@wz{wF~fI>&RQ!Ps8Rbs>)$FkILP*uZb@IkX~}b|9HW4a_N^Hc*|Ak&2CoQfOJNhV
z?e>tAKc^^BE@y|kj@!up{$e%(lpTM(0nF_RK)|$QHk|=6{a`-Wn0?~hm?#75%}@^PMKQ)c(zUr+lPOQ
zBL7uKNC-I^ZBs^H{BdMJKuRd9g6j0dpvBMgEIU{*S5u0i*=}A5;HRC;u;w>W;5>>Fkl-B4Ptu&pSDQ
z&LEaK&Z*mfD0n_bE>HmQ&M7IipwdFL@R=I&U%3ZFXB-7C`2Fkotv$Y_rg6`0mJd!B
z!ov~tv&0yD#Pg|uVVn;3bO-<%5CL>^2c}W?`6SCg#L>vo;28P*Lw?EuX;SI9;{Ed}
zVF<`oU^}uO&r56fl<4qUO8+I%IRV+miM0QD6iYk}NLBL)N7nz6s`P<#E%d#4-VT7|
zL15m_=Kmw|f6Vs(pp^qxkJ|3-J+`_}QUA?R(0=L~Ul-G7;IjE0Z@jOZxp;10^5iG^
zaMi`vKWU^BlvhxmcV|@qe=}UKnOdt*`H$@XdycV2Bi5gO?F9Gy+b!#W@><$!ko9~x
zOyXaklO$^>y?2(N|KA_`-_xfqEr)5$(f&&b6(50|EwO)%PE@#VF;Jcb*8s~1tI(=P
zBj&&OG7ZOCOuIl1+{p#2d$I6k;PWSA7-xeO+OkS++54AhQxAOMy}#%j1FIK&S#Vh_~%KKF~OgG5H?l+i~4tWJ3U
zt%?8jf5rpo=lbhTo5z!jd?5;B4>tVJ37JsguQ2~2wO`;1>XwCC0_R`>3orWNwtcdL
z^IMZ{%`aU!MDc1e02~!;y{W|tPVHbNTwb(
zpYd$?7(1Y7uRA%A(Ko0A-j*HEzKzuxbjZg1KPM)@;;gxXhu<6DO3HSSBuj1^H`c>P#L2D^AuK2&_Tts!vlvl;0nm#SSO)pD>AVJFcSUWC$@19em6Zf
zuvY#$pLU20?rY9?R=W)225^59yF)S2ryKVx)_0el4U2IC;H(CY#EYoU+ThpIXxJQG
z=>2S4BmMz}Sl_MJ#D)IZklAJf?0YDfc^Cy}Kz%&KT!~=sMm$Xr2FW0%3cOnO7i)oT
zrUl;So?gy>4g>J$Dof2Nlc&|b2e8L4QI4k^JU5$<&8pvr%24{^UlqpMjk3r4GU$#1
zpf6b?&yTA6rxn<$S6X%30~_9tt0nKsO;e<`*=hYj7$pvzEmgksNBEu{)BhYUFdCou
zcdXuqG-I}SF^tI)0C?hG*VL^?3x&$jrRL52#Gn*yd2E+!xjO}$++ClvCK-&y1864C
z<(-zzAB#*+x^(v?PZMC7fbm~=RQy@*jo$Ljdk+9B?lwy{AS}pm`!m$|1QV_T(qahh
zS4nCEXc%*MEp|%Qec@HLE+QB}M167x4Sg@Bp3v1W05}#XYk#=Gi*g5Od^k^Amu`4$
zVVq5X-%u>d*fR035o1}T8JiTn}!c@*HIk*x$PHwcoC#vSoy@oS+%L2b|M}V
zO$UfAC-+Rv*iYzNz8|5CLoZR5!l`
z#L>cN*08>rJ)d;+v2DK+@;_rNNDT;S4ho(IPg(T4J)=joAJS3ZkPu!1doV=|OyXkz
zAq?f2*8X9i1+WOX{c^^}00}9d5L`}SU`qv6A6`fK)$+i(oacQs0S>|
zx}MfvlxK(uIKeBNdMHHELWhlwO2K4OA?y!N*v$2q|APj%SFXtu!hW}=fWl?J&x{vNVjbC$?tThymeANa
zJKB^q$G(@fL8i0)G2{teU48}Y_kj|!?+%2!Gz}X7GKj-s=ZkrT1GS+K?Ke}Qk_wyj
z=L&U95tlgw5#xKnp|PLH2P-lp_5QUZyb+cDNjfSfenS=jN5(HCiDkVDojtN{*mGf~
z>-K=J?Ia3Rn}4v;Sluo~+j?}#1H+>GzBcS>o0Uj8!ym@p^f#^w*m+-C)ujss-QOKS
zu!O4rlTbNOfT0C>^{sP!SbfJ6J0M#4bie^nYM4z$6Wuh5@YRCz$B~}%4PUBY6zaw)
zCLdV3zX~QMXgt;<4Fj(tg5k0FsmOfKf3H4)w_%ii9#bp9e{>LvOUr8Htwz}D^BM9O
z=98vA7>W1=(sLU_C$;r#t9x&LM%I{N*RKZ4K4EcB1dWd?Ay3O?%CW#FPLgVAX%S8+
z&at|)Ya4Wv8I;EvX$*Y=TH4Ur8jWS&>YIHThA-G?$sOjMx88OdYo-ijg
z@*EJ5ayIIU0H{k1r!+8ld1mkF*gVCx`vh;D4ii~QW{kUBtjT83VvA_60P>jTW-sfU
z7Sg3KLy4z0p|RN(v$x_l7eGMkC-J$f5@)rxHkoEhx0pLv4}-UdexdJ=x67lW4G|pOnp~s+j+mb
zKPh@FW<}vpn$&KRIdVWn)pAg=Q$}O%+sPf
z>_X;S_Hn*G`0TIOXc4@gaOATkWCGntj)|##9QS#Af}MhjI)wn5jfKpWm!i1Gq?$}G
zM|8(8&=s(mC$*Wafw6u8acS2bwC@K%S%VK6R$s!NK7SRU3w(>%yp!eefBD_Oyv`Mm
ztwzjj)xORX+?V110Dbe7I$;igEfpm1fly|gCix_g{un$m*JZN-kRrfXB{wMn5i>Gq
zm}hv-!xMF^lz_VuQ{?M2;BAuk+b`8IcZ+uDgh8YJ2*%Rl7xuQete53qW27{o0!I(w8A%z2i26a-aJ>
zqskkSp;7Q&^o*QHNITwO{EX159WU9&f)0?N_jEMp3#tDWB(aB3lD;?e+;9LekN%Gx
z4qqPflMR369FRqB`AZ7zD*ngv9aO;Tfb1PISV@bDxr2zy8g+sj1QW`xkH7$6w!_Nr
zulcd?ACtvPdKYeGmUJFZq
zn`muRu;ZzsC~c)pzohYlGbAbNc44dQiPFdy54t8p9z}n!KfcL!mG})!T&(Q$da$_a
z?EjB7#T$Utu-okmx5r<)0pG*1>`|DTM*oNtc18QhPAzXZV~%3-&SoF>?*D`+<0*OX
z78hQUB!S$oNK!l{wo~PGVAObpM`p^e5KOQ0Pw$WX#m0lh2%^Q_as|GA3&V4QVsyHy
z4a&3{72GSU0<$$wVqi=NOI-ysF{T>}gY&H%TQk~m>TzY&(<;hvCh(^Um_eBrhwYCK
zcp-jL5UfcKYf8L|7tI!PJ_sEfuI=%>>i7eDt>zZC?Av+&2QCGD2{CXd`7-
zr&;WCdGH?F>rU+Z)baW>@-Z;w}p#X
zR?L5CI)nOyHK5`#2jEN^MVVERP>FJ(FKTG>J=m`iQlT3hnFr>cEgx`N3RXBtPjSg+
ztZT+19yAvB)EG*QD7~Gkk!*a-?n@__qAfI{8g;eTGkx
zlK)35kvBk!`;fNah{nJn`&1rx0-b9KWZ~vO+E%mT3uk6Ao6B|97N;Sx*c5XlPG);s
zL2|!2p}6v_P5Z7#D5k}4C1r#s<8ljV8*Fpjlz8uqUq11fwJmc(Otm|Ha=$5jDPp9G
zio@X3X-1MX)@W^HyN+RSjorBjFpD+jYJIqNxW5!EBY?#2R-YTR*GEO}cisufwuuwP6@ernbC=O(4o(xc!xDnU%<*4wH|$&ALT!?p!?JMxC@2KMW!%imt;tSq&UvQdfkh*5o%
z)R~!NL+%L%80nmUJ;MMwhn6qe;F6z1NoW+Bdr#$&@8&3|0`-2Y0AHUxgVY~AgEX(W
zt*m6QG!N|zQV4R``Ep0J*6H^^Bp{#&41vUoa0rq5L$voR1Is(P;Cjt@dQp`;%AcG2
zP_@bN8c@O>tSo>u
zcMLXqsQL3c(b32A@2@n3n5j0!WY&0WiXFl5<%i3L^<>R95A|ztNq#WVp)RHDgkOFD
zr=2k`j#Bpow-4jt7?DeT%w}USGlES}{|g-ZF+*
zO5NT995GS133Yrp0;MeSz8X|9MwbBz3wC{>_zNfHNkQbbNRdYeQAg#?N@z-7E&Byw
zSG5~{*K4oH&Aa@hk7#&v6tqlfV6j^lm~}IS)?yTl5q_aSJ9|P#
zPr~2~$BNx3j`$EB7_;Y|CRuQkIE}Kz0LplUX^23T`
z`uDffCth_2Ylw^4-ls>18QD;Q$@M|QvZ2*zjM=4dM}%r(oPW7#fBht+MT9LI_3_xS
z0~;rurubMAX=Y84nt5jLZ)^I2ep6wp*ljoaH|Ni4Eu$gz17mLK$JoB8yG}%u9B3-MN)$VOG&;
zj4rME45xpl1O$(I`kkdM_wbCv4nGlYy@~1aaxXFJD%D5$yRiEp!gWPSuV(~)tRuCx
z;O^pFMw0L_@xJVRA`g7!VL=sWT%znoF=-tANE3ps#BHI{A54uo2~m1!Mv
z_Vr^BW8hmgOF3jgFl&SU^^S@^2|T;kw`G8s;e|*$H67bmZD2Kz(uVRAr3d9NN~g6Q
zGxa{eDuJyw^IZf@1YYP2SEYcpmealL
zFbax>iLSM+Qzj9CHH&&}obGUoxku}%sDy(|y!F0^Z(ax6BHr~eJVMAx89ibY2H2ja
zlC{g?E{>Xq8|wJwinHru7o)Yv**XHOR*BX~49taFRotae>sA#xzO})r=v#4ceL=t}
zq#Ey0;W`oXk}h)%LK4aCt3n|KsZyE5FW>U&w(_fw>GI}i2xLG2lgXeNA)IZ&ZK-gs
z-VG75Kw$%~c$YrZ_VWlC)KZ*%#MwfgkCp!|5F7pB!Q)tx=&cyJw4wJ6mh5Q3HkC7MZ-Yz2o|D43OEc?PeBe%e462Jm>&s~Yj4l%Fr
zzky^i#ZN%dc}!>N+IsM!$AkFm6pMM@HOk>UQK0)gvG`X4X7`1S;A0Bt5Q>X0iC2kW
zk!V9Qe8R^ba>4Aa33tiM{8d9@KI8H^wDD?bwp9t5T!fV^Cci~-%s-(2e3R!!rNrO#
z@T&h?M-u}-i>@C@lC=bGo&y$+qN+wDMH~CC?ObgzTL^(w=Dvth>>Oo9|KK?Sv6T_T
z7qor$^5c4)KIf`65Al|S$#<;_R0kuRtjSD(rgM
z0&L1~SF+?xR=AO?U5cg(UefZXk!(*sMqthzAB6K!UO6Jo>b>3{T_zW$)MQqS7v19eJZBMQ4R%NeQpnSqs?)V)
z;SV*NxCL?Xu}pJO9(!CckqblIV{Tdo{ZzVqcTtpt_5gCgIiet`J?^+__g*lb^4D4%
zv|}lLMDj>_{56GFBVtW%`t?cJM$)Jf>Rb+l5(muIXZbc8FNCYI^dT`Ig<#Z4vh_Zq
zBY>?d_{1GNd5Gj1{c1F-L6v$L#J(TQGTAr?%0Gd6cm0;c63ClCcf8?9$YOg;XP-bQ
z_Q0vfxx+|`0~z6><$V;vnICne_sK(Ad1B2Fi%)rvyy_~zAAO;j=bQ?14|Z`8mXv*u
z|J|%1BRhU2ZbtySray!u7*vg4p*Qg6uW;#ml$e^4nlp$K7PgDb`#IOVY(_)@E3%R9
zrcBB@bu0BT*4tHpnM~thx|F+~?(07wYEBM(Ys(uWv`5GZvjX{fw
z>Rz1dDTrQtLnI)8=g~{~Z0eVVjtg&hlahGvg=4W@DzQg;ki@CHK46k7i)fzyXL
zJJS)-V~RvE<*B6PK7uI@6M=p7qssKsxikKe4{l=unbGv*_G&>d&<)c7UfugL$ANnF
zX*42Pd
zfdvT$#gkV!mo2CxdZA93W&O4PH#i2t
zwOIO7eG=~cx!B{G*a?^|qv@~zn|wMlrSt3YYGBhDM((~)T?J17(m6FtRAtpG5*c)R
z;o)=Sy^Jmf9aN#a=^7zApNt&_wxMFbIcvZQF>`EfU(W)=|Cn(zmK7QUd}KeqrQOsv
zje=GF{5?|KeRCW23wKgfv`b)Mb^z|@^-0}7kjEOFqF^G;$0n%?rY-7a?Ag{bz5dYIZW0#+u$Na>UO{JGC5y`{Wkw`Pi6>bj5k|3-
zCizhr8;Y*rS)X*n=Df;5=YfT^;Z)^!L>njhnv+DsS5|s06HU0x9VqQl&90^#r(Xru
z?1k5em8FsRwKS+Q3)@Jq$Xv_w%XB0N5)29Aq~ufb)pUCf3&bb&d&7qu^f9>d<0DUB
zhuN4^33z{_#yeFnY~}gU<(qQ=074x8s3snm1Kj=;;Et~K
z7C=C>{4+#(eMfn(iyuq_+*C)AVC4g4Kvt#Oa6&(|zpJe=OBAZ8mWx`biK~qA*hu{F9+XEo0!a>F8Bw817A>o7MF?QbQ-CBap8d++5e@N#
zI_73xAxdyrcdR}3_zO9jyi8{v9y`goq%<(d8rOL3CJT+i$oMG~Cy7b$DFLg#qr=yhc~muS*k
zMUyt4n0bt?){OfcI)+M~ioHQm2%boPpeKpd=vYl@qSq+c`V9MTqq68DvXhuW(o<m{Ses5hl^Z1U52Vg!l!;k
ziGyOsFbVn#<`!u@rM&|B-AD*mw5}UKj)cSZCXkSmkU$Fr9OQle9|xAK_Au~+rpvj%LpV08pYD25Io>QOG6UA
zLzVv=j92z$vW<+oP#ku4y2|8k$$OfZvsWSC5DZxBh`wE@ujWl9s-qdA*(E>@1c&5;9J8ofU#aQcj
z&v>}z*eiNdBzDie%=J)5&%m;KqFd?COnY+OyG>(Z*%#>wa~qegH~THneyO+CXsnQ*
zEf0+?{Q$C}g*siFI(%zhCsA%#&{VJ`0}nUuk~t|jR?1q7*PnlHIxh%ptlx<>$N}Ts
zb|p*}6nfXU{?t$@ZO?oi{DOm;Na6Ax4|&!1O!KidDc4)j-#K?r2x;moQmdEf+-9$2E5Q;`=B8LE}@(Hm}Quq4Ln3m1cnOt1}eOj+c3B4lj
zGOEZ?h!U$$r8CAT)harXg8@w^7FZZsuizR(&MD}>bO2a}q6$iHaz-xY+u4{lishe}
zI;5dfXfP0;oy?U~!;d{59wOL|UjjSY*bxCz>jTBzCfesWevlSdvQVxL;UbG~4!1
z8FqgZR&G%s*y~hew9pFmle&^Ds9-_|FXW;?g5jOUTKmIAW%V4_%wwr*1*90eKgHD<
zt1#NXi08e{($6L7!-%fhHa27%&{jcQ1r+p|V)O#pbJ3aR_|>o??Nmn(5jfX4Vg^3s
z#L9QJM%1u!P9pwug_soACpZ>3S+p(X`g)RXelg2m!@L{tqJ3ME{GkMi`vTv|$M!hy
ztJIi1KD}(|$NXfHs(*%qSXh>>e>DSv(#`<^QsTd(<0$4+_`)DK
zXmXE$FBSMn7wc-WX6?OZk(TrbzjdHG3M(T^GTmZvs4k!yx-f@Yp0q+579nOy^5bCSAq3bQT)V?2Y=a$kk2Fur7oS
zyP*3!>CE0Rk*z=s>WfO?%J8+Qs>&Iob+XzIcGro7Bn6ICc5;K1
zh~sJ_Q7aupc#hI#!Y$u%&b!ONaF0&6#WO*S+2E*6;gw&ULQq{kN30o|tpYF~=O^zVA_KY*mVQgYzE9VPqxk-R-@D
zsNv5ZYoXYuri-C%U`i!38lRw>wrJDCwO~S*!ax0vfVA8}lkXu`g8wDR4o8a8B^%-d
z^bH&tC0Y_7wXW}e5~NET19e%X4jp$iHgu`1WXar&zK;^EOKS(5TVz1*ASrXbLr53N
zC?_nVgEMsT;q*xZ;klaZhwL3mR3fIZhElYFQsli3Skp3amTD!m6*QCj!ev{lp~-YP
z0hE}T`ecZAZ_HxLMw~s%T9m-v9dt2p6$>=ieU{}JCm0M)92U2GP8#?`(X^bB-a;KS
zXV{s;#?2k3`k@W50QDLrT{V=6Iw$-g6PbbigG+cKIfwS!$y<>4(jHo0`HhhBdu-5vToF?z8Oiz$qP#O3>N@ugWS
zv!%Y8)1fPMV{$&-a%P>P`P
zbLI=~G~qGAgjUm{^_
zU2i}!ZC#q+oD~9zX8jehS8{%+X3;>#Ap%cRKJw(*dla)$pJ-yKyLHD)Jhfx_YEhi}
zlJ99@#t%>xZ6u$_u&%>}DKPQ*=%3}Uw{f`laLMkCuy>9e-{YUk3D!Ak_iLp}VG&~EHGJ-7FLn)mbi&zqhHz-=
zmIUMiDMZj1-v*7xk7&7Dx&W1g{uPzIsJd7BqN82rpOsA7JCP+UoZku#6eQi6+o=|&
zCF{6kqV7uUuH5&a+%yf6e>GN;Tpiihr%8nQGk5ub$oeLOW}{55K~MR5Rd#UyTHoK{+T(GDZkKw#Dnp<~PwP~oqE5g}SFp29f8DlFe620=QyNq+BdYJoZPpM7p#wJ(sg4tlUg6{J=-{WKH4WS#Qn4g*b
zP0_|jZ#F!RaJ=!R-zn`{gz4QRifSR=k*s?0Orevg?)M(s(Q$86g{}mugima9-Q;i{
zxwP3nSr#rc4AkM&q-KABCHMpn(|!!;;ju#}I&CGn6~EHCPJJYOj{k_sr@|+7s`9hJ
zu?}RdZW*izL2MD8ix+HM(Q-#)tG8PsDGk%dVYL=1W{rwO9j?u1vSmi*UP1!so6!{W
zeB9Mj{jP79bXA!WJB$_39&7>D=yALPADJ@>8*^!t>#MYfd)x1|2G~^{8c$LWo56Oa
z@GkK>%79_~mlNI!YanO^;7i{n>JAuteXh;Qm`%y@N*2T*Qkcm(Vwd
z3^sifH#~iKx!Nm#WvHz(1rGNR^O%0pSi`i%b#O}CA&&PjrT6(LY49~LLf;Huh^^0q
zgMx~U;;ggGo}@FdE<#_TPQu=bX^dwR{p{0qmw-2uYj=|}CyN5F`Kpy45R?VK7SR4=
zi8`XmRFy}&tiher!%{xZUOeE~uCEn27`Jrc%f>aN#KiC1QTEm*OucMdA8CvB?##TW
zPO{^0=+<=&@;hAfa~|187$_6Z_uYE(psjafI=7I{#PPPCN53{5aP64)keo=N(AwJj
zAW~wYWtNi)@J(VL-M$7ZC`K7wj4j%A!nyAa5vZe=4tzf64X(LH-lTd0^@iLfGzFa$
zBjmX=o+9z(inSXR2f!g=}du}dc<;~UYkcYAh!27uM_n`+;Fq?gi8z|eE
zdXy}3kwM74I>LB>vX*|QCupg!Mc2@!Q~kIKzTU)V09rk^|NjZFhey88#uc~mB|nP;D4
z&Bu(q4WuTXJ7~j5851&-8~YEJBEO4RDblB0Ays;_{3Uy~;^3o9I9Vm^UXM+t5gkV<
ztevIW#UJKZe_n!Yjhqu;v#M5nVp`NQrk$WxTzhiUnkYr67Kdr6kxw8CtG&!HvDX;d
zqn}W1|6MMj*4W*kHF7o}f}=;k-m9#C*@DBDcp?Uo%Pe9UL$C}_0Qbg-I`2)>)Ulcm
z*UG01@nu{2;v(#aKbVZm5yh23?W4RKBk;|*QhL$#CH|LasRA58+JEZZx
z1n?EYZr#73bjbq1sKt%X7{A2CiuhgvB;=t)kLxc1p$hNrg0iEmuH*Y3Fo1tzQhO;t
zjD5Mnm;VEo^%s`*56mVfK)M#)&0%@|_q+Z4>69A87!-obzj?9@v~VIGD-Dh90CYS=
z_;KskI8c_q2{JIW3awwFL2ohO6WwpbRh=mqzqC;-{2Vcp=w{EmhU%h}p`M+&S#Q28Fd=W=vn0op@
zXZp{Ht$R&S(6abi=zOyp@rJ{PI|2Ng6_Zb4i*b*JfUHGW_-YDMW$^5|onrB`nwn
zkr^K>mb>MQihslBfBFO>Eld{JQ@dZND!{*Gl3f=Pm)G^1m-az?flThbmd&<4FYi}x
zh)*N&o53-^ZbiXC2ZV+?XNpSK^JITL3ZKw(00wb3S{}#*c6|ewkAE(`KmXaQ=L^;L
z=E6MtHdEBRo+tOaONCd?(j~rBMzRA{rC(jBM5``iE|g2`0<1c#FPCnKFUy}#{$_+kWPQ0tR0d{>GNSN){^{SA2ri=KJ@4q>5%;o+
z{g=jZE9)+sQ74gqM}pL^sL=4sGUKbbe?MrD$e*MTFLB8IotfRrqGIzpKW4l9xPtL#0?eq-N3b&F6fGsPWZ@rYk)7mD~2V0d^o=LbhlyY~TC=H%@7n^_anSzw}W
zEN~X$tjN(@VEFZTniSR@j7;AO^3+)tU^e>gwPa@k2~!S;p+i2TzZr#G!cm(GEG!oF
zo=xK4j6gzNTC_Z|f5+?)-R~@sq4y^6f=*dgzouT?$^sb&)!5cIzkcQa{rF##{Quhl
zW1EAkqv6TKv)!@z&4vn)a=7pif{5EfrJ%*ID#GXgK&%7#8U6H(bS@U@WYYiM7XP!F
znQ`JxGu{GnFrx9lcFzBN1q*HTc{Kv(pZn~;HZR{LKwRV=8A<<*k3>SG4#K9`)`=`Ix3f7Hq6B{ApKXyNps5+#c
z>VY)cDwQ8b^X|cQf+WjNo0IpCq`+1}GzaHf&C&Z*{Zi0ZgdV)C)7(?r#9w+c@M}Oe
zI!CrS`sJIfJVwa39SfCcwtObydxyE8XDkwX^}>1i$CrI;ZfKNVHFzdB{~2PV_=0gk
ztrxY!`|*u`Y<5Iu@MkrXn7nu);wwt6)8#8_pEarQpEom!t~0Bx$(J>ED*aA_!sf(
zC_s|K&PP=97n?ns0wMtDdpG!F3lWh6<=lR;8bIvvC0PX8hv;zGHWeTY+lYw4gtL_5
zzS)05`d%axjtf48*q!}rmUX_NEktG;=Zv*l$&=P+A)v?8>
z@)zfgx?Tt`$Q-$CFuh*{lAXQFz3f#uAOVLN7t4I&XxMt9;wy*qM0IgnZj`88^dIK_
zhvy;sga}VU!nH&VkCat(1BrN*Q17hpuaPZJ
z+I29;UQp|3c%3XV_Jom#QwR&eMatkrGuwSo2qrZGR>cO=z67%5!RdxmHjP+2e6aHd
z!Wtdx`Eh6gdf;
zGB)b&k`H-H|EFlwAA+z7!$4`)-Z*3XJt&)k$M5DRxBB-%0uzE@rfw%~*hUML!N%AE
zrqW;oko@wu)Y$Kf(#^+bsI}!$*It_K@yP+Pb#Ue(Tgy`fhjAN(382vX0A9|y(CPs5
zPYBl#V*^54`|heNKb-}@aDTheJ6WlgJ-l8y?h&2{2+MH#-<)S(37osAD9iO?rY3n2
zSn=l^ufk@6&*P9DxELpVX=SDYm8J%uNJjPtA7;5n@JOQq(AFA3&H*oT_Q52a9o1e`
zjJ;A2?D*6^x`A5-#?H7fF9#SE>uDcn%NTm)eE}bjJ*TjRcqj5ZEmQ;d3Ww**lf2l5
z(ig{En_&1bqGi}64WFJzwW9hKJ!9rHtcjN6zY8Q#>2+JloYzY=;##+78_%?FCvD^(
zh-R6b8H4OwnYYW`ah9K@4tr%0pTDLwn6JqSC%RANu@k0^ImrXcV1PW-uaf=IKd+08p2z9JP;
z39`;Xw~dnuM;unsVN&(96Ln?J&&Z)mds@Cq7@UVUd)IOuz&cZa*1;)c$E_EunW;BH
zrqB2f9j1hQlMmns#CUUw3M6*!WCvF6w2+_ASrtd8u4AXVtif-rrsVVON*w>I)
zMFLSCc9_LteR>g>RVvmgEnTwzHN)ielBw3j)syTH=;A&%dcQ;y%h28q$Z`s|OY0CZ
zo|7+AutkW(HwYNk)57$U2M5y%m^CN{K8R$(iBaPaTlZTl!PjaDtUxw*7B0tziJg7_
zEf(2X(aQ72C>%EREUdSFE$iEE6!}0Jd=|hpFi|NyY$^aGy8#q>DB!}&L=OF(p6}WL
zzm61e-PW;d*)m}53rFR{=Mn!DrY45C0Cv^A;x3>K8QUs`y`n&m?}p9FIM(3-nN(uT
z;kXX92&*^bVs0&k6KFMe^OSv2uA?0Zfk_QbP$}kZXmNPI2rxhtx`4uZf)nDWPlwC(upI+2Ix#1KhnUZIhqE|y
z@FlV28am)oz#4#G6nGYAWL%X8bgpfH-f)^I-glrJzAy{4os&&m#;%ol12OTnA(@XB
z<5t9S(N}Q2MDE&I=-9fg)qxkhfHVu20w0hU_KXM0bn0K-Mt(Yoh;&?^@&>ZM{HB+h
zxxFO3727Z2@0$p;VTbJ4pTEZSHN&-0FYEY-ZlzumW3p#PqA%+gxzvI1IK1Z8cz~z9073R
zRo5dleIWWi4%hZID{i)xQT~jR*3bE2_<$W9c1(S-S+zB+W-#*V3Wyexc^y?viygrw
zQME@NZ?FQoZW5jq5Fx9}uL)uWIsbCA7}jYe-B)r`@tr1!C^n*;zuw@a6seFXP?1*!l#YgrqiOA)v{+NGvx(^z
z3>9UReF4hJabSgWlnpI#5#_PI3%7G1o=6KP58uzBc}({0VRSGcO&L=XjyZNnm6}yr
zJ1fMqAb00CY~-AbIiik{J^RZ;uBiB0sKjGI&c4(;Ay?~zZ*l261r3=>kZ
zV;jVJ(d$>=zJ6$_NRCI2t79ZwM-x4w?JZcn-!HvtdOW!-MA(zt?&F8LzW_+YtSw=A
z#TqP_DYd-36t729fKq-lZEp#!rbzN$azgb#GJgyNGin#g8n$AK9Gr@|CH+!PylS0`
zy`l^Nfro~jkSI`cy+~C5O%rGwpk!JkYa$UWctDU~nfY+k^?awbmC_!ljAn6C(-B#w
z^{#eBdhLHCdX|22y9`Jj2IqSnd^T0kJUR$a>A~O
zh)#gTkC)$3F{&3f^gvxb6RvH=?j(2~hH1O%?VHL?%B-KS!z-EP1bScrAc
zll@YULLzgEg}n#9aa@ARo^pmPHrrf$=CwVrbA%;xrtb_gOab8dydq0jK?|{Y+S5Pq
z>3>)sGvQ3@R8hmSp_fmtlH|ML^q5ZvSzXxc9&uYs!wlyYnz@VEWc|-Ma*TQ+_s(&&
zxUulb%*O0II&Mt7FuyEv9oW8`5l?mK(QRMGQ~FS99#)y@>T){k4Yr0*Px3+cuH*H^
zqEP}6oq$pN^8^6oJ{-p3dh1QOa8X<&1pHZiuANVw1zDwIfDY=MPGFo6haqF^FP%5<
z+I}|^+3XnK6K4i{4Xg>M(Uzlp$hX5`JPRXZns8a~l1e(vvs9rFyRI&Pd4KT0b@Be!
zeIQOQ7wh>2#5Ijc_T8$tr?as?aov7jocq_OrZjjv*1o4{g)x}Z1$GfHt
zKpl=qW=eOBQ#E?K4Wc@6C%D~N{xnh1Nf8*H7gBT>oGoZ!y-wJu+*nGIoE!EEaL?S
zyZ5{nn?IRsE4+(ASBcyQfR~!%QXvO~rJPbQy($yI=VhJ&;jfTinVw7@@c=?^nml5A
zyWj=Mc4ZYSttYA;xqnB^H$F>75W}ixZ+y9B;(LuktNpTKxXR6JVdqYGT|@?|ht7i;
zAEbMw`^2h3y0?94C`4S~`~n+5dzHNMFA|V~FN2)t!2*pyj
zEPXKwqSHo-%k5y^Y0$a?0(SUXUeB@MbKZXMA7>F?0yLcP*y~WtW&5XNE
zSibc2imKafn?pC~)J1v+Uu=&RGr1Tv4^}Xpg?D*)P%tE>&K^TA6y#__KfJ^>4St)t
zC1_Z0H)bopH)5ZPg|VvQFsynN`E}1{Bt2{E$Zr(m5E<5tNT9bRDt7A?78lj1C{q*e
zE0pG1eEg4DBI||kY3Tfj-SY`w1*+gOW$6$yawEF~gWvI*?)+YL7H2dUFdaL1rfcXSlM>V@nd2}X3guo6lhU){AzI?cKQq2Az
z7gcg>?S+6yv(!r*=CSb(Gg@qSAt1w$AR#aZ`FLzB%WX{?8Acg5eIhgNYKtA`F^^(?
zK+=sK+3N=UY;3(G%AL{*bZo2c5Jz5Qj+DZ;qNvOA4>n5l#9WpiOjlyY06EOaxpJ6r
z&V7o*g5cO=m05$t12;Rziy3!jH7d5+z2q&XG2N;|0P{ZTtGg*Jnex#MtWqedPcbv;
z{g@)@6UcTDPxb7Rl7%B#E4yfR7XzCbAmD44#oPW;l=kMEXos}(cG0V7A7mOz1oS5&
zh`6uo{2(e3_az=+z_Ez8746RfrOnR%J4~y5!*Jc2NvN3FgKs!hgCnA3g{B|``4$Ud
z;d7a2WICMV(N-a)oPlw5FNnK~IAxDn6B*!5Q;TMi(GEL;z-e1a58tamExehu7J>v>
z=C+=ite(TqHyIs&WfKd{o-yXjvo_?kwMA;7vL--)sf~P5YMci8?ER$f>xEr_qF&VX
zD0?iz-zIb=^xN(Fa9C7Err?IDq52+P%67mKkh-vo8aR<0CqKxNh^>{wh8vfue@Dk-ENvZUT_TWPLqZY!JngH
zaSbtgiDQ6LglQr06K|OZ2Q;zS4!00jKYWolFV=D?K)FKWrdVSR3NVYIck5gIr3Y<0bJ0SxKHi16PTRaQK!;ql+Ba&Z+!`e
z*iRraludd7w)r$&hst}s=9ey=)Tqae8-N_&RhsX)K}Dlq|M?$N>qf_hJsU-sZ?uky
zL7q8C?wo&%IuBohnC>ewx7S5Xof)1&g@)yvmOSEwyDX?L%pRWQ#28{WP`BS(7r>hcI`5Y3~N(MVu|+({iNP;|UZ6ZZ+6OqZ#Q
ztcUua3vZz?N@+E4y!t4o+jg3ARBcRyh!-J&wH-V^2DND3`c&KOerNAEOe
zat9*6Uztv$HMI=d^t{jBsCY7r-f;vyfMN%#Mo!)}u`{~n?oTrL&SIJjZ)oKfYcn5^lWyMv7|_d!kOTpwH?;yBQTUaIN(WC3
z)N63)t+P`OQO0iyuks+S0mA>P-K%ldiQ2KXucoV5(<&IdbA)9Twew_K4A#{V+UIbp
zKPzKmA?D-l>PE6n99EJ;j-GaeYjNdhLz;*#*M_VO(o!g8cJ)#yE>#B#)aQiks6Jj*|B^o!+*-aE8w
z>Xi3fQ(QC@+(6Kt5)p!x?z8^K5BVS~`CZfh;HL3h+n-D(TyuQ>?eQJb`S&&30gXiO
zwsMCA5;DD9_2!ZnIrNY6*qEgDj?-+z1~g~a^yeF*gfVZN9@`|<)(F@oHSg3Izq7X-
zJxupCmv>vGt{OTeWkshISe#sBm~iFGVWQSp3gjCIfgX?yz_#Z5nL^BrC3W7Q
zJCxUn$rYM{RiqSfjmLlqhaTP8b%4{l8b)G3;|r}`pzRo`sVAbZtS_=W15(`#1TNTa
zz5ci!>-0!5m{bKU8}>==^%z
zQP&X2dTK$N09qu4b~dE3YQY+7oiAFI308l4b01`aM3L02C!cPg6;x%)pU)qkbUW8f
z?SnhPOn(Pne=lnI|_5YP!%76C3xfFg!R_Xx{o&7f|+=IE>S
zBb7;1p>1EPkYO)^6Zf+1J&UCB>P6-*ODp?Cb~b&V)@!derml8bubyc=-w!ty_~`oW
z5&1KeEs(EK@;5p8GV(RgU`x*V%fPoNpZa-vK*_R8swcHAu)L0;9MQUV0GL&mN)65_
zZ`+j!%VM>)W7?71M)k0?^0nxzhHvc_3%26y
zKT)5a^qCJ2yQ>k{IwB%f~+jNOKhU5Pw|g?nPGZckksk7cdh
z1`3gq;piS3HM{#v5`_yItebYws!4|IYTsnxl+@ESdckbWU6nhT)ewW(E@|iS%{jta
z7YMz5((J4hY$
z0*-KKP|F=oJ+2NS_i@5Q8Ve!F!!i88K8cNrI5|X^uTR6G8w2eCgD*4k)L~gUS7xf$
zsfzjIvf16&MrGpFYcKNGzK@H+XB-p80d*;WYa(3Sg
zX*5+udMr>Inj=|nwCt>>j2C|DAgP^q3B~9UGI+5MbhK82H!YMbtsQ;DW9i?D6^DFFH+psaR+T%_k>E~ra
z(=e^0dvU=Q#aYba(LrLDX&Nb@?Ot3FFX+uA{cJ2R`h}?wXrD6k3}uj(iDMooCYuLt
z*yW$}End90!10B#(}8XqYf9zg88;g@`y#y@vWqLbs{@bHzRUmc8}NXT=^nxot2N-R
zCx-VxNKf=@>hsD$YS{2o8XQ2(%6g~ka1U8;(zCqkJF_r|9~$8C!!Z@RFYd80BE@NM
zaC?W<<<^rcp0Xuzll7y69S6Bp(iL`UrBp+$bDI%6$Qg;F+F0D(o%;BycaLg-BqmUl7C^v;N
zThkku^C%VV_ijDM8%1qRv$cf~oL7cr9}
zaOmmJHB#Y9e}!i#y5LhmI<*vSIaOZK%v^S($H}HFWDf<#FP}!=qc8K=!m%grkaRwp
znP_4D^`o1nK$ES9lc#E|Yi+>)V#+X7&6q&RmCnf1W74@n=FF*)KSk0s`{Gpdub3B{
z03Ol!)P2*>h4=95BWZ1;_cMSp@I@f7&gf<)u+H6tAsokjj!$slf7x_`bi={ki_M_q4Z3qP0?
z1LZUZm2O1YS_}#BG_x<8kR^5Qqfu^_mb+-r-cVKvZ|aJ_f!xKy*mwJ5U)2w93ywD^
zRCQF&BR7+Y5gvq$KZvzU*=9OEVvft-XNi_vrMI-;*yNCUBGlr!yM7|nO5}lCE5zL-
zsX{I>v`in#HdowXdr?zxyiDqKI+?cZIjc11f-IwT(+#9PIJH4%sE$oerz}G#an5dQ
z9=}uk2Eb`Cz9F5Dsr!Trmd1-oEt#Lk8h+Fu2(07PePw?jO30pcO*pN+;~ik8W`bSRP4wT36=Zum9(Wc0SgL;+jj_1;SH%_aLEbrSwcmeV;E$6c{93+aXbc+NEz;9JPECLP<;QXI
z9u9c%>)*5<{`ZUjnC19azyn)U@Bg&Mew;=BGym{|_Y0qO+8@98&jIbPTmA1Lew>2-
z-x&$tWTjc+|4e9{=nS`nx9;utm{foJ$p6eA5efqHe}cMSn}0kHwk1gaN0~?8bXO{Hq8-aE21W~A%Wbr_W`_riY
zGM>M#sO0C`1rQCRzDP0>|IMOlq3@F94H!P
zJpcJ#Kdn2GpgK9iFEb|+adB!IR`GT`AAkDe&mUEuAg;u!X|Ndd#WVcIF+8cuog4mp
zmHl%ce4;Z8RxOLhn|R9K{aj?WpZ~vp^kZuP(L5<|3W1Eccr?Ge1A~Sd>Tec2rEehh
zJDW-yF+IQEeFGs-8un{<1OB(b2A*uodm{7tHy(%PosB8kfA8#nJt#p0@R$wwq3BV+
zyTdJ(T%?~z`{zs5H2{aKQ9*TI^mpIzX-Iecd!&B$#o&Kcc!9ISP^O`K@*5KXv0cf{
z|N7D2_y0RW{oNgIK>s)CzcA_l`=mSJ`u<@~Oa#90E@6eZ24?@TPG2L?96B0=uLbSM
zB^4TmGg@-Lo5FY*k+6=o@O}86t|N<9@u7-t^lR47##%--6Ool`bNmSLvlRI5i{_2y
zf86XZV+CQcDOjm;k0gbEXK%kh5B#`fd=RjB&X|4bpDz24k2&|?Ve$X@A&!-HOc_=|
zB>%TH{`i=4#~1YU{d@xICeJS6@^qXh)RLg=bRzBzKVUUZ2ZEF&mrO1+uFeA<;|G5%
z{FR0KR^lD6Dc6pBtV(N}$pLx1sS2P8z8)kz2_QpL9w6Cok!SnLoD;5Fo%mT}@!r>2
zfjhop^uU*_&>Ecnc-xCjfY|*O!EAIbOkO4PK`3$xi5U4Z
zT$%vVBI!Z`r!@dSz;kYU337v0dw@<~djc>H<*~=1I8xQ90N2Toq)k(>0(XU917uQv
zwyyt-1c_fA=s8^ZLZ~pWdgqn31`|^`|NU81L^^K^h%kWry~L*z#bK#z0gZjR@1V#_
zgG29n1yLIt{*QV6d6IPIab3X7R=-$+FmHiGTPKs+@SB44B;JtEP8;S!%jYbmKuldhZq7}aOJ}$fGFK&++ca63C
z1XP9i+9?p{wXY7eBfXqGPr#^5pC7jhTfxC-cBjvvK;5-XTC0ffsIuq#;#X4XB=F6v
z7hd*V9a@J)HI~)TczObOmX0dM&-Cxf{_BQ1k8pWU7NR9iYL>Y2`JR?6&^|~#ZleFA
z<>^NokIHXiEd7)F89dC^*wbr|50G|t;i}Yoa2;#X#c}1z_80dkykhJ0AU2Cd
zfJM64eYZ;HH2Qv|2LOM^l9mOQO}l}jG>=6vrQrPB`m3zvCV3zx*kF@ld#GW?77Y3u
zPsdfmwSVoIF{my;RlZk&f?Lh?eABs>@r1m*6ji7MVZ14j#o_%D$bwS@6HLh_mIwBH
zBc|KtsXdXc
z%#$QvT;r<*nN^0x&!?
z7LfSnvG#Bx_+hVAwI57-??$KI66L9d
z$p@5$Y3+ab_z2z!*B(5Ar3JBg3hLn^s0|tJeb&A(OOzCSkO;vuyE6ww8O-6uasilX
z&pkY}_OC*zyjhv>l7_VF4Q~zOsZXK@|}<+Fh&l0>&C)W9NkS{hf_-gQC`87
zgo{lFGAyHz)E@_6(v&_Fd%hhuR(6#~mnMNXh`g>1`3V#giyN_W;fc>z_8
z&X@7Ix|qKD8uDym1Cg+zE+OqB>;t^?VXfVF7&#i-=5eOsMQv7Chs)FEeZE*Me~Tt%
zq~@?R@J=*#Kb#wg6u7-NOzr{$Bd3tnm%P6BnPE>}xSjld3>9
z^1Eu!G$<3rhSDrbr0xJbRV`Zm5pce4XZ)u)#}0f=l4VFOZ@S?VraypF3u=Tc=M%LT
z>JTVg0gvnLI{Vlqu&&X`CGPT7Qse!_Xzsw*vXxJHYJe&5{NdR_SBX0Yk6t2xh+ph5Hrn03a
z^AOGF=O@!xA>V3hVsQ>rpVa&OWqQ##P9Iiz;dNM?%It|Z@v@3kA9DGHfCDG!c2yzH
zCv|nilJb0yMaGYhdnpe1TG}VAZA0QFkIY*IgM?eOLZHWs0K^lfU46)X+FeSe5rxuU
z^i2Hz$FNf|#14=gsKhiuc~hr`r&B5jps~AkX)h%SqG6cq@Un&6Ev|w~9Y5D}MorU1
zCd1bQhN6DG4WD?B^aC2;8D_)SO|T`Naqp1YeY?{&1kiAn5pdusYiosE-q2w{MX3I3
z62{vortnJVOP99CMNV+EZzAaI@a~SMW*&1x%`BER!&HT-Jyt;Y_?@Et^xVU8@>-53
zuHcCUUi3pEVECgp#zjXT2)}0ep4q4DC0WwJV(<~UH~-j>kHDJ#isx{y0JW95r(gNv
zCex^QT68^GbSb?4yvX;^`#{;d^u;~Ct897CPnfr^4y~`8)&p3gzkbQPU$1YYrk-e%
z0>ttLHYcn`G@Z%LL=MZYhR(kxv8UgBs$3PYquNj2K}H~q~V6T!@|heM}rasNo#IRp(+fJo@KCbg03gA
zNSwZ%bkKwiq+af4d9puk=({W&rX*z<>Dsa@IL+@NejSRx=sPbYPX2`BA$o)G23B7_
zqvnhK=4m(}rwHc-#j^Xjit>0xkBuPR(Iiqu<{bkY@6TkWA8$H*XH`WGgUw5y^X@_*
zA-s?Pi0!zke;Yh&KE?m?N{#X|_39)QSNMo|cY+|-5W}yeSB6{Csr#W
z?DL4`{gu>raxo>(Ho=r*y6@PV4w(;P#q7t8CTKl3<~uGl?bTQ}pw$hj?lcjF^;*&`
z*DNKb+f+XEJk9XLVE5D&5b{QJBwMH{2LRK3EgE}j0f(-9+}HM#+O`3!cr29!BWd!@
zZwOK%v!m-iKvu}VvZ&pYjRc`RK0*%Z+)dDk-NO>#Y@|82fU9UT?D;LaQ6_^IpIED39_1QbG>uRaRVMM6PP5QT2EI
zH36umQ|EfS&PGAw&54$TXkT|avV%2yaskb-f)F7|q+zM^QnCgVb%vl7cHUaxOtsoW
zL|K(I(X>_M*iLjl6X-ciKMt+$cFcGGu7_|8iorE}pq+Yo!iwJ4hbQp5rDgmrA%GIK
zh8OQ59TaV?h>;p!biX&0s?n6a7dcR+3kjhu^TGend~lF5R2tfYQv
z$_VH%M(#bg@*cJfw?A(6yZyOXD0n6~1YWy$R8vqC-qR@h4)CKS2t{P9mk^IisIC0R
z2x^6*l{j~D-8Fu-a_WZpwbP(?#I}fs>rp0EWxQf5FHHh4{bL~Xebducz_8gF8M
zH9OT%5pbr=oY%LU42VVgtkPq8s*jV6!r$y5`DR%UiseKu&9}_+(e^EbS@_rkPC8A`^04BHR+UQRW2@0|g~_HkD%#<_tAa95pt!98>#*
zTCMv-UHV5d9RpRn3lGM<+F(G)`ze8&NyngL3vAv=CtVIFuEvHK;dbqpSo-aQd~Z*O
zH*OGJhl10FuUrx3!AF%}u2MLI<`N(*l3@*o6fYw4X+cy{nzmI+TY!m(nMPe9IEyaN
zfJe!+T(I4)^oY()MuUi`Nbhn6Rk$J~L8aA}TK{1HtwE|GRa^VD;Cd&)IvNY6O&q~O
zrRvdU7Nt33n@$m)<+CCQ@&W@9ldp@+)?>?-B~+>C#BnSZ9D43NJ@(lHFC-pT=eu^9
zi>rrLpmRuuqjg*ZU9@*7q;Z(|cr3@(q=krlIMAAyB~0!jjP!ZST;fpR+`^fOf5(BK
zXO52dorQ7S09(izgf)rqT6gm<&igNdGha@+thL%tfL=KRUK+j7PAJy&L>x(|{a26v
zh|v^(oiGJZi1f%PVWjJqiGNEoH!hITMX~5>sGx~ziVES#E|1Y|!mR6?=
z+D{+*B(vQlEhzeg@*+ee&A%2+aW!8JN_vqdLoF_$LCqXMO+L;Z;V^_p)NlXFT;t=Q
za<@e9%!64oiPOT-+2|VYd}abcGzzpRn})eef{iu|r2x&FFzoXsezbhZBscRxV+_aK
zJ<}F!kGqU?^XK9sy0b60;21X(U7w9l^8qE3Jt3?kbe^TW-%7K2LWH+JXfLoHrRJU6
zgr8v;idWB<9npI9KRlTPL=KjNcsJEdMz50vUJP2(2d*WL*GT5fnMLTlgt9SW$XHrC
zBGa$Fxs#rB9@t;`5AiCu^0aMLxRfoEHr&>~&#|(XX}5
z!Sa3kn=3L^J7Z_2EXORQRFy$iV<0HGnZngl{eoU#{!R<`esDNO8_&_*P1O>yrad8v
z@2yfXHHl7AS8A*`@FLs=b}}(d&SFF_i2Q4g>B*Ka+Zs@gf@AGqr56qUZsGAstqMB1
z-4|i(=2eFc*N@WjuAe#adgtHtb?alUB0kOQB=W13j5x(n7N%otUF$hba8xrB_JV@w
z1suR(xZ9_=@xIrhUuOy|-lauuAR(~A9Cj5VYFL~H@Xa?|>Sc#ZErD50I$Y6sbnje+
zUPRRu--R4(M{iu03AoK`7cTk$=@_$a3+QEaF?F(qx&bJwGK*_(luexvp>L4y-Dz_u
zjB=Rr%WDFN3UYPz>Rw
z;FWI_(bi=L;_>=^V^+ckT2MM%5=iganDDVO-Z;7jDO9I}1>6CrTrlO+0N?t$3%g-7(z7B=tsX?ExNX
zfV5Yz`rIr(nqG)+4CI3wGh)LG=#RxT^_KJg*iwSZORfHqbM)0FP>(G;)5iT`S5@qjhsUDf
z$qW5)ima-g(y3CX=3(Z@vQ4^cqj}Q9`{gWqe
z+26~#ItIQyy5B;>+keejWq9$4V3N23Ih2LTpcsd(TYH3Wlv*R`1vGU-P+Z-#ytYXa
zhz_d_$VX*JVyL9OEo4_9%TW=#{dLdsT2O
zO4=BO*h&*-oTb-Ah>=>8Bhgf6HcxRmOVPeS=a@ql#GG}tFMstsAY4c~JV4AL(qu5g
z7~(~}RN%>`?pnz5-iwNqy$Dd3kj!6V4v5C@kAv8v>;mzQcpsaNBW=)9-I*u@-Au?&
zUMakkcAJ=(uOP?Z;yqVf#>I9`87gE8Q4k@Wtg>;&*{DA^kc1U7k!i`Ci;
zgrmL6++)uYJa&h
z)!ig^y4LD3Dqie9Mjyh^1{aB{*?E_v(eL14qA++yAgD8G#ZS%`1caG{F5dHFr5XU4
zRn;k@SI0r~Sfe3KB=t{IEH2vTQL}hdcnSiAk#4uAgd#-?(=nqZ@=o20XlB%nN4_r-
z!Q0<#H4ychryC+1@uiK1Gy0RQ?(m!j%IR$eMQc|{lnn%P3f`G<^|iGUcDBdYa_RdQ
z_zt2iHPI^Gt{h;sK!|aYVJ>U1oR%XYX_h?M(-r5H+Je{8$>UQFPnU6|W(MfFWxk*+
z65hY-1zR4gkJ()yE`5hrJK*uG8&b4tP5lXn{z4{a%C(U*vMzr3O_|IwPJy24o9zYa
zp7aHxk;KKfFG}_Xx0-H;$$AZ-tY}N3VwzT&)+U)xlRROZz^%O6#uR86`aoq_Q&Ve;
zwW-K^ig2vo_v+)scTeX%0AAMjzoO(?;W6L!XenfyQ;8QTsnm?XDe$Yo(9>pbI2BZ
zCfN+!K(q;^wiLkT@vuvh@9*LDIYYE0sfG05n2$8*-k(@p^D2dTM7*I-nbzd^R(Trj
zCXqBx>Ue8uurbzY@MQ2T&)haL)1%;VYadUqQMNU@L<;0IpRFs>TCfP`&Qy@kE{mu6!VFDWKaWq#2~g;a0iXeWI;6!v%64f0jo>qTgrYKeJnasPvPTRP0!vW5~|nQ94}(c
z=UC`nSF8e@6XVam`WGL_=^EkboQ}BF@zd9$a!NIjiulKlvKAFLqh(PR%;e-6uj2gX{Air5=cZx
zQORp|!_s0)=5&>u#H=W|p=Unn=J5u55gqk0?G&cmCFIlHay1nZWL^AnCm9;8;(ew*
zUOK9nJ0EZt4>@Qq#BGHr#J`IsNA_hQd>^#I$4h4r
zQc+EGBMy>-O8`Tp^N~T0w(hHmUBleZ-R`Ezj|`gOwq8#YrvjnvjFvr4t?&#=Zr
ztyKPp9wmyWEgQB>0d;SRblwCDg|LgRG!jQ$<}UGUls?h^`if9D_!6=2nt9KH@9|1%
z1!?-oFIs(MP-+Pr^=pVGE
z5qgJ&pljDyoUoohLk;nFzZI!EL%QLwZ?ToZY>O@OI`gt%JEjJ;cK`mqpygAX&z)*S
z)8?zT47M>y;ga-W%x#YdX17~C@w_~bIL5JNA+nOF>c)*EZ(=qoCNXR#^$Y6Ka#j^h
zVKLYj#ICvJ_Rwqkm(+qX;uAOf(C;S+C@Mo(AkL7C-AUE{Htv4gqv8Tez*bDy4#&4V
z8$Zvmpo+JT)b84t)m$~Dpx)vYnteQFg6-&aLjLr@#z!*wGalExtydd+=NY+!k?bqG
z9Qpbsdok+DN&ALOP5sL@-c*(`geS5Ww4|0$p#rBt*ELJha}}HS-wirr>`N^39!+f6
z2edx@f7pA=xG3LlkCze#K~hS(29Zu_kdziwx)G3Wq)QNxQihHJ2@whD?i%R^r5lN%
zbAaL8^WS?v`^od_ygU0f^BLw|SKPmAU2A=RZF+xxGRGorwnQwZo5Kgr<^xxj0+AxH
z<5X-!<&Y}gNyCi5V(G4=k$c?Hqv?=~cc_c9eB-iZ(5Bty}OWPncm=g}Ts8VV1<3)0&3WA=UF!-Tsg`FAilox(&
z{WDT9>BAe|vHmxB=mO3UVWF{YpvKGaIUqlH@VSN&hP=wYYfuxrlIr98>Aj3eFER`5
z!(*ZhE5)IB#y+B^o=!D*GUGK#1}*y8y~fJpqbxcUww+V3m8eZ#KRcVy!2&s*t*8mg
z@dr`NJ5+%zGh?*a
zCohP^3mx`CpnBI*LMrDx{`H0kOn`$;pL1$uyKP4q7sC|H<*&rqWx>tuNg5JTt4zlZ
z(X;3=mD*PNZSv7YQ*_!Vie9Q>*2ZGcOR}2~EaRY18lK}YqS&o^3#JJGS@nfw1VVSU
zppk(_kaIaY-1py+Mp|Tg+y)
z4_;ksINDEP1wu5-nr-P`&&0l6#E7rj7)hLnDTy`GY(z%)yt{Fsw~t0viH#LRwUUl=tA&JH+_r=$2TKp3t
z;Kbb9U2Z%}_O{I?hD#b;R
zsr5{6j$@3ayd*EBeAdHB)n24dGCkpaJYaT%Nq^b?m=luhpulDl
zCSN;JNQVzRsh7a(
zZ7~W#XL!#Dp4IQO&cWC1w>W6I*stcd${m{PN{c+n!j;W%r+D8u%$RJJBse5r$x-G*
z%iNZR_HJqnAyx#*PxDf|9TB$uW$}Am{V56d(0*2X~BI1vFVyX&EYNw(uqX8Hi`E%9xZIJJBc3dT>Z
zG$G*%MB_a*P4drIqt=jGThW2k_61Gz8{9|QQtURf-s52kl-tW9ow(bpP!;3nS4?y-
z3LnoU3R$2b=eUoUa>s+1xJjX6N!MZ*@UV?XdeS|N$Z?+WgW7xal;%nLcyeKu9O7qg
z^EyYZ2pK7M%#x?u1H|ShZ`1N^OQqN~d(l^tJ@VsD#MelUBSdh6x;;6unXzI0$^5;t
zZsZX`h~imC0}``eueA&Fq}oW9t`T@)0ljQ}95mx!cf5W|hKVFl>_~(XH51h}_R3DG
zLo=X$60%$QfuYS?2>(K)JJ-%{mJ|uKbR4hgTgc->j5;tQJ+NQSId-6F!nbnaI^f#-ZIZx+orCA-0IA5Bc7PgBJ+aK|s
zLGvZ%xG734hb`nZy#H>{9
z=L_pcUF+p=qN{Qli}H___fodD-i-J2fz|bbk9D+fY8URVgYKN)oGFVDaYwP~u;afW
z1{1SVirDxWEe-fY(&L5rnkg>2csBNjaNT{DE_qNcH6#yl+;Kp+zLtbNCtTe@-GMrS
zBR!4OEKm*8WO&^z$=$8`Y*L;^#kX12cMD6m3x6u{jo9h2c6=)(j>|Xjnl0fU-uAGR
z+m}c4X4yRG884>Qz0HVvYG}3gZ316~O&_o4P9-4WL*x@<9lQpo+K}UnB&Sq{`<6ZL
zU1S%3K_l8LXq0HGS86Spo@ecg&76xLEE#3=IhJ67dzQ$l8gDe$BBH!@9+LY_h{#KT
zXE=e(VhjnJ6==qm%`?B)tNOtXfuYZYB2nqD;poGMM^VDCcVOy_Dw$M_X
zh241SkGH3At+}4A%sbD9uoQCwP2h6oAxnHZB2IfeU8&Ck=4Nywt4JSh^@4mXNS!5
zbA=rA>8vN$ah6p25pHtRykYsb-ZAX!UU}mqS9~2uC10Jng88|b0!eF!9#I5_N&C-V
z-xhtw36!!En#VLQ7xyVZFP8{cq?POQgVd-QBs|6AwU;mKngGee9`D=S7m5uRjFW;M
zZyU;dY(rGpKg*YD8(*S=B;f22hl<0i$banu_jSE*gKO1)o$Z%n$DeVmwUpg^@9OhL
zOYl~F$;Q)2pv*B1x)!KnR*L)BsLT`BI{>$Y2pvrC!+QZ-0{`JZvRIAidK4ET9at`A
zJ|#pjP_7r}8nb1x2z26eAPE3N6B5EudMBZt|`@XumKKXohB2DTDrPkHFq~bk};3cw7WOXhc
zCg%fF>u*?V4LCs_;Q{uH;HmME&E1q=1IPQ_aT}XieHs~hZ$8$kLb9Ub~#ec=S1lJ1YT;j3Q`Unr&
zIB4FTOV32JrDya7|FO-!4g8o1S<5iQXVf3p%8^Ue>4+dl%ou#Ta{nfMr|DZ&|NfU6
zW!Q)EZi;Q|u{gv}$yDC@OLMJ+YtMyq?_oEDTG)eLwEPgM&j;NdJ|#M9^}-msA`E+4
z5tm(^BzF=cj~L01oM(koE_HXR$b}mFALBWIyd^L~OM4SZuPiQb&r)1?`>0oRpOo4Y
z^Eg7Xo;0LDuxCM@=y;QpraMwPzxChdAE;*Ks`EnA-`G;$tsVDChU|7_@L_J}+-hj
zRXIH(nLTK|$`fMyjxkdyYqNNS_frPGyiJ`#B_kgtwtT?aR0|HFGsH`Kb5f!Tj#8oz
z@JP$I5Q61=Lig2S(a&1v;SL42?QZ4p21^2%i+-5|8+s|AI*4bQalV^K+~+gFdk|PH
zG9pcebc<*M6
zoeOfsueOI(38gt$*^6y?gQ*QC(>VEqHx1MbD!SKcm>g5N`sGW9C(Z+H_~+O-r#gjZ
zIuL@n#w}T4Q6L@NlVu1_iKWknRE=9!T8Ru!(iq#57}m#3=Gk4oAAN;m<;*%6Z>o3w
zuqQzet7(B&!z>f9zuw6xIq^IZ{>};OXxLpn0leA%_$Lb~p6$+oojBr4tFlc=fvqVB
z6nPH>lHhq*jDg5H%wSyrJ%1XHGy&J*eppc})>=Z$K5{5+=yWl$JBjGvNh_&nsj8);&e)
z0d8?!PvJ`J9+6BC`6jK$>|~I>$1mDVOtEcOchD`c52<$H*@XB)!g0wTEk83M0v8ou
zhCJ9_p&HQ_WHRm!QDB*0eNGyPt1DhVitQG(N^{|lpqsVyexbRoO8mCLY4wZrcVjL+
zk167PSY+UOgjAYuC5_IR(AKS_k81Nx+*=yHM@I?51op>jOHr1@xj*QY{f)DY@n>%}
zbnBF-P9;zj{yx@tbeU5v3lC{v++9(w9hDl*O+e-6F8No6N%Y4eq0uw}`Wqi8aWT$X9t`DT7Ti_tE5k^wdF
zoCr3l@pSUWdg>h!p^pwtoW0pX2VPh`xy4Ec4!y+vAvCR^G8S!iuDn1BUM|Lk8`R5i3tEc*zALdF0$dN|B+i_*mKJ)rDk=4nZ)j{mEkA
z(B!_rPClyNCMyZMFQi0vur|8cJc%pbWacDz3?A#xT)D0giCS#`I%{T~rC%kV_7&+q
zkHi3(s$rLdWCj`N)e?(fjsrC$-rLe5q~J1gyW`4|O#7hemDw$w>!+B`sW0B?rA8{y
zKwd-du&MjSqsb@od9J$d^UJE%UQMsK$NBb~(J-Pj;&eQGI-Dz@^VZ?4K;xx}F;7KK
ztHzoIUy55vmrD%HuDjztpZ%;<5;D7o8jHO|n+Qp~jW7Zi2W%DXuF)7>%YX8!Kc!fw
z4+&FXUkub(dNAi3ZQ03Gsinhiz~J|QtjX3s}n^W1VMzB12LE^)S+
z<<;f}T_Sxv_6juB-@O!Mq&y**9mzu+0@S|NebOx(Ghz6GpZW=+q4xqtG
zw67ycn(}D%K_{bd%@Y57T!f!+z(ZNPZ06zGJhgfPaiZmLm*CWfpK(W6vK+P}^^vD;
zJTQw!lT6isEFtMr_C$9C&8o7bu~TN%SM$ufb4h4rbiuYHP&Px7cnX;oYndFH)yi(7
zyM1|`cAB*-UoYQXC|UVJj((uUVw^I!m@vy@$aa{p^mf|ktLA%-i)X!jl-QH-Wd6R~
zg?fc{vEix9xVMS{mh=}uE0WCL64rApRm+R
z{?C13XpF(iQaY(>JEBSp7P5oWHrN7cqeM!n%T-hKE8)r)KuP6pDOjp%GsC`ogBVtm
z>cFJP8=N;RaoIsghx=%vdnku1S<@KF=IE$NIg8~3mNd3tCautG8H3s}5^%7AFI~D4
zKAvM}mK4vr_NYYg=LGO|w0H9Jh%-t?GDY536Q1QhYf$xwH0@6-zZy953F5Da1jX_W
zcQeg|p<_I+-LCZ3*39oM2yaCji%{l{i*im02f@kqCl6{B_%ply)@p(LcQ=>mxP3TVM?eWZ>+Do8mH_dQ6d
zO@%<&E&Im0f|XP!?&YTA
zexyo8YR~w$1>xt?M~pYCvlmTnE}cP>KPHu$$7}6p$UzO*o^&hFJ|-q#lLUFhIZ!7f
z=6&!E5ib!Jdd)EHR+D5zOC-hH(@~W5b@rhCz$oJU!)Sk8ge}&z>rv^t=rPUb7+)>J
z@RvN^n>O%2#YKL`c#Jh|{+fP_G(dqxZH+;kgePuvb=Uk_5$3$<
z#E=qUuEecfm9aw<{9a*PEOGiWmRWN?{E~E1Y!xeV;QN$YY8E?ayN!rxj_30(p62h$
zU-6c$x@|aLc<^D&UdNI%TTL1m(a(W|3bAUBpt2bTdRUDf?P^kpl}UP+bIB6|u|GNd
zzuz3gav;hfoGbewccwMm#`#KzXR<#%_wO
zq6Q`fTZnk_lecmu(XH>`51Q^TXB5PqCk9p|6EGhz*Y+?5xqQ_H#%38JT*5bT#
z5BuJMT_U~l2Z?FEO^B3HRfI=bbw^cWj(<`XKsE?Nw4j!e^d+Q`6i#qQ*v%#}D9oA1
zfM`a7W*R_9C_d~oU~r5DST0y;zH(A&BK$saltSDOPK}8xf8tsAq%b?(j0Y(Y4d-WU
z-FYT4%aQ~+uCN~!E^fY?VY}tf+1EoJjpK|zzk4P9G69)@E21Nn_^bpU{VokyIi-~kB;Nyu6b>zCu-BY|F`AAU>oByPLwmG|(O%Q?vGwSRQVEO>+>B
zQTYp`MH9`$xsL@xl)?nDi}78Et|;+We~M$=CvQ@-zJylx>%8LROI_E}r36)le}WOk
zaA2;2xmUeWJdOSbCM7v9*Z%mTi
z}X}n>=I?;=_rP+ulg4tvR?F43-?pRNrVziLXY>aj?rx>Ls&`qIP4?HU&3VCWkSJ({
z(?P9?E8c&@$AUP;mJpQHe3TZ5fd_YWG*9+@CP937eH>Pwq%`p2-5ir%Cu4AXt?EsD
zc9|yS2`nJHEeY67;U9fTqLunV!=M%7ALgB^H$MrPW>ID3+JqI{`K{I+-*~bnIIB;?
zjic5kElW7u3AY}t6R&)1O_Jzfb^PqrciYkm+d?MwQ15GIE>%x*7yT&z!Zii2;CA}Th7%@9rs~GI&kx-~
zs!$ikTd9%ZICE}a(_D~}bBO$`5Z~!
z5}TpLdH-w|b*2iKXGRm
zdhOCC`bqBaxxw0om>PNcH>O*WRnuWCk)zU0wviso+`;aU5C&3m@L-7p%0Qd@O7@`=
z+H&dXx==imOnrBS@h4ny9Zm^np6LX*e?HxD^VBTke#<&54|@cW7ID6vl0M&0YldM4
zr}V9~>6N-Iaih0{Monc^AP-`}D0*u+x)^B?IhjjZBxCm~p$R^Lx$Ny5re}*(Z;x@D
zJ1a@(LP9$pJHGdNCdr1svZ9pT&Nu9ud7g=Dr`(==R~{T?*6CR;oF2g(t4Fl?+o_t1
zoOGvlrj@`}L8M(f5toaUxdbXQUHA5rgyv4(>`eORJMXZk=F6(0&(OFqEc`%B$+%BeZsrO>xgCBjNI(aotFcVDPdz*pw=~%|
z88FN!RlY30(9M)o|C8qmJVIQy4LOu+%H?KI0V)FyzpoWf4Bv7Gh`}IGWeie?@VI94
zK*jP(I(+LOfxhJXwvuhOUjO6KN`Rj@sbLvveY(rm)fVXaJM4_%pY^zBYMR
z4WSk!)VEZUYi0P{CR27vOjBuYZ82IdEcT2$fSoiDTCCpEu60na>q>w#(X@2C&#V=J
zq(jdsv%f4J__P$g{>`1!O(9=p_E)JaeRR17eFS}61w(s4Ov=716yXlEV)<34%3n&{
zMVVA%y|v8-hmwOoanQ
zR4DlQ=m(ZgFdD~%nm>w~$`2ZR^FD+l2p{PJ^26`7hvkDpqN1KSPdI7H+PA?E@SjtP
zv;uuoPYU+|tPYP~rMyJRG(V-46}0ZBwNTbGjv0#tU^xxAS|}t7vM%6v;zoS>to;1u
zuuneC=IM$ZxdY)3-MHuoD*4
z_}pkOYYLMbIRM?)5BVx(Uh{J69-|OxGon$?ew@4rb{K2#?5wyfm*1DqgB0m)5Rsn)
zrGVlgW$<`LVjAKll4n+BQUH!J&78aboSv%-Vr#oeX>Mnhnv8BPB^Cv+Uk6I=A@y
z(%@;M4Bz+PI^;zOfCjm2m7rJR{rB-++?X#YXQcJGF6gB=8W=uD(-VaffBzQJaOz-B07)?CRR20
z?9(%Z(QOtyz#&V{pLMaU!xSF$xz&a>B}%nhh;lQwEfLd4w*CzhUJy;^D@jpVmS^?(
zPUTr8w=ynZ|FZ!i?=K`r$2#wB*2+otsXtkeg}U_RP#ux%jvx@Mp=3xxRR#I;b9rbK
zIi$5(JORB67!nrJHmMmKW6Hb4F&yd3j?ceB9{1A6*=sNTAuYGd#b2I%eQ-3gPRhZ1
zEF=DHV(?0zHb9Nbz{0gdK(Gm16W|IYhb1tNCA#k8iSL*lrn_oJi7;
zIv+J}w24X1k64p&+ct%*JsPN3-wae-dVb|4ig-0k<$2HErk^G59+f;$U&bE!lbo3B
zb8_=bA708Clk
z9rP8Kni^lxa@xDknsm`<9OEA!<0{Qk0~9y3h#VzT<+SR9vjz!#?@dluPf_v{3(;Sm
zfu-?UCd4+7tOOXyPxv
zs8@)Cn^&^$ja&|}S%Ovzq3%Cm2!RW4#BDwYa_dMm|9rrk`GV|MyYG(z1#o|OU>u*U
z@eg*>{g*U_^i~dtc9#1@rc)xz<$9;
zw5*MI0ch9O5rKV7YQPPOIr}ri%aYnVCPf9aCP?F*BqO)?AkpJNrFT@7(}o{t2KV9c
z6m?ALnBX6#%J8L{EzfSHI&i`mUHG>}02-~zA%FvhT3t_-xK2SRI{Aw%scDNN@Kq>J
zT^@87iEttb0Bm|CEdd@nxKYoC(QTC|P>-vZPx%>^tvGg%5soT1SW5(Z&($${m?nD@
zf=;)+=G@ZYaAKaD8O5zbs-{gD!}PtKpaZXi5_TlvE_l@=whBPjxh(*Pa`rA?UWFDG
z0n-
zxHcbWmuJ>&flZyX^<2)I6C})|oSSRejq>sq
znc(5&v!=H0tiC;>{s6jPA(k7U)mq(Ew)Kj{8Btz#DWYg#U%V_8G$5%FSidw1WsbBm
z6oEsP$u97)s<~4nI@#vF3NXe6fmbBnl{=QEocK?}8A#y>|D|{R*UDN9FxaF0Jw;*K=)VoT3cxQ6XEK4lzb;%2zdvJgq&
zx|Z6bDYc!Vf64q{MY)kUZZ@uYlT{k-ezR|w!`Q+pY*C6FDuB_Sa=q~E5#6SY79*A?
z)+6dIuM88<6`NUeCRZ}Hh!NOLzHGIBu{4guS$MD=UAHT;%6t(O8Q1W1tWCZ?*KsW3
z#o{UHyxeo$eIXj>rL`iPNl|iv2H4@=VB^rZ=}E+kUIP5#2_^Xw8&{8c$&AZ}pmJ}8
zwgf*3&p5wMm3qeNB^PrVwU+Q16IDxgg!$(E7+gE0rGYEGYHi)Oa@A!0aVadvN?9_L
z%o@F3H&bzIkvH&^ft3ha{+sPhrQjo)=x$GGO>s5DH%B4oKSN1_M9A?kEz7#rlp1@n
zV$SBosWwyWEEC%MiGJByCvBmdFZI?LxLdb2S6A#54vk$84+d7)u$&R(|v?%J<&T-|szj9Xo2-Ml&B(JH-6UC(cs-=BTud_jQQ_EJ~9oxgXLPE}=
z(ogjHe)N=48?AGorSkg%oDIHhDrsDScujCH{(jnv&pgM<*Ij&{^IB~>O-26k%DWO1Nn
zgZ;#_dM51!wEhveS2@#X~O<2S@>L3xW|)iDb7JT-HV
zH=Y}s7m`@GhHbW1^qwCI@0}AbOZCW-;yLLbGAnL|8RxFo7msb7h(K+xk*=;j8W_du
zW)aMBA{N_Hr(1nk*^wAxz%t;&Wk__Hu=qp*Gs}?1UKYWQH^$VwDHlrd8fN+UY?lRQ
zM~f-plqv#7(;wTtA033PuEqqa(~d(YKdNJ^=KYiIQ9aQi9~#B?UIHxb2$Lu2Nba+o
z39E(&Ew)(>^@KST(2!DspAbiw-*0O5?O1o8Ah)k96YNODB~~kRRm)Ec(=^mf_0WEI
zJ^pk^C}lUoYv#3PGWC++3S|sX?Wg3T+=k?R_grA
zTEIA_PS0&(>ntmK!?)_PAmELIqDXx#hwgY(0a*4KVpn;FIk4oESeD4DaaL#5>X^DC
zv{iuA5)mUzy)R^3W_&)02ffv6LzlV`khe7A`Y`Fb%HvE6Tg~Ty*95gfD2%|HkbR2F
z!Z?On^*PNXyunL)tJv}hZd1xncgk_c&x1bJFL+f;BK*RlT`vy2>d&3^JaCoa9y2SC
zm)^CWWNnO|8(7aAZHnir$}iGTBiM8xocxL|r6;Oa<{(wGmrn59YOm%E(3D2f|)pGE0CBO#eXkX!6LWvAMQk3
zm6{&sblV`r=QLW6?*Y;Ej4nQ?QK@f^!P=B%=qxbo*$SO_{tslA5F(k9H>%D5g+ba>
zLSsyTbsiQ%+7%hg*A)A{U7^1IUwJnGc4e9nXjeUZsq_EBK?4{qAK2{#p8Nx*=x;ol
zkTW^p1bmyA#Qv{D#lJq({(%uFL@@t28>8~?L0M+EC?t=xm6giBLGqx;Fy-a|smLic
zSNK07*rZV^OH)5h``_TEP|xi^38ZGJzkVC~2lCV3MdbgBFqjoq1zqiK(v15Ji>luB
z*PTIpU;c-nq2uCzMDyJM3W`SGx{7|Y5EA$s_vRmCM2Q`e#qH5?63@w1Q%|G#B^~cS
zJYk9MUlh8snQ?)I|MXoV=ye|nn}dg-|7k8TqvnF1-B3G%}3o_x?lZ@lmAPQI*M?zpaUXTq$N~!0g0%5o!JGKZI2dK=6rH
zlL-AMtQaL4FfRWWg8vJ_|ILE`TL}NR7yRFLNb>)S5R^}h^1liEOKZIQOKbR!gl_-6
z)@WY_?bXgXy&r&3CA8Wrj%td;pWYQ6E5sPvfBLddw(^rm6hz
zJ3Yjl)J18sd|+mtOBmQ@dbsIdvH>r0vnE`?z)*CKHi8(ykpc`q^MApS0%8cYD#?QF
z5>e7?I#eb_=C`K<*Z8K;mMX)Bm_|FzJEztnKH>lUXMZUK4wQ1Xs((}rD3_4eY@@8N
zJZTNj!hD|n)8_z@!ww0b~)zzd{lLeO?ea$ipi1Mux3qz+Tf?A-X6E9~~qkESPsk$%W&_9c}C
z^%tVZx9ku8`6Hj&6#